$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft File: 52356d5e-3580-4025-a264-1c6d347bc052.mft (raw, json) Hash identifier: /d1mzSNhlugqP4wXwiq7yzCwLmJbhUOvSuGa2U4Mdho= Subject key identifier: 6C:AC:C4:F3:B1:A9:BA:69:0D:3E:BC:B5:99:81:54:8B:1B:EE:EA:82 Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59 Certificate issuer: /CN=52356d5e-3580-4025-a264-1c6d347bc052 Certificate serial: 010D0C9F4328584D901ED82879B01DEB3CB79480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft Manifest number: 010D0C9F432858493E6E4989CAB9855165C92B15 Signing time: Sun 19 Apr 2026 23:00:04 +0000 Manifest this update: Sun 19 Apr 2026 23:00:04 +0000 Manifest next update: Wed 22 Apr 2026 23:00:00 +0000 Files and hashes: 1: 52356d5e-3580-4025-a264-1c6d347bc052.crl (hash: iV3EKlya96YkMIC2C92k9cHVt29PCL8EE0uXk9uT81Q=) 2: 79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (hash: LD4bM9q6gEdr09yP5OBze9rOGpYlugz8zgPmyJNhLYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:1e:d8:28:79:b0:1d:eb:3c:b7:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052 Validity Not Before: Apr 19 23:00:04 2026 GMT Not After : Apr 22 23:00:00 2026 GMT Subject: CN=242f70df-dd9e-4ba5-ab1d-0b20bcedcfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:6f:b7:71:42:a6:6f:ea:21:f1:79:84:8a: 64:0f:6e:75:0a:e6:af:6b:fa:73:9e:7f:8f:02:fe: f1:9d:55:6a:44:85:39:0b:11:12:6f:02:56:ab:21: ba:e5:2e:65:68:7a:c3:bf:8f:12:44:a6:91:21:70: a6:06:3a:42:1b:64:eb:87:c5:b6:f9:3b:f7:76:d6: e0:cd:ca:40:75:93:7f:21:87:4f:1b:f2:6a:c0:b9: 5f:02:1a:ec:ef:8d:d8:ad:4c:6a:d3:e8:b6:ce:ca: 30:77:b5:65:63:5b:04:95:c5:dc:41:d9:67:a9:24: f8:ea:ff:86:1b:5a:6b:d2:11:76:ca:f3:4f:b1:04: bc:b5:f5:3f:47:80:0f:f8:60:cd:96:ef:12:0a:45: 66:3c:08:e0:7b:b3:49:a3:92:3b:07:be:be:10:f0: 53:05:b6:35:5f:49:6f:ba:59:fb:e9:92:08:0a:a6: f8:97:b3:41:25:fe:f0:2c:67:bd:62:4e:6c:75:d7: 37:ba:f2:48:f7:79:24:3a:f7:11:06:f4:bf:6d:bf: 91:31:06:25:ce:19:56:d2:a9:9c:a6:04:30:80:1c: 9f:fa:50:29:9b:78:67:a6:23:4c:3b:1a:c6:23:fc: 1b:dd:32:34:e3:47:d5:a6:c5:d5:9c:3b:1a:63:06: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AC:C4:F3:B1:A9:BA:69:0D:3E:BC:B5:99:81:54:8B:1B:EE:EA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl X509v3 Authority Key Identifier: keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2d:f8:31:98:0e:ad:19:da:e2:9a:28:2f:08:ca:44:d1:0b: f8:d1:e4:6a:f1:df:55:58:4b:9b:d9:dc:90:d6:ea:05:5e:90: e9:4d:e8:1a:23:71:40:11:75:98:01:45:57:ef:c4:96:da:25: b7:7f:db:74:23:15:b8:66:2e:cb:2d:9f:df:a0:0a:d8:0d:05: 29:70:83:cb:68:dd:13:5f:89:06:22:47:6d:17:bb:95:76:84: 8e:c2:2c:5f:f0:8c:01:a0:d2:c3:ca:d6:67:f3:99:1e:71:af: 3a:85:dc:40:e7:59:3d:a7:2b:ca:28:d3:55:7d:13:9a:9e:8b: ca:65:79:54:1d:a0:c2:19:ab:8b:d2:3f:47:74:25:55:52:2e: 03:69:e3:8e:0d:ac:38:8f:f5:30:69:eb:ca:57:a3:4a:6c:bb: 86:d0:e9:74:1c:ed:5b:12:b4:20:3b:92:8f:37:bc:9f:3f:39: a3:82:43:e4:7b:00:65:ae:ee:63:53:47:90:ae:0d:a6:3a:be: 4f:52:a2:1f:07:45:40:84:35:2e:36:63:22:15:d5:71:6a:ed: 4e:a5:76:96:40:92:d6:56:da:bc:7e:2e:d6:43:cb:38:54:75: c7:d5:90:e1:76:81:1f:81:ce:bd:b3:4c:6c:37:6a:2b:59:e8: 8a:01:37:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2QHtgoebAd6zy3lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTZkNWUtMzU4MC00MDI1LWEyNjQtMWM2ZDM0N2Jj MDUyMB4XDTI2MDQxOTIzMDAwNFoXDTI2MDQyMjIzMDAwMFowLzEtMCsGA1UEAxMk MjQyZjcwZGYtZGQ5ZS00YmE1LWFiMWQtMGIyMGJjZWRjZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifpvt3FCpm/qIfF5hIpkD251Cuava/pznn+P Av7xnVVqRIU5CxESbwJWqyG65S5laHrDv48SRKaRIXCmBjpCG2Trh8W2+Tv3dtbg zcpAdZN/IYdPG/JqwLlfAhrs743YrUxq0+i2zsowd7VlY1sElcXcQdlnqST46v+G G1pr0hF2yvNPsQS8tfU/R4AP+GDNlu8SCkVmPAjge7NJo5I7B76+EPBTBbY1X0lv uln76ZIICqb4l7NBJf7wLGe9Yk5sddc3uvJI93kkOvcRBvS/bb+RMQYlzhlW0qmc pgQwgByf+lApm3hnpiNMOxrGI/wb3TI040fVpsXVnDsaYwZn4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGysxPOxqbppDT68tZmBVIsb7uqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MjM1 NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZkMzQ3YmMwNTIvNTIzNTZkNWUtMzU4MC00 MDI1LWEyNjQtMWM2ZDM0N2JjMDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTIzNTZkNWUtMzU4MC00MDI1LWEy NjQtMWM2ZDM0N2JjMDUyLzUyMzU2ZDVlLTM1ODAtNDAyNS1hMjY0LTFjNmQzNDdi YzA1Mi5jcmwwHwYDVR0jBBgwFoAUjkbM0qkiy8s3aFegFRY32/4vc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MjM1NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZk MzQ3YmMwNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPLfgxmA6tGdrimigvCMpE 0Qv40eRq8d9VWEub2dyQ1uoFXpDpTegaI3FAEXWYAUVX78SW2iW3f9t0IxW4Zi7L LZ/foArYDQUpcIPLaN0TX4kGIkdtF7uVdoSOwixf8IwBoNLDytZn85keca86hdxA 51k9pyvKKNNVfROanovKZXlUHaDCGauL0j9HdCVVUi4DaeOODaw4j/UwaevKV6NK bLuG0Ol0HO1bErQgO5KPN7yfPzmjgkPkewBlru5jU0eQrg2mOr5PUqIfB0VAhDUu NmMiFdVxau1OpXaWQJLWVtq8fi7WQ8s4VHXH1ZDhdoEfgc69s0xsN2orWeiKATdZ -----END CERTIFICATE-----Generated at Mon Apr 20 22:50:50 2026 by rpki-client