$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft File: 58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft (raw, json) Hash identifier: KEIm2XOSNRQO+4oarizBnN+B8gDv8zsBpUGmdI5fJNo= Subject key identifier: 24:28:91:FE:00:37:FB:AF:C4:10:57:25:6F:44:C9:F9:DE:F8:33:31 Authority key identifier: 55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 Certificate issuer: /CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Certificate serial: 010D0C9F4328584DA6745078705161DC827FF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft Manifest number: 010D0C9F4328584ACB0A0D5EAC27B2442ECB6CF5 Signing time: Mon 27 Apr 2026 23:00:03 +0000 Manifest this update: Mon 27 Apr 2026 23:00:03 +0000 Manifest next update: Thu 30 Apr 2026 23:00:00 +0000 Files and hashes: 1: 2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa (hash: SvtttsOQE/5VoJcnVAOMTMnV8frCEHJSx/Qvd1eN5uc=) 2: 58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl (hash: 6GvppubXJFwZsiI5ytCql1sTdeHTInIc8YltIQKlcZQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:74:50:78:70:51:61:dc:82:7f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Validity Not Before: Apr 27 23:00:03 2026 GMT Not After : Apr 30 23:00:00 2026 GMT Subject: CN=91e20a1a-60aa-451f-9e82-43fed333de6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:e2:4a:ff:0b:66:b6:9a:1f:1a:1f:92:b8: cf:47:68:98:6e:e4:43:7f:68:cb:4c:81:07:f7:77: da:80:0d:a3:be:1b:f5:da:6e:5e:bb:b1:25:d8:93: 4f:56:ad:2a:30:3b:b8:96:66:38:7a:ae:67:80:0a: 6d:95:68:ff:e3:ba:75:9c:3c:54:62:c1:de:d3:0f: ea:1f:9e:1a:96:8a:4d:fd:a1:80:51:10:74:89:d7: be:5d:9d:7c:32:37:95:fe:e8:c7:34:b1:c9:98:38: b4:9d:37:90:e0:b4:03:5d:59:2c:93:76:3f:12:cd: ee:da:59:44:ce:c2:15:c3:ff:84:ba:5d:67:4e:21: d7:4f:1d:ec:a8:74:c6:e4:4f:9d:47:98:91:1c:e3: d0:61:cf:3e:fc:6f:76:bf:c9:fc:43:22:86:6c:35: bd:b1:89:4c:e2:60:ce:72:74:a1:32:8e:90:dc:70: d7:21:71:79:12:59:22:e7:11:47:c0:80:79:90:83: 09:23:e1:ea:f3:9b:21:5a:9e:e5:11:4c:90:43:27: 6c:91:1a:3d:fe:bd:88:31:ed:a4:f7:86:f1:55:73: 18:53:68:9b:ba:7b:18:ff:e6:db:6e:50:73:a3:2c: ed:38:0b:32:c7:cf:d8:ab:2c:5b:07:a3:d8:2c:ab: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:91:FE:00:37:FB:AF:C4:10:57:25:6F:44:C9:F9:DE:F8:33:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl X509v3 Authority Key Identifier: keyid:55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:49:7b:82:49:3a:68:6f:93:80:35:15:a2:c1:01:16:4c:2f: 41:cf:74:d8:fd:6c:15:a3:10:b4:2b:2b:7f:7b:cc:ea:2e:d9: 72:c1:c4:bd:17:2d:f8:e4:e0:5a:9f:85:fc:65:9c:48:c0:a0: e7:f5:78:1f:8f:c1:89:ed:b0:f1:07:dd:35:13:b4:c0:d0:60: e0:44:41:aa:8a:93:f5:74:e6:1d:36:c5:7e:b5:79:a8:e9:c3: b2:73:df:f1:d5:9b:df:81:f1:92:f2:75:30:8d:ea:c4:36:d7: 60:d6:c8:de:54:b5:6b:3b:75:87:b7:6d:4f:5d:f4:27:0c:09: ab:7d:54:9d:83:7e:b3:fb:4a:97:c2:b4:33:a1:0f:b4:b6:ce: 66:a5:48:ca:ad:f7:0d:a5:34:d8:de:ab:f1:70:5c:b8:b5:12: 6f:2b:44:40:f5:d8:fa:31:d3:fc:0e:e3:20:b7:30:5d:45:4e: 87:31:10:db:e9:43:8f:a2:fc:23:67:56:24:dc:96:6a:9e:bb: a9:ee:4a:aa:30:f8:89:c7:9c:b6:eb:b8:f4:0a:e5:90:51:5e: a4:aa:85:30:0c:88:4a:2c:c6:30:c4:e0:bc:0d:42:e2:f5:d2: 56:e5:e2:d8:82:91:c6:a9:14:87:78:ec:d8:42:ed:5b:b1:53: 64:fe:e7:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2mdFB4cFFh3IJ/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmMmFmYTUtNWQ3YS00Zjc2LThhNTMtOTIyOWE3NWYx ZjQ1MB4XDTI2MDQyNzIzMDAwM1oXDTI2MDQzMDIzMDAwMFowLzEtMCsGA1UEAxMk OTFlMjBhMWEtNjBhYS00NTFmLTllODItNDNmZWQzMzNkZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoTiSv8LZraaHxofkrjPR2iYbuRDf2jLTIEH 93fagA2jvhv12m5eu7El2JNPVq0qMDu4lmY4eq5ngAptlWj/47p1nDxUYsHe0w/q H54alopN/aGAURB0ide+XZ18MjeV/ujHNLHJmDi0nTeQ4LQDXVksk3Y/Es3u2llE zsIVw/+Eul1nTiHXTx3sqHTG5E+dR5iRHOPQYc8+/G92v8n8QyKGbDW9sYlM4mDO cnShMo6Q3HDXIXF5Elki5xFHwIB5kIMJI+Hq85shWp7lEUyQQydskRo9/r2IMe2k 94bxVXMYU2ibunsY/+bbblBzoyztOAsyx8/YqyxbB6PYLKsbWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCQokf4AN/uvxBBXJW9Eyfne+DMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81OGYy YWZhNS01ZDdhLTRmNzYtOGE1My05MjI5YTc1ZjFmNDUvNThmMmFmYTUtNWQ3YS00 Zjc2LThhNTMtOTIyOWE3NWYxZjQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNThmMmFmYTUtNWQ3YS00Zjc2LThh NTMtOTIyOWE3NWYxZjQ1LzU4ZjJhZmE1LTVkN2EtNGY3Ni04YTUzLTkyMjlhNzVm MWY0NS5jcmwwHwYDVR0jBBgwFoAUVV0I4kt9HZpOckRH3hZ1glYHceIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81OGYyYWZhNS01ZDdhLTRmNzYtOGE1My05MjI5 YTc1ZjFmNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGSXuCSTpob5OANRWiwQEW TC9Bz3TY/WwVoxC0Kyt/e8zqLtlywcS9Fy345OBan4X8ZZxIwKDn9Xgfj8GJ7bDx B901E7TA0GDgREGqipP1dOYdNsV+tXmo6cOyc9/x1ZvfgfGS8nUwjerENtdg1sje VLVrO3WHt21PXfQnDAmrfVSdg36z+0qXwrQzoQ+0ts5mpUjKrfcNpTTY3qvxcFy4 tRJvK0RA9dj6MdP8DuMgtzBdRU6HMRDb6UOPovwjZ1Yk3JZqnrup7kqqMPiJx5y2 67j0CuWQUV6kqoUwDIhKLMYwxOC8DULi9dJW5eLYgpHGqRSHeOzYQu1bsVNk/ucY -----END CERTIFICATE-----Generated at Wed Apr 29 00:00:42 2026 by rpki-client