$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: gNrnGezo0Dbw8dV+4OZzJOkZdO8JsLi705BV/OON+6I= Subject key identifier: FE:A4:70:FF:AF:18:33:5C:6C:CF:03:AC:EE:FE:1C:62:C9:A3:E5:66 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584D8729E438008292446B354A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DB10B Signing time: Thu 16 Apr 2026 18:00:03 +0000 Manifest this update: Thu 16 Apr 2026 18:00:03 +0000 Manifest next update: Sat 18 Apr 2026 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: DyFZjAv/Fntz6b63fNrzbXrMN0zQm7dvetaIaB3C380=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: bAn1GpvhyJhVgjB/cAqsUoQiDT16EeWU85O44U8GoKg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:29:e4:38:00:82:92:44:6b:35:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Apr 16 18:00:03 2026 GMT Not After : Apr 18 18:00:00 2026 GMT Subject: CN=b143a6b4-3b7a-4414-8122-4859ee02d52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:33:93:6d:56:66:7c:48:4d:2a:ab:15:63: 06:c3:dc:d9:2e:80:2d:b1:46:64:01:72:d6:25:c4: 18:1f:9f:80:c3:2a:7f:94:d3:51:5a:de:a6:da:dd: 41:de:2b:3f:3a:71:27:32:17:30:b5:52:30:36:f7: fa:9a:76:2f:7d:c8:b3:d4:b1:ac:65:7e:85:00:ff: d2:b0:d8:91:90:a2:93:b6:64:e6:d3:79:77:f6:46: e7:c2:e7:b7:a5:61:f5:47:0b:80:c5:c1:48:28:45: 08:0e:e6:65:82:e0:74:88:d9:ba:d8:97:ab:a9:62: 84:03:67:dc:bd:7b:de:87:b1:b9:e1:00:7e:ea:54: 89:df:88:99:e7:ba:60:54:03:6a:a2:51:2f:ed:26: e9:b8:d3:bf:82:0d:75:66:94:d3:2f:b5:1b:ea:33: 47:90:82:8c:83:1f:20:b8:f2:e7:d0:f0:6d:10:6d: 18:22:d0:89:5a:69:89:e6:22:2c:fc:7d:81:ed:8d: a7:22:72:ce:c8:b6:7d:7a:81:56:24:f3:3a:da:fe: 82:7d:d1:07:89:fb:f5:58:1c:df:50:83:b0:81:69: 9a:30:1a:25:b0:5b:bb:9b:46:90:16:84:74:02:d0: 6f:eb:a8:5a:dc:76:5a:51:77:64:aa:9c:8f:91:55: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:70:FF:AF:18:33:5C:6C:CF:03:AC:EE:FE:1C:62:C9:A3:E5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:34:81:01:5d:b4:75:df:6a:c5:e9:52:c3:1e:b5:93:28:1a: 6c:1c:a1:91:03:ca:d4:7b:a5:bb:9d:15:5f:73:ca:1e:e7:70: 49:12:a9:3e:a1:68:ad:b5:bb:cf:3f:c5:c6:74:c0:69:37:45: c5:25:6a:93:7e:b3:fd:46:dd:9f:fa:e8:92:f4:5d:fb:89:96: 1b:62:22:aa:5a:06:98:d7:72:20:71:c5:53:61:b3:de:5b:11: 0d:03:b4:28:93:6c:f2:d9:09:8e:00:15:96:a3:6d:f9:ab:03: 16:fb:bf:f3:40:7e:1e:b6:8a:02:ee:50:37:6f:19:55:18:7e: 24:ec:fa:79:38:48:00:67:18:dc:84:0a:05:58:d0:e3:05:8e: 1b:65:56:20:1d:28:35:23:27:c2:bc:74:87:01:b0:3b:5e:1b: 3c:0c:b7:63:d6:e9:ea:ca:16:c4:bc:3b:53:7a:67:dc:80:17: 28:ae:5c:3d:7e:6c:d4:38:4f:0f:94:42:df:8a:d1:b5:15:8a: 46:94:a9:3c:ef:2b:6b:88:2e:9f:3f:5e:c6:85:49:d9:14:34: 07:4d:42:e9:0f:3b:c3:76:c8:cc:46:eb:42:5d:b4:90:c9:f4: 87:9a:77:20:8b:bc:6c:16:0c:b8:15:f6:22:86:b5:5f:8e:39: 61:5e:67:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HKeQ4AIKSRGs1SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI2MDQxNjE4MDAwM1oXDTI2MDQxODE4MDAwMFowLzEtMCsGA1UEAxMk YjE0M2E2YjQtM2I3YS00NDE0LTgxMjItNDg1OWVlMDJkNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvMzk21WZnxITSqrFWMGw9zZLoAtsUZkAXLW JcQYH5+Awyp/lNNRWt6m2t1B3is/OnEnMhcwtVIwNvf6mnYvfciz1LGsZX6FAP/S sNiRkKKTtmTm03l39kbnwue3pWH1RwuAxcFIKEUIDuZlguB0iNm62JerqWKEA2fc vXveh7G54QB+6lSJ34iZ57pgVANqolEv7SbpuNO/gg11ZpTTL7Ub6jNHkIKMgx8g uPLn0PBtEG0YItCJWmmJ5iIs/H2B7Y2nInLOyLZ9eoFWJPM62v6CfdEHifv1WBzf UIOwgWmaMBolsFu7m0aQFoR0AtBv66ha3HZaUXdkqpyPkVVa7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP6kcP+vGDNcbM8DrO7+HGLJo+VmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByNIEBXbR132rF6VLDHrWT KBpsHKGRA8rUe6W7nRVfc8oe53BJEqk+oWittbvPP8XGdMBpN0XFJWqTfrP9Rt2f +uiS9F37iZYbYiKqWgaY13IgccVTYbPeWxENA7Qok2zy2QmOABWWo235qwMW+7/z QH4etooC7lA3bxlVGH4k7Pp5OEgAZxjchAoFWNDjBY4bZVYgHSg1IyfCvHSHAbA7 Xhs8DLdj1unqyhbEvDtTemfcgBcorlw9fmzUOE8PlELfitG1FYpGlKk87ytriC6f P17GhUnZFDQHTULpDzvDdsjMRutCXbSQyfSHmncgi7xsFgy4FfYihrVfjjlhXmdO -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:34 2026 by rpki-client