$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft File: ab3688e8-3425-4e58-a239-949508a9f6dd.mft (raw, json) Hash identifier: yGfuF9PF52BwuZzaIJQMwkUGiq2XkocKy7fk9yPHF4Y= Subject key identifier: 16:EF:55:BE:83:3C:92:1E:78:54:CF:DF:93:9C:AC:CC:36:80:FB:D6 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584DA4B59FF4D9FDCC667BC4A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft Manifest number: 010D0C9F4328584073A848040FBC3E28BCA28B4A Signing time: Mon 27 Apr 2026 08:00:03 +0000 Manifest this update: Mon 27 Apr 2026 08:00:03 +0000 Manifest next update: Wed 29 Apr 2026 08:00:00 +0000 Files and hashes: 1: 27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa (hash: b36TQwqdZm9sERH5ES1Zjp7yi9qWTE7JkY2GW3mdggU=) 2: 2c2f2002-b19b-3f29-a667-5eca934bdc03.roa (hash: 5KmJIC03513eC4UZXEveju72WDE5pzLZ1wcjWkSHBBo=) 3: ab3688e8-3425-4e58-a239-949508a9f6dd.crl (hash: yf6HzFYTwqg6d07geOOgdjSKwvg3ZKGBMvOJG2/EFmg=) 4: e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa (hash: zHkS2g9+2b1ntZjAlqRH7/h/P0WRzQZRLziKCfD5CxI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:b5:9f:f4:d9:fd:cc:66:7b:c4:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Apr 27 08:00:03 2026 GMT Not After : Apr 29 08:00:00 2026 GMT Subject: CN=644abcd1-f517-486c-b6ed-b3a71f656b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:83:4b:70:32:e4:32:b0:e1:8a:4a:d8:3e: 6a:16:7c:38:37:55:7a:7d:b5:b0:88:2a:1c:73:1b: 6d:7c:7a:50:8c:a7:70:15:c0:94:1a:ef:2e:1b:53: 2a:aa:b4:b4:ba:bd:3b:b8:63:94:6d:85:3a:86:b7: f5:e5:f2:bf:fe:e8:fe:26:67:8b:a4:71:e3:13:2e: b3:5e:fe:33:c3:f9:71:d1:b4:d6:ca:1c:05:4b:34: 96:d6:8a:c4:da:14:78:f3:56:e0:ff:a9:2e:f1:87: e8:cf:24:e5:8b:af:5e:8d:73:95:94:0c:1c:f1:99: 82:3d:1f:77:02:74:4e:0c:e8:51:8d:8f:7b:e2:36: 5a:aa:e2:6d:e0:ef:ee:c7:77:bb:e4:83:a1:97:ee: 53:30:8a:0e:19:80:17:d2:44:0a:6c:d1:5f:f2:c9: 8f:47:6e:44:0e:c5:75:c7:5e:4a:c3:3c:63:14:31: 3f:b0:de:50:a5:f9:66:92:4a:56:b2:d8:7b:99:f7: c7:18:27:38:69:e0:37:5f:91:0e:43:71:11:48:42: 41:5d:14:b3:d3:c4:a6:49:df:6f:fa:86:65:ca:76: 39:13:27:06:b4:c5:a5:f7:7d:39:a0:cb:64:4c:13: 90:2b:5e:82:b2:44:40:d4:e3:7f:7b:2e:e1:c3:20: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:55:BE:83:3C:92:1E:78:54:CF:DF:93:9C:AC:CC:36:80:FB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:58:71:3e:c4:6d:75:57:5e:b1:ed:e6:a5:4b:47:38:66:92: 2e:31:f1:32:bc:ba:99:b6:3f:70:56:de:40:de:02:3d:91:d8: fd:73:1a:3c:4d:d1:36:63:fd:62:73:43:47:6f:25:41:03:ce: c7:e6:dd:99:b7:93:f0:18:02:01:e4:1d:e5:f8:dd:f3:16:83: f8:91:b9:6c:ac:e5:c2:40:64:04:e8:fd:e7:1b:83:9d:47:67: cc:74:1b:d5:f2:ad:5a:ca:bb:52:ff:3f:1b:cd:ae:0e:30:00: cf:db:e3:0d:97:17:1a:35:f6:f0:e2:ab:b0:7c:db:aa:88:49: 7e:ff:cf:a6:0e:27:80:c7:81:a4:cf:d9:ee:36:6c:82:af:f2: 96:5e:ae:50:4b:8c:0c:6d:be:fb:b1:8f:5f:22:90:2d:7e:eb: 29:f4:d1:49:c2:b2:7e:ea:a5:a5:25:38:eb:d8:94:3d:56:1a: 97:01:de:de:ac:31:7c:2a:f8:0a:29:5d:73:10:57:9f:e4:12: 3f:64:64:54:c5:cf:a6:44:ac:ef:69:7a:61:c0:66:6f:d3:d5: bf:17:d8:85:4a:1c:03:11:9f:ec:22:e0:01:85:13:c3:53:6a: 33:3a:c5:e1:12:97:59:60:c0:d6:5b:3e:be:d7:aa:ed:25:c7: 6e:53:73:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2ktZ/02f3MZnvEpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MDQyNzA4MDAwM1oXDTI2MDQyOTA4MDAwMFowLzEtMCsGA1UEAxMk NjQ0YWJjZDEtZjUxNy00ODZjLWI2ZWQtYjNhNzFmNjU2YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4qDS3Ay5DKw4YpK2D5qFnw4N1V6fbWwiCoc cxttfHpQjKdwFcCUGu8uG1MqqrS0ur07uGOUbYU6hrf15fK//uj+JmeLpHHjEy6z Xv4zw/lx0bTWyhwFSzSW1orE2hR481bg/6ku8YfozyTli69ejXOVlAwc8ZmCPR93 AnRODOhRjY974jZaquJt4O/ux3e75IOhl+5TMIoOGYAX0kQKbNFf8smPR25EDsV1 x15KwzxjFDE/sN5QpflmkkpWsth7mffHGCc4aeA3X5EOQ3ERSEJBXRSz08SmSd9v +oZlynY5EycGtMWl9305oMtkTBOQK16CskRA1ON/ey7hwyC3pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBbvVb6DPJIeeFTP35OcrMw2gPvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvYWIzNjg4ZTgtMzQyNS00 ZTU4LWEyMzktOTQ5NTA4YTlmNmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwWHE+xG11V16x7ealS0c4 ZpIuMfEyvLqZtj9wVt5A3gI9kdj9cxo8TdE2Y/1ic0NHbyVBA87H5t2Zt5PwGAIB 5B3l+N3zFoP4kblsrOXCQGQE6P3nG4OdR2fMdBvV8q1ayrtS/z8bza4OMADP2+MN lxcaNfbw4quwfNuqiEl+/8+mDieAx4Gkz9nuNmyCr/KWXq5QS4wMbb77sY9fIpAt fusp9NFJwrJ+6qWlJTjr2JQ9VhqXAd7erDF8KvgKKV1zEFef5BI/ZGRUxc+mRKzv aXphwGZv09W/F9iFShwDEZ/sIuABhRPDU2ozOsXhEpdZYMDWWz6+16rtJcduU3M0 -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:26 2026 by rpki-client