$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.mft File: 20d1bc0f-5c56-4a46-a18f-ea9e599269af.mft (raw, json) Hash identifier: +EsZIdsQxBpOqv7Hz9g9aPZMm4v95djji+p4eTXOyng= Subject key identifier: 85:23:0C:A5:AC:F0:88:15:10:14:E1:5C:53:AF:09:26:2A:25:0A:2D Authority key identifier: FF:6C:91:C4:A0:AB:5A:53:E9:25:81:62:4C:E0:35:B9:6F:79:B6:11 Certificate issuer: /CN=20d1bc0f-5c56-4a46-a18f-ea9e599269af Certificate serial: 010D0C9F4328584D7E8E4ACA16EE9D173EF62800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.mft Manifest number: 010D0C9F4328584CEA9D088CFA16FFB821CF90B8 Signing time: Mon 13 Apr 2026 16:00:03 +0000 Manifest this update: Mon 13 Apr 2026 16:00:03 +0000 Manifest next update: Wed 15 Apr 2026 16:00:00 +0000 Files and hashes: 1: 20d1bc0f-5c56-4a46-a18f-ea9e599269af.crl (hash: 9WvwOnS5APs8Efn8gTmAGdAdagmBU2RO9DLGEF6Xm48=) 2: 86e365af-be01-3f42-9862-c2192c47b7a9.roa (hash: uXSAK4zh7a1k9QgxkWfr/qRycyDHQFimuvf8K/5/OY8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:8e:4a:ca:16:ee:9d:17:3e:f6:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d1bc0f-5c56-4a46-a18f-ea9e599269af Validity Not Before: Apr 13 16:00:03 2026 GMT Not After : Apr 15 16:00:00 2026 GMT Subject: CN=5e68cd76-73cf-4807-b870-a38ca673cff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:c0:0b:8f:22:5f:02:7c:30:d5:5c:71:34: b7:ea:00:3a:5d:97:54:01:b8:5b:bd:cc:6d:fe:3b: 94:e7:5b:a0:f2:e6:c7:76:36:23:b3:dc:53:07:71: ef:26:c7:23:08:36:97:e4:57:cf:e3:8d:0c:c5:49: 07:cd:36:5f:c1:03:b1:37:08:5f:c3:6e:92:9e:4b: 3f:c4:33:49:27:88:f2:ea:b7:3d:77:60:82:fd:f0: 09:36:70:ff:8e:8d:a2:c0:7f:a7:2d:4b:df:fa:4f: af:8c:33:1f:26:ed:41:13:53:76:62:0a:fc:c2:88: c5:94:04:5b:46:4e:e4:3d:d3:d9:e0:72:79:4f:eb: e1:d8:9e:a8:bd:1c:ad:e6:db:22:9b:10:c8:8d:8f: 60:cf:9a:91:ff:af:4a:88:fd:6d:40:29:f8:f0:cf: a7:2d:39:73:82:9b:b5:57:c1:31:54:ae:ee:14:11: 84:9a:e7:97:44:2c:3a:60:c5:60:6f:e7:cf:57:da: 68:8a:1a:50:7d:77:65:11:e4:20:35:a1:62:fc:1d: af:ff:74:58:55:3e:27:b3:c7:15:91:17:9d:8d:65: 80:47:e8:9a:27:cc:53:f9:00:d1:00:ba:c0:8f:dc: 67:0f:91:a9:0c:50:eb:5a:6c:82:40:e6:76:d8:aa: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:0C:A5:AC:F0:88:15:10:14:E1:5C:53:AF:09:26:2A:25:0A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.crl X509v3 Authority Key Identifier: keyid:FF:6C:91:C4:A0:AB:5A:53:E9:25:81:62:4C:E0:35:B9:6F:79:B6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:03:30:94:42:ae:df:4e:a3:16:cc:25:ec:75:90:a6:67:f7: d3:0e:bf:eb:1c:fa:cd:fe:d7:db:01:1d:28:46:1a:37:3e:77: 5c:8c:f3:9c:f8:15:26:58:cb:05:d3:57:e7:2e:a6:78:df:c0: bc:61:51:4b:d8:4e:b8:7d:c5:3d:b6:f8:47:d6:fa:18:60:93: 8d:34:c5:34:66:c7:4e:7c:98:1a:3a:cd:2a:f3:0e:7a:a1:9e: 85:70:f6:fe:2c:33:0d:4b:55:64:64:37:8e:4f:a1:e7:6c:d8: a8:23:ca:ef:f0:f4:40:9d:09:09:be:23:bd:5c:a1:84:58:45: 26:cb:a9:9c:5e:f4:dc:07:6a:d7:7a:26:c9:8b:6d:07:0c:5a: b9:63:2f:fa:af:09:11:64:9f:25:00:70:95:fa:08:df:eb:90: fc:48:d9:d1:75:da:ef:dc:de:40:86:0e:70:2c:fa:62:44:b2: d0:0e:6a:3b:fb:1e:39:eb:ae:5b:6c:54:a9:c5:3a:3a:f8:f9: 5a:17:c8:b9:5d:ae:e1:b6:54:44:ac:c5:e8:76:50:45:49:17: 5c:9f:a9:fe:1a:41:6b:43:ef:7e:f4:9e:3b:6f:e4:99:de:a0: e9:43:9f:d0:3f:e0:82:54:cd:66:cd:a7:26:74:7b:ba:9e:16: 6c:dc:65:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1+jkrKFu6dFz72KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBkMWJjMGYtNWM1Ni00YTQ2LWExOGYtZWE5ZTU5OTI2 OWFmMB4XDTI2MDQxMzE2MDAwM1oXDTI2MDQxNTE2MDAwMFowLzEtMCsGA1UEAxMk NWU2OGNkNzYtNzNjZi00ODA3LWI4NzAtYTM4Y2E2NzNjZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEPAC48iXwJ8MNVccTS36gA6XZdUAbhbvcxt /juU51ug8ubHdjYjs9xTB3HvJscjCDaX5FfP440MxUkHzTZfwQOxNwhfw26Snks/ xDNJJ4jy6rc9d2CC/fAJNnD/jo2iwH+nLUvf+k+vjDMfJu1BE1N2Ygr8wojFlARb Rk7kPdPZ4HJ5T+vh2J6ovRyt5tsimxDIjY9gz5qR/69KiP1tQCn48M+nLTlzgpu1 V8ExVK7uFBGEmueXRCw6YMVgb+fPV9poihpQfXdlEeQgNaFi/B2v/3RYVT4ns8cV kRedjWWAR+iaJ8xT+QDRALrAj9xnD5GpDFDrWmyCQOZ22KrGSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIUjDKWs8IgVEBThXFOvCSYqJQotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMGQx YmMwZi01YzU2LTRhNDYtYTE4Zi1lYTllNTk5MjY5YWYvMjBkMWJjMGYtNWM1Ni00 YTQ2LWExOGYtZWE5ZTU5OTI2OWFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjBkMWJjMGYtNWM1Ni00YTQ2LWEx OGYtZWE5ZTU5OTI2OWFmLzIwZDFiYzBmLTVjNTYtNGE0Ni1hMThmLWVhOWU1OTky NjlhZi5jcmwwHwYDVR0jBBgwFoAU/2yRxKCrWlPpJYFiTOA1uW95thEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMGQxYmMwZi01YzU2LTRhNDYtYTE4Zi1lYTll NTk5MjY5YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaAzCUQq7fTqMWzCXsdZCm Z/fTDr/rHPrN/tfbAR0oRho3PndcjPOc+BUmWMsF01fnLqZ438C8YVFL2E64fcU9 tvhH1voYYJONNMU0ZsdOfJgaOs0q8w56oZ6FcPb+LDMNS1VkZDeOT6HnbNioI8rv 8PRAnQkJviO9XKGEWEUmy6mcXvTcB2rXeibJi20HDFq5Yy/6rwkRZJ8lAHCV+gjf 65D8SNnRddrv3N5Ahg5wLPpiRLLQDmo7+x45665bbFSpxTo6+PlaF8i5Xa7htlRE rMXodlBFSRdcn6n+GkFrQ+9+9J47b+SZ3qDpQ5/QP+CCVM1mzacmdHu6nhZs3GUY -----END CERTIFICATE-----Generated at Tue Apr 14 12:19:14 2026 by rpki-client