$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: dSRzDtENPYqj9TVmp0cTwXkyuOiL0IixLpDZlVRmLmM= Subject key identifier: 50:41:CC:D6:46:C9:02:A0:E3:13:38:0D:D7:25:9A:26:EE:93:27:A3 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584D94C5FD43A5A438D210B211C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697FEF Signing time: Tue 21 Apr 2026 15:00:03 +0000 Manifest this update: Tue 21 Apr 2026 15:00:03 +0000 Manifest next update: Thu 23 Apr 2026 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: j9cP/6r/zpC1Zpvh38rRXThkMY7pcYM3tdrbUketVc0=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: et11wOna2/jsfUgEs+WmugvFKLlRruM/1ygUcDk6Jgw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:c5:fd:43:a5:a4:38:d2:10:b2:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Apr 21 15:00:03 2026 GMT Not After : Apr 23 15:00:00 2026 GMT Subject: CN=1098d349-ff25-4724-89f6-cec4f1665c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:7b:b2:a0:a2:9b:8f:64:ed:af:41:66:98: 94:51:44:70:2c:0d:58:12:6e:37:c0:b3:cf:27:cc: 8c:2c:f9:10:b8:7f:bd:31:2d:49:fb:8c:2e:e1:34: fc:d9:a0:7d:a7:6c:3b:2e:3e:7c:b6:b4:36:00:f1: 11:d7:27:91:71:5b:cb:11:25:4b:b6:2e:14:14:d5: 35:17:a4:d0:2a:77:9d:30:69:2c:8c:c1:b7:f8:fd: 4b:86:dd:c5:8a:17:76:32:93:79:6d:cc:98:23:e1: 79:e0:66:16:53:4e:bc:da:e0:ed:66:87:b8:a6:53: 8b:db:09:10:a3:e9:5b:20:0f:df:a2:bd:7c:ba:a3: 03:6e:08:aa:cd:6f:3c:39:84:a7:73:14:2a:1a:0d: 5b:01:fe:3d:51:e7:80:0d:64:9e:be:bc:d1:ab:8a: 4f:e9:62:1d:65:41:5c:16:76:a8:db:19:6d:8c:4f: 0c:da:da:56:81:14:28:e0:07:e5:7f:5b:d0:55:3e: 18:41:f7:b2:b2:a1:d0:b0:50:7f:9c:30:7a:0b:af: 63:eb:a1:5a:8f:09:93:61:34:a7:d7:e2:3c:44:90: ca:e1:e3:5b:cc:4b:45:2b:df:da:4b:b6:d4:61:76: ba:ce:9c:f8:62:03:a4:60:bc:2e:2d:61:4e:ee:fd: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:41:CC:D6:46:C9:02:A0:E3:13:38:0D:D7:25:9A:26:EE:93:27:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1b:e7:65:dd:dc:d7:9f:5d:1c:5d:75:67:84:2b:75:83:40: ef:81:0a:03:43:48:63:c2:1b:f3:b8:6c:2f:0c:6d:3f:9b:75: 9a:b1:06:ee:75:d1:53:f8:e6:ab:ca:37:2f:6a:4b:f3:1b:cf: d8:41:a7:5b:af:c9:ed:c4:37:63:2f:fb:90:7e:96:f7:8a:82: 44:27:a7:d4:4e:2d:3e:1c:3a:d9:21:24:48:b1:04:c0:f7:22: 9d:7d:44:1d:aa:0b:e1:86:ce:97:97:ea:8f:43:77:43:88:a7: 7c:8e:f7:8c:d8:5a:ca:f6:66:21:45:5e:1d:b2:42:e8:7b:4a: d5:54:b4:cc:cd:a5:00:6f:7d:cd:f7:bc:3f:8a:a2:2d:44:cb: 06:14:2d:8c:3d:ab:03:45:ff:22:97:92:40:2b:d3:3e:8a:f2: f9:51:38:65:ea:49:66:21:e1:2c:12:41:92:bc:9b:e2:ab:15: e7:3f:8c:21:1a:92:f7:9b:d2:b2:ae:bb:a4:e2:cc:25:7a:ef: b1:7d:67:28:d3:33:7e:5a:0e:dd:4f:f7:b8:7a:d7:61:0f:80: 51:90:17:64:41:6d:93:0e:8b:d5:84:9b:f2:4c:bd:14:de:11: 46:b7:42:d5:e3:f3:c6:f7:68:e9:67:17:32:f3:03:94:f2:35: 4e:65:a9:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Uxf1DpaQ40hCyEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI2MDQyMTE1MDAwM1oXDTI2MDQyMzE1MDAwMFowLzEtMCsGA1UEAxMk MTA5OGQzNDktZmYyNS00NzI0LTg5ZjYtY2VjNGYxNjY1YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoR7sqCim49k7a9BZpiUUURwLA1YEm43wLPP J8yMLPkQuH+9MS1J+4wu4TT82aB9p2w7Lj58trQ2APER1yeRcVvLESVLti4UFNU1 F6TQKnedMGksjMG3+P1Lht3Fihd2MpN5bcyYI+F54GYWU0682uDtZoe4plOL2wkQ o+lbIA/for18uqMDbgiqzW88OYSncxQqGg1bAf49UeeADWSevrzRq4pP6WIdZUFc Fnao2xltjE8M2tpWgRQo4Aflf1vQVT4YQfeysqHQsFB/nDB6C69j66FajwmTYTSn 1+I8RJDK4eNbzEtFK9/aS7bUYXa6zpz4YgOkYLwuLWFO7v0DZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFBBzNZGyQKg4xM4DdclmibukyejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmG+dl3dzXn10cXXVnhCt1 g0DvgQoDQ0hjwhvzuGwvDG0/m3WasQbuddFT+OaryjcvakvzG8/YQadbr8ntxDdj L/uQfpb3ioJEJ6fUTi0+HDrZISRIsQTA9yKdfUQdqgvhhs6Xl+qPQ3dDiKd8jveM 2FrK9mYhRV4dskLoe0rVVLTMzaUAb33N97w/iqItRMsGFC2MPasDRf8il5JAK9M+ ivL5UThl6klmIeEsEkGSvJviqxXnP4whGpL3m9Kyrruk4swleu+xfWco0zN+Wg7d T/e4etdhD4BRkBdkQW2TDovVhJvyTL0U3hFGt0LV4/PG92jpZxcy8wOU8jVOZanc -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:47 2026 by rpki-client