$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft File: cea06048-7bc3-4b65-8443-4c600b73bc11.mft (raw, json) Hash identifier: OixnMye8J6Y4IxHPDxhl0nq2TYayCeFcaw6wTA6XdBA= Subject key identifier: AC:43:2A:3A:0A:A6:F7:EB:B8:75:1D:A5:85:A5:30:72:2C:21:73:43 Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Certificate issuer: /CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Certificate serial: 010D0C9F4328584DA402F46164BFDC70B547BF90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft Manifest number: 010D0C9F4328584073A8389DDFFA881819A76A55 Signing time: Mon 27 Apr 2026 02:00:03 +0000 Manifest this update: Mon 27 Apr 2026 02:00:03 +0000 Manifest next update: Wed 29 Apr 2026 02:00:00 +0000 Files and hashes: 1: 36273f28-a723-33e1-a389-9416819cddb6.roa (hash: UWb6FDBChc5nzQhqiuqFvXvxcsGwJ9NXw+eaLUFJMxA=) 2: cea06048-7bc3-4b65-8443-4c600b73bc11.crl (hash: kjWwbSR3wtLgjoipbfTQB8zk3mOdx7Ku1Wb2c2u/io0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:02:f4:61:64:bf:dc:70:b5:47:bf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Validity Not Before: Apr 27 02:00:03 2026 GMT Not After : Apr 29 02:00:00 2026 GMT Subject: CN=0186f93c-744f-4cf1-a479-158909040c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:38:c4:11:b9:5b:38:cb:a4:70:f5:fb:a6: 4c:64:e5:02:51:c6:dd:09:11:a8:16:9b:73:0e:9f: 30:0d:31:80:05:c5:3e:75:09:65:d4:b0:a8:4c:5e: 64:34:19:b7:51:10:27:42:3f:b4:6d:f7:49:d1:55: 47:6c:c1:64:65:7f:ed:04:90:be:0a:86:f4:35:e1: 2e:c3:b5:aa:23:be:bb:b6:ed:4c:51:42:f8:9d:0c: e9:a7:3f:be:7d:35:7e:10:d7:c1:cc:c0:a6:5d:35: bc:c6:1c:7f:7a:7a:17:a6:73:15:c5:c9:8b:4f:29: 62:50:ed:a0:ea:48:10:07:9c:d4:0e:c6:55:9b:4f: 82:14:b1:11:39:af:f0:70:2b:98:bb:93:21:0e:42: 26:8e:d6:7b:4b:75:c9:f8:bb:8e:79:7b:58:af:df: 49:55:7f:f9:0f:2b:3d:7d:d3:9e:c8:c1:01:70:01: 03:3d:8c:00:2a:69:ca:3f:20:14:ff:9e:2e:03:93: 69:4e:e3:6a:3f:46:b7:2a:98:2d:d1:d7:2d:41:0f: 86:ee:7f:40:86:84:57:63:6b:1a:52:19:0a:86:6c: 8d:fe:20:c9:0f:d2:67:fd:0e:05:f9:9a:0a:19:6d: 58:a6:60:91:3b:67:8b:97:e0:22:4f:67:3e:66:12: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:43:2A:3A:0A:A6:F7:EB:B8:75:1D:A5:85:A5:30:72:2C:21:73:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl X509v3 Authority Key Identifier: keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cf:b6:1b:6f:50:b9:b7:20:0d:be:c8:36:70:f3:e5:31:2b: ad:e4:32:52:fe:cc:bd:59:7d:35:c0:d3:7d:fe:ec:3a:38:81: b1:44:57:d4:c0:7a:55:d8:ce:ae:53:52:51:3c:91:9a:36:b9: 56:46:63:cf:37:62:e0:15:af:11:e2:e3:52:de:40:71:66:7c: c2:b0:73:75:c5:ff:76:50:d4:f3:78:c9:d3:fe:c1:b3:c4:2d: 79:6d:ce:d0:a8:90:32:73:e8:53:51:a4:07:9b:50:0e:68:99: ba:5f:ea:6a:81:12:1f:47:93:4e:09:1f:b5:c1:74:d2:0e:a1: 7d:d8:55:7e:57:03:b6:54:96:b2:f5:2d:d0:1e:f6:5e:79:0a: 7b:23:01:8a:dd:ef:aa:3d:08:3c:0e:e1:6a:cd:0f:74:69:61: b0:6b:92:ba:ac:99:58:52:b9:fb:26:30:6d:9d:4a:d1:1b:4d: 54:d4:de:9d:3d:51:64:18:6e:eb:29:27:32:8b:52:95:fe:46: 9c:11:13:43:ff:ad:3e:d9:3c:7f:f8:5d:cb:5d:5f:25:53:7b: 44:b7:26:db:fe:45:98:60:7a:37:6e:94:39:1a:ad:9f:d2:11: 8e:c8:42:45:fa:6d:58:ba:ed:b6:0e:3b:e2:d1:26:57:48:43: d9:d1:f4:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2kAvRhZL/ccLVHv5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNi YzExMB4XDTI2MDQyNzAyMDAwM1oXDTI2MDQyOTAyMDAwMFowLzEtMCsGA1UEAxMk MDE4NmY5M2MtNzQ0Zi00Y2YxLWE0NzktMTU4OTA5MDQwYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh04xBG5WzjLpHD1+6ZMZOUCUcbdCRGoFptz Dp8wDTGABcU+dQll1LCoTF5kNBm3URAnQj+0bfdJ0VVHbMFkZX/tBJC+Cob0NeEu w7WqI767tu1MUUL4nQzppz++fTV+ENfBzMCmXTW8xhx/enoXpnMVxcmLTyliUO2g 6kgQB5zUDsZVm0+CFLEROa/wcCuYu5MhDkImjtZ7S3XJ+LuOeXtYr99JVX/5Dys9 fdOeyMEBcAEDPYwAKmnKPyAU/54uA5NpTuNqP0a3Kpgt0dctQQ+G7n9AhoRXY2sa UhkKhmyN/iDJD9Jn/Q4F+ZoKGW1YpmCRO2eLl+AiT2c+ZhJFbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKxDKjoKpvfruHUdpYWlMHIsIXNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEw NjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvY2VhMDYwNDgtN2JjMy00 YjY1LTg0NDMtNGM2MDBiNzNiYzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2VhMDYwNDgtN2JjMy00YjY1LTg0 NDMtNGM2MDBiNzNiYzExL2NlYTA2MDQ4LTdiYzMtNGI2NS04NDQzLTRjNjAwYjcz YmMxMS5jcmwwHwYDVR0jBBgwFoAUcv59GQtXmt7bYV7V2MtgXR9QrtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYw MGI3M2JjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiz7Ybb1C5tyANvsg2cPPl MSut5DJS/sy9WX01wNN9/uw6OIGxRFfUwHpV2M6uU1JRPJGaNrlWRmPPN2LgFa8R 4uNS3kBxZnzCsHN1xf92UNTzeMnT/sGzxC15bc7QqJAyc+hTUaQHm1AOaJm6X+pq gRIfR5NOCR+1wXTSDqF92FV+VwO2VJay9S3QHvZeeQp7IwGK3e+qPQg8DuFqzQ90 aWGwa5K6rJlYUrn7JjBtnUrRG01U1N6dPVFkGG7rKScyi1KV/kacERND/60+2Tx/ +F3LXV8lU3tEtybb/kWYYHo3bpQ5Gq2f0hGOyEJF+m1Yuu22Djvi0SZXSEPZ0fRj -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:24 2026 by rpki-client