$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft File: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft (raw, json) Hash identifier: Tsr5Nq1ShiiaD4/TKs+xJBKnIVCktCwKOU/DJmI4nJ4= Subject key identifier: 2F:21:E6:EA:47:82:E8:68:A6:AC:75:1E:3E:CD:8A:FE:E3:C0:0F:62 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584D8BD10729B1EBF6A7CAB84280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft Manifest number: 010D0C9F4328584073A84E8087935899AC515073 Signing time: Sat 18 Apr 2026 10:00:03 +0000 Manifest this update: Sat 18 Apr 2026 10:00:03 +0000 Manifest next update: Tue 21 Apr 2026 10:00:00 +0000 Files and hashes: 1: 780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa (hash: r8zJmK5JUQfb5K7XuCfEtGIDS9IT0ZmDCWMy/YqechM=) 2: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (hash: /d70JzMxMuF88gUlyu/+8g8I6cv8SSo9VV9BaTQHe0Y=) 3: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (hash: ILZrUEOternAsIYNyPVReUdbldgJ6JWCKtOQqntOt1M=) 4: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (hash: Qa4+M1kvb0ox0q0qKZS4H8Z4NOM6uRySKb5SWTgWT9E=) 5: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl (hash: NrrLkp1fx7T9zOj3vfuzqt9+moqG9hR03cPxcLvbiq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8b:d1:07:29:b1:eb:f6:a7:ca:b8:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Apr 18 10:00:03 2026 GMT Not After : Apr 21 10:00:00 2026 GMT Subject: CN=4fb8da36-0816-4d4b-ae34-672713f2f04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:55:09:eb:7d:d4:88:df:9b:ae:8c:45:9b: 8f:1e:29:1d:57:ce:e8:23:2d:2c:3c:1e:85:37:55: e9:37:56:4b:2c:95:71:9f:fc:5a:df:3e:f9:16:53: 11:83:54:3b:f6:1e:8c:ac:6c:a7:cd:62:21:8b:9d: 11:96:9c:59:8b:c3:9c:a4:50:9a:d6:af:13:4e:a7: 6f:19:76:4f:b4:0f:a7:ae:f7:ca:3f:97:ca:0d:1b: c8:38:b4:98:bb:ac:73:c1:a3:72:96:d0:a9:95:ce: 9c:62:b5:7d:63:24:2b:d2:06:19:64:b3:a2:95:3e: db:9b:c7:97:03:9b:c2:bc:57:7f:6f:6c:58:61:46: cd:08:97:1d:66:aa:45:88:7f:a7:69:83:d2:a3:d4: 34:6c:7e:1b:d3:98:24:f7:0a:10:84:50:ff:ec:68: bc:73:11:eb:56:f5:ee:95:ea:59:76:76:71:62:4c: d3:00:af:09:d9:4e:50:0f:5c:0c:a5:31:e2:25:f5: 7a:c3:61:f3:5c:2b:d6:b7:16:9e:b0:3e:53:26:c1: 2f:ff:09:b5:33:28:88:c5:17:cb:00:47:31:ea:e1: b5:e4:44:d2:6e:ac:2a:49:11:61:87:ba:3b:b7:e0: 48:27:81:d9:ca:6b:58:b6:5c:46:63:62:e2:c3:95: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:21:E6:EA:47:82:E8:68:A6:AC:75:1E:3E:CD:8A:FE:E3:C0:0F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:62:ca:bf:cf:a6:92:a2:0e:e1:07:87:58:2b:68:63:65:03: 91:68:5b:00:db:7d:84:22:ab:11:07:4b:5e:da:bd:1e:a5:95: e6:21:c6:09:6a:c0:2d:60:9f:51:23:49:49:f9:36:8d:f4:62: b0:8e:c2:8a:c7:c6:e9:13:75:16:3b:85:72:99:0f:5c:1d:f3: 09:8b:3b:4c:b7:a8:e7:60:7c:7d:8b:68:7d:39:46:95:55:94: d4:a5:4d:70:2c:b8:6a:d6:37:c1:e0:53:dc:e7:ad:5e:e9:a6: 82:5e:b9:63:63:53:eb:95:73:a1:40:13:6a:dd:10:3d:10:76: c8:56:33:81:a6:0c:68:6f:7f:81:3e:65:9a:f7:69:f5:00:33: db:bf:6c:64:85:ea:06:06:8a:d6:28:1f:d0:22:e8:92:8b:95: 35:e7:50:d3:8e:c2:03:5a:15:71:7c:08:31:85:6d:7c:93:84: 8b:c8:a1:10:75:cc:8a:8d:ff:03:b2:7f:f5:e7:7b:3d:8e:05: 00:da:7f:d3:42:e6:8e:34:54:12:46:2d:44:87:16:55:17:e7: 0c:75:33:fe:ea:75:df:0b:68:fb:68:dd:11:f5:e6:64:5c:97: 89:6d:11:d4:ea:86:cc:a9:27:bd:34:0a:51:66:4c:2f:28:40: 7f:15:91:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2L0Qcpsev2p8q4QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDQxODEwMDAwM1oXDTI2MDQyMTEwMDAwMFowLzEtMCsGA1UEAxMk NGZiOGRhMzYtMDgxNi00ZDRiLWFlMzQtNjcyNzEzZjJmMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq5VCet91Ijfm66MRZuPHikdV87oIy0sPB6F N1XpN1ZLLJVxn/xa3z75FlMRg1Q79h6MrGynzWIhi50RlpxZi8OcpFCa1q8TTqdv GXZPtA+nrvfKP5fKDRvIOLSYu6xzwaNyltCplc6cYrV9YyQr0gYZZLOilT7bm8eX A5vCvFd/b2xYYUbNCJcdZqpFiH+naYPSo9Q0bH4b05gk9woQhFD/7Gi8cxHrVvXu lepZdnZxYkzTAK8J2U5QD1wMpTHiJfV6w2HzXCvWtxaesD5TJsEv/wm1MyiIxRfL AEcx6uG15ETSbqwqSRFhh7o7t+BIJ4HZymtYtlxGY2Liw5V/lwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC8h5upHguhopqx1Hj7Niv7jwA9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvY2QxOThkYTQtZGJjYy00 YmVjLWExYTAtMzFkNjFkNWNjYzcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+Ysq/z6aSog7hB4dYK2hj ZQORaFsA232EIqsRB0te2r0epZXmIcYJasAtYJ9RI0lJ+TaN9GKwjsKKx8bpE3UW O4VymQ9cHfMJiztMt6jnYHx9i2h9OUaVVZTUpU1wLLhq1jfB4FPc561e6aaCXrlj Y1PrlXOhQBNq3RA9EHbIVjOBpgxob3+BPmWa92n1ADPbv2xkheoGBorWKB/QIuiS i5U151DTjsIDWhVxfAgxhW18k4SLyKEQdcyKjf8Dsn/153s9jgUA2n/TQuaONFQS Ri1EhxZVF+cMdTP+6nXfC2j7aN0R9eZkXJeJbRHU6obMqSe9NApRZkwvKEB/FZF8 -----END CERTIFICATE-----Generated at Sat Apr 18 18:31:49 2026 by rpki-client