$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft File: ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft (raw, json) Hash identifier: HGqUuN0NMZmSGZaFTbmOyf3e5/BveY6p+cPUgIiBoFs= Subject key identifier: 87:0A:4C:8B:66:C1:FE:91:14:DD:06:B0:8F:35:2C:FD:B2:72:D5:DF Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584D813B3381E2D612B9E542EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft Manifest number: 010D0C9F4328584A2AF8D6A86D21A3E42E10A1B4 Signing time: Tue 14 Apr 2026 15:00:03 +0000 Manifest this update: Tue 14 Apr 2026 15:00:03 +0000 Manifest next update: Fri 17 Apr 2026 15:00:00 +0000 Files and hashes: 1: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (hash: oCjbsCTrE14rEzOpCy0cyC2HTyLVLLoPAdSbo04qfug=) 2: 9dca4ab6-05a9-3fec-a108-a009b99cd415.roa (hash: 8eZ1BPhYlVbA5RcpSHC0B6sSWpI8bPZ7RWCLeqHkkr8=) 3: bd668f92-776c-355d-9660-3354ba68dbd0.roa (hash: TyhgvmNc6HN+yDr3hfrAe6T1ix6OCjJhBI7OMwCV7Ss=) 4: ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl (hash: kpYHVV0JGrDOwghyjbmEJ7123HOWtmFlsPe9QnMU03M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:3b:33:81:e2:d6:12:b9:e5:42:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Apr 14 15:00:03 2026 GMT Not After : Apr 17 15:00:00 2026 GMT Subject: CN=9de473eb-a396-4857-bf57-eb1eaac21c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:cb:a6:1e:cf:17:20:35:51:21:c2:86:31: 2a:eb:19:58:11:a0:38:94:53:23:28:b7:2e:e9:1f: 2d:00:2b:b5:8a:59:4d:71:49:28:41:a5:9a:54:ab: fe:0e:91:e5:58:be:90:c7:8d:cf:e9:b3:b0:8c:76: 3b:f0:e5:4b:17:4a:26:e5:dc:3e:70:f8:23:f6:af: 49:fb:4d:ca:ee:26:e8:19:5f:c0:fe:44:ac:65:e3: 6a:fd:b7:0b:d8:c7:d6:b2:e9:be:e0:13:4d:a4:67: 55:c9:21:27:f1:a7:d5:a0:17:73:cc:42:62:a5:61: a4:4d:6a:e0:34:23:22:e8:f0:14:2e:36:67:ed:98: 97:44:7c:8f:d2:74:c8:0a:ef:45:d7:a3:f6:c6:fc: 97:ea:bd:6b:86:31:b5:9e:51:88:6c:98:f6:b3:9c: 5c:ba:b5:ab:03:02:4b:1c:12:16:cb:92:6b:cf:3a: 3f:d1:e0:d8:39:33:33:8b:cf:e4:90:46:6e:1f:bf: 55:1d:4d:ac:52:e9:f6:2e:39:14:6c:ec:ba:79:88: 34:bd:7e:ea:ac:ab:74:c1:c0:ba:c8:9c:23:9c:27: 3e:cd:1c:1d:6d:ae:51:53:45:39:ca:d6:75:2e:e0: e7:35:d2:8d:dc:5f:07:3f:6b:f1:ed:de:89:54:67: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0A:4C:8B:66:C1:FE:91:14:DD:06:B0:8F:35:2C:FD:B2:72:D5:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:88:75:ca:31:c4:d8:dd:aa:d4:a0:83:e2:9d:ba:b2:e3:fd: b8:1f:e7:7f:2a:de:6e:40:8e:d0:44:76:3e:f3:dd:82:9b:b0: ea:c5:31:27:f0:fb:ec:b9:6d:8a:cb:d3:09:da:3d:da:ff:79: d1:aa:0c:cf:ef:6d:48:37:06:14:d8:d6:6f:b9:2a:c7:82:1f: 06:8c:fa:75:34:bd:fb:d6:e4:ff:51:6f:cc:4f:49:21:35:80: 35:cb:a6:bf:65:b6:d3:37:cd:bd:a8:c5:70:6e:cb:04:e0:d4: 96:2e:54:7a:36:75:fa:04:ce:54:11:6a:4c:9e:5b:67:ed:32: c0:7c:74:95:e6:82:a3:70:8c:05:1b:f5:d2:47:10:03:0e:a3: c9:a5:04:c2:df:86:71:2f:07:0c:a9:de:81:43:56:9b:59:af: 67:77:3b:fc:9b:11:d5:e5:c6:d9:57:14:68:05:1e:24:6a:c1: b3:47:b4:31:d5:f0:39:8e:34:be:47:a0:e8:e8:89:e0:07:ca: 32:33:12:ed:3a:55:89:8c:96:eb:4b:f8:b2:b9:e7:2f:be:40: 40:49:12:29:bb:35:2e:de:c7:c4:67:65:4d:ea:c0:67:82:74: d8:67:31:8a:b3:42:50:14:5f:6a:d7:b0:16:b2:53:cc:c1:a4: 99:b7:37:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2BOzOB4tYSueVC6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI2MDQxNDE1MDAwM1oXDTI2MDQxNzE1MDAwMFowLzEtMCsGA1UEAxMk OWRlNDczZWItYTM5Ni00ODU3LWJmNTctZWIxZWFhYzIxYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS3Lph7PFyA1USHChjEq6xlYEaA4lFMjKLcu 6R8tACu1illNcUkoQaWaVKv+DpHlWL6Qx43P6bOwjHY78OVLF0om5dw+cPgj9q9J +03K7iboGV/A/kSsZeNq/bcL2MfWsum+4BNNpGdVySEn8afVoBdzzEJipWGkTWrg NCMi6PAULjZn7ZiXRHyP0nTICu9F16P2xvyX6r1rhjG1nlGIbJj2s5xcurWrAwJL HBIWy5Jrzzo/0eDYOTMzi8/kkEZuH79VHU2sUun2LjkUbOy6eYg0vX7qrKt0wcC6 yJwjnCc+zRwdba5RU0U5ytZ1LuDnNdKN3F8HP2vx7d6JVGcXzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIcKTItmwf6RFN0GsI81LP2yctXfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvZGVkODRhNGItOTc5MC00 YTE4LWJjYTktNDNlNDllMmYwYjcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEiHXKMcTY3arUoIPinbqy 4/24H+d/Kt5uQI7QRHY+892Cm7DqxTEn8PvsuW2Ky9MJ2j3a/3nRqgzP721INwYU 2NZvuSrHgh8GjPp1NL371uT/UW/MT0khNYA1y6a/ZbbTN829qMVwbssE4NSWLlR6 NnX6BM5UEWpMnltn7TLAfHSV5oKjcIwFG/XSRxADDqPJpQTC34ZxLwcMqd6BQ1ab Wa9ndzv8mxHV5cbZVxRoBR4kasGzR7Qx1fA5jjS+R6Do6IngB8oyMxLtOlWJjJbr S/iyuecvvkBASRIpuzUu3sfEZ2VN6sBngnTYZzGKs0JQFF9q17AWslPMwaSZtzem -----END CERTIFICATE-----Generated at Wed Apr 15 14:16:31 2026 by rpki-client