$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077/d317942d-4745-4959-8f18-51952e835077.mft File: d317942d-4745-4959-8f18-51952e835077.mft (raw, json) Hash identifier: wQlzw4n26dzLXnx/tRvb/NPPJ8ZHxuTVr27zuQIQRzE= Subject key identifier: 6E:71:84:AA:4E:44:04:E0:DB:A7:69:E6:12:D0:D9:D9:AF:0F:A5:F1 Authority key identifier: 2D:8D:3F:34:27:A9:A9:A6:D6:57:26:22:EB:F1:05:5B:14:E4:56:78 Certificate issuer: /CN=d317942d-4745-4959-8f18-51952e835077 Certificate serial: 010D0C9F4328584D7DBDD4898FCA7AEC4927F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077/d317942d-4745-4959-8f18-51952e835077.mft Manifest number: 010D0C9F4328584BA5F33FAE1EDDC6ECC541E2AC Signing time: Mon 13 Apr 2026 09:00:03 +0000 Manifest this update: Mon 13 Apr 2026 09:00:03 +0000 Manifest next update: Wed 15 Apr 2026 09:00:00 +0000 Files and hashes: 1: 462b230b-8539-3ccd-b387-8403f0082f12.roa (hash: bLqds93pz6fp2YAUZ33rTbn11FYhh71S1jmDHYszRDM=) 2: d317942d-4745-4959-8f18-51952e835077.crl (hash: 3R39kyMNNQ8ddz+9A1OW9Xg+5UEzxIrEZuKjKh0Y7o0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077/d317942d-4745-4959-8f18-51952e835077.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077/d317942d-4745-4959-8f18-51952e835077.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:bd:d4:89:8f:ca:7a:ec:49:27:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d317942d-4745-4959-8f18-51952e835077 Validity Not Before: Apr 13 09:00:03 2026 GMT Not After : Apr 15 09:00:00 2026 GMT Subject: CN=c7e90a84-c33e-494a-a4be-71c35cf3e292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:4c:6e:36:36:6e:a5:de:12:fe:97:7e:43: ce:04:12:c3:4a:6d:af:6b:ba:37:b7:c8:05:77:bd: 66:ab:ce:1b:2f:94:d5:0f:36:cb:67:c7:43:04:12: 7c:c8:f0:a6:e6:3e:3a:f7:5c:01:80:7f:c1:10:6a: 24:c0:d0:0c:90:2f:46:09:f7:93:56:be:09:2e:9e: 8a:09:d7:00:c6:dc:4e:41:f1:1f:88:29:1a:6e:38: 0a:2b:5b:b0:55:13:75:8f:93:ca:91:b6:92:b1:c8: 68:8d:32:c7:85:48:db:63:1c:82:b0:ee:b9:d8:8c: 34:4a:f1:8c:33:91:ba:f0:7d:d1:f1:4c:db:fa:c2: b9:6b:c1:cc:3f:5d:df:2a:83:34:e0:0a:2a:66:be: f0:97:05:bc:b8:9a:bd:3c:01:7e:2f:85:4a:0c:ed: 57:a6:ad:fd:49:30:a0:75:0d:db:bc:96:fe:a4:e5: f7:84:14:15:21:4f:16:6d:9d:07:13:1f:77:73:56: e1:37:32:cf:6f:0e:64:a9:84:b7:97:64:1d:88:34: a2:90:79:4b:48:e1:cc:05:f0:07:6f:0a:0f:04:17: dc:ee:37:cf:1c:04:20:a3:be:5f:e5:f3:52:8b:88: cc:a9:c7:aa:fe:5d:52:0e:d9:d2:62:da:23:4c:a7: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:71:84:AA:4E:44:04:E0:DB:A7:69:E6:12:D0:D9:D9:AF:0F:A5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077/d317942d-4745-4959-8f18-51952e835077.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077/d317942d-4745-4959-8f18-51952e835077.crl X509v3 Authority Key Identifier: keyid:2D:8D:3F:34:27:A9:A9:A6:D6:57:26:22:EB:F1:05:5B:14:E4:56:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d317942d-4745-4959-8f18-51952e835077.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:71:ca:15:0b:1a:57:79:e2:47:c4:4d:96:1e:ec:22:ca:84: e2:25:18:d5:94:24:8e:e1:b2:35:95:34:4e:18:e3:58:02:ea: 6b:1b:2d:0d:2f:47:46:29:b2:76:6e:90:27:a2:5c:99:28:ca: 4d:83:e4:22:0b:cd:9a:75:6b:01:19:26:ea:85:f1:01:51:75: 71:8d:9c:6d:3b:51:f4:93:1a:db:03:b1:58:a7:b0:e0:52:25: 8c:dd:24:e1:f8:53:a8:b9:da:a0:38:d3:04:70:1d:bf:dc:93: fa:97:94:c8:29:ca:fe:d9:db:39:a5:dc:26:25:d4:a4:a3:33: 5c:73:81:b5:4d:6c:fc:23:0c:ed:21:cb:82:d1:af:8f:5c:a0: 70:3a:9a:5b:83:b5:02:5a:d8:2b:ed:58:45:e3:86:ba:2b:45: 1f:ec:7d:d3:90:b6:fb:38:ff:96:2a:ff:ec:bb:8d:15:20:1c: c8:89:7d:04:4d:25:5b:3e:99:c6:65:6f:ab:63:cf:1e:5a:e5: 79:34:dc:5e:f1:05:35:59:33:b0:d6:fd:21:67:c0:96:87:f8: fb:8f:c9:64:9b:d8:57:69:98:50:26:7f:55:a4:21:aa:5b:32: 38:f2:2e:08:a1:aa:60:45:8d:95:d1:e9:c6:a8:72:8e:26:75: b0:d4:a5:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE19vdSJj8p67Ekn+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxNzk0MmQtNDc0NS00OTU5LThmMTgtNTE5NTJlODM1 MDc3MB4XDTI2MDQxMzA5MDAwM1oXDTI2MDQxNTA5MDAwMFowLzEtMCsGA1UEAxMk YzdlOTBhODQtYzMzZS00OTRhLWE0YmUtNzFjMzVjZjNlMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQlMbjY2bqXeEv6XfkPOBBLDSm2va7o3t8gF d71mq84bL5TVDzbLZ8dDBBJ8yPCm5j4691wBgH/BEGokwNAMkC9GCfeTVr4JLp6K CdcAxtxOQfEfiCkabjgKK1uwVRN1j5PKkbaSschojTLHhUjbYxyCsO652Iw0SvGM M5G68H3R8Uzb+sK5a8HMP13fKoM04AoqZr7wlwW8uJq9PAF+L4VKDO1Xpq39STCg dQ3bvJb+pOX3hBQVIU8WbZ0HEx93c1bhNzLPbw5kqYS3l2QdiDSikHlLSOHMBfAH bwoPBBfc7jfPHAQgo75f5fNSi4jMqceq/l1SDtnSYtojTKdIdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG5xhKpORATg26dp5hLQ2dmvD6XxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMzE3 OTQyZC00NzQ1LTQ5NTktOGYxOC01MTk1MmU4MzUwNzcvZDMxNzk0MmQtNDc0NS00 OTU5LThmMTgtNTE5NTJlODM1MDc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDMxNzk0MmQtNDc0NS00OTU5LThm MTgtNTE5NTJlODM1MDc3L2QzMTc5NDJkLTQ3NDUtNDk1OS04ZjE4LTUxOTUyZTgz NTA3Ny5jcmwwHwYDVR0jBBgwFoAULY0/NCepqabWVyYi6/EFWxTkVngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMzE3OTQyZC00NzQ1LTQ5NTktOGYxOC01MTk1 MmU4MzUwNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOccoVCxpXeeJHxE2WHuwi yoTiJRjVlCSO4bI1lTROGONYAuprGy0NL0dGKbJ2bpAnolyZKMpNg+QiC82adWsB GSbqhfEBUXVxjZxtO1H0kxrbA7FYp7DgUiWM3STh+FOoudqgONMEcB2/3JP6l5TI Kcr+2ds5pdwmJdSkozNcc4G1TWz8IwztIcuC0a+PXKBwOppbg7UCWtgr7VhF44a6 K0Uf7H3TkLb7OP+WKv/su40VIBzIiX0ETSVbPpnGZW+rY88eWuV5NNxe8QU1WTOw 1v0hZ8CWh/j7j8lkm9hXaZhQJn9VpCGqWzI48i4IoapgRY2V0enGqHKOJnWw1KVT -----END CERTIFICATE-----Generated at Mon Apr 13 10:41:13 2026 by rpki-client