$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft File: 1def28a9-0b42-43a8-9407-32d9e4a0540e.mft (raw, json) Hash identifier: 0I3iWHYTi6ouIh07vm8/8gOvVXt8tFLWjeeQCQ2wvWc= Subject key identifier: B9:DF:3A:37:75:11:0D:72:36:1F:DE:C8:1E:7B:5D:D3:51:D3:BE:3D Authority key identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A Certificate issuer: /CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Certificate serial: 010D0C9F4328584DA8C7E0E2817B5E52D68CD1E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft Manifest number: 010D0C9F432858461D024F0D2A50BFF390B86F45 Signing time: Tue 28 Apr 2026 19:00:03 +0000 Manifest this update: Tue 28 Apr 2026 19:00:03 +0000 Manifest next update: Fri 01 May 2026 19:00:00 +0000 Files and hashes: 1: 1def28a9-0b42-43a8-9407-32d9e4a0540e.crl (hash: FXplZnl2i8mnE/q7aao8KpB4nAtUz/xfze74m3xIdNo=) 2: 496afc45-c760-3f66-b7b7-c85288ce00c9.roa (hash: iM/NvRdyKOk/nJxcMi1Oigh7T7f1AapwwAuz3zEvJzg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:c7:e0:e2:81:7b:5e:52:d6:8c:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Validity Not Before: Apr 28 19:00:03 2026 GMT Not After : May 1 19:00:00 2026 GMT Subject: CN=774fb9e4-68e6-4c71-bfeb-e54173615bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:33:2a:aa:1d:18:54:b4:ff:71:54:e6:88: 7f:32:07:8d:e7:fb:8e:cd:a2:8c:73:c1:65:8c:27: 4e:f7:89:10:c0:65:97:ca:8f:49:c4:3b:18:ef:bd: 6e:e5:ae:c3:9f:da:3e:22:ca:66:e5:8a:d6:26:22: b9:a7:a8:0f:5d:b0:6a:43:ac:3e:27:5d:52:09:20: c5:50:ec:fe:db:ec:8f:71:bb:ff:af:ba:9e:df:65: b0:ce:41:58:93:dc:ae:2d:c2:0d:19:6e:b9:02:0e: 15:72:a0:35:f2:f7:39:0e:74:3b:8e:f0:4e:11:f5: 91:20:a7:f2:13:a3:86:33:23:bc:f5:d3:3e:fa:35: 74:60:f1:01:7a:84:c6:b3:bd:f7:dc:42:ab:13:89: 92:ee:6e:a4:e4:2b:a9:e8:e6:d6:2e:7c:eb:8e:11: 64:e0:6a:a0:56:83:ea:70:ca:5f:10:a9:7a:f7:49: bc:92:5d:59:c8:42:a8:ea:04:a0:a9:2c:e8:b4:cc: 65:c8:05:84:3f:f1:1f:8c:d0:87:9f:63:dd:ce:45: 8c:51:57:6e:82:de:d4:d0:e8:fb:32:a1:5d:30:ef: c2:af:ec:d3:63:d0:f7:29:c0:66:fd:86:3c:21:cd: 14:e4:2d:b4:e1:a5:b2:79:f7:d5:b8:51:5c:2c:70: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:3A:37:75:11:0D:72:36:1F:DE:C8:1E:7B:5D:D3:51:D3:BE:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl X509v3 Authority Key Identifier: keyid:4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:be:8d:ef:2c:fb:be:5b:55:48:b2:2b:de:09:51:ea:d9:f3: 9c:6e:a3:11:98:1c:0e:a1:9c:b4:a1:83:71:50:d0:73:cf:a9: 61:13:68:3f:07:b4:c4:20:5f:c3:78:1d:cc:26:32:b7:88:fc: 23:be:d4:44:8b:5d:15:90:08:a4:1e:88:eb:65:8d:5a:1c:1e: 57:0e:d3:aa:0f:e1:0b:9e:97:36:a2:0e:de:2c:c0:06:e7:1b: 41:8d:5f:8b:ac:27:c1:8a:4f:52:43:2a:91:f6:bc:ce:2f:1b: f6:bb:ba:0d:c2:af:e0:d5:3a:31:75:13:d8:ac:f8:c2:85:10: f1:b7:25:f6:0d:56:5e:f2:e7:e2:68:65:4f:69:e4:67:34:79: 59:41:37:dc:3c:dd:47:28:5e:be:11:83:56:08:5a:b7:89:96: 43:bc:eb:d1:dd:b7:1b:aa:38:9f:2d:8d:b7:d1:be:67:f2:20: 75:77:11:cf:c4:be:04:a3:94:eb:dc:06:f9:54:a4:d4:a3:a2: d6:59:fd:92:c7:18:98:86:75:41:9c:5a:dc:97:c8:23:a7:a0: 25:47:65:ea:b4:87:ec:59:46:60:ab:ae:b6:6a:c5:e9:e3:1f: ae:bf:17:77:56:85:23:bf:d4:78:a2:bd:04:d3:ee:74:ee:be: 20:12:7e:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2ox+DigXteUtaM0eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlZjI4YTktMGI0Mi00M2E4LTk0MDctMzJkOWU0YTA1 NDBlMB4XDTI2MDQyODE5MDAwM1oXDTI2MDUwMTE5MDAwMFowLzEtMCsGA1UEAxMk Nzc0ZmI5ZTQtNjhlNi00YzcxLWJmZWItZTU0MTczNjE1YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQYzKqodGFS0/3FU5oh/MgeN5/uOzaKMc8Fl jCdO94kQwGWXyo9JxDsY771u5a7Dn9o+Ispm5YrWJiK5p6gPXbBqQ6w+J11SCSDF UOz+2+yPcbv/r7qe32WwzkFYk9yuLcINGW65Ag4VcqA18vc5DnQ7jvBOEfWRIKfy E6OGMyO89dM++jV0YPEBeoTGs7333EKrE4mS7m6k5Cup6ObWLnzrjhFk4GqgVoPq cMpfEKl690m8kl1ZyEKo6gSgqSzotMxlyAWEP/EfjNCHn2PdzkWMUVdugt7U0Oj7 MqFdMO/Cr+zTY9D3KcBm/YY8Ic0U5C204aWyeffVuFFcLHBw0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLnfOjd1EQ1yNh/eyB57XdNR0749MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZGVm MjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5ZTRhMDU0MGUvMWRlZjI4YTktMGI0Mi00 M2E4LTk0MDctMzJkOWU0YTA1NDBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWRlZjI4YTktMGI0Mi00M2E4LTk0 MDctMzJkOWU0YTA1NDBlLzFkZWYyOGE5LTBiNDItNDNhOC05NDA3LTMyZDllNGEw NTQwZS5jcmwwHwYDVR0jBBgwFoAUSqvfTLC3DA2k0BrXdhd2Rv1IpHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZGVmMjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5 ZTRhMDU0MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkvo3vLPu+W1VIsiveCVHq 2fOcbqMRmBwOoZy0oYNxUNBzz6lhE2g/B7TEIF/DeB3MJjK3iPwjvtREi10VkAik HojrZY1aHB5XDtOqD+ELnpc2og7eLMAG5xtBjV+LrCfBik9SQyqR9rzOLxv2u7oN wq/g1ToxdRPYrPjChRDxtyX2DVZe8ufiaGVPaeRnNHlZQTfcPN1HKF6+EYNWCFq3 iZZDvOvR3bcbqjifLY230b5n8iB1dxHPxL4Eo5Tr3Ab5VKTUo6LWWf2SxxiYhnVB nFrcl8gjp6AlR2XqtIfsWUZgq662asXp4x+uvxd3VoUjv9R4or0E0+507r4gEn7f -----END CERTIFICATE-----Generated at Wed Apr 29 14:47:26 2026 by rpki-client