$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft File: 822f9974-af88-4d0b-a65f-065fdd26c645.mft (raw, json) Hash identifier: lRsyc8Xz8hVwrNLBRYiiTj5Xq3C/LD3GVncoMq2CyAQ= Subject key identifier: D4:11:44:BA:14:C3:78:03:B0:72:85:E0:3D:A1:8F:FF:94:48:D1:DB Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645 Certificate serial: 010D0C9F4328584D8A125A2DBBA6D9AF09B7BAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft Manifest number: 010D0C9F4328584073A822AFE8F1A6AC5EAA8550 Signing time: Fri 17 Apr 2026 19:00:03 +0000 Manifest this update: Fri 17 Apr 2026 19:00:03 +0000 Manifest next update: Mon 20 Apr 2026 19:00:00 +0000 Files and hashes: 1: 67cd331c-0eea-3d40-96d5-7acc007b8867.roa (hash: oiqJPGZWS1Dp2bI0CXRPmShFMqXXPVCzZDWCEfa6fVw=) 2: 822f9974-af88-4d0b-a65f-065fdd26c645.crl (hash: NuGia3TviYAwpiueDYZcNdSvpxeQfsAqtMv44o2lc1E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:12:5a:2d:bb:a6:d9:af:09:b7:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645 Validity Not Before: Apr 17 19:00:03 2026 GMT Not After : Apr 20 19:00:00 2026 GMT Subject: CN=a5b643bc-164b-4347-a64f-7023406461fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:2b:ea:25:b6:49:3b:ac:be:3b:0b:bf:a0: 22:73:d7:98:5b:42:9c:74:36:ea:22:90:1f:da:05: c8:d9:dd:d3:65:bb:17:d6:59:83:3e:30:1b:15:89: 71:19:b7:48:49:3d:5d:df:2f:72:4c:3c:f8:48:9e: 71:15:c5:d8:c0:ff:34:fc:38:0e:7a:8f:f6:12:37: 8b:81:bb:b9:48:02:7d:a8:b5:32:d5:9e:be:9d:fa: fb:1a:b7:e2:0f:24:2a:0c:0c:aa:3e:f7:2c:30:62: 36:0c:f5:da:c8:85:0c:ea:5a:fc:1c:c9:c2:f3:72: fb:e4:2b:3c:a3:01:22:9a:12:ce:03:a2:2d:ae:71: dc:62:d9:68:9a:0f:a3:15:b7:9e:30:c4:b5:5e:28: 45:6c:55:8b:69:a5:ed:93:f5:35:c1:6a:d4:a0:49: d2:e8:ad:64:db:91:6a:2f:ac:c9:18:ec:b7:ee:b8: d1:8a:76:1d:7f:47:a4:f5:bf:87:63:95:7b:5a:70: 47:f0:4b:52:6b:b5:d4:77:1b:28:a5:13:f4:ce:34: b6:74:62:8a:a9:04:9e:61:18:71:87:f9:e2:53:c6: a3:0c:ff:bd:d4:e3:19:ab:5d:55:bc:1e:95:4c:bf: 07:1e:62:49:eb:58:9b:f7:68:ca:ea:2f:19:33:21: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:11:44:BA:14:C3:78:03:B0:72:85:E0:3D:A1:8F:FF:94:48:D1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl X509v3 Authority Key Identifier: keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:85:c2:76:0d:c7:88:e6:51:a7:7d:67:cd:a5:ed:97:e7:89: d0:23:17:b0:50:e9:0f:b6:42:97:dd:c1:0e:eb:0d:89:19:b8: 32:08:58:22:f5:7d:60:cc:55:8b:d9:45:d1:43:5c:95:7e:56: f0:8f:1a:da:6a:19:7d:34:da:41:ec:c6:34:3c:21:69:a3:a9: 99:8e:dc:35:71:35:1c:68:52:7c:70:ed:77:a6:c2:54:30:42: f4:e9:13:bc:3c:34:af:f4:eb:95:a8:d9:de:a4:5f:7b:a8:5a: 32:d4:b5:37:e2:a2:87:3e:cc:c4:47:1b:9b:65:2e:27:e5:08: a1:67:c8:d9:17:8c:2c:5c:ed:ef:ad:a2:dd:5d:f0:26:71:4a: 3d:20:50:2d:13:eb:b1:98:41:36:15:5f:1d:8a:1e:99:f5:2c: 1a:7e:fd:e9:cc:5c:b1:30:f9:d9:0c:45:84:79:ab:d7:18:0d: c2:12:7d:92:30:2e:6c:85:e8:e2:a9:76:e9:d8:a4:25:96:eb: 35:b8:9a:1e:7f:82:22:a9:29:51:85:d8:40:84:53:2a:ac:6b: 25:59:c4:95:b5:f9:27:a1:93:0e:77:2f:d3:67:6d:ae:df:3b: 91:55:5e:b3:79:85:30:9b:58:5b:83:55:ff:3a:74:c7:3c:eb: 22:30:42:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2KElotu6bZrwm3usAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyZjk5NzQtYWY4OC00ZDBiLWE2NWYtMDY1ZmRkMjZj NjQ1MB4XDTI2MDQxNzE5MDAwM1oXDTI2MDQyMDE5MDAwMFowLzEtMCsGA1UEAxMk YTViNjQzYmMtMTY0Yi00MzQ3LWE2NGYtNzAyMzQwNjQ2MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Ir6iW2STusvjsLv6Aic9eYW0KcdDbqIpAf 2gXI2d3TZbsX1lmDPjAbFYlxGbdIST1d3y9yTDz4SJ5xFcXYwP80/DgOeo/2EjeL gbu5SAJ9qLUy1Z6+nfr7GrfiDyQqDAyqPvcsMGI2DPXayIUM6lr8HMnC83L75Cs8 owEimhLOA6ItrnHcYtlomg+jFbeeMMS1XihFbFWLaaXtk/U1wWrUoEnS6K1k25Fq L6zJGOy37rjRinYdf0ek9b+HY5V7WnBH8EtSa7XUdxsopRP0zjS2dGKKqQSeYRhx h/niU8ajDP+91OMZq11VvB6VTL8HHmJJ61ib92jK6i8ZMyG4VQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNQRRLoUw3gDsHKF4D2hj/+USNHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjJm OTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVmZGQyNmM2NDUvODIyZjk5NzQtYWY4OC00 ZDBiLWE2NWYtMDY1ZmRkMjZjNjQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIyZjk5NzQtYWY4OC00ZDBiLWE2 NWYtMDY1ZmRkMjZjNjQ1LzgyMmY5OTc0LWFmODgtNGQwYi1hNjVmLTA2NWZkZDI2 YzY0NS5jcmwwHwYDVR0jBBgwFoAUPP2qApAF0XOlEjvmLCugyVHJJjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjJmOTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVm ZGQyNmM2NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7hcJ2DceI5lGnfWfNpe2X 54nQIxewUOkPtkKX3cEO6w2JGbgyCFgi9X1gzFWL2UXRQ1yVflbwjxraahl9NNpB 7MY0PCFpo6mZjtw1cTUcaFJ8cO13psJUMEL06RO8PDSv9OuVqNnepF97qFoy1LU3 4qKHPszERxubZS4n5QihZ8jZF4wsXO3vraLdXfAmcUo9IFAtE+uxmEE2FV8dih6Z 9Swafv3pzFyxMPnZDEWEeavXGA3CEn2SMC5shejiqXbp2KQllus1uJoef4IiqSlR hdhAhFMqrGslWcSVtfknoZMOdy/TZ22u3zuRVV6zeYUwm1hbg1X/OnTHPOsiMELD -----END CERTIFICATE-----Generated at Fri Apr 17 21:48:57 2026 by rpki-client