$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft File: 35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft (raw, json) Hash identifier: Gw/FSMCwIqiG7QUSHJgnn42HjBPxq5xj6H8MdC1S2fY= Subject key identifier: E8:C0:34:83:25:DF:CA:E8:E9:F2:00:78:31:88:3A:36:26:45:A9:7B Authority key identifier: 6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9 Certificate issuer: /CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38 Certificate serial: 010D0C9F4328584D95018C17A4043009631ACD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft Manifest number: 010D0C9F432858440CE3ED992BEDC7E0DD2D91FF Signing time: Tue 21 Apr 2026 17:00:03 +0000 Manifest this update: Tue 21 Apr 2026 17:00:03 +0000 Manifest next update: Fri 24 Apr 2026 17:00:00 +0000 Files and hashes: 1: 0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa (hash: 4t7Cjr9AVQFpWEksI8/pcqfk7Od7tFhY3p+/vqddBFk=) 2: 35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl (hash: NNdIZf72yqVULMsJ3axismHoUE9YupGDl1IJ+gs8zpw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:01:8c:17:a4:04:30:09:63:1a:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38 Validity Not Before: Apr 21 17:00:03 2026 GMT Not After : Apr 24 17:00:00 2026 GMT Subject: CN=2d46ca34-ea67-45e4-be84-b8bd2bf2c7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:c9:6a:11:40:65:a9:a5:c1:bd:75:0f:62: 54:1e:72:5e:25:63:95:a3:1d:dc:5c:0f:77:a0:ee: 03:45:4b:8e:62:55:8d:95:47:42:93:76:26:3a:0e: 20:fc:f3:e1:fb:9e:5f:0a:d4:b2:20:5f:a7:a9:e4: 54:80:9e:fb:ff:c0:9f:f1:a6:70:bb:33:a8:71:01: a5:c1:93:3b:01:87:f5:27:7a:6f:ce:79:81:30:88: 4a:67:6e:fc:b1:aa:ee:28:06:4d:44:8f:66:31:e6: e4:79:a0:07:36:a5:aa:bf:67:b6:8f:a1:c4:fd:8a: 3a:95:5c:16:18:dd:3c:63:10:88:e4:17:1f:6c:3a: 03:b4:53:c8:5c:2e:b4:97:e3:f5:f1:61:af:fe:ce: 3f:63:64:f1:45:52:4b:33:61:ea:37:0b:cb:da:7a: 3b:42:16:e6:c5:a6:54:ed:58:09:4e:71:19:66:f6: e2:d1:f0:39:5c:83:b6:b3:7b:fb:43:e9:59:70:fc: 91:80:42:68:5b:c4:84:ba:ad:c0:42:fe:ce:20:11: ea:33:4a:79:48:1e:6a:5b:de:a8:13:a4:9e:50:da: 14:e7:d8:cc:36:fa:1e:70:54:d5:98:63:d8:8f:f6: b7:05:af:60:64:15:a3:d6:19:3c:99:f5:b2:64:88: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C0:34:83:25:DF:CA:E8:E9:F2:00:78:31:88:3A:36:26:45:A9:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl X509v3 Authority Key Identifier: keyid:6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7e:aa:7d:5d:4e:66:ec:ab:07:e0:83:37:dc:dd:cb:e4:0f: 66:88:84:b3:85:7c:07:02:96:ac:26:5d:f1:a0:18:c7:b8:05: 68:8b:9e:e6:a6:7a:91:4c:a4:c1:41:9b:9e:62:95:04:8f:bf: 20:87:aa:98:c1:1f:29:73:bb:0d:f1:86:d5:d3:24:4e:00:c5: e6:e1:7d:3d:45:8d:5f:a2:2e:25:28:25:4d:59:76:e6:cf:f2: b9:3c:61:67:bd:56:e1:37:16:5b:20:82:8c:0e:ba:ec:01:f9: 36:5d:f3:12:bf:30:60:df:28:8e:f7:4b:54:49:6d:61:d4:c9: 35:a3:c0:8e:92:43:08:a6:f7:88:eb:0f:5f:0b:78:b0:76:65: 46:10:f1:07:dc:66:c9:f5:be:e7:44:0f:fc:81:e1:96:4d:1f: 2d:e9:ec:96:28:e9:7b:80:97:58:b2:22:89:58:ad:0d:28:6b: 6f:f4:aa:bc:3a:c5:f0:44:b6:81:77:8d:1c:1c:98:db:24:42: 1f:c9:92:8d:5f:33:26:a2:3a:72:da:60:31:91:b3:52:e9:b9: f6:f3:fe:eb:3a:75:b8:fe:da:74:02:a6:9b:d4:55:de:7b:82: b8:a8:9c:c5:34:53:60:dc:73:1a:90:0c:9a:1e:52:e8:6d:77: 6c:b2:21:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2VAYwXpAQwCWMazQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhNmMxYWQtYzFiYS00NTIyLWE5MTEtMWY4YTI0Yzhh ZTM4MB4XDTI2MDQyMTE3MDAwM1oXDTI2MDQyNDE3MDAwMFowLzEtMCsGA1UEAxMk MmQ0NmNhMzQtZWE2Ny00NWU0LWJlODQtYjhiZDJiZjJjN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ3JahFAZamlwb11D2JUHnJeJWOVox3cXA93 oO4DRUuOYlWNlUdCk3YmOg4g/PPh+55fCtSyIF+nqeRUgJ77/8Cf8aZwuzOocQGl wZM7AYf1J3pvznmBMIhKZ278saruKAZNRI9mMebkeaAHNqWqv2e2j6HE/Yo6lVwW GN08YxCI5BcfbDoDtFPIXC60l+P18WGv/s4/Y2TxRVJLM2HqNwvL2no7QhbmxaZU 7VgJTnEZZvbi0fA5XIO2s3v7Q+lZcPyRgEJoW8SEuq3AQv7OIBHqM0p5SB5qW96o E6SeUNoU59jMNvoecFTVmGPYj/a3Ba9gZBWj1hk8mfWyZIiPWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOjANIMl38ro6fIAeDGIOjYmRal7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWE2 YzFhZC1jMWJhLTQ1MjItYTkxMS0xZjhhMjRjOGFlMzgvMzVhNmMxYWQtYzFiYS00 NTIyLWE5MTEtMWY4YTI0YzhhZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVhNmMxYWQtYzFiYS00NTIyLWE5 MTEtMWY4YTI0YzhhZTM4LzM1YTZjMWFkLWMxYmEtNDUyMi1hOTExLTFmOGEyNGM4 YWUzOC5jcmwwHwYDVR0jBBgwFoAUa5ZjQv5h9cjOkld/Y3etVzYE8KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWE2YzFhZC1jMWJhLTQ1MjItYTkxMS0xZjhh MjRjOGFlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnfqp9XU5m7KsH4IM33N3L 5A9miISzhXwHApasJl3xoBjHuAVoi57mpnqRTKTBQZueYpUEj78gh6qYwR8pc7sN 8YbV0yROAMXm4X09RY1foi4lKCVNWXbmz/K5PGFnvVbhNxZbIIKMDrrsAfk2XfMS vzBg3yiO90tUSW1h1Mk1o8COkkMIpveI6w9fC3iwdmVGEPEH3GbJ9b7nRA/8geGW TR8t6eyWKOl7gJdYsiKJWK0NKGtv9Kq8OsXwRLaBd40cHJjbJEIfyZKNXzMmojpy 2mAxkbNS6bn28/7rOnW4/tp0Aqab1FXee4K4qJzFNFNg3HMakAyaHlLobXdssiGi -----END CERTIFICATE-----Generated at Wed Apr 22 17:58:28 2026 by rpki-client