$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft File: 4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft (raw, json) Hash identifier: c+W40N5HHgecyMSH70CVc02GrZjGS6KAP+DECtSW95k= Subject key identifier: 15:42:D6:97:92:61:F4:09:E3:D5:6E:84:B7:D1:FD:79:75:AF:F6:70 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F4328584D6EF7F42C8CBCA52051D12F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft Manifest number: 010D0C9F4328584073A83626DB21214B49D012D6 Signing time: Wed 08 Apr 2026 02:00:03 +0000 Manifest this update: Wed 08 Apr 2026 02:00:03 +0000 Manifest next update: Sat 11 Apr 2026 02:00:00 +0000 Files and hashes: 1: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (hash: p92d3cZCd6+jlqc38sHakyqHisU3J1yRZhzFpnmGUyU=) 2: 3da03965-f67d-3f9e-ba07-b78793310588.roa (hash: 7xSTJUfnK+OMIIspikbCZwuSeh/4pNix0b/dA/u/YMs=) 3: 4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl (hash: NVdv5MkAJEATO6NNvLM69wxW57fmYsuN5/4Ulx7uiBc=) 4: 9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa (hash: K6J7nzJzznNf2Jffs+Z3DPi85NPAgJbUkCgpBlShguk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:f7:f4:2c:8c:bc:a5:20:51:d1:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Apr 8 02:00:03 2026 GMT Not After : Apr 11 02:00:00 2026 GMT Subject: CN=9f2e855d-a805-4fbe-95ff-f7c80ffb3ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:78:e7:fd:57:5b:b2:0d:4e:be:3b:73:87: 6e:b9:cf:89:d5:6d:7f:cc:37:cf:c4:8c:e7:12:e3: 83:bd:28:eb:ae:26:fa:76:d5:9f:fc:69:1f:90:79: 3a:c6:8b:c8:d5:eb:e5:4c:70:15:69:eb:51:8d:df: 6c:c1:b1:ee:83:77:bf:5d:58:41:b1:8b:08:1b:22: 70:9d:50:fc:31:d6:66:a1:84:3a:ce:27:cf:cc:ac: 63:7b:2b:06:f0:17:71:c8:af:8e:cc:5d:07:7b:e1: 4d:a8:7f:e8:3f:3a:e0:12:37:0a:69:37:bb:60:30: ce:95:bc:20:c8:28:b5:45:7b:47:dc:ec:bb:1a:d5: ba:3c:77:94:9a:6c:dd:b5:63:88:18:18:38:3b:87: 38:4d:1d:1d:a2:1c:76:25:f6:a9:75:21:53:41:42: 92:e9:f9:8f:19:a3:5d:83:5d:28:e2:70:4c:c0:c5: 19:b3:d4:a3:f2:fa:f6:f9:f0:02:4f:c3:55:95:06: d6:3b:01:d4:43:ca:55:2e:bd:b7:84:22:13:28:b4: 20:17:f7:8f:cf:48:8a:76:64:3f:7d:81:d1:fb:c0: 39:c0:c7:a8:6f:e8:cb:f3:6e:73:8b:88:f4:87:f8: 5a:3f:f7:1b:00:a8:6b:7a:ef:f0:eb:88:33:22:47: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:42:D6:97:92:61:F4:09:E3:D5:6E:84:B7:D1:FD:79:75:AF:F6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a8:12:12:dd:2e:2e:a9:5e:f8:4b:a6:93:3b:e8:e6:98:e3: a2:36:78:4c:c7:ba:36:34:4f:0b:73:69:c3:59:b6:4f:f3:06: bf:1e:94:ad:9f:e1:5a:52:da:c3:ca:4b:36:0a:a7:72:b5:05: ff:4d:87:f6:4f:6a:b2:51:13:54:87:57:69:cc:2a:11:57:83: 55:62:3a:6b:4f:5b:b2:a1:dc:ab:8e:da:a0:3e:71:d5:db:bb: fc:ac:17:ea:4c:93:ba:d5:86:56:d4:80:74:d6:31:73:c8:6e: 55:78:0d:a6:d7:15:5d:8d:f2:2c:9e:03:4a:a1:68:cb:1e:6b: 1c:9f:d4:81:a6:8a:48:86:35:c6:cf:9b:97:c2:9a:6a:47:59: 0c:96:48:1d:ce:e8:ae:25:c9:43:b5:d8:ea:57:95:e4:16:16: d7:da:1c:75:77:84:77:2c:85:12:41:90:ea:6a:11:cf:8e:86: 61:95:b4:64:cd:5d:9a:6d:cd:1c:cd:9e:d2:48:1b:ce:ed:b0: 1b:e4:90:1e:60:b9:75:ac:d9:5c:22:8f:a3:8d:81:19:a8:f3: 0c:0b:f6:71:13:5a:37:72:3d:36:87:9f:bb:09:7f:62:e5:a5: cb:59:57:59:a2:58:63:f8:a4:7c:dd:5d:ec:ac:14:de:82:83: 00:ab:5c:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1u9/QsjLylIFHRL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI2MDQwODAyMDAwM1oXDTI2MDQxMTAyMDAwMFowLzEtMCsGA1UEAxMk OWYyZTg1NWQtYTgwNS00ZmJlLTk1ZmYtZjdjODBmZmIzZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZd45/1XW7INTr47c4duuc+J1W1/zDfPxIzn EuODvSjrrib6dtWf/GkfkHk6xovI1evlTHAVaetRjd9swbHug3e/XVhBsYsIGyJw nVD8MdZmoYQ6zifPzKxjeysG8BdxyK+OzF0He+FNqH/oPzrgEjcKaTe7YDDOlbwg yCi1RXtH3Oy7GtW6PHeUmmzdtWOIGBg4O4c4TR0dohx2JfapdSFTQUKS6fmPGaNd g10o4nBMwMUZs9Sj8vr2+fACT8NVlQbWOwHUQ8pVLr23hCITKLQgF/ePz0iKdmQ/ fYHR+8A5wMeob+jL825zi4j0h/haP/cbAKhreu/w64gzIkfwSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBVC1peSYfQJ49VuhLfR/Xl1r/ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvNDAwOWQ5M2EtZDllNy00 ZWI3LTk0Y2QtZmZlYzA2MThjM2VjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqqBIS3S4uqV74S6aTO+jm mOOiNnhMx7o2NE8Lc2nDWbZP8wa/HpStn+FaUtrDyks2CqdytQX/TYf2T2qyURNU h1dpzCoRV4NVYjprT1uyodyrjtqgPnHV27v8rBfqTJO61YZW1IB01jFzyG5VeA2m 1xVdjfIsngNKoWjLHmscn9SBpopIhjXGz5uXwppqR1kMlkgdzuiuJclDtdjqV5Xk FhbX2hx1d4R3LIUSQZDqahHPjoZhlbRkzV2abc0czZ7SSBvO7bAb5JAeYLl1rNlc Io+jjYEZqPMMC/ZxE1o3cj02h5+7CX9i5aXLWVdZolhj+KR83V3srBTegoMAq1xa -----END CERTIFICATE-----Generated at Thu Apr 9 01:19:24 2026 by rpki-client