$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft File: 9401ced7-d880-490d-9b0d-7674db71191c.mft (raw, json) Hash identifier: erDZh6utRQpo3qWnaONgSD5OANUDeFaMYYunw7E8T1U= Subject key identifier: AB:1B:EA:DE:DC:2D:B0:90:B6:D8:E8:30:F3:E5:D4:FC:FD:25:B1:C8 Authority key identifier: A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02 Certificate issuer: /CN=9401ced7-d880-490d-9b0d-7674db71191c Certificate serial: 010D0C9F4328584DA38BDAD260B8E16DD91F8A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft Manifest number: 010D0C9F4328584073A82D6BC9A9945D1EC91A37 Signing time: Sun 26 Apr 2026 22:00:04 +0000 Manifest this update: Sun 26 Apr 2026 22:00:04 +0000 Manifest next update: Tue 28 Apr 2026 22:00:00 +0000 Files and hashes: 1: 4499818c-8cc6-3d80-8388-c8d455da417c.roa (hash: yXtHMWaNVzc3iKafcZ9zUhS4duMVajnt43XiM4yA88Y=) 2: 9401ced7-d880-490d-9b0d-7674db71191c.crl (hash: Eo/MwbM713Ke6mN3p4RZhQJpbEwKW05lUNRs9FSV/Us=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:8b:da:d2:60:b8:e1:6d:d9:1f:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9401ced7-d880-490d-9b0d-7674db71191c Validity Not Before: Apr 26 22:00:04 2026 GMT Not After : Apr 28 22:00:00 2026 GMT Subject: CN=0a7f5340-d37c-40e0-a1f9-5b9532fa66fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:94:8a:ff:25:ae:af:54:b4:f5:82:b3:1d: d8:6e:fa:64:3a:d6:6f:69:cd:42:45:3e:17:e8:14: ec:f3:24:b2:4b:69:90:af:9f:8a:df:f0:93:6f:cd: 57:96:04:94:de:33:0e:33:cf:6f:80:41:02:ad:2f: 7a:10:54:7f:6c:76:c0:8c:65:c8:32:b6:01:38:a7: 51:e7:c1:4c:bf:c6:72:1d:92:bd:a4:c2:1d:57:b5: d7:46:88:8d:5c:b0:e0:36:dc:fb:df:b1:33:cd:2b: 0a:bf:9a:0c:0c:ae:7f:e5:eb:cd:f4:c9:87:94:eb: 52:57:e8:72:e8:e5:19:82:0f:27:40:48:aa:f1:ac: aa:8b:6e:7d:55:36:60:91:1b:6f:cc:ca:f6:6f:03: 54:b1:f7:4b:2d:b9:65:5d:99:d2:3f:b7:bd:41:ac: 84:29:b5:4e:b7:96:3d:8c:5e:a7:8d:ff:bc:93:f8: 45:af:a1:db:50:20:63:f0:ba:1e:d1:03:0f:ba:af: 50:12:05:43:30:32:8e:de:44:6c:84:c4:46:f0:d8: 0e:07:df:55:03:f4:e4:63:62:df:10:bd:70:fd:d8: 00:03:7c:86:91:b2:44:ef:d6:fb:65:f6:b4:05:c0: 3b:ad:09:db:0a:20:39:6f:6d:70:e4:5e:29:7e:5c: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1B:EA:DE:DC:2D:B0:90:B6:D8:E8:30:F3:E5:D4:FC:FD:25:B1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl X509v3 Authority Key Identifier: keyid:A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:8f:ea:22:61:cf:2f:ac:54:3d:3a:c4:d9:72:76:df:4e:00: f2:9a:4f:34:35:ea:b1:c8:61:cf:0e:e2:cf:31:6f:ea:59:a2: ce:0e:05:81:a2:8d:30:2b:6a:fa:c2:6b:1c:01:29:14:a3:64: 77:b1:91:9f:c9:dd:49:0f:6d:c1:84:76:d0:1f:69:56:4a:bb: 76:7e:53:a4:d2:e8:e3:92:c2:5e:ee:fc:8b:03:cf:ae:14:db: 54:73:d7:b8:92:2a:c1:72:9b:c1:26:ce:9f:cf:71:c3:cd:c3: cb:be:da:b6:38:3b:68:02:e0:41:fb:65:3c:e1:3c:40:c0:27: e4:a0:69:52:42:bd:ab:2a:11:88:aa:7d:35:e7:14:9e:74:4f: 0d:0c:7f:67:57:31:8d:0c:46:86:75:c6:90:23:0f:64:70:fc: b3:0c:cc:e1:11:18:16:c7:75:e3:0b:b0:63:b2:28:a0:c4:90: 5b:16:4e:68:f0:21:98:25:df:8b:59:2b:b2:20:d6:24:59:57: 7e:b3:b0:8b:c5:e7:9e:91:73:72:62:6a:40:ad:56:86:e5:1e: a5:18:67:6a:c6:9a:31:e1:b7:4f:df:3d:e3:75:17:f7:00:b7: 01:90:79:7a:e8:76:1b:f8:9f:cf:85:65:ce:c2:b6:c9:81:9e: 59:ca:05:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2ji9rSYLjhbdkfioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQwMWNlZDctZDg4MC00OTBkLTliMGQtNzY3NGRiNzEx OTFjMB4XDTI2MDQyNjIyMDAwNFoXDTI2MDQyODIyMDAwMFowLzEtMCsGA1UEAxMk MGE3ZjUzNDAtZDM3Yy00MGUwLWExZjktNWI5NTMyZmE2NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiUiv8lrq9UtPWCsx3YbvpkOtZvac1CRT4X 6BTs8ySyS2mQr5+K3/CTb81XlgSU3jMOM89vgEECrS96EFR/bHbAjGXIMrYBOKdR 58FMv8ZyHZK9pMIdV7XXRoiNXLDgNtz737EzzSsKv5oMDK5/5evN9MmHlOtSV+hy 6OUZgg8nQEiq8ayqi259VTZgkRtvzMr2bwNUsfdLLbllXZnSP7e9QayEKbVOt5Y9 jF6njf+8k/hFr6HbUCBj8Loe0QMPuq9QEgVDMDKO3kRshMRG8NgOB99VA/TkY2Lf EL1w/dgAA3yGkbJE79b7Zfa0BcA7rQnbCiA5b21w5F4pflz4GwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKsb6t7cLbCQttjoMPPl1Pz9JbHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NDAx Y2VkNy1kODgwLTQ5MGQtOWIwZC03Njc0ZGI3MTE5MWMvOTQwMWNlZDctZDg4MC00 OTBkLTliMGQtNzY3NGRiNzExOTFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTQwMWNlZDctZDg4MC00OTBkLTli MGQtNzY3NGRiNzExOTFjLzk0MDFjZWQ3LWQ4ODAtNDkwZC05YjBkLTc2NzRkYjcx MTkxYy5jcmwwHwYDVR0jBBgwFoAUomwl5DpoFf4nc/t5K9piDvOF/QIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NDAxY2VkNy1kODgwLTQ5MGQtOWIwZC03Njc0 ZGI3MTE5MWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpj+oiYc8vrFQ9OsTZcnbf TgDymk80NeqxyGHPDuLPMW/qWaLODgWBoo0wK2r6wmscASkUo2R3sZGfyd1JD23B hHbQH2lWSrt2flOk0ujjksJe7vyLA8+uFNtUc9e4kirBcpvBJs6fz3HDzcPLvtq2 ODtoAuBB+2U84TxAwCfkoGlSQr2rKhGIqn015xSedE8NDH9nVzGNDEaGdcaQIw9k cPyzDMzhERgWx3XjC7BjsiigxJBbFk5o8CGYJd+LWSuyINYkWVd+s7CLxeeekXNy YmpArVaG5R6lGGdqxpox4bdP3z3jdRf3ALcBkHl66HYb+J/PhWXOwrbJgZ5ZygWm -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:24 2026 by rpki-client