$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft File: ce6a531d-4e38-485d-9236-07a5daf2b689.mft (raw, json) Hash identifier: S0yz2LAOVB+OaL6qlZ0+8bO8gdLHgkbOaeWbg5+fOmU= Subject key identifier: 34:53:DA:1D:68:C1:41:30:B4:04:B6:7E:E2:04:D1:35:E7:A6:97:E2 Authority key identifier: D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE Certificate issuer: /CN=ce6a531d-4e38-485d-9236-07a5daf2b689 Certificate serial: 010D0C9F4328584D663E94BA28F11A1EEA117780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft Manifest number: 010D0C9F4328584073A82CE4405867CAAAAAF677 Signing time: Sat 04 Apr 2026 23:00:03 +0000 Manifest this update: Sat 04 Apr 2026 23:00:03 +0000 Manifest next update: Mon 06 Apr 2026 23:00:00 +0000 Files and hashes: 1: ce6a531d-4e38-485d-9236-07a5daf2b689.crl (hash: UpSVdIaxQbnQJoQCC4gSigYj8gPurgkov7Zom2yIKbk=) 2: cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa (hash: 9LQUaZ378DtcnZo0VXGElgN/sng5MQdp88mk2PiVYX4=) 3: e7e2ae3c-d92b-39bd-a965-9c5f89be8e7e.roa (hash: K2JDH633F02entjmKmsuivzhR2uvp5tW6LXJlAO6ZMQ=) 4: ef6a8651-0491-3fd6-9da0-31d7e19cba42.roa (hash: gVhnEP6463ma5llvU1nka5NzUZ0ttHvZlbsBLcA3I04=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:3e:94:ba:28:f1:1a:1e:ea:11:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce6a531d-4e38-485d-9236-07a5daf2b689 Validity Not Before: Apr 4 23:00:03 2026 GMT Not After : Apr 6 23:00:00 2026 GMT Subject: CN=8774c5dc-b4f2-4873-8197-f0187804b664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:46:20:09:f4:73:27:d6:78:2e:de:f0:59: fc:c9:47:72:9e:ed:e2:5e:8a:af:cf:30:cd:32:86: e2:1b:d6:ba:7b:99:e7:d1:17:08:13:e7:2f:99:41: cf:dc:62:ee:ac:5c:f2:fa:a9:7e:fd:97:7f:01:cf: fb:34:1c:df:5f:2a:52:56:ae:a0:49:b9:68:2f:53: 95:60:2f:88:0d:12:10:90:c1:9f:2b:80:1d:ad:89: bc:be:81:3c:87:40:32:97:23:41:2a:62:fb:65:dd: b3:11:5a:e7:69:87:f5:d3:30:f2:22:3a:b5:2d:2d: 87:b7:50:64:d1:1f:9a:c7:33:49:fb:8d:2b:61:54: aa:d0:8a:22:c8:d7:d4:5c:72:50:db:80:7e:64:35: 7c:41:a1:d4:6a:bf:cd:a2:e7:a3:e8:fe:3d:8f:a1: 5a:35:4b:74:80:33:c0:8f:16:2d:57:d1:43:1a:38: 66:58:f5:1f:da:d5:b8:f9:94:e9:ba:22:5e:ea:c6: f0:2d:17:a7:f0:42:b8:5c:de:cf:a8:77:f7:5a:73: 5d:6b:85:8d:d5:1a:8f:cb:f7:6b:2d:27:6c:e0:02: 0f:8c:f0:6d:86:dc:b2:01:3c:47:1d:9b:b1:6a:4b: c2:21:d9:ac:17:c2:28:8f:92:cf:c2:0c:9d:b3:87: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:53:DA:1D:68:C1:41:30:B4:04:B6:7E:E2:04:D1:35:E7:A6:97:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl X509v3 Authority Key Identifier: keyid:D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b4:c0:61:07:e7:9a:50:a7:ca:c0:d7:38:bf:34:bb:26:53: 7c:6b:b6:c6:5d:8f:b1:ae:6f:3a:8b:d8:56:3d:40:56:ce:3c: 90:f5:c5:de:08:68:76:98:a9:89:65:17:6d:dc:2d:eb:a9:d9: ad:c6:0a:76:ea:72:18:86:c3:64:90:34:67:35:a2:0a:bb:ad: 2c:36:bd:a1:e2:a1:a2:92:30:16:b8:fa:97:e8:9d:1f:33:71: 7b:e8:b3:50:3c:2b:96:eb:d2:17:86:e6:18:f9:f9:85:d1:f5: 20:97:32:e6:02:91:14:ce:ab:5f:c3:80:1c:2c:4f:ee:33:ec: 3e:5b:54:63:03:ce:5a:4c:c3:3f:f1:f0:4f:72:4c:e3:06:f1: d6:ba:ae:23:c9:be:cc:8e:82:86:0b:47:8e:2a:80:a6:53:46: 96:f2:04:56:cc:d4:b1:43:d8:36:cd:89:fa:23:0d:ba:d0:06: b4:38:63:f4:1e:b0:b0:15:42:4a:96:82:c1:18:32:15:3d:2d: 99:09:8a:df:06:80:45:7c:66:0a:cd:69:b6:91:2e:ba:7e:a1: eb:bc:29:04:6d:55:d1:6b:b2:1a:bf:db:1e:5a:4b:f3:e8:e7: 03:b3:b4:3c:9b:11:92:59:85:a7:9e:cb:04:b0:21:12:77:44: 8e:be:bf:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1mPpS6KPEaHuoRd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U2YTUzMWQtNGUzOC00ODVkLTkyMzYtMDdhNWRhZjJi Njg5MB4XDTI2MDQwNDIzMDAwM1oXDTI2MDQwNjIzMDAwMFowLzEtMCsGA1UEAxMk ODc3NGM1ZGMtYjRmMi00ODczLTgxOTctZjAxODc4MDRiNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0opGIAn0cyfWeC7e8Fn8yUdynu3iXoqvzzDN MobiG9a6e5nn0RcIE+cvmUHP3GLurFzy+ql+/Zd/Ac/7NBzfXypSVq6gSbloL1OV YC+IDRIQkMGfK4AdrYm8voE8h0AylyNBKmL7Zd2zEVrnaYf10zDyIjq1LS2Ht1Bk 0R+axzNJ+40rYVSq0IoiyNfUXHJQ24B+ZDV8QaHUar/Nouej6P49j6FaNUt0gDPA jxYtV9FDGjhmWPUf2tW4+ZTpuiJe6sbwLRen8EK4XN7PqHf3WnNda4WN1RqPy/dr LSds4AIPjPBthtyyATxHHZuxakvCIdmsF8Ioj5LPwgyds4de9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDRT2h1owUEwtAS2fuIE0TXnppfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZTZh NTMxZC00ZTM4LTQ4NWQtOTIzNi0wN2E1ZGFmMmI2ODkvY2U2YTUzMWQtNGUzOC00 ODVkLTkyMzYtMDdhNWRhZjJiNjg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2U2YTUzMWQtNGUzOC00ODVkLTky MzYtMDdhNWRhZjJiNjg5L2NlNmE1MzFkLTRlMzgtNDg1ZC05MjM2LTA3YTVkYWYy YjY4OS5jcmwwHwYDVR0jBBgwFoAU03DwMsJXKXWMiAx0xlSZBa/tE94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZTZhNTMxZC00ZTM4LTQ4NWQtOTIzNi0wN2E1 ZGFmMmI2ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqtMBhB+eaUKfKwNc4vzS7 JlN8a7bGXY+xrm86i9hWPUBWzjyQ9cXeCGh2mKmJZRdt3C3rqdmtxgp26nIYhsNk kDRnNaIKu60sNr2h4qGikjAWuPqX6J0fM3F76LNQPCuW69IXhuYY+fmF0fUglzLm ApEUzqtfw4AcLE/uM+w+W1RjA85aTMM/8fBPckzjBvHWuq4jyb7MjoKGC0eOKoCm U0aW8gRWzNSxQ9g2zYn6Iw260Aa0OGP0HrCwFUJKloLBGDIVPS2ZCYrfBoBFfGYK zWm2kS66fqHrvCkEbVXRa7Iav9seWkvz6OcDs7Q8mxGSWYWnnssEsCESd0SOvr/4 -----END CERTIFICATE-----Generated at Sun Apr 5 11:53:10 2026 by rpki-client