$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft File: 22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft (raw, json) Hash identifier: 2ZPmjhYa/2dNv83EAvUu7jQ/hKrz+LoA3jbzymYprtg= Subject key identifier: 65:D5:EE:18:42:69:24:99:72:43:25:98:E3:D0:AB:F4:34:B7:B8:4D Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 Certificate issuer: /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Certificate serial: 010D0C9F4328584D8C0C9537CB76B8558B0294C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft Manifest number: 010D0C9F432858472834897E78015FC9737739F3 Signing time: Sat 18 Apr 2026 12:00:03 +0000 Manifest this update: Sat 18 Apr 2026 12:00:03 +0000 Manifest next update: Tue 21 Apr 2026 12:00:00 +0000 Files and hashes: 1: 22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl (hash: fX3Us8wz+CCQqIoqnGteHA5fdSXKDNdtXZTdqKHkm0g=) 2: 612ea9aa-fef5-3461-89b7-4f93773ef913.roa (hash: d9HZF9DF9oSXPFsx+6nz5irSZsDk0vdIArtjYuIr/eM=) 3: b1021e8e-0005-38a9-8e27-2080c1cdaabf.roa (hash: d1Kkhr+KZFcuXEJY++VcEx/Uwi75G5WDsAElhf48gaI=) 4: febda8d1-f20b-30ce-a76a-4aba46bb9e73.roa (hash: KdsprhM+Htw6P9vH2RcrgseAD1s8EllTfqLWZqWpQVU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:0c:95:37:cb:76:b8:55:8b:02:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Validity Not Before: Apr 18 12:00:03 2026 GMT Not After : Apr 21 12:00:00 2026 GMT Subject: CN=7bca8223-ccfd-4cba-9ca3-b36aa476d2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:08:76:33:bf:71:06:82:12:47:e9:09:36: ae:38:b6:79:0d:d4:8f:5d:a2:45:da:76:18:f7:62: 12:54:cd:cb:73:67:a9:0f:34:a2:a5:5e:da:fa:82: 42:52:6c:b9:68:13:55:fd:42:84:11:d7:94:47:1f: 86:39:0e:09:cf:e9:33:ff:47:3f:94:8d:31:ba:96: cf:0d:fd:1e:c6:f3:dd:e9:d1:8c:1c:19:54:d3:0b: 77:cb:c0:8d:6b:98:a2:8d:eb:3a:1e:59:b0:70:4e: 8b:24:73:7e:f7:75:8a:e0:c3:0a:ad:5e:f5:9e:65: 08:41:34:3b:c2:48:d3:8e:07:73:03:5a:74:07:bd: fe:7a:65:a8:9a:71:03:a4:79:8f:6a:c5:6b:c7:f3: 8f:5b:ad:74:9f:5d:b5:01:38:90:5b:00:90:d9:74: fa:17:ba:8e:be:56:e9:1d:87:fe:c5:c9:ff:17:da: c3:d9:b1:eb:28:5f:20:16:72:c7:5b:e2:27:0e:f3: bf:d3:da:ab:dc:ec:28:fa:c7:6e:31:95:76:ad:0a: 14:3a:b6:1f:05:de:d1:e0:ea:2d:84:93:54:9a:e4: 94:8d:df:cf:c8:be:bf:f9:5c:92:2c:a4:5a:20:67: bb:5e:4a:bc:03:be:2f:8d:7d:a9:78:18:ab:fa:3a: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:EE:18:42:69:24:99:72:43:25:98:E3:D0:AB:F4:34:B7:B8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl X509v3 Authority Key Identifier: keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2f:df:e2:98:97:fc:dc:e2:0e:0b:7a:62:93:1a:9a:8d:a8: 1b:9c:b0:09:1c:a3:50:af:d4:a8:60:75:1c:76:ea:d9:54:c2: 74:4e:17:02:b8:51:31:8c:30:da:36:ff:32:d9:c8:17:ef:bf: 42:6b:b3:73:11:42:f6:4a:d5:dc:37:b0:6b:f0:6d:40:1a:5d: 98:38:11:da:09:25:a0:12:c7:6a:b7:6b:5d:9c:46:62:ee:54: 0f:33:4b:98:5d:f4:2f:c4:dc:63:91:ac:7a:ea:4a:fd:45:f8: d6:f5:5a:14:25:a2:a9:65:40:4c:a0:67:6a:96:a0:cb:65:16: 55:e0:07:67:3c:42:41:12:b4:e9:d2:6a:30:2d:9d:d1:43:07: c9:45:8d:5f:14:53:3c:69:c4:eb:fa:23:17:ea:cf:7b:5f:5d: 5f:8a:a6:7d:19:b9:43:3d:bd:01:68:87:2f:f5:df:6d:2f:dc: 62:56:6e:b5:4f:7d:4f:fc:51:f0:c3:52:4e:55:75:a8:59:42: 07:68:84:db:5c:5a:a7:65:db:ba:fe:96:7e:99:75:ea:08:ea: d3:46:d0:76:97:63:8b:1e:46:ad:af:0c:cb:d9:fd:9a:91:7f: 7e:3c:1a:dc:3f:49:18:f7:d7:39:9a:11:3a:1d:70:42:5e:77: e8:25:0d:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MDJU3y3a4VYsClMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3 NGFhMB4XDTI2MDQxODEyMDAwM1oXDTI2MDQyMTEyMDAwMFowLzEtMCsGA1UEAxMk N2JjYTgyMjMtY2NmZC00Y2JhLTljYTMtYjM2YWE0NzZkMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqgIdjO/cQaCEkfpCTauOLZ5DdSPXaJF2nYY 92ISVM3Lc2epDzSipV7a+oJCUmy5aBNV/UKEEdeURx+GOQ4Jz+kz/0c/lI0xupbP Df0exvPd6dGMHBlU0wt3y8CNa5iijes6HlmwcE6LJHN+93WK4MMKrV71nmUIQTQ7 wkjTjgdzA1p0B73+emWomnEDpHmPasVrx/OPW610n121ATiQWwCQ2XT6F7qOvlbp HYf+xcn/F9rD2bHrKF8gFnLHW+InDvO/09qr3Owo+sduMZV2rQoUOrYfBd7R4Oot hJNUmuSUjd/PyL6/+VySLKRaIGe7Xkq8A74vjX2peBir+jqH4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGXV7hhCaSSZckMlmOPQq/Q0t7hNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3 MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvMjJkNzBiMGQtZWUyMi00 OWMyLWIzMWQtYTllMGRlNDM3NGFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw ZGU0Mzc0YWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASL9/imJf83OIOC3pikxqa jagbnLAJHKNQr9SoYHUcdurZVMJ0ThcCuFExjDDaNv8y2cgX779Ca7NzEUL2StXc N7Br8G1AGl2YOBHaCSWgEsdqt2tdnEZi7lQPM0uYXfQvxNxjkax66kr9RfjW9VoU JaKpZUBMoGdqlqDLZRZV4AdnPEJBErTp0mowLZ3RQwfJRY1fFFM8acTr+iMX6s97 X11fiqZ9GblDPb0BaIcv9d9tL9xiVm61T31P/FHww1JOVXWoWUIHaITbXFqnZdu6 /pZ+mXXqCOrTRtB2l2OLHkatrwzL2f2akX9+PBrcP0kY99c5mhE6HXBCXnfoJQ23 -----END CERTIFICATE-----Generated at Sat Apr 18 18:27:35 2026 by rpki-client