$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft File: 159b8268-64ce-47ef-993d-a3bb782bd7a9.mft (raw, json) Hash identifier: MRqL0pa0RVtU3CnRIPD9z7x/MtowqPuK2M+KJ3BCJJw= Subject key identifier: D4:7C:7E:75:43:31:13:CB:E8:82:66:00:85:A5:83:A9:43:0A:BD:BD Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52 Certificate issuer: /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9 Certificate serial: 010D0C9F4328584DA95CC33B1AC43B2599AFA900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft Manifest number: 010D0C9F432858465DC8F9A9262D43D55116BD51 Signing time: Wed 29 Apr 2026 00:00:03 +0000 Manifest this update: Wed 29 Apr 2026 00:00:03 +0000 Manifest next update: Fri 01 May 2026 00:00:00 +0000 Files and hashes: 1: 159b8268-64ce-47ef-993d-a3bb782bd7a9.crl (hash: PkSmB7aOGAspLfbth/I8fxwjiRpoBgxvf0OpFyhFpno=) 2: d2c7549d-7dcf-3897-85fa-69af9d414cee.roa (hash: Y//uhU3x4FAiL8kVqic99NuIumFv1OCOOmqrE3EG4Jk=) 3: d603a26c-ea53-32b6-85e8-790c5c1c3366.roa (hash: Wt0Iw64ke7xo2TytCNHZRLhx8EiOT7jYp0dOw+a54V4=) 4: d6806ece-2dfc-3ea9-a0cb-6216853f16ce.roa (hash: bhSrKNO3xNgJU6056KUvY/VdDww8PBPR5mWgslYE17k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:5c:c3:3b:1a:c4:3b:25:99:af:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9 Validity Not Before: Apr 29 00:00:03 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=20f18524-46cb-4219-8cb3-a1c077203c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:d2:b8:4e:89:4a:27:fd:76:3c:b2:f5:51: 4a:fc:08:ee:4c:c3:31:25:ef:3b:31:b2:de:28:0d: 00:2b:bb:20:03:a6:fa:af:a3:86:e6:6a:a0:ce:fc: f7:9a:64:cd:e2:e8:b9:4e:d5:b2:3a:e7:0b:45:64: 92:d7:89:3f:69:10:af:33:af:e7:0c:6e:62:0f:87: 56:83:78:ee:59:3f:9e:15:6c:29:ff:4b:f7:03:c0: 82:b1:92:e8:15:77:d6:30:d1:1e:49:b2:2a:b7:18: e9:a3:b6:f6:1e:06:69:e8:23:5c:d3:6f:52:d8:c6: ed:f9:2b:cb:72:07:da:f3:20:d8:fa:98:20:75:4a: 9e:02:25:26:d2:c8:93:69:f7:66:ef:11:56:53:54: d1:52:16:22:b4:a8:3e:37:0e:ba:87:cf:62:34:67: ea:ac:65:01:b9:03:83:31:b4:ee:eb:01:c9:40:e7: 36:80:b6:24:74:8b:fd:1e:2d:39:0a:d8:cf:13:de: e1:01:46:8c:a6:00:4a:41:8b:1b:a0:83:51:19:95: 97:7b:1d:c6:ad:5c:d5:ca:91:c9:dd:0f:3e:c9:bf: eb:4f:23:9c:e2:78:cf:d0:76:0d:81:25:35:64:32: 98:e7:4d:4d:82:e7:be:e5:11:cc:30:ed:8b:80:50: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7C:7E:75:43:31:13:CB:E8:82:66:00:85:A5:83:A9:43:0A:BD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl X509v3 Authority Key Identifier: keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c8:cf:fb:ec:b5:47:d5:9d:50:b0:e5:4d:14:6e:46:bb:f3: 82:1a:93:b9:19:ee:3b:54:e6:80:53:5a:3e:69:26:c0:55:e9: b9:a7:30:f3:f1:e8:0c:3c:3a:f0:8f:ce:2e:0e:50:b7:36:b1: 8d:55:91:54:6a:a1:8d:bd:b7:8e:8f:4b:5b:b9:21:3a:d6:6e: 8a:57:c9:d9:b1:66:09:51:10:6c:a5:98:65:ea:4c:20:2c:1f: e7:cb:8f:1a:fa:62:9d:e7:a0:66:26:77:69:24:87:9e:c4:33: ee:97:00:00:44:ed:64:6a:f3:de:2d:06:ea:c1:96:34:b1:70: 8b:20:42:e9:76:00:a9:d1:9d:6d:52:f6:25:dd:ad:fd:4c:3c: ac:ac:4d:c2:34:46:b8:c4:cc:a5:0b:7e:77:19:b7:3c:27:e8: bc:4e:43:b6:73:70:5b:cb:6c:8b:94:71:da:07:4f:a6:37:99: 31:ec:27:6d:d2:a8:fb:71:41:69:7b:4f:d2:a7:4e:80:69:e9: 56:41:ad:76:ea:92:da:84:af:8a:82:73:b3:69:27:57:83:11: 71:c0:ce:61:25:f7:16:a8:8d:a5:44:0d:a0:e2:d1:3b:29:78: 79:b9:72:21:d6:6c:ec:14:c1:7e:dd:75:cb:c0:02:55:db:fb: 02:d4:02:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2pXMM7GsQ7JZmvqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk N2E5MB4XDTI2MDQyOTAwMDAwM1oXDTI2MDUwMTAwMDAwMFowLzEtMCsGA1UEAxMk MjBmMTg1MjQtNDZjYi00MjE5LThjYjMtYTFjMDc3MjAzYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoirSuE6JSif9djyy9VFK/AjuTMMxJe87MbLe KA0AK7sgA6b6r6OG5mqgzvz3mmTN4ui5TtWyOucLRWSS14k/aRCvM6/nDG5iD4dW g3juWT+eFWwp/0v3A8CCsZLoFXfWMNEeSbIqtxjpo7b2HgZp6CNc029S2Mbt+SvL cgfa8yDY+pggdUqeAiUm0siTafdm7xFWU1TRUhYitKg+Nw66h89iNGfqrGUBuQOD MbTu6wHJQOc2gLYkdIv9Hi05CtjPE97hAUaMpgBKQYsboINRGZWXex3GrVzVypHJ 3Q8+yb/rTyOc4njP0HYNgSU1ZDKY501Ngue+5RHMMO2LgFBRkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNR8fnVDMRPL6IJmAIWlg6lDCr29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvMTU5YjgyNjgtNjRjZS00 N2VmLTk5M2QtYTNiYjc4MmJkN2E5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5 M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji NzgyYmQ3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVyM/77LVH1Z1QsOVNFG5G u/OCGpO5Ge47VOaAU1o+aSbAVem5pzDz8egMPDrwj84uDlC3NrGNVZFUaqGNvbeO j0tbuSE61m6KV8nZsWYJURBspZhl6kwgLB/ny48a+mKd56BmJndpJIeexDPulwAA RO1kavPeLQbqwZY0sXCLIELpdgCp0Z1tUvYl3a39TDysrE3CNEa4xMylC353Gbc8 J+i8TkO2c3Bby2yLlHHaB0+mN5kx7Cdt0qj7cUFpe0/Sp06AaelWQa126pLahK+K gnOzaSdXgxFxwM5hJfcWqI2lRA2g4tE7KXh5uXIh1mzsFMF+3XXLwAJV2/sC1AK5 -----END CERTIFICATE-----Generated at Wed Apr 29 14:55:16 2026 by rpki-client