$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: DYCeiksYkFCgelXhmi66T75DqiER2j7uiSj/hD8N/FQ= Subject key identifier: 27:92:BC:C7:7C:AF:A9:52:79:43:CF:7D:4E:6C:18:45:F0:C0:F3:69 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584D82BE4D9164A92CCF9FD314C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF564488 Signing time: Wed 15 Apr 2026 04:00:03 +0000 Manifest this update: Wed 15 Apr 2026 04:00:03 +0000 Manifest next update: Fri 17 Apr 2026 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: ROvcVUNgClHio/oIXuQyw4YERBkjMWoLzLrnPeV7u48=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: LaVMQJTqpJM4CJoPYS+GQXOf/Ehq2Ugyf0XVJUQd92U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:be:4d:91:64:a9:2c:cf:9f:d3:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Apr 15 04:00:03 2026 GMT Not After : Apr 17 04:00:00 2026 GMT Subject: CN=07cafad5-d2a9-4135-8959-21e70b9ddf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:fa:fa:62:5d:7f:2b:c2:d6:37:d8:15:3c: d3:3f:86:f4:1e:52:11:bc:6d:16:24:82:02:03:5d: 2b:94:e8:3d:86:cd:94:ab:f6:97:29:a2:ff:9d:14: 34:63:16:28:c6:46:7f:52:b2:ab:7b:4b:ee:17:22: 1c:5f:14:e8:af:b9:86:75:05:52:54:34:77:f5:4e: 86:f6:ef:6f:ba:b8:f4:3e:2f:2d:41:c0:e9:df:0b: cb:49:78:7a:4e:9b:fa:94:b3:b9:a4:41:ec:3f:24: e1:57:ac:0e:c2:2e:bd:56:33:9e:73:38:b1:ad:c1: da:e9:d2:81:9b:ab:56:67:81:a7:94:89:03:10:be: 43:40:c8:1d:61:80:1e:19:8d:1f:3c:15:4f:0a:b1: cf:48:ce:9b:1b:a4:d1:95:b3:bc:d6:0a:cc:69:0b: d0:14:0d:04:cf:6b:02:6d:28:19:11:53:3f:7f:ab: 0a:53:5d:bb:1d:b9:81:93:fc:0a:7a:24:15:2a:98: 11:e0:68:b3:0d:2a:bf:f8:cc:5a:94:41:f0:9d:78: 00:5b:20:2e:b3:d2:3a:12:3b:0c:87:94:e6:f2:e3: 5d:55:11:af:ee:c8:25:7f:cf:9e:11:5a:91:4b:78: 6b:ba:de:7d:99:b3:ca:b0:9f:6b:0f:5c:6a:4b:f5: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:92:BC:C7:7C:AF:A9:52:79:43:CF:7D:4E:6C:18:45:F0:C0:F3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:4a:93:b2:6c:2d:b5:c3:e4:56:ea:aa:e9:f4:7c:a1:de:4e: 5f:ca:06:00:72:29:a7:dd:8a:b0:b0:17:dd:2c:6a:2f:9f:de: 56:29:ca:2a:d5:6f:16:19:48:a0:7f:11:15:86:43:4a:16:97: ff:bf:e3:ff:5b:f6:55:c1:93:b2:91:fe:a4:0d:4b:1d:6c:28: e0:2b:0e:86:c8:82:da:5a:b8:42:34:ae:44:1d:93:24:73:e0: 60:fe:b4:8b:9b:07:74:b4:dc:ec:d9:53:dd:c7:3a:61:ef:6e: 65:fe:6e:a1:d8:d1:05:25:b1:86:41:d6:28:97:95:50:8d:fb: 83:4d:96:88:69:a7:39:a2:e8:f9:e3:57:1b:43:0d:ae:d2:91: e6:ae:91:4f:d6:dd:5d:6c:d3:eb:72:c9:30:1c:8c:27:c8:7f: 6a:6a:12:6c:59:08:0e:c8:18:64:b6:38:c9:2b:80:b8:de:fd: ef:08:06:21:15:a8:fd:64:f4:4d:1e:64:b1:9e:6c:40:77:08: d9:00:b7:5a:4a:90:fa:af:cf:aa:90:8e:e6:3a:59:b1:15:b8: 2c:89:aa:c5:44:d7:ad:8a:4b:05:d7:5c:f5:42:c8:c5:6b:a8: f1:1b:1f:38:12:08:c8:af:5c:04:2e:84:28:7d:68:94:48:96: 2e:91:69:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Cvk2RZKksz5/TFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDQxNTA0MDAwM1oXDTI2MDQxNzA0MDAwMFowLzEtMCsGA1UEAxMk MDdjYWZhZDUtZDJhOS00MTM1LTg5NTktMjFlNzBiOWRkZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM76+mJdfyvC1jfYFTzTP4b0HlIRvG0WJIIC A10rlOg9hs2Uq/aXKaL/nRQ0YxYoxkZ/UrKre0vuFyIcXxTor7mGdQVSVDR39U6G 9u9vurj0Pi8tQcDp3wvLSXh6Tpv6lLO5pEHsPyThV6wOwi69VjOeczixrcHa6dKB m6tWZ4GnlIkDEL5DQMgdYYAeGY0fPBVPCrHPSM6bG6TRlbO81grMaQvQFA0Ez2sC bSgZEVM/f6sKU127HbmBk/wKeiQVKpgR4GizDSq/+MxalEHwnXgAWyAus9I6EjsM h5Tm8uNdVRGv7sglf8+eEVqRS3hrut59mbPKsJ9rD1xqS/WgMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCeSvMd8r6lSeUPPfU5sGEXwwPNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsSpOybC21w+RW6qrp9Hyh 3k5fygYAcimn3YqwsBfdLGovn95WKcoq1W8WGUigfxEVhkNKFpf/v+P/W/ZVwZOy kf6kDUsdbCjgKw6GyILaWrhCNK5EHZMkc+Bg/rSLmwd0tNzs2VPdxzph725l/m6h 2NEFJbGGQdYol5VQjfuDTZaIaac5ouj541cbQw2u0pHmrpFP1t1dbNPrcskwHIwn yH9qahJsWQgOyBhktjjJK4C43v3vCAYhFaj9ZPRNHmSxnmxAdwjZALdaSpD6r8+q kI7mOlmxFbgsiarFRNetiksF11z1QsjFa6jxGx84EgjIr1wELoQofWiUSJYukWkr -----END CERTIFICATE-----Generated at Wed Apr 15 08:50:08 2026 by rpki-client