$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft File: eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft (raw, json) Hash identifier: IUVcfEdkH/I2uqWX3LnhP6X39jPZyCgJfIRPDlj2zxI= Subject key identifier: 98:0B:F2:6A:19:41:50:14:7B:41:03:09:16:42:C0:A4:A7:C4:A5:06 Authority key identifier: 06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 Certificate issuer: /CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Certificate serial: 010D0C9F4328584D7BFF25EEE9A84E288FD25A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft Manifest number: 010D0C9F4328584B9909D4D72961CC038B7A24B2 Signing time: Sun 12 Apr 2026 18:00:03 +0000 Manifest this update: Sun 12 Apr 2026 18:00:03 +0000 Manifest next update: Tue 14 Apr 2026 18:00:00 +0000 Files and hashes: 1: db08c46a-c530-3729-8f45-1e034d3c907b.roa (hash: jhDV1KZoqRD0cnmgUlzFHagcuqnfjGAxiGVeeZxqAp4=) 2: eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl (hash: MFdM8D6MBXwPy1aDplUR+gM/MgBt40QcWoncBcjAmiI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:ff:25:ee:e9:a8:4e:28:8f:d2:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Validity Not Before: Apr 12 18:00:03 2026 GMT Not After : Apr 14 18:00:00 2026 GMT Subject: CN=c49cf9c2-424a-4693-b93b-15805d22515a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:68:07:f0:f6:5d:f7:e7:89:83:c2:ba:7b: ae:87:35:c1:76:b4:b9:77:b4:52:53:da:2a:99:e1: ad:bb:1b:0b:c6:4d:aa:f4:0f:9c:88:ad:2c:44:ec: 52:d5:0d:fa:09:1a:ff:d9:7b:f1:a5:8c:87:9e:c9: f2:5c:84:9e:b1:31:ae:f0:6c:bb:74:1a:e0:34:1c: 44:58:cf:ab:77:b5:73:f2:e3:bd:4f:c4:59:7d:6d: b5:71:67:63:34:b2:fa:dc:0f:7d:8d:af:9c:ea:bb: 36:2f:a8:b2:4d:de:9a:2f:dc:97:48:72:a9:1c:cc: f7:0b:39:03:0c:97:bf:e2:ea:d9:59:06:a2:1d:e9: bf:cc:f2:0b:72:a8:77:cf:f6:6e:c5:f2:62:b4:a7: 84:4f:bd:d7:7e:8d:ba:dc:a0:55:80:23:5a:d9:aa: 93:58:d2:6f:bb:0d:3d:c2:f5:89:ab:53:01:9a:86: 2e:38:39:f7:74:94:fa:c2:14:e4:a9:c6:7b:f8:b6: 16:20:59:1d:dd:5c:90:72:aa:be:dc:67:9e:78:aa: 8d:2c:15:16:65:b4:9f:6f:75:da:1e:e5:fe:b3:63: 04:bd:5b:33:6b:d9:f7:9d:d6:6f:bc:f8:a0:db:de: 04:21:09:9e:8f:2b:e0:55:0e:fa:aa:0f:5f:7b:62: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0B:F2:6A:19:41:50:14:7B:41:03:09:16:42:C0:A4:A7:C4:A5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl X509v3 Authority Key Identifier: keyid:06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:69:2b:07:2f:90:f2:e1:a2:1d:c1:1a:4f:0f:f7:cb:b1:61: 93:7d:5f:66:ec:27:08:5d:b7:37:02:67:7f:60:9b:70:18:f0: 33:6f:81:56:92:27:41:65:95:07:4e:a2:8a:0e:b8:37:41:ac: 7d:9b:4d:41:74:82:f2:e7:f8:16:e3:1e:7f:62:51:b0:49:e0: 5c:4b:91:91:82:17:c6:2f:96:c0:ca:5a:91:9f:93:87:d6:a7: 78:7a:51:f2:4a:df:95:ed:84:cc:92:a7:f2:0c:46:11:98:30: b8:ef:96:e1:7f:3b:46:4a:1d:e5:d4:8f:0e:51:5b:b9:e6:92: e7:02:c6:d9:ec:b9:e4:d7:9c:c9:7a:6f:4f:d7:3a:f7:c8:34: 8d:8f:cd:99:06:b9:98:86:31:b3:8d:2e:06:e9:df:4c:3c:a6: c5:3d:a6:c2:83:37:23:88:38:42:5c:e7:24:20:be:66:1a:31: 49:43:6a:a2:3d:db:33:f9:4c:0f:ff:42:1e:7a:a6:08:4e:ff: c5:8b:a9:c9:e0:22:ad:ab:e8:e4:9e:36:5a:fa:f8:c4:6d:c7: c9:42:d0:53:4a:ae:2c:8d:43:db:ff:66:f8:26:78:c3:5f:e7: 6e:b1:0e:e8:0c:76:e5:e3:a5:7e:0f:73:24:52:73:18:4c:e6: 9d:85:3b:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE17/yXu6ahOKI/SWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmOWMyNTAtZTUyZi00NDc5LTk5YTUtODgwYTNlMWI4 YzJhMB4XDTI2MDQxMjE4MDAwM1oXDTI2MDQxNDE4MDAwMFowLzEtMCsGA1UEAxMk YzQ5Y2Y5YzItNDI0YS00NjkzLWI5M2ItMTU4MDVkMjI1MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLhoB/D2XffniYPCunuuhzXBdrS5d7RSU9oq meGtuxsLxk2q9A+ciK0sROxS1Q36CRr/2XvxpYyHnsnyXISesTGu8Gy7dBrgNBxE WM+rd7Vz8uO9T8RZfW21cWdjNLL63A99ja+c6rs2L6iyTd6aL9yXSHKpHMz3CzkD DJe/4urZWQaiHem/zPILcqh3z/ZuxfJitKeET73Xfo263KBVgCNa2aqTWNJvuw09 wvWJq1MBmoYuODn3dJT6whTkqcZ7+LYWIFkd3VyQcqq+3GeeeKqNLBUWZbSfb3Xa HuX+s2MEvVsza9n3ndZvvPig294EIQmejyvgVQ76qg9fe2Ii8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJgL8moZQVAUe0EDCRZCwKSnxKUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5 YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBhM2UxYjhjMmEvZWFmOWMyNTAtZTUyZi00 NDc5LTk5YTUtODgwYTNlMWI4YzJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWFmOWMyNTAtZTUyZi00NDc5LTk5 YTUtODgwYTNlMWI4YzJhL2VhZjljMjUwLWU1MmYtNDQ3OS05OWE1LTg4MGEzZTFi OGMyYS5jcmwwHwYDVR0jBBgwFoAUBp6AkQVoEnVvqTOe9aocz8FhOLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBh M2UxYjhjMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5aSsHL5Dy4aIdwRpPD/fL sWGTfV9m7CcIXbc3Amd/YJtwGPAzb4FWkidBZZUHTqKKDrg3Qax9m01BdILy5/gW 4x5/YlGwSeBcS5GRghfGL5bAylqRn5OH1qd4elHySt+V7YTMkqfyDEYRmDC475bh fztGSh3l1I8OUVu55pLnAsbZ7Lnk15zJem9P1zr3yDSNj82ZBrmYhjGzjS4G6d9M PKbFPabCgzcjiDhCXOckIL5mGjFJQ2qiPdsz+UwP/0IeeqYITv/Fi6nJ4CKtq+jk njZa+vjEbcfJQtBTSq4sjUPb/2b4JnjDX+dusQ7oDHbl46V+D3MkUnMYTOadhTuU -----END CERTIFICATE-----Generated at Mon Apr 13 10:37:58 2026 by rpki-client