$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft File: f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft (raw, json) Hash identifier: Dmz7jjJ5HHFrVsGW94dpXTyzs8jt7iAmnB0JjQsRaLc= Subject key identifier: 42:34:44:86:7F:4B:82:AF:0D:55:D2:08:59:40:49:00:DB:0E:29:F0 Authority key identifier: 7D:B5:95:E5:B4:3D:8E:29:0A:60:51:6C:DA:78:76:1F:1D:FB:E7:E5 Certificate issuer: /CN=f04514a7-6d72-4ac6-8532-7a5f84d76f24 Certificate serial: 010D0C9F4328584D8FA7B8156DF8515F35B1A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft Manifest number: 010D0C9F43285843F43EDA101087BDE96334F00C Signing time: Sun 19 Apr 2026 19:00:03 +0000 Manifest this update: Sun 19 Apr 2026 19:00:03 +0000 Manifest next update: Tue 21 Apr 2026 19:00:00 +0000 Files and hashes: 1: 76486e25-650a-3bbc-a822-ec7be700b9dc.roa (hash: VS1C3qGdjkuu6tQBNsP116xf3f1FkCPQzYl/YbgBNP8=) 2: f04514a7-6d72-4ac6-8532-7a5f84d76f24.crl (hash: QEEjaMlhnWwbkYvdKuhC5eAIZ2QPpn0Pl3hgkDO0fnE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8f:a7:b8:15:6d:f8:51:5f:35:b1:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04514a7-6d72-4ac6-8532-7a5f84d76f24 Validity Not Before: Apr 19 19:00:03 2026 GMT Not After : Apr 21 19:00:00 2026 GMT Subject: CN=e44abd7e-0c43-435e-ade3-ee226252ed8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:09:dd:11:f1:a2:46:4c:45:7c:65:7e:29: 44:01:67:5b:34:f7:05:9b:a2:28:90:95:20:aa:0a: 4e:12:f2:60:86:58:f0:4d:3f:67:b8:a1:1e:c1:14: 8d:c8:24:7e:77:41:58:0c:70:f1:c0:a9:e4:b0:de: 63:1f:33:4b:b3:0d:5a:4a:81:9b:a4:a3:c3:d6:31: d9:b7:4a:d1:3f:dc:5e:8e:e5:af:1f:ff:bc:8d:17: ea:4b:d6:bf:7b:e0:a6:f5:1c:e6:19:8c:60:f4:2e: b2:e6:c3:12:45:23:9c:9c:a8:46:92:4d:33:13:33: b5:cf:ed:ee:7c:f5:3b:05:c3:be:1d:3a:fc:27:54: b3:cf:f5:a6:5d:47:75:ad:57:5f:8f:2e:6e:48:62: c5:7c:0c:5f:e2:92:f3:e1:3e:10:46:1d:e9:d0:e5: 2d:ed:3c:06:57:52:59:e2:d6:9a:07:47:0d:80:a3: e3:0c:a4:d6:82:54:e7:a3:9f:11:06:fd:66:2e:c0: dd:b8:06:16:de:13:2f:ff:9e:9a:b2:2e:9d:70:63: 5e:c1:4c:db:21:99:f7:a4:27:7a:01:5a:69:e2:d4: fc:19:82:3b:23:0b:3b:ed:4b:6a:84:0c:5c:2a:bb: 04:23:12:75:9e:79:7f:a0:fd:a9:01:19:39:8e:00: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:34:44:86:7F:4B:82:AF:0D:55:D2:08:59:40:49:00:DB:0E:29:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.crl X509v3 Authority Key Identifier: keyid:7D:B5:95:E5:B4:3D:8E:29:0A:60:51:6C:DA:78:76:1F:1D:FB:E7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cf:01:36:bf:63:12:58:c8:52:d1:02:c8:ef:09:a9:d9:e5: bd:02:9f:79:f3:f2:67:c1:99:fb:66:cd:83:00:f9:89:19:00: c6:5c:83:71:3f:d7:63:35:4e:3c:b3:d4:76:84:78:57:d7:76: 75:74:31:3c:3c:51:37:07:82:ec:0c:0f:81:0d:9b:ef:d7:6f: 56:70:36:83:02:6d:39:bd:e1:03:df:15:2d:8c:65:55:b6:f3: f2:3f:bc:75:65:ec:b0:c4:51:0c:12:a9:08:21:bd:6b:79:82: 41:22:b6:8f:e2:0f:bf:c3:61:9b:64:8c:de:37:32:97:51:30: b5:5a:5a:50:75:c7:fd:3a:ec:c4:86:aa:0c:a6:54:aa:16:62: 07:3c:16:1f:5d:b6:05:8f:11:32:46:a6:6f:7e:e5:2e:71:3a: 58:79:7f:50:e2:d3:29:2b:ce:d2:19:41:44:0a:d7:eb:d3:cd: ee:ee:52:d6:46:aa:62:8c:22:d3:bf:c4:91:0f:fd:83:93:b5: 1c:0d:05:4f:f8:1d:e6:99:d9:a7:b4:c6:b5:5b:1e:6f:2a:e8: c9:7f:8b:c5:63:2a:78:b2:cf:c8:ee:49:34:67:eb:1c:bb:b4: 46:2d:a2:21:f9:2c:38:53:f9:cf:4f:8b:24:6f:46:5c:6d:ba: 9d:a9:8e:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Pp7gVbfhRXzWxpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0NTE0YTctNmQ3Mi00YWM2LTg1MzItN2E1Zjg0ZDc2 ZjI0MB4XDTI2MDQxOTE5MDAwM1oXDTI2MDQyMTE5MDAwMFowLzEtMCsGA1UEAxMk ZTQ0YWJkN2UtMGM0My00MzVlLWFkZTMtZWUyMjYyNTJlZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqcJ3RHxokZMRXxlfilEAWdbNPcFm6IokJUg qgpOEvJghljwTT9nuKEewRSNyCR+d0FYDHDxwKnksN5jHzNLsw1aSoGbpKPD1jHZ t0rRP9xejuWvH/+8jRfqS9a/e+Cm9RzmGYxg9C6y5sMSRSOcnKhGkk0zEzO1z+3u fPU7BcO+HTr8J1Szz/WmXUd1rVdfjy5uSGLFfAxf4pLz4T4QRh3p0OUt7TwGV1JZ 4taaB0cNgKPjDKTWglTno58RBv1mLsDduAYW3hMv/56asi6dcGNewUzbIZn3pCd6 AVpp4tT8GYI7Iws77UtqhAxcKrsEIxJ1nnl/oP2pARk5jgA4QwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEI0RIZ/S4KvDVXSCFlASQDbDinwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDQ1 MTRhNy02ZDcyLTRhYzYtODUzMi03YTVmODRkNzZmMjQvZjA0NTE0YTctNmQ3Mi00 YWM2LTg1MzItN2E1Zjg0ZDc2ZjI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjA0NTE0YTctNmQ3Mi00YWM2LTg1 MzItN2E1Zjg0ZDc2ZjI0L2YwNDUxNGE3LTZkNzItNGFjNi04NTMyLTdhNWY4NGQ3 NmYyNC5jcmwwHwYDVR0jBBgwFoAUfbWV5bQ9jikKYFFs2nh2Hx375+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDQ1MTRhNy02ZDcyLTRhYzYtODUzMi03YTVm ODRkNzZmMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAizwE2v2MSWMhS0QLI7wmp 2eW9Ap958/JnwZn7Zs2DAPmJGQDGXINxP9djNU48s9R2hHhX13Z1dDE8PFE3B4Ls DA+BDZvv129WcDaDAm05veED3xUtjGVVtvPyP7x1ZeywxFEMEqkIIb1reYJBIraP 4g+/w2GbZIzeNzKXUTC1WlpQdcf9OuzEhqoMplSqFmIHPBYfXbYFjxEyRqZvfuUu cTpYeX9Q4tMpK87SGUFECtfr083u7lLWRqpijCLTv8SRD/2Dk7UcDQVP+B3mmdmn tMa1Wx5vKujJf4vFYyp4ss/I7kk0Z+scu7RGLaIh+Sw4U/nPT4skb0ZcbbqdqY6j -----END CERTIFICATE-----Generated at Sun Apr 19 22:41:19 2026 by rpki-client