$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: gnDn0pWAhvCYwAffxZrzsjSYId8YSonjY3PBf+m/m9I= Subject key identifier: 89:64:37:DF:F7:CE:2B:1E:FC:6A:F8:34:01:AF:62:2A:45:11:C6:0E Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584D8AA740D57968E5353E43AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACE1B Signing time: Sat 18 Apr 2026 00:00:03 +0000 Manifest this update: Sat 18 Apr 2026 00:00:03 +0000 Manifest next update: Tue 21 Apr 2026 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: gUriNW2d+0m9gwwEBNrPAadCkmlfnyabpqfXI17zy+o=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: Nkaqhi6a2ty1RxWNciKzN4T0yTni0094RZhyatdY/v8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:a7:40:d5:79:68:e5:35:3e:43:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Apr 18 00:00:03 2026 GMT Not After : Apr 21 00:00:00 2026 GMT Subject: CN=91fbf552-e836-41ac-b7f0-72854b78839c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:1b:fd:04:ea:dc:3e:54:2b:0a:04:a7:1e: 6d:a1:4d:2f:55:d5:88:42:02:dd:4d:83:da:e6:2f: ef:6f:a0:f1:c7:25:ac:dc:bb:3d:33:7d:a0:5c:ff: 45:ca:85:05:c4:07:1d:58:f1:15:e1:ec:92:db:fc: cf:80:b9:52:36:82:2c:5c:ed:da:79:da:f5:66:72: 5c:5c:1c:35:d4:49:0e:02:60:82:1e:ee:30:04:3f: 08:75:d1:c5:32:0f:92:30:a5:0d:1b:fc:49:91:bd: 59:d3:21:e9:4e:99:33:69:34:c3:ef:b4:3c:cc:f9: 67:44:22:29:5f:c5:d8:92:8b:52:43:a7:e9:94:f6: 6f:b2:45:d5:8c:85:f9:ab:66:a7:47:33:f8:9e:24: 3d:6a:1f:c2:cb:fd:9e:e2:be:7a:b8:7a:b4:9c:81: 79:a3:57:27:73:36:cf:7b:2e:2e:81:f8:46:53:98: 77:86:5a:e3:a1:7f:ae:8e:d1:3b:25:ef:91:a7:b3: 53:76:fb:7b:0d:23:e1:2b:3c:df:78:81:32:d6:3a: e0:9b:f7:7f:ec:e0:3a:0d:a6:73:2b:d0:d9:9d:80: 08:a2:e9:ed:5d:64:92:5c:43:37:5e:96:5a:cc:1c: 0d:ff:b6:0f:c1:8a:bd:bd:14:b1:30:60:62:c6:d5: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:37:DF:F7:CE:2B:1E:FC:6A:F8:34:01:AF:62:2A:45:11:C6:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9a:a5:33:5e:25:88:cd:23:07:f4:7e:d6:6a:3d:51:b5:97: 1f:13:36:cb:53:6a:1a:22:80:01:be:7d:ce:30:45:f2:2b:66: 03:2f:e5:d0:34:7d:8b:29:e4:1a:3e:6a:48:14:70:52:57:ea: b0:85:41:3c:65:6c:e6:e5:86:53:24:55:54:1a:86:76:c4:60: 94:7f:a8:bb:c5:93:c0:64:d0:f5:f2:1d:82:ce:e2:3b:e9:9b: 53:5e:95:1e:60:e1:2c:1a:38:29:a8:42:12:36:db:47:d0:7e: e9:b7:ad:fb:7e:fb:82:cc:8a:7c:74:d7:55:c4:87:6a:62:d7: 68:94:97:9e:1f:30:93:97:c3:aa:23:92:80:06:bd:c7:5f:16: 2b:53:2e:82:c4:ba:74:52:67:3c:f1:7b:ad:dd:03:b4:b4:bc: 99:48:2d:09:61:99:92:12:16:84:e7:f4:91:f3:08:c0:45:b2: 62:60:cf:4a:57:01:b7:fd:ed:28:5c:ad:f1:3b:2a:03:0b:3a: c4:91:7e:39:0b:51:34:32:ff:cf:98:88:f7:fd:fe:f9:44:e7: 3a:54:05:d2:7c:4e:5f:9d:d9:76:63:b7:7d:21:62:4f:74:5d: db:45:a6:d0:64:af:5a:ac:0d:33:27:34:55:eb:85:40:54:ec: 01:54:e2:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Kp0DVeWjlNT5DqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI2MDQxODAwMDAwM1oXDTI2MDQyMTAwMDAwMFowLzEtMCsGA1UEAxMk OTFmYmY1NTItZTgzNi00MWFjLWI3ZjAtNzI4NTRiNzg4MzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ub/QTq3D5UKwoEpx5toU0vVdWIQgLdTYPa 5i/vb6DxxyWs3Ls9M32gXP9FyoUFxAcdWPEV4eyS2/zPgLlSNoIsXO3aedr1ZnJc XBw11EkOAmCCHu4wBD8IddHFMg+SMKUNG/xJkb1Z0yHpTpkzaTTD77Q8zPlnRCIp X8XYkotSQ6fplPZvskXVjIX5q2anRzP4niQ9ah/Cy/2e4r56uHq0nIF5o1cnczbP ey4ugfhGU5h3hlrjoX+ujtE7Je+Rp7NTdvt7DSPhKzzfeIEy1jrgm/d/7OA6DaZz K9DZnYAIountXWSSXEM3XpZazBwN/7YPwYq9vRSxMGBixtWt+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIlkN9/3zise/Gr4NAGvYipFEcYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMmqUzXiWIzSMH9H7Waj1R tZcfEzbLU2oaIoABvn3OMEXyK2YDL+XQNH2LKeQaPmpIFHBSV+qwhUE8ZWzm5YZT JFVUGoZ2xGCUf6i7xZPAZND18h2CzuI76ZtTXpUeYOEsGjgpqEISNttH0H7pt637 fvuCzIp8dNdVxIdqYtdolJeeHzCTl8OqI5KABr3HXxYrUy6CxLp0Umc88Xut3QO0 tLyZSC0JYZmSEhaE5/SR8wjARbJiYM9KVwG3/e0oXK3xOyoDCzrEkX45C1E0Mv/P mIj3/f75ROc6VAXSfE5fndl2Y7d9IWJPdF3bRabQZK9arA0zJzRV64VAVOwBVOKL -----END CERTIFICATE-----Generated at Sat Apr 18 01:46:05 2026 by rpki-client