$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft File: b5a35588-73da-4090-8511-b646a21aaabf.mft (raw, json) Hash identifier: S+yzzjd2Ag4IiqTL58+rIN2jQIJbIe0NygFIWAcSPyA= Subject key identifier: 96:AD:C0:B3:3E:81:31:75:39:35:EF:D6:79:F0:38:22:4C:8E:D0:FF Authority key identifier: 22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22 Certificate issuer: /CN=b5a35588-73da-4090-8511-b646a21aaabf Certificate serial: 010D0C9F4328584D8835E4E606A7ABC85AD95280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft Manifest number: 010D0C9F4328584C711C656BDA157CC884C98867 Signing time: Fri 17 Apr 2026 03:00:03 +0000 Manifest this update: Fri 17 Apr 2026 03:00:03 +0000 Manifest next update: Mon 20 Apr 2026 03:00:00 +0000 Files and hashes: 1: b09624de-0f56-32a0-b988-2e9dd543c200.roa (hash: xQ7BlawCU9dSOAWxiBIdBjkW6OniRfvggZkByaKSris=) 2: b5a35588-73da-4090-8511-b646a21aaabf.crl (hash: P6UmGoZNFKH/PR5eZ8Zkd3d1Mj4yNmoH8mT/YAQsXCI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:35:e4:e6:06:a7:ab:c8:5a:d9:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a35588-73da-4090-8511-b646a21aaabf Validity Not Before: Apr 17 03:00:03 2026 GMT Not After : Apr 20 03:00:00 2026 GMT Subject: CN=ca06c098-44ea-4976-821a-d23ec7e3cc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:d6:63:23:40:62:56:ca:c1:fb:4f:89:66: ee:39:75:1b:fd:94:89:87:3b:47:89:19:0b:27:36: de:69:e1:26:ba:2f:fc:44:4d:6c:e3:7c:a9:75:f3: b0:4b:ab:87:c4:fa:7d:ab:30:77:50:99:c3:93:a1: 3a:87:74:1c:5a:a9:8e:b4:3c:30:20:2f:58:0f:45: 63:4b:a8:41:a4:05:7e:c6:6a:43:a7:ee:ca:a2:56: 5a:18:0f:f6:23:2d:19:70:7c:0e:dd:c7:69:97:3d: 0e:35:52:b4:3f:87:69:0e:68:81:09:fe:4c:4d:8c: f9:2a:b5:cd:68:83:f9:28:44:73:64:78:ff:cc:c9: da:57:09:2c:c6:de:72:e3:16:fe:6b:6c:64:15:14: 04:7f:fa:7f:9d:a1:d6:b6:3d:ec:18:7f:9a:e1:72: bc:6d:c5:84:68:16:18:7b:fa:f6:20:ff:3e:fd:88: d8:7a:4d:b6:49:83:37:49:4b:a6:e9:29:a0:86:e1: fa:d2:f4:e4:b4:04:02:c6:18:fd:55:26:09:a9:dc: f4:bd:2b:1f:84:ae:31:b5:26:80:e6:1f:1a:36:72: 8a:2b:f0:79:dc:70:6a:8a:f3:4c:54:fb:92:13:2f: 1e:41:15:ad:ce:ad:0b:71:65:b7:39:34:9f:17:7f: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:C0:B3:3E:81:31:75:39:35:EF:D6:79:F0:38:22:4C:8E:D0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl X509v3 Authority Key Identifier: keyid:22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ba:2c:f3:db:2d:8a:b4:2e:aa:4f:ed:a5:0c:dd:3f:b2:d1: 83:86:81:df:96:af:d3:76:bf:15:53:6e:9c:72:18:a7:0e:93: 83:c3:8f:be:ff:e5:be:e6:fc:13:5d:aa:cb:2a:54:24:24:c1: 18:8e:c0:83:18:a5:ca:7f:bf:46:fe:f3:ed:ac:2f:82:ef:6a: 6d:2b:46:22:94:af:8c:9c:e2:d4:86:92:5d:80:82:cc:95:7e: 7f:02:f5:ad:d4:c5:b6:31:10:f8:52:7f:57:0c:8e:06:ab:d8: 20:d6:83:73:8b:02:c7:f5:ec:cc:78:06:8e:53:c2:d6:36:98: e3:75:78:aa:f2:12:f8:b4:54:b1:86:bb:fc:4b:97:b2:ab:72: b8:74:4b:ff:af:19:72:3e:39:4a:fb:83:e0:18:41:c1:24:f2: d8:5d:ed:53:28:7c:af:c2:80:83:1e:b2:fb:73:91:25:e9:e8: 82:e4:e0:9b:18:eb:0c:31:b5:f9:27:61:c7:ac:c7:76:72:6c: 85:21:62:79:84:26:7e:f7:70:36:04:d7:71:43:f8:c9:d3:14: 63:46:c2:eb:c7:33:a5:8e:b7:97:41:0b:69:bb:90:2f:a0:22: 15:d1:66:9d:6e:2c:9c:95:b5:e9:c2:dc:ad:be:33:b0:4d:b2: 87:b1:a8:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2INeTmBqeryFrZUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVhMzU1ODgtNzNkYS00MDkwLTg1MTEtYjY0NmEyMWFh YWJmMB4XDTI2MDQxNzAzMDAwM1oXDTI2MDQyMDAzMDAwMFowLzEtMCsGA1UEAxMk Y2EwNmMwOTgtNDRlYS00OTc2LTgyMWEtZDIzZWM3ZTNjYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwDWYyNAYlbKwftPiWbuOXUb/ZSJhztHiRkL JzbeaeEmui/8RE1s43ypdfOwS6uHxPp9qzB3UJnDk6E6h3QcWqmOtDwwIC9YD0Vj S6hBpAV+xmpDp+7KolZaGA/2Iy0ZcHwO3cdplz0ONVK0P4dpDmiBCf5MTYz5KrXN aIP5KERzZHj/zMnaVwksxt5y4xb+a2xkFRQEf/p/naHWtj3sGH+a4XK8bcWEaBYY e/r2IP8+/YjYek22SYM3SUum6SmghuH60vTktAQCxhj9VSYJqdz0vSsfhK4xtSaA 5h8aNnKKK/B53HBqivNMVPuSEy8eQRWtzq0LcWW3OTSfF3+bpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJatwLM+gTF1OTXv1nnwOCJMjtD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNWEz NTU4OC03M2RhLTQwOTAtODUxMS1iNjQ2YTIxYWFhYmYvYjVhMzU1ODgtNzNkYS00 MDkwLTg1MTEtYjY0NmEyMWFhYWJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjVhMzU1ODgtNzNkYS00MDkwLTg1 MTEtYjY0NmEyMWFhYWJmL2I1YTM1NTg4LTczZGEtNDA5MC04NTExLWI2NDZhMjFh YWFiZi5jcmwwHwYDVR0jBBgwFoAUIow2esidT08GejttAuxR+gsjwSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNWEzNTU4OC03M2RhLTQwOTAtODUxMS1iNjQ2 YTIxYWFhYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+uizz2y2KtC6qT+2lDN0/ stGDhoHflq/Tdr8VU26cchinDpODw4++/+W+5vwTXarLKlQkJMEYjsCDGKXKf79G /vPtrC+C72ptK0YilK+MnOLUhpJdgILMlX5/AvWt1MW2MRD4Un9XDI4Gq9gg1oNz iwLH9ezMeAaOU8LWNpjjdXiq8hL4tFSxhrv8S5eyq3K4dEv/rxlyPjlK+4PgGEHB JPLYXe1TKHyvwoCDHrL7c5El6eiC5OCbGOsMMbX5J2HHrMd2cmyFIWJ5hCZ+93A2 BNdxQ/jJ0xRjRsLrxzOljreXQQtpu5AvoCIV0WadbiyclbXpwtytvjOwTbKHsagV -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:15 2026 by rpki-client