$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2/216b3d12-2dbf-45bc-91a2-147674d41cd2.mft File: 216b3d12-2dbf-45bc-91a2-147674d41cd2.mft (raw, json) Hash identifier: LpD1khX34me85yEW39KmLJDLmjo8VLm3GpvL9azcMyg= Subject key identifier: 0B:BD:3A:AF:11:A4:5E:7A:43:AF:21:55:6F:32:32:75:91:3E:53:90 Authority key identifier: 4B:7C:30:51:A7:62:F0:48:DB:AD:03:90:6D:5D:B5:2C:6D:35:6B:34 Certificate issuer: /CN=216b3d12-2dbf-45bc-91a2-147674d41cd2 Certificate serial: 010D0C9F4328584DA6744EEB1B48D89B0FAD8600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2/216b3d12-2dbf-45bc-91a2-147674d41cd2.mft Manifest number: 010D0C9F432858489C9773B5DFE2C929D4EC8099 Signing time: Mon 27 Apr 2026 23:00:03 +0000 Manifest this update: Mon 27 Apr 2026 23:00:03 +0000 Manifest next update: Thu 30 Apr 2026 23:00:00 +0000 Files and hashes: 1: 216b3d12-2dbf-45bc-91a2-147674d41cd2.crl (hash: vAQpspvBVzIj1B+WDhG04oEHvsLHziLtpu0GRILb7PA=) 2: 9564dada-ab25-30fd-9d1c-de0ad14ab713.roa (hash: xYjr/pUN4v9oa4i0maEsTHUhPl8fOAqQdQWyVdgJtGo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2/216b3d12-2dbf-45bc-91a2-147674d41cd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2/216b3d12-2dbf-45bc-91a2-147674d41cd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:74:4e:eb:1b:48:d8:9b:0f:ad:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=216b3d12-2dbf-45bc-91a2-147674d41cd2 Validity Not Before: Apr 27 23:00:03 2026 GMT Not After : Apr 30 23:00:00 2026 GMT Subject: CN=d3b5fbac-1a0f-4a2d-83a0-c54bac1fb786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:5f:71:4b:32:11:b2:98:79:75:0c:cc:74: 73:53:d8:b0:0e:2b:e6:d3:63:f9:c6:d2:61:87:14: ec:f8:81:bd:6d:b4:15:6f:69:e3:d6:02:75:0c:99: 98:af:6e:c4:09:4e:45:bd:07:2b:58:10:a8:10:7e: 0a:6a:66:6f:13:c6:ca:e5:21:08:d5:01:e0:dd:94: af:db:70:73:d5:20:66:91:37:d7:a2:ee:43:96:d4: 9f:45:e2:e9:29:e2:e6:b1:97:13:29:b7:c9:92:50: ca:ee:d8:81:a8:2e:72:9e:82:ce:ea:c4:32:02:fa: 9b:8a:65:55:1d:13:27:b2:d6:19:64:7b:49:21:41: 22:06:06:84:07:91:6d:0f:9e:a5:9a:7b:8c:08:ad: 1f:16:e0:a2:d5:ce:16:df:67:fa:c9:7e:eb:c1:25: 0c:02:37:2c:4d:af:ed:c4:8d:58:65:d8:c1:9f:1e: 02:4c:2b:61:56:75:3b:95:b5:1c:c8:aa:dd:af:b1: ca:0e:76:9c:79:aa:23:cc:7e:01:44:53:ca:d7:ac: ff:43:32:c5:54:65:3b:43:27:3e:c6:23:3f:b3:13: 92:1c:eb:31:f7:6b:e5:83:a8:10:a7:bd:c9:a3:e6: d5:42:f2:59:c8:b3:b6:73:20:33:b3:84:9e:56:05: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BD:3A:AF:11:A4:5E:7A:43:AF:21:55:6F:32:32:75:91:3E:53:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2/216b3d12-2dbf-45bc-91a2-147674d41cd2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2/216b3d12-2dbf-45bc-91a2-147674d41cd2.crl X509v3 Authority Key Identifier: keyid:4B:7C:30:51:A7:62:F0:48:DB:AD:03:90:6D:5D:B5:2C:6D:35:6B:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/216b3d12-2dbf-45bc-91a2-147674d41cd2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c7:ea:fe:c1:cd:f8:4c:5e:65:f8:d9:a5:37:89:1d:f8:83: 31:21:4b:f9:bf:9a:37:2d:53:e6:7a:8d:10:60:29:e4:44:13: a5:96:07:e7:4d:a8:34:30:82:d6:f4:a9:43:92:04:b2:04:80: 6d:ba:02:f1:39:a2:b4:e9:bd:4e:23:91:6a:81:4a:e3:cc:d0: e5:6f:ec:74:2a:5b:d4:ae:8f:0c:45:2b:70:79:7c:d7:5c:96: 81:53:af:7f:c6:c3:5a:b6:98:70:5c:e0:80:23:2e:f0:4a:73: 8a:11:11:b6:b7:48:37:c2:d2:9d:94:ae:07:29:26:69:9c:aa: 68:dc:4b:4e:bc:90:c9:6d:0a:ec:c7:ee:5f:92:96:64:04:83: 4a:24:aa:01:a3:2b:4a:e8:7f:41:ad:ed:a0:43:96:eb:b6:85: 9d:55:d1:79:6f:49:c6:68:0c:99:ec:77:c2:1c:75:33:f5:6e: 7f:a9:73:21:cb:e9:ca:42:4f:47:10:e9:0f:09:27:42:5e:8f: db:34:7b:f9:5b:fb:1c:31:c5:35:42:48:36:20:23:36:34:95: cd:fa:b7:34:dc:47:55:36:32:5f:ad:43:cb:2a:2e:bd:fb:c2: 0d:f1:39:27:f3:78:c8:7d:95:5c:15:84:f5:08:14:63:fa:a3: dd:6a:d7:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2mdE7rG0jYmw+thgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE2YjNkMTItMmRiZi00NWJjLTkxYTItMTQ3Njc0ZDQx Y2QyMB4XDTI2MDQyNzIzMDAwM1oXDTI2MDQzMDIzMDAwMFowLzEtMCsGA1UEAxMk ZDNiNWZiYWMtMWEwZi00YTJkLTgzYTAtYzU0YmFjMWZiNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cJfcUsyEbKYeXUMzHRzU9iwDivm02P5xtJh hxTs+IG9bbQVb2nj1gJ1DJmYr27ECU5FvQcrWBCoEH4KamZvE8bK5SEI1QHg3ZSv 23Bz1SBmkTfXou5DltSfReLpKeLmsZcTKbfJklDK7tiBqC5ynoLO6sQyAvqbimVV HRMnstYZZHtJIUEiBgaEB5FtD56lmnuMCK0fFuCi1c4W32f6yX7rwSUMAjcsTa/t xI1YZdjBnx4CTCthVnU7lbUcyKrdr7HKDnaceaojzH4BRFPK16z/QzLFVGU7Qyc+ xiM/sxOSHOsx92vlg6gQp73Jo+bVQvJZyLO2cyAzs4SeVgUf8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAu9Oq8RpF56Q68hVW8yMnWRPlOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTZi M2QxMi0yZGJmLTQ1YmMtOTFhMi0xNDc2NzRkNDFjZDIvMjE2YjNkMTItMmRiZi00 NWJjLTkxYTItMTQ3Njc0ZDQxY2QyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE2YjNkMTItMmRiZi00NWJjLTkx YTItMTQ3Njc0ZDQxY2QyLzIxNmIzZDEyLTJkYmYtNDViYy05MWEyLTE0NzY3NGQ0 MWNkMi5jcmwwHwYDVR0jBBgwFoAUS3wwUadi8EjbrQOQbV21LG01azQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTZiM2QxMi0yZGJmLTQ1YmMtOTFhMi0xNDc2 NzRkNDFjZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1x+r+wc34TF5l+NmlN4kd +IMxIUv5v5o3LVPmeo0QYCnkRBOllgfnTag0MILW9KlDkgSyBIBtugLxOaK06b1O I5FqgUrjzNDlb+x0KlvUro8MRStweXzXXJaBU69/xsNatphwXOCAIy7wSnOKERG2 t0g3wtKdlK4HKSZpnKpo3EtOvJDJbQrsx+5fkpZkBINKJKoBoytK6H9Bre2gQ5br toWdVdF5b0nGaAyZ7HfCHHUz9W5/qXMhy+nKQk9HEOkPCSdCXo/bNHv5W/scMcU1 Qkg2ICM2NJXN+rc03EdVNjJfrUPLKi69+8IN8Tkn83jIfZVcFYT1CBRj+qPdatdG -----END CERTIFICATE-----Generated at Wed Apr 29 00:03:07 2026 by rpki-client