$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft File: a8d70f86-b257-4225-9609-989938a4164f.mft (raw, json) Hash identifier: bY1n7Uqe9F1Fv/8XXCjFYTQUlLUHaz7vTVPi/Gsm6tc= Subject key identifier: C0:85:AB:B0:06:F6:8D:BE:42:51:2E:9C:70:B0:A9:04:19:E0:4E:73 Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584D7D82457DBFA367F84B0BC400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft Manifest number: 010D0C9F4328584B816AC2FE5D272DDE15CA1AFB Signing time: Mon 13 Apr 2026 07:00:03 +0000 Manifest this update: Mon 13 Apr 2026 07:00:03 +0000 Manifest next update: Thu 16 Apr 2026 07:00:00 +0000 Files and hashes: 1: 062098c5-0138-3dd6-b2b3-0b23b92be422.roa (hash: Bl4NegxawvLSj+vuohDUqvYz5qCqqSGkWkkxnaKbamA=) 2: a8d70f86-b257-4225-9609-989938a4164f.crl (hash: iKY8QbiTu/AwB5moTC3ru+beKWUzNlfGcZ5cfJMeH1U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:82:45:7d:bf:a3:67:f8:4b:0b:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Apr 13 07:00:03 2026 GMT Not After : Apr 16 07:00:00 2026 GMT Subject: CN=8e302cd9-5c59-48b4-8687-1661e8a24723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:f6:0c:2d:0c:b0:18:98:48:72:47:fa:25: 3f:50:fc:1a:27:d7:2e:b1:49:15:45:82:9f:69:33: 50:ff:80:46:f3:ee:46:ec:76:d2:3b:08:73:ad:46: 36:51:9e:4c:e9:dc:71:ac:b9:03:73:f0:23:4c:38: 23:b2:59:20:c8:89:18:38:4e:8c:35:d4:93:eb:ca: 14:03:e3:17:c1:72:06:2d:d1:be:30:a9:ac:ab:be: 72:9f:81:a2:44:1a:96:3a:9c:6c:64:ef:f1:d7:5b: 7c:cd:ef:43:65:4c:0b:3e:0a:79:c4:c9:ac:07:a7: 8e:36:14:f1:f1:6c:7d:5b:ef:d4:5c:7a:1d:bf:66: 37:48:04:4a:f2:12:0f:e2:15:a4:77:c2:85:dc:84: 6e:7a:fa:ca:17:06:6c:d1:4d:6c:73:0f:98:c4:46: 41:35:ae:55:ac:dd:ae:e2:37:7f:1a:54:18:3b:23: d0:5a:fa:2a:2e:9c:2a:94:26:9b:dc:d6:c3:32:0a: 18:7d:0c:c9:2c:9b:af:68:63:ba:6b:a6:1d:84:78: ef:0d:d5:c9:11:b8:38:5b:2b:e2:39:21:1c:eb:98: b5:ba:81:fa:7f:71:fe:85:ca:fb:d4:1d:d8:d0:dc: 0f:21:cd:fd:c2:e8:c5:5c:a3:55:6e:ca:f1:67:f5: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:85:AB:B0:06:F6:8D:BE:42:51:2E:9C:70:B0:A9:04:19:E0:4E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cf:42:f4:15:8b:39:08:2f:84:58:64:73:96:ff:ea:70:d7: de:16:58:5d:fb:d5:12:10:21:30:a2:6d:76:6f:bc:67:e5:06: 4e:5b:3f:01:13:2b:ec:1f:ff:14:f6:5a:2c:d4:28:c8:e1:6f: bb:4d:83:01:ec:38:60:44:62:14:e7:96:36:e8:b0:e0:75:95: 5e:b2:81:55:e3:00:5a:0f:58:04:d0:ed:c6:7b:5f:71:61:49: 72:d7:89:f1:e9:57:cd:fe:2d:a1:1b:a3:4a:73:3e:49:f1:8a: c1:58:f9:8a:cf:18:e1:fe:c2:32:9f:c8:2a:34:9d:c7:9a:0d: 53:8e:55:0a:3e:4a:36:10:aa:21:83:5d:57:06:36:df:17:39: ba:ef:2d:da:2b:08:92:c3:c8:54:fb:57:5d:ff:24:2b:4a:85: 7d:6f:09:58:f0:bc:ec:fa:0a:ad:af:3e:c8:54:73:1c:82:48: fc:89:a7:47:89:6c:5f:da:d9:cf:8c:6b:98:13:09:da:75:fc: 2e:98:55:42:de:61:8f:4f:6c:60:a0:53:89:e8:13:36:41:2d: 4c:a1:80:f6:ee:46:83:42:1e:e7:09:1c:0f:68:08:46:99:05: 91:8e:12:f6:f5:f2:aa:d8:56:c0:1c:2c:9a:54:52:b8:93:28: 35:3e:f1:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE19gkV9v6Nn+EsLxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI2MDQxMzA3MDAwM1oXDTI2MDQxNjA3MDAwMFowLzEtMCsGA1UEAxMk OGUzMDJjZDktNWM1OS00OGI0LTg2ODctMTY2MWU4YTI0NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVX2DC0MsBiYSHJH+iU/UPwaJ9cusUkVRYKf aTNQ/4BG8+5G7HbSOwhzrUY2UZ5M6dxxrLkDc/AjTDgjslkgyIkYOE6MNdST68oU A+MXwXIGLdG+MKmsq75yn4GiRBqWOpxsZO/x11t8ze9DZUwLPgp5xMmsB6eONhTx 8Wx9W+/UXHodv2Y3SARK8hIP4hWkd8KF3IRuevrKFwZs0U1scw+YxEZBNa5VrN2u 4jd/GlQYOyPQWvoqLpwqlCab3NbDMgoYfQzJLJuvaGO6a6YdhHjvDdXJEbg4Wyvi OSEc65i1uoH6f3H+hcr71B3Y0NwPIc39wujFXKNVbsrxZ/V1IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMCFq7AG9o2+QlEunHCwqQQZ4E5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvYThkNzBmODYtYjI1Ny00 MjI1LTk2MDktOTg5OTM4YTQxNjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+z0L0FYs5CC+EWGRzlv/q cNfeFlhd+9USECEwom12b7xn5QZOWz8BEyvsH/8U9los1CjI4W+7TYMB7DhgRGIU 55Y26LDgdZVesoFV4wBaD1gE0O3Ge19xYUly14nx6VfN/i2hG6NKcz5J8YrBWPmK zxjh/sIyn8gqNJ3Hmg1TjlUKPko2EKohg11XBjbfFzm67y3aKwiSw8hU+1dd/yQr SoV9bwlY8Lzs+gqtrz7IVHMcgkj8iadHiWxf2tnPjGuYEwnadfwumFVC3mGPT2xg oFOJ6BM2QS1MoYD27kaDQh7nCRwPaAhGmQWRjhL29fKq2FbAHCyaVFK4kyg1PvHg -----END CERTIFICATE-----Generated at Mon Apr 13 10:41:15 2026 by rpki-client