$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft File: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft (raw, json) Hash identifier: qMT6pFE+9q65PWj+42L0N5ct4+ujaXa369obxOh1tGs= Subject key identifier: A6:9D:8E:90:A9:83:11:17:8B:B8:BC:01:FA:9D:46:58:60:23:8A:A2 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F4328584DA420BCBBCF2F9E8B8D8EFCA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft Manifest number: 010D0C9F4328584073A83A5B787AC8596C7E26C8 Signing time: Mon 27 Apr 2026 03:00:03 +0000 Manifest this update: Mon 27 Apr 2026 03:00:03 +0000 Manifest next update: Wed 29 Apr 2026 03:00:00 +0000 Files and hashes: 1: 5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (hash: +DlKfO2rE/k4idlHnFgSeMrSiqO/GTrrnUQ9sAuqdig=) 2: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl (hash: W2ubdXMtbLgKbyC/gggDMbTO8B5OoDpxZw+q2WOb720=) 3: d83b099f-7012-3a33-a612-37aa394fe4f5.roa (hash: OnpLTYlG1djrQvF+VIFtXXqXra5p2AHfGujhHeNjgaU=) 4: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (hash: Sqk2NKWXRxFRti2l4xOGsUG2yXaDaXbgWsQk70TyK7o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:20:bc:bb:cf:2f:9e:8b:8d:8e:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Apr 27 03:00:03 2026 GMT Not After : Apr 29 03:00:00 2026 GMT Subject: CN=1be91548-79e7-46da-b25a-d6b5c1dfaf87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:86:aa:23:1e:19:81:e0:aa:a5:9a:a8:75: 06:30:42:14:ec:29:45:fa:7a:4f:51:77:5b:24:72: 21:d7:0c:16:82:ec:c5:66:1c:62:68:9d:8b:d6:8f: 79:46:12:30:ad:0b:f0:4d:4a:b4:3a:67:0e:c3:44: 09:75:4f:41:3a:6e:06:df:14:b1:23:d9:c1:64:8d: 24:a9:00:df:61:f4:1f:de:8f:a8:b7:ea:d8:39:47: 3b:72:de:0e:80:9e:a3:8c:c1:80:26:3f:fb:60:f5: 38:b7:d0:98:9b:5d:f4:36:42:5a:2a:f2:d2:a4:20: 7c:aa:9a:c5:67:ac:19:a4:0a:80:bb:3f:d4:a8:e7: 5d:d7:7b:1c:b3:3f:f3:d7:14:f7:42:f9:b6:77:bf: b9:69:6e:cc:ac:78:d8:3b:58:ba:e3:9c:b3:71:f5: c0:0c:39:67:80:da:d2:b0:90:16:aa:53:8d:4b:69: b6:85:14:7a:29:a7:4f:f6:a0:3c:a9:8e:7e:5c:1e: 8b:c9:4c:0a:f6:de:83:c3:d9:ed:ef:7e:22:09:9a: 5b:e7:74:9b:9b:53:c3:ce:0a:59:de:f9:17:60:2a: 21:70:0e:a8:24:93:b1:91:7f:ee:5a:0a:fb:e6:a9: fa:9e:6a:de:34:7a:3c:c1:c5:8a:c7:66:20:74:e9: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:8E:90:A9:83:11:17:8B:B8:BC:01:FA:9D:46:58:60:23:8A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a9:93:35:58:38:3f:e9:df:bb:eb:8a:cf:5e:36:d6:f4:27: d6:59:76:dd:e6:ad:13:b4:46:79:18:a1:85:be:b2:c3:81:3c: 57:25:6e:82:76:7a:e9:8a:71:28:9b:db:0d:15:5b:33:1b:6c: fd:3f:f7:14:c8:d7:cd:61:35:b1:6b:f8:3e:e6:66:a5:fc:ff: be:19:53:1b:68:bf:56:4a:5f:36:c5:94:81:ea:98:36:3c:bf: 16:8c:12:32:ee:e1:ad:5f:ff:b3:9f:33:3a:f8:47:4d:71:15: 25:f8:dc:0e:ee:50:4e:d5:ba:80:4a:ff:4c:32:b6:65:0b:be: 43:f2:df:4b:a3:03:13:dd:31:92:36:21:42:99:f7:11:b8:c5: 52:9c:10:9c:7a:ec:ae:7a:d4:e9:f5:f5:44:4f:4c:86:97:c7: 56:8b:2e:a1:3e:b1:bd:10:23:9c:76:c7:59:3c:f8:d8:ec:66: f3:ca:b3:6c:a8:18:56:af:74:39:67:fc:91:e2:94:e0:f1:eb: 66:16:07:a4:33:3d:7f:07:f0:9f:af:17:49:38:c8:47:c1:ea: 13:05:2c:c0:cb:49:d7:8b:81:ba:69:a8:7f:09:4f:ed:04:f1: 7c:43:5a:ec:e3:f2:c8:1c:ff:e1:ca:1b:fe:47:a5:70:f9:5d: e3:a7:00:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2kILy7zy+ei42O/KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI2MDQyNzAzMDAwM1oXDTI2MDQyOTAzMDAwMFowLzEtMCsGA1UEAxMk MWJlOTE1NDgtNzllNy00NmRhLWIyNWEtZDZiNWMxZGZhZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraKGqiMeGYHgqqWaqHUGMEIU7ClF+npPUXdb JHIh1wwWguzFZhxiaJ2L1o95RhIwrQvwTUq0OmcOw0QJdU9BOm4G3xSxI9nBZI0k qQDfYfQf3o+ot+rYOUc7ct4OgJ6jjMGAJj/7YPU4t9CYm130NkJaKvLSpCB8qprF Z6wZpAqAuz/UqOdd13scsz/z1xT3Qvm2d7+5aW7MrHjYO1i645yzcfXADDlngNrS sJAWqlONS2m2hRR6KadP9qA8qY5+XB6LyUwK9t6Dw9nt734iCZpb53Sbm1PDzgpZ 3vkXYCohcA6oJJOxkX/uWgr75qn6nmreNHo8wcWKx2YgdOl+ewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKadjpCpgxEXi7i8AfqdRlhgI4qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvYzA1N2Q5YTctOGYzZi00 Yzk3LTk1MDMtZTJhOTM2YzI3YzdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtqZM1WDg/6d+764rPXjbW 9CfWWXbd5q0TtEZ5GKGFvrLDgTxXJW6CdnrpinEom9sNFVszG2z9P/cUyNfNYTWx a/g+5mal/P++GVMbaL9WSl82xZSB6pg2PL8WjBIy7uGtX/+znzM6+EdNcRUl+NwO 7lBO1bqASv9MMrZlC75D8t9LowMT3TGSNiFCmfcRuMVSnBCceuyuetTp9fVET0yG l8dWiy6hPrG9ECOcdsdZPPjY7GbzyrNsqBhWr3Q5Z/yR4pTg8etmFgekMz1/B/Cf rxdJOMhHweoTBSzAy0nXi4G6aah/CU/tBPF8Q1rs4/LIHP/hyhv+R6Vw+V3jpwBV -----END CERTIFICATE-----Generated at Mon Apr 27 09:55:02 2026 by rpki-client