$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: NxV9HHLj3PagbdaYnbBuvHR4/w4hOVZsVm/foshsLxI= Subject key identifier: 97:7C:45:39:DD:B8:39:24:AE:91:CC:DA:82:1B:19:20:58:3D:A2:17 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584DA314BC35EC467826E36D4900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DB116 Signing time: Sun 26 Apr 2026 18:00:03 +0000 Manifest this update: Sun 26 Apr 2026 18:00:03 +0000 Manifest next update: Tue 28 Apr 2026 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: 8N5+WTWKrZcVuSGpIP3y1Fx/GYbmxJSL/ceJjbL4wLU=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: OzW+R5t/z9wj7T4ChCcUcwAAV0EPl+InQFKWUowcSJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:14:bc:35:ec:46:78:26:e3:6d:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Apr 26 18:00:03 2026 GMT Not After : Apr 28 18:00:00 2026 GMT Subject: CN=702b80f3-e6cf-4b52-9e5e-8f0bd2c0933f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:3b:6a:32:d6:02:bc:96:d9:04:41:a8:ee: d9:d3:92:b5:e3:44:4a:e5:34:a0:23:ce:4a:94:09: 7f:7a:90:01:56:39:d3:53:44:ac:11:a3:d3:de:61: c2:af:25:6f:86:78:88:5f:84:07:7e:ec:c2:5c:b8: ee:56:cf:77:16:a1:47:6b:95:75:53:91:88:9f:6f: be:49:10:61:c5:c1:21:d0:8d:50:2b:01:42:7c:d6: 13:b3:d5:2f:43:dc:32:60:79:08:2c:74:41:b5:e0: 8d:81:94:ed:6c:6b:f0:85:22:78:76:08:74:ff:53: f3:b2:a3:cc:43:97:e7:cc:ea:23:a9:0f:d8:a7:22: 5a:41:5b:b6:20:fb:24:ee:4b:00:91:31:bf:ee:40: 48:92:0f:e9:fb:1c:cd:28:33:55:fe:ef:aa:92:91: a9:93:ac:5a:c8:1b:8f:77:d9:74:3c:3e:bd:1c:0f: 66:14:9d:d2:a6:13:6b:2c:52:6a:b7:d3:6a:45:6e: 1a:7c:f3:ea:67:4c:f2:74:d8:9a:b8:60:00:77:70: 48:0f:e6:9b:f3:d5:0b:e5:20:9e:ed:ac:82:ba:4a: cf:93:b1:52:01:8a:21:b9:0d:b5:11:ed:5d:0c:35: c7:a1:68:39:7a:26:d4:85:ee:eb:95:5f:05:92:24: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:45:39:DD:B8:39:24:AE:91:CC:DA:82:1B:19:20:58:3D:A2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:03:fb:21:7a:94:ff:89:ff:12:36:9e:71:29:8d:7f:1f:54: da:16:fc:da:99:82:10:32:06:08:db:0a:93:d9:3c:ff:45:42: 3b:b4:c7:39:cf:00:f4:bc:a5:20:85:4c:96:45:de:4f:65:f5: c9:22:c6:39:d8:0c:7d:cd:4e:4c:b2:88:72:71:ae:6d:7c:6b: 7b:8d:97:9a:ef:c1:52:7d:38:9a:d0:4c:ff:a6:2b:cf:9f:72: 54:61:3c:de:b7:d0:68:c0:c3:ef:96:c6:80:72:5a:ae:e3:8b: 5c:96:54:2e:f6:7a:98:d7:70:36:ad:f8:4c:49:2e:92:b3:8e: 5f:ee:89:44:2f:0f:d8:9d:34:9e:60:c5:77:94:17:3b:de:32: c9:66:0b:18:64:09:d8:89:6c:94:e1:19:c9:9a:a3:ec:c5:67: 97:a1:1f:54:b3:9d:6c:18:3f:f7:52:ef:8e:76:8e:7b:a5:e9: 08:c8:d8:6e:09:d0:97:89:74:69:de:9e:1e:87:c7:93:88:10: 20:61:63:74:ff:68:d8:b1:19:6f:20:f4:28:6b:4a:a4:a3:e8: 43:9c:33:73:76:cd:64:68:f9:eb:50:c8:59:27:d0:88:75:55: 90:44:9d:2c:e6:82:0c:0f:71:a7:69:39:9a:bd:61:ae:5e:b8: 90:97:e4:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jFLw17EZ4JuNtSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI2MDQyNjE4MDAwM1oXDTI2MDQyODE4MDAwMFowLzEtMCsGA1UEAxMk NzAyYjgwZjMtZTZjZi00YjUyLTllNWUtOGYwYmQyYzA5MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLk7ajLWAryW2QRBqO7Z05K140RK5TSgI85K lAl/epABVjnTU0SsEaPT3mHCryVvhniIX4QHfuzCXLjuVs93FqFHa5V1U5GIn2++ SRBhxcEh0I1QKwFCfNYTs9UvQ9wyYHkILHRBteCNgZTtbGvwhSJ4dgh0/1PzsqPM Q5fnzOojqQ/YpyJaQVu2IPsk7ksAkTG/7kBIkg/p+xzNKDNV/u+qkpGpk6xayBuP d9l0PD69HA9mFJ3SphNrLFJqt9NqRW4afPPqZ0zydNiauGAAd3BID+ab89UL5SCe 7ayCukrPk7FSAYohuQ21Ee1dDDXHoWg5eibUhe7rlV8FkiSZzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJd8RTnduDkkrpHM2oIbGSBYPaIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbA/shepT/if8SNp5xKY1/ H1TaFvzamYIQMgYI2wqT2Tz/RUI7tMc5zwD0vKUghUyWRd5PZfXJIsY52Ax9zU5M sohyca5tfGt7jZea78FSfTia0Ez/pivPn3JUYTzet9BowMPvlsaAclqu44tcllQu 9nqY13A2rfhMSS6Ss45f7olELw/YnTSeYMV3lBc73jLJZgsYZAnYiWyU4RnJmqPs xWeXoR9Us51sGD/3Uu+Odo57pekIyNhuCdCXiXRp3p4eh8eTiBAgYWN0/2jYsRlv IPQoa0qko+hDnDNzds1kaPnrUMhZJ9CIdVWQRJ0s5oIMD3GnaTmavWGuXriQl+Sf -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:20 2026 by rpki-client