$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft File: c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft (raw, json) Hash identifier: vIV02rKKSeX0X+M+fIfgDtjr+0fCj3sXGKAgAQPF/RY= Subject key identifier: DD:88:6B:11:3C:69:5B:25:0E:3A:E3:9D:B0:CC:7C:04:94:49:06:F3 Authority key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Certificate issuer: /CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Certificate serial: 010D0C9F4328584D7D46B8BBEEAC191327EC1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft Manifest number: 010D0C9F4328584BC17CD13807368F8173AB1AA1 Signing time: Mon 13 Apr 2026 05:00:03 +0000 Manifest this update: Mon 13 Apr 2026 05:00:03 +0000 Manifest next update: Wed 15 Apr 2026 05:00:00 +0000 Files and hashes: 1: a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa (hash: oAnN+VkhZeF6EBvPUP+HpREBFLWSN2JOw0SWURU0AEU=) 2: c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl (hash: yoWduFdmb/oDipSkEtZjCs9MWVRsyXfWcdrNoMmMPlk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:46:b8:bb:ee:ac:19:13:27:ec:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Validity Not Before: Apr 13 05:00:03 2026 GMT Not After : Apr 15 05:00:00 2026 GMT Subject: CN=bac14d61-112a-46f4-8885-716d66f6bb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:11:f9:f4:21:f5:f3:27:6a:63:2c:87:b6: 4a:98:fb:b3:20:1b:75:eb:e3:c3:89:1c:60:82:24: 83:23:03:45:58:49:01:63:a8:76:58:84:13:1b:93: a3:9d:56:2d:c5:77:41:3e:1b:5d:cc:fa:ba:fe:e4: 75:38:c5:e9:b4:45:ce:08:89:ea:61:d1:2e:4e:2c: 23:40:1a:d8:50:05:a2:57:f8:fd:75:36:29:3b:b9: 10:c6:d1:1c:ee:84:90:21:c8:be:9d:b3:8b:7f:8d: 55:d0:84:e6:3f:1f:b4:b3:c5:5e:1f:09:8b:a7:f2: 32:98:e8:ae:9e:c7:91:ef:c0:95:ba:c4:bd:ae:47: 3e:d2:b8:c8:2d:2f:74:4f:68:43:50:c7:d7:c7:ab: 98:28:da:ce:bf:26:ad:bb:60:88:3c:19:59:b3:2e: 58:d2:57:25:78:49:80:71:a1:62:9a:e5:c8:bf:4f: cd:f8:69:ee:7d:ca:4d:e2:e3:c7:78:ed:ac:57:40: d1:87:cf:61:98:d5:16:c2:22:70:a2:49:09:57:39: f5:60:da:b1:41:9b:29:58:74:96:0e:e1:12:e1:eb: 58:70:ff:45:87:0f:35:13:57:45:0b:ab:c3:3d:b5: 57:8c:84:0e:d1:c9:f0:2d:14:be:55:06:67:37:7d: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:6B:11:3C:69:5B:25:0E:3A:E3:9D:B0:CC:7C:04:94:49:06:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl X509v3 Authority Key Identifier: keyid:F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a6:e7:df:4d:e4:c9:ef:10:cb:7f:21:f4:cc:71:fa:91:9c: 92:45:49:e4:b9:2a:77:a4:8f:7f:9e:bf:1a:62:09:57:93:9f: 85:63:14:7e:e7:2c:4d:33:cd:af:f6:c2:a8:2f:95:43:3a:26: ba:fb:08:a9:d2:9c:27:8f:99:74:c0:ca:7d:c9:84:68:54:eb: 17:63:33:99:41:72:84:e3:4b:ff:51:0a:6c:7d:7a:f5:a9:75: ba:71:fb:a3:80:b8:bf:cf:7b:5b:8f:b3:ef:4f:3e:59:eb:62: 47:c2:06:09:5c:a4:f4:2c:61:1d:c0:a3:06:66:61:7d:2c:2a: 6c:3e:0e:1a:71:d0:1c:8f:6b:75:3f:fa:39:30:00:45:cd:a0: fb:ae:19:08:bf:24:49:fc:d4:ed:ec:cd:56:25:06:62:a5:62: b0:14:61:50:07:79:9f:42:ac:26:5d:f2:b0:06:bf:fd:91:0f: cc:fe:c4:12:80:b8:30:00:8e:4b:26:ba:63:ea:de:f1:7a:ba: 0f:87:46:21:fb:d8:fe:b8:9a:f6:de:b1:de:90:4e:ca:d6:39: 89:fb:9b:02:72:03:45:72:6d:1b:32:a2:b9:20:a9:b0:4c:06: a6:b2:2b:a0:a7:08:4c:e4:20:16:88:4f:a4:be:a2:3a:44:2c: 24:55:cc:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE19Rri77qwZEyfsE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0 MmE5MB4XDTI2MDQxMzA1MDAwM1oXDTI2MDQxNTA1MDAwMFowLzEtMCsGA1UEAxMk YmFjMTRkNjEtMTEyYS00NmY0LTg4ODUtNzE2ZDY2ZjZiYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYwR+fQh9fMnamMsh7ZKmPuzIBt16+PDiRxg giSDIwNFWEkBY6h2WIQTG5OjnVYtxXdBPhtdzPq6/uR1OMXptEXOCInqYdEuTiwj QBrYUAWiV/j9dTYpO7kQxtEc7oSQIci+nbOLf41V0ITmPx+0s8VeHwmLp/IymOiu nseR78CVusS9rkc+0rjILS90T2hDUMfXx6uYKNrOvyatu2CIPBlZsy5Y0lcleEmA caFimuXIv0/N+GnufcpN4uPHeO2sV0DRh89hmNUWwiJwokkJVzn1YNqxQZspWHSW DuES4etYcP9Fhw81E1dFC6vDPbVXjIQO0cnwLRS+VQZnN31hDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN2IaxE8aVslDjrjnbDMfASUSQbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5 Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvYzA4OWNlOGUtZjE3Ni00 ZGQyLWE1N2EtOGE0OGNmNmU0MmE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzA4OWNlOGUtZjE3Ni00ZGQyLWE1 N2EtOGE0OGNmNmU0MmE5L2MwODljZThlLWYxNzYtNGRkMi1hNTdhLThhNDhjZjZl NDJhOS5jcmwwHwYDVR0jBBgwFoAU93n2nGTVuPkEgdlHr6jdDKZFoHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4 Y2Y2ZTQyYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcpuffTeTJ7xDLfyH0zHH6 kZySRUnkuSp3pI9/nr8aYglXk5+FYxR+5yxNM82v9sKoL5VDOia6+wip0pwnj5l0 wMp9yYRoVOsXYzOZQXKE40v/UQpsfXr1qXW6cfujgLi/z3tbj7PvTz5Z62JHwgYJ XKT0LGEdwKMGZmF9LCpsPg4acdAcj2t1P/o5MABFzaD7rhkIvyRJ/NTt7M1WJQZi pWKwFGFQB3mfQqwmXfKwBr/9kQ/M/sQSgLgwAI5LJrpj6t7xeroPh0Yh+9j+uJr2 3rHekE7K1jmJ+5sCcgNFcm0bMqK5IKmwTAamsiugpwhM5CAWiE+kvqI6RCwkVcx6 -----END CERTIFICATE-----Generated at Mon Apr 13 10:40:38 2026 by rpki-client