$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft File: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft (raw, json) Hash identifier: k324Cuj1yb7e3lcMKD1CMbzCdgPJIR1EczU3GayRlTw= Subject key identifier: 36:3E:CE:4E:74:A8:3E:01:E2:3E:02:2E:7F:CF:53:A0:9A:38:BB:57 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584DA638C1B3A11F7BEDB5B63980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft Manifest number: 010D0C9F4328584073A829E3051185C1AED5AD46 Signing time: Mon 27 Apr 2026 21:00:03 +0000 Manifest this update: Mon 27 Apr 2026 21:00:03 +0000 Manifest next update: Thu 30 Apr 2026 21:00:00 +0000 Files and hashes: 1: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (hash: UJ2ovvSMDc3BN0JFsNtORxJk1Dv5KsoFQtmf7Z93fTQ=) 2: 175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa (hash: X6XBnsnTRyT8rHLooZm0BCKlaBubER9GZPtI7HHaL4E=) 3: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl (hash: kFvj88nXBGCC1lqaawg2WTAY6+DZX2xFkkVKXVWyNYQ=) 4: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (hash: tIBAvjxk1il2jrpBrFESEuOraQ86zbySWmcHDLrIVdM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:38:c1:b3:a1:1f:7b:ed:b5:b6:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Apr 27 21:00:03 2026 GMT Not After : Apr 30 21:00:00 2026 GMT Subject: CN=8e0bf0e0-9f6d-4843-bb8b-96944c3f39ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:db:58:bf:26:22:a1:c6:ff:2b:07:ad:d2: 97:30:9b:39:7b:b7:70:bb:82:44:ee:2e:12:3c:54: 72:eb:fc:8b:49:d9:31:7f:9f:e7:33:34:b4:33:66: 09:e2:1a:5e:7b:3a:55:1c:0d:54:ad:d1:de:92:c2: 38:8b:9e:f5:70:ba:ff:71:1a:37:33:ba:2d:40:29: 48:9d:23:66:44:e5:8b:02:bb:46:89:89:8f:34:44: 0c:b7:10:e0:45:41:27:af:f9:e4:63:f4:34:b3:d5: 06:e2:c5:86:ea:69:7a:eb:10:58:e6:44:d6:8b:98: 99:df:42:90:e4:cb:00:24:84:5d:38:e4:fa:87:e0: 83:92:2c:e7:07:ab:4a:95:5e:2a:b8:dc:c1:b1:64: c8:4c:eb:72:60:f2:f8:5a:48:3a:85:3e:88:9d:2c: ed:68:ed:80:08:e3:cc:f9:93:ed:aa:90:d7:c0:be: 1f:12:26:6b:61:9d:d3:a7:35:1c:d3:b5:1f:84:a9: d9:80:d2:38:b6:8b:26:2f:b9:28:e1:22:2c:6e:56: 88:0c:3b:94:d1:19:7e:ea:4e:e2:29:10:b8:9e:81: 33:c3:b3:78:83:62:89:7b:f5:51:2f:33:10:5b:a2: 4f:62:33:94:53:0c:3e:3a:26:a6:ee:75:63:00:12: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3E:CE:4E:74:A8:3E:01:E2:3E:02:2E:7F:CF:53:A0:9A:38:BB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f4:07:18:8f:4b:ac:b6:eb:22:05:ca:5a:3a:f8:e7:a3:07: 94:0f:50:14:3b:8a:c9:6e:de:15:9d:5b:1f:96:4b:34:3b:f1: 8f:71:47:5b:5e:67:c3:6e:8e:40:58:72:88:4b:fe:70:32:5a: aa:b2:b1:25:aa:09:fa:e5:b7:06:8d:85:00:94:40:c9:e9:41: 0b:5c:ca:fa:d4:aa:50:ac:ee:60:1e:9e:13:1a:28:c6:2d:6a: d1:f8:e7:be:21:09:7f:83:11:91:4f:00:54:f9:6d:42:4e:28: e9:f7:91:74:6f:76:65:c1:fd:bf:a4:59:27:cd:e7:91:9b:ae: e9:f3:02:90:a6:d9:93:cc:f1:61:ac:74:d2:6f:40:54:84:ba: 00:4f:31:cf:db:9a:3d:11:fa:ed:42:fe:d4:69:64:0f:cc:f6: cc:99:eb:64:a7:90:cd:c3:fd:46:67:fe:33:ad:2d:6d:87:a8: 6f:97:bc:10:c4:42:f7:fd:91:34:ca:63:38:de:24:cb:20:7a: e6:26:ce:bd:44:ed:12:45:bf:c0:24:be:9d:88:88:e5:59:3b: 46:25:b0:f7:75:d8:9e:ec:26:78:8c:a9:e1:df:e6:0e:93:83: a1:21:94:c3:66:d1:2f:e2:db:63:8d:1f:6b:3b:29:9e:78:73: 25:3e:17:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2mOMGzoR977bW2OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MDQyNzIxMDAwM1oXDTI2MDQzMDIxMDAwMFowLzEtMCsGA1UEAxMk OGUwYmYwZTAtOWY2ZC00ODQzLWJiOGItOTY5NDRjM2YzOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSDbWL8mIqHG/ysHrdKXMJs5e7dwu4JE7i4S PFRy6/yLSdkxf5/nMzS0M2YJ4hpeezpVHA1UrdHeksI4i571cLr/cRo3M7otQClI nSNmROWLArtGiYmPNEQMtxDgRUEnr/nkY/Q0s9UG4sWG6ml66xBY5kTWi5iZ30KQ 5MsAJIRdOOT6h+CDkiznB6tKlV4quNzBsWTITOtyYPL4Wkg6hT6InSztaO2ACOPM +ZPtqpDXwL4fEiZrYZ3TpzUc07UfhKnZgNI4tosmL7ko4SIsblaIDDuU0Rl+6k7i KRC4noEzw7N4g2KJe/VRLzMQW6JPYjOUUww+Oiam7nVjABIBRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDY+zk50qD4B4j4CLn/PU6CaOLtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvYzg1ZjNiMmMtYzM5MS00 OWUzLWEzYTUtZWE0MzAyMzVjYzZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK9AcYj0ustusiBcpaOvjn oweUD1AUO4rJbt4VnVsflks0O/GPcUdbXmfDbo5AWHKIS/5wMlqqsrElqgn65bcG jYUAlEDJ6UELXMr61KpQrO5gHp4TGijGLWrR+Oe+IQl/gxGRTwBU+W1CTijp95F0 b3Zlwf2/pFknzeeRm67p8wKQptmTzPFhrHTSb0BUhLoATzHP25o9EfrtQv7UaWQP zPbMmetkp5DNw/1GZ/4zrS1th6hvl7wQxEL3/ZE0ymM43iTLIHrmJs69RO0SRb/A JL6diIjlWTtGJbD3ddie7CZ4jKnh3+YOk4OhIZTDZtEv4ttjjR9rOymeeHMlPhcD -----END CERTIFICATE-----Generated at Tue Apr 28 00:06:24 2026 by rpki-client