$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: uGkwpmeU8d1rkzpYM2wJcO490pN95xnejfEmFPQMkrU= Subject key identifier: 47:0D:8B:27:1E:02:9A:E4:8B:A3:BE:F8:E2:CB:55:3C:46:6F:E3:B7 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584D7D824539FDB7C179E6013900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3447 Signing time: Mon 13 Apr 2026 07:00:03 +0000 Manifest this update: Mon 13 Apr 2026 07:00:03 +0000 Manifest next update: Wed 15 Apr 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: n3S4fnJ2tPTUqx19WPfvs2LPBwXVp588ob5jjCauYGI=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: xS6BhuV0djbKDyoI/o4UFf3BTmUfCamDndFqB3YmwJw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:82:45:39:fd:b7:c1:79:e6:01:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Apr 13 07:00:03 2026 GMT Not After : Apr 15 07:00:00 2026 GMT Subject: CN=a2aa789b-456f-4f09-93c9-127590826982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4e:a0:9f:fd:34:22:68:56:31:fd:1f:78:eb: 90:94:9f:61:8d:43:2b:df:3d:1b:2d:09:ea:fa:0c: e9:e3:95:ed:f2:fd:5d:37:85:45:40:fe:74:22:ec: b7:b2:74:66:b8:25:ea:40:a2:6c:77:6d:5c:4e:34: bf:35:d9:60:3f:15:a9:19:23:83:79:f1:49:b6:f4: 48:80:3c:77:a5:99:61:fa:c1:05:bb:65:28:b3:7b: ac:a2:50:ee:7d:c4:65:73:7e:d4:66:f2:26:db:5e: be:02:80:16:e6:93:88:94:0c:86:5b:61:2d:3a:f4: ed:39:6e:75:92:da:a9:18:98:fd:97:3d:3f:a9:a9: 42:fa:d0:e0:66:f4:d3:16:16:23:4d:58:de:16:72: e3:c6:b8:41:3d:9b:ae:5e:50:6b:d7:db:ad:3a:49: 12:00:9e:42:30:49:4a:49:d2:23:72:4e:30:a6:bd: 29:e8:b4:82:f2:15:20:6e:6a:24:15:41:41:62:d8: 88:17:4d:1c:eb:d6:71:64:57:a9:0b:94:44:ba:49: eb:7f:5c:f5:57:25:4c:74:12:2d:86:d4:59:f9:0a: 5b:ec:68:cf:db:fb:1b:85:8e:20:06:2e:97:13:c4: 24:57:ed:28:88:20:50:bb:38:d9:a9:67:54:56:80: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:8B:27:1E:02:9A:E4:8B:A3:BE:F8:E2:CB:55:3C:46:6F:E3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:10:fd:5f:f3:3f:4d:72:7d:4d:de:4e:95:ca:36:f4:d9:fa: f2:7d:04:5b:92:ec:c4:73:a8:f5:37:cf:73:75:4d:6e:97:bf: 09:f6:d1:fa:39:16:99:ec:3f:d7:ab:c5:e3:3a:47:5e:2f:f0: 00:da:58:b2:44:73:b4:39:18:63:ea:e7:7b:8a:e7:33:28:2c: 28:f5:59:81:62:2b:ac:34:ce:27:a7:a9:07:e1:6b:ef:37:9c: 42:71:61:79:65:04:f0:7a:59:45:3d:8c:a4:0a:00:f6:48:b0: a1:e1:ee:19:7d:73:24:65:78:d3:ae:dd:c0:9e:13:12:57:1d: ff:08:54:fd:dc:08:19:fc:fe:7a:d8:e5:cf:87:93:8b:33:39: 9a:84:d5:8b:46:99:f2:e9:60:05:06:01:81:30:03:d8:35:ea: d7:25:21:3a:10:6a:0b:b9:c8:75:04:b6:eb:ec:7c:ec:4d:12: 90:7d:2f:e3:d5:07:5c:23:1c:da:e0:35:c9:f4:9a:f1:ec:7c: 08:5c:2e:e0:8a:aa:7e:95:aa:5f:21:c0:e3:9c:08:84:92:ce: 16:05:e5:65:6d:3e:e5:8b:0c:81:7d:86:57:71:6b:b5:83:b0: 4e:42:ec:6e:65:d0:63:86:c1:4d:cc:1b:50:96:f7:c2:cd:dc: 28:a9:35:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE19gkU5/bfBeeYBOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDQxMzA3MDAwM1oXDTI2MDQxNTA3MDAwMFowLzEtMCsGA1UEAxMk YTJhYTc4OWItNDU2Zi00ZjA5LTkzYzktMTI3NTkwODI2OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA506gn/00ImhWMf0feOuQlJ9hjUMr3z0bLQnq +gzp45Xt8v1dN4VFQP50Iuy3snRmuCXqQKJsd21cTjS/NdlgPxWpGSODefFJtvRI gDx3pZlh+sEFu2Uos3usolDufcRlc37UZvIm216+AoAW5pOIlAyGW2EtOvTtOW51 ktqpGJj9lz0/qalC+tDgZvTTFhYjTVjeFnLjxrhBPZuuXlBr19utOkkSAJ5CMElK SdIjck4wpr0p6LSC8hUgbmokFUFBYtiIF00c69ZxZFepC5REuknrf1z1VyVMdBIt htRZ+Qpb7GjP2/sbhY4gBi6XE8QkV+0oiCBQuzjZqWdUVoANUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEcNiyceAprki6O++OLLVTxGb+O3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrEP1f8z9Ncn1N3k6Vyjb0 2fryfQRbkuzEc6j1N89zdU1ul78J9tH6ORaZ7D/Xq8XjOkdeL/AA2liyRHO0ORhj 6ud7iuczKCwo9VmBYiusNM4np6kH4WvvN5xCcWF5ZQTwellFPYykCgD2SLCh4e4Z fXMkZXjTrt3AnhMSVx3/CFT93AgZ/P562OXPh5OLMzmahNWLRpny6WAFBgGBMAPY NerXJSE6EGoLuch1BLbr7HzsTRKQfS/j1QdcIxza4DXJ9Jrx7HwIXC7giqp+lapf IcDjnAiEks4WBeVlbT7liwyBfYZXcWu1g7BOQuxuZdBjhsFNzBtQlvfCzdwoqTUl -----END CERTIFICATE-----Generated at Mon Apr 13 15:58:45 2026 by rpki-client