$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.mft (raw, json) Hash identifier: hilUUQhO1vM2KpcuWj6By+XoCn9jlyDlp2+89hb2WeE= Subject key identifier: 5D:94:EB:53:73:CB:6D:86:79:47:B9:C2:F1:B6:12:0A:B6:5F:93:AD Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584D88AD03E2F6232659E905CB08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft Manifest number: 010D0C9F4328584073A843E7CFB37A94E46CADA8 Signing time: Fri 17 Apr 2026 07:00:03 +0000 Manifest this update: Fri 17 Apr 2026 07:00:03 +0000 Manifest next update: Sun 19 Apr 2026 07:00:00 +0000 Files and hashes: 1: 1a8794d9-eb16-4b3c-b869-96971b72a93b.crl (hash: fNqkZXMN+y+tRuTjl2QxC40VZo2KWeHA836Z67g28FI=) 2: 67aa11e0-08b1-3729-8732-afed74543a62.roa (hash: nQSMNZpN3rAO6Bc04HdXj+uxEaxxA9R2H1NMNw28/rc=) 3: b529d2af-47b9-3c02-92c0-0e879bd78302.roa (hash: 3EUOGNSU3u+loea0nhvAAs/DNw7uNkSrDSlwAU3P4s0=) 4: ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa (hash: AmZiKY42SpiPGJ0OKeCHZmWzuBGB0bCeIu3A23eH5K4=) 5: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (hash: iVnbsISO4VruWHDrNMVkHoDPcRwcS9vjXUvDS6nD8pk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:ad:03:e2:f6:23:26:59:e9:05:cb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Apr 17 07:00:03 2026 GMT Not After : Apr 19 07:00:00 2026 GMT Subject: CN=1e6bfe29-e4dd-40f6-a561-50d2850cc064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a6:13:83:43:a4:6a:67:c1:a1:11:28:7e:6e: a6:f9:23:bb:2f:3b:41:98:9c:d5:3b:7c:94:eb:d1: 93:2c:82:60:9d:dd:9a:5f:76:e1:dd:cd:88:1c:ad: 0c:b0:88:ea:e9:7c:a8:63:e2:1a:b9:f0:ce:a3:69: 21:25:58:97:31:1a:ad:80:ce:4c:42:c4:9a:f2:44: 4c:4b:1c:86:47:59:79:4c:9e:94:ef:49:21:61:d5: 23:82:49:27:b9:a3:69:1c:b8:42:81:c4:31:0b:6a: 22:01:e7:10:25:6c:ef:e9:28:7c:a5:1f:3d:38:df: dc:cd:af:82:35:97:ca:42:c1:0f:7b:4f:43:d8:81: d7:d3:2d:97:ff:dd:2e:a1:cf:5b:5c:a3:c8:c7:a0: 39:ab:b4:34:f8:39:72:da:4f:f5:a9:b9:c8:c9:81: 12:ea:5b:a9:71:8e:80:0d:8b:56:a7:9b:4e:fd:01: 81:0f:56:ea:d1:85:9e:4e:2b:75:2d:b8:33:86:e0: 48:80:86:df:09:e2:f1:f8:0d:f3:5c:5b:92:89:17: 1d:74:5e:fc:c3:73:4a:c2:01:d4:00:9c:db:47:7c: 0c:6a:11:95:7a:fa:a4:2d:92:b8:09:cd:b3:62:dd: a9:c5:7f:8e:27:4c:7f:d8:f9:38:c3:d8:c6:06:7f: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:94:EB:53:73:CB:6D:86:79:47:B9:C2:F1:B6:12:0A:B6:5F:93:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b2:9c:30:1e:87:54:94:e7:ae:c9:d8:42:7c:84:43:35:14: 77:7e:f1:1e:41:b6:c1:d9:94:35:a0:e2:55:f4:13:47:ce:2b: da:b6:1c:15:6c:27:a2:50:fc:26:62:05:25:92:1c:42:28:45: b6:13:19:c5:ad:d9:93:e5:65:6a:2a:b6:c6:70:de:8d:ae:77: 6c:c3:e3:15:64:73:e5:27:06:b6:29:00:d0:d8:c3:96:2e:0d: 51:0a:b0:f2:d5:e8:7c:c2:c2:6e:56:8e:22:03:d2:db:15:de: 25:3f:32:3c:be:aa:66:6a:21:7e:68:d1:6c:c2:ad:4e:ee:4b: c9:aa:eb:3e:6d:e1:3c:e6:dd:bc:62:a9:02:6d:70:1b:9c:9b: 9b:3e:c2:ef:eb:72:2c:e4:6b:46:85:70:64:26:96:00:06:c9: 5d:79:56:55:31:52:2e:87:11:6d:43:f3:ce:f8:de:51:3c:97: ad:5f:68:fa:c9:29:c9:aa:de:b0:4c:5e:c4:6b:69:b4:fd:b6: 84:10:36:f3:15:0e:93:2b:5d:70:81:51:ee:e0:f6:af:c5:df: 80:9c:f9:8c:c1:e3:88:4b:a7:31:a8:87:e0:81:fe:72:13:87: 27:7c:b6:b0:21:80:4c:13:ac:31:8a:f6:f3:da:fa:89:a0:e2: ff:0b:98:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IrQPi9iMmWekFywgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDQxNzA3MDAwM1oXDTI2MDQxOTA3MDAwMFowLzEtMCsGA1UEAxMk MWU2YmZlMjktZTRkZC00MGY2LWE1NjEtNTBkMjg1MGNjMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaYTg0OkamfBoREofm6m+SO7LztBmJzVO3yU 69GTLIJgnd2aX3bh3c2IHK0MsIjq6XyoY+IaufDOo2khJViXMRqtgM5MQsSa8kRM SxyGR1l5TJ6U70khYdUjgkknuaNpHLhCgcQxC2oiAecQJWzv6Sh8pR89ON/cza+C NZfKQsEPe09D2IHX0y2X/90uoc9bXKPIx6A5q7Q0+Dly2k/1qbnIyYES6lupcY6A DYtWp5tO/QGBD1bq0YWeTit1LbgzhuBIgIbfCeLx+A3zXFuSiRcddF78w3NKwgHU AJzbR3wMahGVevqkLZK4Cc2zYt2pxX+OJ0x/2Pk4w9jGBn+DSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2U61Nzy22GeUe5wvG2Egq2X5OtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMWE4Nzk0ZDktZWIxNi00 YjNjLWI4NjktOTY5NzFiNzJhOTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALspwwHodUlOeuydhCfIRD NRR3fvEeQbbB2ZQ1oOJV9BNHzivathwVbCeiUPwmYgUlkhxCKEW2ExnFrdmT5WVq KrbGcN6Nrndsw+MVZHPlJwa2KQDQ2MOWLg1RCrDy1eh8wsJuVo4iA9LbFd4lPzI8 vqpmaiF+aNFswq1O7kvJqus+beE85t28YqkCbXAbnJubPsLv63Is5GtGhXBkJpYA BsldeVZVMVIuhxFtQ/PO+N5RPJetX2j6ySnJqt6wTF7Ea2m0/baEEDbzFQ6TK11w gVHu4Pavxd+AnPmMweOIS6cxqIfggf5yE4cnfLawIYBME6wxivbz2vqJoOL/C5hS -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:05 2026 by rpki-client