$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft File: 311e0039-6b7c-42f2-a76e-395b51d9ec97.mft (raw, json) Hash identifier: sXW0uLzmcG+03gteOJLKwU3GyUXRA1JSqXRcy19/w10= Subject key identifier: 97:13:67:5B:82:6A:7A:69:76:16:18:2B:AB:56:D5:8B:80:10:86:C9 Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Certificate serial: 010D0C9F4328584DA8AA1D8F0DC876C7223B5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft Manifest number: 010D0C9F432858479879C10A3E7E6C515C3DB343 Signing time: Tue 28 Apr 2026 18:00:03 +0000 Manifest this update: Tue 28 Apr 2026 18:00:03 +0000 Manifest next update: Fri 01 May 2026 18:00:00 +0000 Files and hashes: 1: 311e0039-6b7c-42f2-a76e-395b51d9ec97.crl (hash: dTqq3hMgSS1uaEnpoblczA2pUuSol8dF1Xx6ags+Dd8=) 2: 90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa (hash: Tz3Yg2ESBA9oWtt5YuOlJJzoIw2VEJfULVNp8fKTRUg=) 3: 9c3e3edc-3909-344f-8448-01bc508f03d9.roa (hash: d99SvdJA2QXk89vkU3Pn2rgViMcP+t5l21IYh/ySNRo=) 4: e6b06085-bc2c-35d9-98f5-e00a375a95d2.roa (hash: BiA7CaCAOXckcSLSK1v9EXoTTBJoUMXoaLc29ewFdEI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:aa:1d:8f:0d:c8:76:c7:22:3b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Validity Not Before: Apr 28 18:00:03 2026 GMT Not After : May 1 18:00:00 2026 GMT Subject: CN=69b585af-9e3e-40eb-9e4f-338a566ef3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:34:b8:4c:78:b5:19:78:53:71:46:3a:4b: 48:a6:86:95:69:d2:56:fd:a3:53:42:a3:59:d6:b5: a7:0e:ef:5e:f9:89:2a:66:11:73:30:35:49:83:14: 6c:0d:15:91:9c:9b:cc:95:ad:a6:53:5c:e8:6e:a1: 0e:ad:48:92:37:68:11:54:6f:76:81:6b:84:f2:2b: fd:b9:54:4b:c1:4c:e0:4c:46:b8:cc:c8:df:bf:b2: 9d:94:67:f1:1c:05:4a:aa:90:ea:57:c7:69:39:0d: ad:95:4d:f9:e2:3b:8a:41:0b:cf:9c:8f:87:6c:9b: 45:37:17:b8:b7:5a:c1:bd:f0:05:fa:7e:3c:15:02: f4:27:fd:5f:be:13:7d:90:45:34:72:78:bd:9c:0f: 86:0f:9e:3c:76:d7:79:58:3e:4d:68:41:51:e8:76: 94:25:29:e7:ac:64:8e:56:11:c5:6a:b0:32:50:ef: 9b:41:9e:84:bd:7c:7e:28:76:e5:3b:3a:07:ed:d6: 2b:17:4d:48:b4:e9:25:55:79:0d:7d:8f:de:fd:a0: de:f5:92:52:d9:8e:33:e1:19:1b:5a:41:ec:52:8b: 8e:bc:97:c7:aa:25:db:aa:3f:b6:9a:b2:95:28:64: d3:37:e0:51:c9:8d:19:ab:7a:cb:f9:4e:2e:1c:5a: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:13:67:5B:82:6A:7A:69:76:16:18:2B:AB:56:D5:8B:80:10:86:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl X509v3 Authority Key Identifier: keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:be:dc:be:1c:cb:24:88:19:a8:45:e8:d2:f8:37:eb:e6:36: aa:b0:af:05:85:4a:42:a9:cb:05:cd:65:15:7b:3a:e1:9d:e0: 01:fb:61:36:64:f7:50:c5:f4:c0:9a:c9:11:1f:c8:47:4b:83: ab:86:42:58:1f:d2:58:25:d7:1a:37:0e:46:c7:96:d9:5a:c4: 41:f9:99:da:e0:32:b4:45:58:75:3b:32:76:c6:e8:ac:8a:ff: 0a:ed:19:61:b9:26:e1:a7:02:69:37:d3:1f:ef:16:8f:e5:2d: d7:7d:2c:e7:74:49:8a:57:e4:e4:11:8b:e1:01:b7:d0:3d:da: bb:11:64:50:66:94:6d:52:27:a1:a3:99:12:c2:cf:c0:42:c9: d0:93:9a:62:0c:9f:b3:26:b1:f8:c1:a7:4a:25:d7:b8:e3:d7: 53:47:5b:13:f1:7a:54:6b:89:3c:3c:71:11:c5:ed:5f:f9:15: 1a:0f:cc:49:d5:7b:65:6f:89:1d:b2:a6:8d:44:84:13:03:d2: 3d:ce:8f:02:8f:9b:e6:9d:b3:21:70:27:b3:1a:3f:58:57:98: ce:f9:aa:09:ef:a8:4e:0c:9a:d0:b8:dd:46:f7:7a:7b:2d:10: c4:f5:38:b8:93:04:b2:f6:a6:aa:cd:9e:75:dd:56:7b:00:aa: 2c:19:26:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2oqh2PDch2xyI7WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll Yzk3MB4XDTI2MDQyODE4MDAwM1oXDTI2MDUwMTE4MDAwMFowLzEtMCsGA1UEAxMk NjliNTg1YWYtOWUzZS00MGViLTllNGYtMzM4YTU2NmVmM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmQ0uEx4tRl4U3FGOktIpoaVadJW/aNTQqNZ 1rWnDu9e+YkqZhFzMDVJgxRsDRWRnJvMla2mU1zobqEOrUiSN2gRVG92gWuE8iv9 uVRLwUzgTEa4zMjfv7KdlGfxHAVKqpDqV8dpOQ2tlU354juKQQvPnI+HbJtFNxe4 t1rBvfAF+n48FQL0J/1fvhN9kEU0cni9nA+GD548dtd5WD5NaEFR6HaUJSnnrGSO VhHFarAyUO+bQZ6EvXx+KHblOzoH7dYrF01ItOklVXkNfY/e/aDe9ZJS2Y4z4Rkb WkHsUouOvJfHqiXbqj+2mrKVKGTTN+BRyY0Zq3rL+U4uHFoRowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJcTZ1uCanppdhYYK6tW1YuAEIbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvMzExZTAwMzktNmI3Yy00 MmYyLWE3NmUtMzk1YjUxZDllYzk3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3 NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5 ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi NTFkOWVjOTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUvty+HMskiBmoRejS+Dfr 5jaqsK8FhUpCqcsFzWUVezrhneAB+2E2ZPdQxfTAmskRH8hHS4OrhkJYH9JYJdca Nw5Gx5bZWsRB+Zna4DK0RVh1OzJ2xuisiv8K7RlhuSbhpwJpN9Mf7xaP5S3XfSzn dEmKV+TkEYvhAbfQPdq7EWRQZpRtUieho5kSws/AQsnQk5piDJ+zJrH4wadKJde4 49dTR1sT8XpUa4k8PHERxe1f+RUaD8xJ1Xtlb4kdsqaNRIQTA9I9zo8Cj5vmnbMh cCezGj9YV5jO+aoJ76hODJrQuN1G93p7LRDE9Ti4kwSy9qaqzZ513VZ7AKosGSYc -----END CERTIFICATE-----Generated at Wed Apr 29 18:13:01 2026 by rpki-client