$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft File: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft (raw, json) Hash identifier: Zw4yxbnyAF8//jAftAR2pryWctPTecI8ntcp7NqHNkM= Subject key identifier: C2:5B:B3:1A:CD:9F:ED:82:13:60:F8:D9:BF:28:1E:B6:31:4B:89:04 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584D870C219314431D7FECE61A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft Manifest number: 010D0C9F4328584073A81C71C685F3E52EAFE32B Signing time: Thu 16 Apr 2026 17:00:03 +0000 Manifest this update: Thu 16 Apr 2026 17:00:03 +0000 Manifest next update: Sat 18 Apr 2026 17:00:00 +0000 Files and hashes: 1: 41149ca8-84ee-3c37-b491-83ba1a424870.roa (hash: IzfCxKr8lFF/otkGByi+sKaqZGcaKb4CAm96QrddbXQ=) 2: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl (hash: iorXHZ+/OB71GLNN0YoSqLZZkRanQoEXUM58CX7nyk8=) 3: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (hash: xLrvT02sGy++OOwKFh5lq9JRYNCNc3DT4xYeClF1FFA=) 4: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (hash: Vz/HuwIlbLajl6j7+LR5XCi1lxJX/kOmiri0VvJe9TY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:0c:21:93:14:43:1d:7f:ec:e6:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Apr 16 17:00:03 2026 GMT Not After : Apr 18 17:00:00 2026 GMT Subject: CN=ec4e50ec-5db2-40f8-8768-0e1dee1d097d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:11:37:2c:6d:e7:e6:d1:d6:c4:21:5f:d0: b1:a9:3d:8c:ae:16:fe:3c:4d:07:6a:59:95:b8:22: da:cf:c1:ba:7c:71:41:c8:fc:23:f6:3b:e1:15:c1: d6:4f:a7:e3:6b:c4:f3:cd:1a:8c:30:59:75:be:31: fe:07:81:cd:f2:95:5f:4e:1c:9f:6d:5e:87:8b:71: 98:cf:43:d6:d1:e8:f4:e9:55:67:53:76:6e:dc:75: 73:0b:32:d8:93:99:2f:ab:aa:e8:85:d3:42:9f:ba: e8:6d:73:cd:57:ee:0c:06:7f:22:2f:ba:c6:56:a8: d3:9b:03:00:37:53:11:2d:5f:87:49:04:7d:e6:7f: 5e:52:54:1d:ce:17:f2:48:b2:18:2c:b4:06:ce:8d: ef:35:13:69:94:22:5a:8e:6f:3e:c3:4c:d3:2f:58: 2e:d2:ea:92:b6:17:ea:76:96:04:7e:da:aa:1f:b1: 7c:ed:3c:c3:85:14:ee:77:27:71:4d:ea:0e:24:d5: f1:ac:d5:cc:95:94:b3:2a:a1:37:f5:4a:46:47:98: 8a:ce:b4:41:df:a1:b6:ee:f8:e1:e1:c7:dc:f4:4e: a7:f8:4f:64:fd:ef:92:44:31:c5:9e:3f:5a:00:5b: 38:2d:84:99:75:ab:ac:27:47:82:3d:b6:e1:d8:f5: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:B3:1A:CD:9F:ED:82:13:60:F8:D9:BF:28:1E:B6:31:4B:89:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1a:73:87:21:1b:ac:c5:a5:90:9f:1c:fa:e5:64:8d:b8:7f: 57:b3:44:84:6d:0f:5a:46:4d:df:61:de:14:a6:96:a6:f5:66: 32:00:d4:f2:6e:22:ff:75:4d:67:a0:cf:8f:cf:60:8e:aa:5b: 9c:1f:c0:66:af:ad:e1:5f:38:0f:24:e1:17:87:56:a0:64:8a: 11:72:01:35:be:d8:75:0a:b7:19:33:dc:ff:ef:59:86:cb:8a: e4:9a:e2:20:00:36:49:f1:87:0e:fa:c7:cf:38:3a:bd:73:81: 2b:9c:2a:76:da:1d:8c:00:07:df:33:f7:f8:f2:89:78:57:37: db:7b:aa:27:3d:1a:bd:12:94:e3:69:4f:21:8c:34:01:d4:01: 4f:04:db:48:4c:3b:6f:2f:01:07:8a:4c:b5:1b:d4:5a:ec:b1: c1:da:b0:12:22:fa:ca:96:96:fc:3f:cf:75:c3:f8:36:14:4a: 36:77:72:fc:b1:db:8f:2e:cc:66:a3:43:82:19:b2:12:1b:59: f7:eb:ea:26:38:15:d1:62:76:23:0a:3c:f7:03:05:e1:8e:4e: 77:7a:be:71:c8:77:87:2c:65:a3:56:fd:2e:49:25:c7:7d:40: 7c:61:52:57:41:ee:cb:f4:f9:4c:13:8d:90:39:51:c7:43:a7: a9:29:f0:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HDCGTFEMdf+zmGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI2MDQxNjE3MDAwM1oXDTI2MDQxODE3MDAwMFowLzEtMCsGA1UEAxMk ZWM0ZTUwZWMtNWRiMi00MGY4LTg3NjgtMGUxZGVlMWQwOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJwRNyxt5+bR1sQhX9CxqT2Mrhb+PE0HalmV uCLaz8G6fHFByPwj9jvhFcHWT6fja8TzzRqMMFl1vjH+B4HN8pVfThyfbV6Hi3GY z0PW0ej06VVnU3Zu3HVzCzLYk5kvq6rohdNCn7robXPNV+4MBn8iL7rGVqjTmwMA N1MRLV+HSQR95n9eUlQdzhfySLIYLLQGzo3vNRNplCJajm8+w0zTL1gu0uqSthfq dpYEftqqH7F87TzDhRTudydxTeoOJNXxrNXMlZSzKqE39UpGR5iKzrRB36G27vjh 4cfc9E6n+E9k/e+SRDHFnj9aAFs4LYSZdausJ0eCPbbh2PUsqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJbsxrNn+2CE2D42b8oHrYxS4kEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvNWFiYTRiN2EtZGU3Yi00 ZTg0LWI5MTMtYTFiZWRiZTU4ZjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDGnOHIRusxaWQnxz65WSN uH9Xs0SEbQ9aRk3fYd4Uppam9WYyANTybiL/dU1noM+Pz2COqlucH8Bmr63hXzgP JOEXh1agZIoRcgE1vth1CrcZM9z/71mGy4rkmuIgADZJ8YcO+sfPODq9c4ErnCp2 2h2MAAffM/f48ol4Vzfbe6onPRq9EpTjaU8hjDQB1AFPBNtITDtvLwEHiky1G9Ra 7LHB2rASIvrKlpb8P891w/g2FEo2d3L8sduPLsxmo0OCGbISG1n36+omOBXRYnYj Cjz3AwXhjk53er5xyHeHLGWjVv0uSSXHfUB8YVJXQe7L9PlME42QOVHHQ6epKfBm -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:24 2026 by rpki-client