$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: mf60Q3PBoWkd1wGaWwqLOMIDiqISQ4EOkR8x0551gz8= Subject key identifier: 98:E8:3C:B4:58:31:A6:20:9C:C7:F6:4C:F4:85:3D:B8:11:E6:77:9F Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584DA2D93217025456C55E9BA300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFFAA2 Signing time: Sun 26 Apr 2026 16:00:03 +0000 Manifest this update: Sun 26 Apr 2026 16:00:03 +0000 Manifest next update: Tue 28 Apr 2026 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: IP2DgrSbHYP1myvFYpEeVBjn2Ye/OF2pE3NMUV9h6M4=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: BzlW8L/sovrv98F9Gy39tBoR+6f+1Bc4N7BejGLwMi0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:d9:32:17:02:54:56:c5:5e:9b:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Apr 26 16:00:03 2026 GMT Not After : Apr 28 16:00:00 2026 GMT Subject: CN=330789da-f929-4694-82fa-e859086b40e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:e8:bd:85:64:39:40:a4:7f:74:3f:16:1f: 08:8e:08:69:84:74:36:a9:be:2f:bf:19:cd:bd:34: d3:2f:01:33:c9:a2:43:c5:94:da:0c:cf:e9:65:25: 62:b1:9f:13:9a:ac:99:f3:4e:ab:86:49:c9:d7:c2: 11:2d:96:bd:0f:36:6c:79:ec:cb:d4:8a:71:9d:82: 07:9e:19:d1:cc:66:aa:3d:c5:fd:7f:90:e9:4e:49: e2:ee:22:13:02:17:bc:24:26:3e:be:76:75:09:72: 1c:63:47:31:bd:68:39:ee:f6:94:ce:86:c1:2a:81: ba:31:e4:56:22:2e:81:c1:81:7d:40:bd:e3:a8:20: 55:c4:4f:f9:11:0d:ef:2e:eb:16:07:1b:f0:e2:32: 24:ba:ef:b4:46:74:f3:d4:e9:a7:08:55:a5:a8:6b: d9:8b:f1:16:8d:92:e2:ca:ce:3a:cb:dc:40:04:a9: fb:08:b7:e3:96:c0:6e:7c:74:43:33:f4:68:75:ee: d0:fa:aa:f0:69:a3:3d:8c:2d:02:c1:1d:73:1a:54: b5:a7:28:ff:ca:16:0f:1e:38:df:16:de:fc:21:87: 95:d4:fb:14:2c:91:60:28:48:4e:ec:66:9d:6b:a4: 0f:2f:8e:45:68:4e:c2:c3:33:61:a5:57:68:62:72: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E8:3C:B4:58:31:A6:20:9C:C7:F6:4C:F4:85:3D:B8:11:E6:77:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f4:9a:b2:1d:b6:a7:8c:ce:90:f7:2c:73:19:99:97:fb:2b: 48:62:45:aa:04:41:5e:93:74:09:1a:0d:47:48:92:ed:49:8f: f3:bb:5b:38:dd:87:f3:4a:40:ac:84:f9:3f:94:93:26:13:da: 13:1a:1a:8e:8b:c9:d0:f4:04:b0:4f:bb:90:21:c2:43:15:54: 28:7d:a0:60:d2:b9:44:bb:00:f7:52:3c:45:da:a4:52:5c:b2: 97:e2:3e:e5:77:d4:73:e6:50:c9:9d:f9:01:5e:87:58:a1:b0: 1a:12:cc:60:df:23:c3:5b:fa:be:d6:55:63:10:86:e6:84:f8: 3f:ed:8c:f6:40:e9:01:7b:b0:88:3a:2e:01:33:88:01:13:0e: e3:e7:fa:d0:2b:f4:4c:b0:99:9b:01:ea:8c:eb:8f:07:94:84: a7:00:34:5a:97:6c:c8:9f:7f:e6:73:ec:bc:17:11:6e:e9:10: c2:80:ae:17:41:c0:bc:cf:8f:83:a4:23:3e:9f:0f:42:19:a9: da:d2:8b:89:5c:4d:fd:4c:a2:1b:09:8b:d6:eb:db:e1:68:87: eb:c4:93:81:4d:98:fa:58:51:41:7f:54:f7:cc:24:3a:2f:b3: 59:c3:63:1b:7b:a8:34:59:56:e0:05:bb:f4:4b:38:fd:dc:c0: d5:82:eb:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2i2TIXAlRWxV6bowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI2MDQyNjE2MDAwM1oXDTI2MDQyODE2MDAwMFowLzEtMCsGA1UEAxMk MzMwNzg5ZGEtZjkyOS00Njk0LTgyZmEtZTg1OTA4NmI0MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh7ovYVkOUCkf3Q/Fh8IjghphHQ2qb4vvxnN vTTTLwEzyaJDxZTaDM/pZSVisZ8TmqyZ806rhknJ18IRLZa9DzZseezL1IpxnYIH nhnRzGaqPcX9f5DpTkni7iITAhe8JCY+vnZ1CXIcY0cxvWg57vaUzobBKoG6MeRW Ii6BwYF9QL3jqCBVxE/5EQ3vLusWBxvw4jIkuu+0RnTz1OmnCFWlqGvZi/EWjZLi ys46y9xABKn7CLfjlsBufHRDM/Rode7Q+qrwaaM9jC0CwR1zGlS1pyj/yhYPHjjf Ft78IYeV1PsULJFgKEhO7Gada6QPL45FaE7CwzNhpVdoYnIQ+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJjoPLRYMaYgnMf2TPSFPbgR5nefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW9JqyHbanjM6Q9yxzGZmX +ytIYkWqBEFek3QJGg1HSJLtSY/zu1s43YfzSkCshPk/lJMmE9oTGhqOi8nQ9ASw T7uQIcJDFVQofaBg0rlEuwD3UjxF2qRSXLKX4j7ld9Rz5lDJnfkBXodYobAaEsxg 3yPDW/q+1lVjEIbmhPg/7Yz2QOkBe7CIOi4BM4gBEw7j5/rQK/RMsJmbAeqM648H lISnADRal2zIn3/mc+y8FxFu6RDCgK4XQcC8z4+DpCM+nw9CGana0ouJXE39TKIb CYvW69vhaIfrxJOBTZj6WFFBf1T3zCQ6L7NZw2Mbe6g0WVbgBbv0Szj93MDVguuT -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:19 2026 by rpki-client