$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft File: 7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft (raw, json) Hash identifier: atY6WMZ635vXWTSzVICVHQXut/t3qS7PWoLUg69dAtY= Subject key identifier: 72:1B:6F:DA:E8:12:E7:93:7B:41:E5:5F:E7:FB:75:74:5A:38:2B:6A Authority key identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4 Certificate issuer: /CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf Certificate serial: 010D0C9F4328584DA8E5AC005C4743DA1329C490 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft Manifest number: 010D0C9F4328584694F8E488A43FC88F30067219 Signing time: Tue 28 Apr 2026 20:00:03 +0000 Manifest this update: Tue 28 Apr 2026 20:00:03 +0000 Manifest next update: Thu 30 Apr 2026 20:00:00 +0000 Files and hashes: 1: 7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl (hash: MByRarTEBectwiyxpPQs5r8M/23bDXWdokD56CiYxnk=) 2: d8e3845c-489e-34ef-886c-d05badd37cd6.roa (hash: KPCbw2zvzAi/vPdS9r+FkiWOVpow3S94RrlSzDAzAnU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:e5:ac:00:5c:47:43:da:13:29:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf Validity Not Before: Apr 28 20:00:03 2026 GMT Not After : Apr 30 20:00:00 2026 GMT Subject: CN=33a12e0e-0708-41f2-a6fa-0ea3d7b3f9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:06:c7:9b:17:90:2b:78:a9:52:18:03:18: 61:d0:3e:0f:b1:1e:7e:ec:fe:16:19:25:1b:37:ef: 93:c2:5c:b3:55:36:4a:b5:86:d3:3b:12:8f:59:83: 71:fa:3f:c5:6e:3c:f7:29:ea:e8:69:cd:40:be:5f: c4:1c:fb:13:7a:6e:d3:a9:af:b0:89:24:65:f6:b3: 01:e0:c6:67:cf:c3:9f:2f:fc:ad:3c:46:5c:67:4c: b6:02:ce:85:08:b3:a6:b9:dd:2e:c8:1c:49:af:69: f8:db:25:e8:d8:ac:d2:33:04:f6:fd:f7:5c:80:f5: b9:71:26:fd:94:c5:6e:ab:35:28:b6:8f:ca:43:df: 79:98:e0:e7:77:f2:64:2f:65:cf:c7:7f:e0:ef:a7: 3d:96:79:29:fd:05:28:a2:ab:f4:c9:f6:2a:05:30: aa:da:93:04:90:14:97:d0:46:cc:a4:35:64:ae:90: f6:e0:36:4b:81:c6:11:8d:e2:a2:1b:f7:8e:36:f0: fe:9f:fd:c2:c8:99:eb:af:87:50:a2:da:4e:f2:01: b6:9e:05:44:e5:9e:77:6d:9a:13:ec:75:09:8d:3c: d6:4e:4c:a7:04:89:65:0f:a8:78:b5:40:9e:a7:ec: d0:07:c0:3a:1d:c1:57:43:99:6a:45:7b:db:f3:15: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1B:6F:DA:E8:12:E7:93:7B:41:E5:5F:E7:FB:75:74:5A:38:2B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl X509v3 Authority Key Identifier: keyid:B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:91:5e:ee:19:96:fe:4d:77:ed:8e:30:12:a6:4f:90:3a:2b: ee:28:f0:41:11:8f:f7:4c:8f:d2:c5:0c:d0:39:52:70:38:7f: de:95:40:49:79:da:8a:51:42:b0:9c:e4:28:5f:bd:3e:86:02: 2c:ae:55:9e:22:ee:c5:46:4e:5d:7c:c5:20:1c:67:9c:4d:82: 3a:16:3c:5f:4b:bd:93:5a:b6:bc:d1:2c:93:fb:0f:2d:d3:83: 21:ce:c1:c5:1c:76:0d:56:c0:c1:c5:45:dd:d0:a8:09:a0:22: f6:41:0c:5e:b9:4d:bf:b6:cc:fc:e0:61:e3:ad:ca:76:29:dd: b1:28:bb:be:dd:76:5d:9b:f5:c6:cb:2d:ff:82:80:83:4b:b1: 4c:80:b0:c1:48:56:16:29:32:a6:57:ab:11:4c:d7:93:eb:0c: 92:be:4d:50:59:d7:8e:1b:76:1d:5f:42:8a:83:4f:66:58:f7: f6:97:f8:f9:47:81:69:59:fb:c0:76:58:d1:9d:bd:1d:de:d7: 39:9c:c8:27:92:e4:79:e9:aa:db:76:9a:fe:43:90:ba:9f:33: 89:e9:cf:5c:67:10:78:f8:70:db:16:37:f2:4c:fc:1a:8c:6b: a5:82:96:e1:76:08:86:d6:01:05:f7:c8:33:2b:d3:1d:19:8a: fe:4b:0d:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2o5awAXEdD2hMpxJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5MGU0ZDUtYjgzOC00YWU3LWI3YzgtOGFhYTRlMTgz ZmFmMB4XDTI2MDQyODIwMDAwM1oXDTI2MDQzMDIwMDAwMFowLzEtMCsGA1UEAxMk MzNhMTJlMGUtMDcwOC00MWYyLWE2ZmEtMGVhM2Q3YjNmOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoAGx5sXkCt4qVIYAxhh0D4PsR5+7P4WGSUb N++TwlyzVTZKtYbTOxKPWYNx+j/Fbjz3Keroac1Avl/EHPsTem7Tqa+wiSRl9rMB 4MZnz8OfL/ytPEZcZ0y2As6FCLOmud0uyBxJr2n42yXo2KzSMwT2/fdcgPW5cSb9 lMVuqzUoto/KQ995mODnd/JkL2XPx3/g76c9lnkp/QUooqv0yfYqBTCq2pMEkBSX 0EbMpDVkrpD24DZLgcYRjeKiG/eONvD+n/3CyJnrr4dQotpO8gG2ngVE5Z53bZoT 7HUJjTzWTkynBIllD6h4tUCep+zQB8A6HcFXQ5lqRXvb8xVKdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHIbb9roEueTe0HlX+f7dXRaOCtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZTkw ZTRkNS1iODM4LTRhZTctYjdjOC04YWFhNGUxODNmYWYvN2U5MGU0ZDUtYjgzOC00 YWU3LWI3YzgtOGFhYTRlMTgzZmFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2U5MGU0ZDUtYjgzOC00YWU3LWI3 YzgtOGFhYTRlMTgzZmFmLzdlOTBlNGQ1LWI4MzgtNGFlNy1iN2M4LThhYWE0ZTE4 M2ZhZi5jcmwwHwYDVR0jBBgwFoAUtwbhskEzXgljaRvsnfOvg4MjUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZTkwZTRkNS1iODM4LTRhZTctYjdjOC04YWFh NGUxODNmYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAckV7uGZb+TXftjjASpk+Q OivuKPBBEY/3TI/SxQzQOVJwOH/elUBJedqKUUKwnOQoX70+hgIsrlWeIu7FRk5d fMUgHGecTYI6FjxfS72TWra80SyT+w8t04MhzsHFHHYNVsDBxUXd0KgJoCL2QQxe uU2/tsz84GHjrcp2Kd2xKLu+3XZdm/XGyy3/goCDS7FMgLDBSFYWKTKmV6sRTNeT 6wySvk1QWdeOG3YdX0KKg09mWPf2l/j5R4FpWfvAdljRnb0d3tc5nMgnkuR56arb dpr+Q5C6nzOJ6c9cZxB4+HDbFjfyTPwajGulgpbhdgiG1gEF98gzK9MdGYr+Sw0J -----END CERTIFICATE-----Generated at Wed Apr 29 14:32:39 2026 by rpki-client