$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft File: a20b951e-7538-41fb-97d2-2dd9393d3541.mft (raw, json) Hash identifier: EGlTfPQ9CJ8RZ0hoGgqCzVgJCTMPowZCrq2luBvczsI= Subject key identifier: 9A:EF:DF:95:4C:A2:5D:5D:E0:62:82:A2:79:88:06:E3:F6:A9:4E:8B Authority key identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Certificate issuer: /CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Certificate serial: 010D0C9F4328584D6E80D7DBB4DF69C28A9D8700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft Manifest number: 010D0C9F432858478835BEECCE039976BC9FF0C2 Signing time: Tue 07 Apr 2026 22:00:03 +0000 Manifest this update: Tue 07 Apr 2026 22:00:03 +0000 Manifest next update: Thu 09 Apr 2026 22:00:00 +0000 Files and hashes: 1: 68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa (hash: sd1BuRxc3+7Ul0eKAJ2aZq7HdydWX4bI32MmS+YKWys=) 2: a20b951e-7538-41fb-97d2-2dd9393d3541.crl (hash: yj+RsLqtUSVWx2rtYPxKIbxRaDAO76MDDZq+c08Fwyk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:80:d7:db:b4:df:69:c2:8a:9d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Validity Not Before: Apr 7 22:00:03 2026 GMT Not After : Apr 9 22:00:00 2026 GMT Subject: CN=11016fe3-46fd-44f6-9f49-4ba9897dc887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:33:8a:4c:e0:28:0d:4c:4c:8e:b9:cb:c5:64: 9f:95:b1:63:52:bf:04:24:28:8d:6c:0c:98:96:bf: a4:b9:07:ae:d4:b7:ea:e9:5e:8c:6d:82:4d:12:69: 39:8d:60:df:a1:1f:7e:00:73:8b:5e:98:76:78:1a: 25:cd:5b:77:a9:1f:79:b1:12:66:fc:7b:cb:cb:bc: ad:dc:61:af:88:ed:04:8b:73:4c:31:aa:84:67:4e: 2f:c8:8c:38:56:cd:19:64:62:68:ae:02:91:a9:2e: f7:d0:33:be:97:be:7b:37:b3:9c:6c:af:12:de:e5: 72:8c:eb:b6:1b:92:e5:08:71:41:56:c7:97:01:05: 5d:10:13:63:9f:31:88:be:fa:7f:46:f3:93:2e:af: e8:42:a8:63:51:8d:b2:61:d7:2e:cf:c9:36:29:b6: fe:37:59:a3:5c:f0:fe:7e:a8:92:f8:59:54:e1:fe: 2b:ca:4a:fd:b9:2e:2c:3b:b3:1f:77:6b:2c:50:99: 0c:16:6d:51:a4:6a:a0:39:70:52:46:6c:fd:19:88: 44:f6:1a:f0:5f:99:65:98:95:b8:93:df:32:2c:12: c5:8f:b4:75:d3:60:59:11:60:3d:82:7a:e4:6f:ab: bd:80:d5:62:9e:73:89:0e:eb:06:ce:5f:9e:28:44: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:DF:95:4C:A2:5D:5D:E0:62:82:A2:79:88:06:E3:F6:A9:4E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl X509v3 Authority Key Identifier: keyid:96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3a:4d:66:72:6f:e9:d4:9e:a4:c6:13:e8:f4:fd:40:73:d9: 52:04:af:a2:99:69:de:00:60:e7:f5:16:f3:16:d3:22:69:9e: 10:dd:46:29:bb:4f:29:9c:42:74:eb:3b:bb:02:60:0b:71:69: 11:97:8c:72:12:23:b1:fd:ec:9a:a4:7b:e3:eb:eb:2e:0d:c2: 36:f0:88:fe:96:7e:d1:73:3a:d5:50:a3:53:68:41:8f:54:b0: 78:37:e0:2b:fc:f3:74:c2:79:8c:bd:7b:f6:68:9e:83:5f:93: 7a:21:36:d5:f6:1d:4e:71:6e:b2:f7:ba:b5:31:45:77:bd:3b: 06:a0:97:fa:d1:7a:77:39:41:02:a9:c5:2b:50:2c:1a:b8:85: df:a8:78:7f:15:d3:2c:e7:ed:23:82:c8:6f:28:65:6e:b6:68: a3:58:b2:8f:8f:ad:15:24:d4:d0:39:25:b8:da:e8:8a:b6:60: 4a:81:c4:6d:95:07:23:0d:4a:cb:43:fd:9e:fd:5b:ce:e9:41: 0b:91:4e:5a:f4:3c:34:85:da:f7:e7:08:95:23:1f:72:67:59: 59:a8:b6:82:ba:bf:56:97:65:8a:81:5a:49:54:1d:ee:83:d6: 92:70:8e:44:e6:9d:2d:a9:fb:99:d7:63:44:9d:c4:b8:ab:e3: d7:4b:fd:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1ugNfbtN9pwoqdhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwYjk1MWUtNzUzOC00MWZiLTk3ZDItMmRkOTM5M2Qz NTQxMB4XDTI2MDQwNzIyMDAwM1oXDTI2MDQwOTIyMDAwMFowLzEtMCsGA1UEAxMk MTEwMTZmZTMtNDZmZC00NGY2LTlmNDktNGJhOTg5N2RjODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDOKTOAoDUxMjrnLxWSflbFjUr8EJCiNbAyY lr+kuQeu1Lfq6V6MbYJNEmk5jWDfoR9+AHOLXph2eBolzVt3qR95sRJm/HvLy7yt 3GGviO0Ei3NMMaqEZ04vyIw4Vs0ZZGJorgKRqS730DO+l757N7OcbK8S3uVyjOu2 G5LlCHFBVseXAQVdEBNjnzGIvvp/RvOTLq/oQqhjUY2yYdcuz8k2Kbb+N1mjXPD+ fqiS+FlU4f4rykr9uS4sO7Mfd2ssUJkMFm1RpGqgOXBSRmz9GYhE9hrwX5llmJW4 k98yLBLFj7R102BZEWA9gnrkb6u9gNVinnOJDusGzl+eKES+kwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJrv35VMol1d4GKConmIBuP2qU6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBi OTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5MzkzZDM1NDEvYTIwYjk1MWUtNzUzOC00 MWZiLTk3ZDItMmRkOTM5M2QzNTQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTIwYjk1MWUtNzUzOC00MWZiLTk3 ZDItMmRkOTM5M2QzNTQxL2EyMGI5NTFlLTc1MzgtNDFmYi05N2QyLTJkZDkzOTNk MzU0MS5jcmwwHwYDVR0jBBgwFoAUlidlPsa9hFYOtlcmlFHIUQMD2IgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5 MzkzZDM1NDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMOk1mcm/p1J6kxhPo9P1A c9lSBK+imWneAGDn9RbzFtMiaZ4Q3UYpu08pnEJ06zu7AmALcWkRl4xyEiOx/eya pHvj6+suDcI28Ij+ln7RczrVUKNTaEGPVLB4N+Ar/PN0wnmMvXv2aJ6DX5N6ITbV 9h1OcW6y97q1MUV3vTsGoJf60Xp3OUECqcUrUCwauIXfqHh/FdMs5+0jgshvKGVu tmijWLKPj60VJNTQOSW42uiKtmBKgcRtlQcjDUrLQ/2e/VvO6UELkU5a9Dw0hdr3 5wiVIx9yZ1lZqLaCur9Wl2WKgVpJVB3ug9aScI5E5p0tqfuZ12NEncS4q+PXS/1O -----END CERTIFICATE-----Generated at Wed Apr 8 13:30:18 2026 by rpki-client