$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft File: ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft (raw, json) Hash identifier: szSCxssS9XIQ6dQGQXm6R0BASdp6v4vdnwqbBEjnhAk= Subject key identifier: 17:AF:19:E1:6C:A4:D0:0C:A4:AC:60:48:A3:BF:23:48:A0:12:A6:EC Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F4328584D960D8A609079F7A982B5EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft Manifest number: 010D0C9F43285848DA72AC8DD130460A110E805C Signing time: Wed 22 Apr 2026 02:00:03 +0000 Manifest this update: Wed 22 Apr 2026 02:00:03 +0000 Manifest next update: Sat 25 Apr 2026 02:00:00 +0000 Files and hashes: 1: 392c15e9-05de-39d4-832e-bb708494e16c.roa (hash: HAIFzBdzD903XJtCJfTYFMe5eelBgrFehEHX/Mpkjww=) 2: 3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (hash: LChMpPHw5dLcmrHwTh4LatzzlibRZBgQ0omV89fDa3E=) 3: 6ceeed57-3308-38c3-b3fc-bb9e808a1a6a.roa (hash: 3HKQE7AaL0rLmKhW9ZNeYtkJPSVfYuzxSsy9WhPrlNU=) 4: b4a1398d-1b75-3e42-b92c-420bd70b3810.roa (hash: MwPeYQeO9k/utAkDbHQ0IW0wrqz7bH/O0NtJZuqIpTs=) 5: ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl (hash: Uv/pGpAslJvo34sWue65iQFb73OBN2OWWZ12skCheQo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:0d:8a:60:90:79:f7:a9:82:b5:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Apr 22 02:00:03 2026 GMT Not After : Apr 25 02:00:00 2026 GMT Subject: CN=66d0c76e-5691-47af-94f2-178e0bac1e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:f7:5e:b3:08:ff:02:41:dc:23:fc:62:22: b0:44:cc:b6:6f:de:08:01:16:59:fe:3c:b0:7c:4d: dc:64:bf:10:76:4f:7a:00:d6:9c:2c:31:94:b4:5e: f6:76:8f:fe:1b:8b:aa:80:1d:7c:66:62:4e:db:ac: 4f:61:c7:76:f5:93:6a:25:41:55:65:ee:1d:76:3a: 77:75:80:30:8c:8f:4e:31:53:30:2d:31:8c:b2:c5: f9:d3:22:cf:9a:a1:1a:c8:c2:53:aa:6a:35:ff:ee: bf:02:e2:30:96:68:1b:d0:7a:9c:fd:fd:21:93:09: 99:62:e6:80:19:1d:5d:24:e6:c2:66:0c:e6:7d:44: b8:51:b2:c6:f1:c5:16:1e:39:ec:b6:35:69:d7:04: be:ac:0f:25:83:62:85:45:05:88:16:43:05:ae:37: 37:fe:09:8b:c9:79:26:97:cd:f3:14:ae:c2:3f:f7: 32:e5:43:9c:67:e0:9f:a7:80:c9:4d:93:dc:9c:f7: d6:7b:86:74:3b:88:8d:18:08:f4:cd:5e:99:49:f4: 04:dd:b8:af:b1:63:98:d5:6c:7f:33:de:6c:a5:3a: 35:3d:b4:f7:98:0d:89:f1:1a:47:bb:48:66:ba:70: 61:09:a3:86:1c:d2:dd:82:3b:98:31:20:4b:1f:e5: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:19:E1:6C:A4:D0:0C:A4:AC:60:48:A3:BF:23:48:A0:12:A6:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f0:7a:54:4e:4f:cb:9d:58:a2:f1:8e:86:b5:80:e0:04:e6: 65:33:42:bf:53:d3:bf:43:3a:5a:95:42:48:ae:a4:3e:44:e6: e9:6c:02:c8:45:bc:cf:af:63:22:4f:db:ea:77:2e:39:a3:d9: 50:0d:d7:a0:db:b1:de:bf:26:8e:51:d1:5a:22:2a:b4:81:a8: 61:f8:fd:f0:20:4d:59:16:7c:db:ba:8d:ba:68:7a:44:65:7a: a3:66:7d:8f:18:8f:af:65:e0:a1:07:8b:f5:38:5b:b1:88:5d: 38:14:21:59:36:4f:cb:26:08:59:91:10:a2:8f:b2:50:da:a8: 9d:7a:1c:94:f7:43:d5:93:c0:b6:8b:f7:da:a7:01:a2:55:6e: 42:bb:af:56:f2:3b:3d:fb:7b:6d:af:ab:89:65:d2:da:c1:73: 81:a7:ca:53:df:c0:78:16:a2:32:31:10:18:23:e1:23:fb:dc: fe:0c:b9:63:91:92:12:a7:02:2a:de:ba:87:0b:60:83:87:ab: b1:14:bb:7f:0f:34:5a:e7:01:20:2b:83:b0:07:73:e3:83:00: 43:d9:38:03:ce:0f:60:85:35:1b:ab:93:8b:c2:0f:22:9d:a4: 5d:ae:af:16:05:9a:14:e8:d4:7b:b5:71:f8:96:0c:43:50:cd: db:56:0d:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2WDYpgkHn3qYK17gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI2MDQyMjAyMDAwM1oXDTI2MDQyNTAyMDAwMFowLzEtMCsGA1UEAxMk NjZkMGM3NmUtNTY5MS00N2FmLTk0ZjItMTc4ZTBiYWMxZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfD3XrMI/wJB3CP8YiKwRMy2b94IARZZ/jyw fE3cZL8Qdk96ANacLDGUtF72do/+G4uqgB18ZmJO26xPYcd29ZNqJUFVZe4ddjp3 dYAwjI9OMVMwLTGMssX50yLPmqEayMJTqmo1/+6/AuIwlmgb0Hqc/f0hkwmZYuaA GR1dJObCZgzmfUS4UbLG8cUWHjnstjVp1wS+rA8lg2KFRQWIFkMFrjc3/gmLyXkm l83zFK7CP/cy5UOcZ+Cfp4DJTZPcnPfWe4Z0O4iNGAj0zV6ZSfQE3bivsWOY1Wx/ M95spTo1PbT3mA2J8RpHu0hmunBhCaOGHNLdgjuYMSBLH+XuDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBevGeFspNAMpKxgSKO/I0igEqbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvZWJmZjJiYmQtZmFiMC00 ZjQ4LWE2MjUtZDUzYzYzZjFiYmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB8HpUTk/LnVii8Y6GtYDg BOZlM0K/U9O/QzpalUJIrqQ+RObpbALIRbzPr2MiT9vqdy45o9lQDdeg27HevyaO UdFaIiq0gahh+P3wIE1ZFnzbuo26aHpEZXqjZn2PGI+vZeChB4v1OFuxiF04FCFZ Nk/LJghZkRCij7JQ2qidehyU90PVk8C2i/fapwGiVW5Cu69W8js9+3ttr6uJZdLa wXOBp8pT38B4FqIyMRAYI+Ej+9z+DLljkZISpwIq3rqHC2CDh6uxFLt/DzRa5wEg K4OwB3PjgwBD2TgDzg9ghTUbq5OLwg8inaRdrq8WBZoU6NR7tXH4lgxDUM3bVg31 -----END CERTIFICATE-----Generated at Wed Apr 22 17:55:35 2026 by rpki-client