$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft File: 66cf51f2-af3c-4c05-a781-3b923f753475.mft (raw, json) Hash identifier: TIAoJTfJ+eh3AKO1iy29ogsbOElrF4mRuk+OCOPn23s= Subject key identifier: C7:EA:F1:30:8B:6F:A4:16:F5:F4:BD:E4:B5:51:FF:40:19:C6:E7:04 Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F4328584DA314BBD11AD50A03F71ADC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft Manifest number: 010D0C9F4328584073A81AB5C49D6BF3C2F65970 Signing time: Sun 26 Apr 2026 18:00:03 +0000 Manifest this update: Sun 26 Apr 2026 18:00:03 +0000 Manifest next update: Tue 28 Apr 2026 18:00:00 +0000 Files and hashes: 1: 66cf51f2-af3c-4c05-a781-3b923f753475.crl (hash: EyNZarl/Qd85C08pimLs/iWcvkn+o+TfdmD559ztWwU=) 2: d2e9a628-bb73-378c-9508-2db3fb689656.roa (hash: 9fSzmRudDZ2wivccV1gWi0rpZNl9z7gGDmYxszQA8P4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:14:bb:d1:1a:d5:0a:03:f7:1a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Apr 26 18:00:03 2026 GMT Not After : Apr 28 18:00:00 2026 GMT Subject: CN=a095e49d-7e23-42f7-92c3-7f824dcd45a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:c8:45:93:1b:94:7c:67:40:aa:49:20:91: 91:5e:70:27:dc:22:ac:c6:8d:b2:25:23:cd:d9:d0: 02:d3:2c:2b:9b:18:02:b8:f3:cd:bd:d9:2b:c2:07: 9c:aa:ee:5f:d8:10:05:d2:3b:27:52:7e:98:51:7b: 60:a9:96:b3:52:79:c8:bf:c1:ec:ca:f3:a6:49:94: d7:f7:10:12:a3:81:04:58:89:46:34:b3:d1:7f:c6: 5a:9f:62:e3:dc:89:18:4c:e2:6f:2e:68:af:66:de: 82:84:b0:6c:4b:e2:4d:5b:d8:5b:3c:74:34:bb:32: 89:56:9e:de:67:7d:eb:54:4b:99:e3:1b:5e:80:5e: 63:bc:93:96:d0:9c:4f:10:9a:59:f6:0d:cd:20:4e: d1:45:0d:a9:22:a2:3c:bc:dc:ae:49:61:16:b6:37: b6:84:cb:b9:af:45:dd:3f:e8:be:bc:28:3f:be:9f: 1e:1d:02:26:4d:7e:98:d3:ac:6f:c6:84:b9:82:11: c7:49:31:7f:3b:3c:cf:57:d1:8e:cc:63:0d:43:7d: c5:83:35:84:4d:16:e0:a7:09:a1:4d:50:ec:36:ea: 3a:81:3b:a9:bd:a7:2a:48:fe:4d:20:b4:f4:ff:93: 49:b1:ba:71:fe:88:2f:b8:9f:4c:6f:de:52:bc:bc: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:F1:30:8B:6F:A4:16:F5:F4:BD:E4:B5:51:FF:40:19:C6:E7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ca:27:4f:d6:7d:b0:cd:7a:85:e1:9e:a4:84:47:9b:88:6e: 2c:42:bd:31:6b:e3:95:27:52:29:6e:57:eb:2b:14:ab:e8:68: a9:6a:ec:39:f8:97:69:06:77:53:a6:ec:2a:e0:7b:50:0f:7b: 47:2b:7f:9f:85:92:3a:a4:56:c9:78:71:31:f8:46:f4:69:b7: ce:ed:8e:b9:08:61:52:1c:35:34:8e:20:f9:53:c3:47:2e:07: 81:75:9f:cd:b6:71:34:11:c5:46:97:d6:f5:09:99:ae:07:47: cf:0e:4c:5d:44:66:31:d8:65:5f:ae:62:76:9c:67:a4:be:ff: 10:33:74:e3:c5:8d:bf:00:95:4e:93:e9:fd:8d:cd:37:a3:ea: e9:db:2a:c8:0f:12:c8:91:e3:e0:98:b8:b9:2d:d7:ed:ed:45: a7:76:6a:5e:47:fd:c4:6d:03:55:2f:7d:f5:52:0e:31:41:d3: 1d:50:ae:8d:92:3b:d5:da:4f:da:d4:76:59:75:1b:84:c2:1d: d8:f2:94:d3:17:e8:08:77:56:82:df:2c:c1:43:0f:e2:ef:9e: 44:db:20:99:b0:a0:98:e2:57:6b:e6:4b:db:5a:8d:38:98:76: 63:f1:ac:f8:27:62:91:c4:28:65:4b:a4:47:13:60:45:7f:85: a9:86:27:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jFLvRGtUKA/ca3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI2MDQyNjE4MDAwM1oXDTI2MDQyODE4MDAwMFowLzEtMCsGA1UEAxMk YTA5NWU0OWQtN2UyMy00MmY3LTkyYzMtN2Y4MjRkY2Q0NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnDIRZMblHxnQKpJIJGRXnAn3CKsxo2yJSPN 2dAC0ywrmxgCuPPNvdkrwgecqu5f2BAF0jsnUn6YUXtgqZazUnnIv8HsyvOmSZTX 9xASo4EEWIlGNLPRf8Zan2Lj3IkYTOJvLmivZt6ChLBsS+JNW9hbPHQ0uzKJVp7e Z33rVEuZ4xtegF5jvJOW0JxPEJpZ9g3NIE7RRQ2pIqI8vNyuSWEWtje2hMu5r0Xd P+i+vCg/vp8eHQImTX6Y06xvxoS5ghHHSTF/OzzPV9GOzGMNQ33FgzWETRbgpwmh TVDsNuo6gTupvacqSP5NILT0/5NJsbpx/ogvuJ9Mb95SvLzxSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMfq8TCLb6QW9fS95LVR/0AZxucEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvNjZjZjUxZjItYWYzYy00 YzA1LWE3ODEtM2I5MjNmNzUzNDc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGyidP1n2wzXqF4Z6khEeb iG4sQr0xa+OVJ1IpblfrKxSr6Gipauw5+JdpBndTpuwq4HtQD3tHK3+fhZI6pFbJ eHEx+Eb0abfO7Y65CGFSHDU0jiD5U8NHLgeBdZ/NtnE0EcVGl9b1CZmuB0fPDkxd RGYx2GVfrmJ2nGekvv8QM3TjxY2/AJVOk+n9jc03o+rp2yrIDxLIkePgmLi5Ldft 7UWndmpeR/3EbQNVL331Ug4xQdMdUK6NkjvV2k/a1HZZdRuEwh3Y8pTTF+gId1aC 3yzBQw/i755E2yCZsKCY4ldr5kvbWo04mHZj8az4J2KRxChlS6RHE2BFf4Wphido -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:12 2026 by rpki-client