$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft File: d7e20303-2390-47a7-b89c-842367be4584.mft (raw, json) Hash identifier: IGQQqknXV/965OnuS3B7WJo1zd7N6Cxw7EWXjyipRv0= Subject key identifier: EC:CA:18:32:0B:8A:91:65:A7:80:E3:E9:4A:46:63:4D:83:0B:F8:E8 Authority key identifier: 38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99 Certificate issuer: /CN=d7e20303-2390-47a7-b89c-842367be4584 Certificate serial: 010D0C9F4328584D88181CE36FEC0A4A06B1BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft Manifest number: 010D0C9F4328584073A836FD93F59394F84290BA Signing time: Fri 17 Apr 2026 02:00:03 +0000 Manifest this update: Fri 17 Apr 2026 02:00:03 +0000 Manifest next update: Sun 19 Apr 2026 02:00:00 +0000 Files and hashes: 1: 63ef6ba7c7a8be96cfb149135472cbd00aab8f29a31820d418.cer (hash: q21/fVY1xnjn/4j3EiTpqXEA5WBtWaTPeiAIeBFbMJw=) 2: d7e20303-2390-47a7-b89c-842367be4584.crl (hash: gOUXyONR9XLvGVPrAc1SoASu2mEjNeocUzQrRCPnrKs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:18:1c:e3:6f:ec:0a:4a:06:b1:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e20303-2390-47a7-b89c-842367be4584 Validity Not Before: Apr 17 02:00:03 2026 GMT Not After : Apr 19 02:00:00 2026 GMT Subject: CN=e2a6299f-5814-47fd-840d-e652b3b139ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:6c:54:56:8f:1a:ca:80:93:cb:88:4e:07: 84:2b:24:35:4e:65:39:7b:bc:32:b0:c0:51:6c:7c: 71:b5:1c:e9:22:56:8b:ea:c6:76:a4:b2:1d:83:18: 93:df:dc:61:67:44:f2:67:ab:74:52:f0:b8:8f:66: 77:34:c9:11:fa:c5:13:48:7a:2f:88:c7:01:b6:51: e6:4c:47:6b:56:66:e8:6e:ef:22:ee:60:a6:5c:35: d8:78:9f:79:d7:c6:b3:a7:72:f7:47:d0:26:c7:83: 2d:14:dd:64:e7:f2:f0:70:f4:46:39:4b:95:79:f8: b0:ac:04:5c:8c:e8:0c:78:b2:f2:a0:1d:29:28:63: 9b:49:66:bd:5a:60:61:52:1d:54:f2:f9:08:fe:c1: 53:f0:70:0d:d6:af:3e:6d:74:ae:fd:a4:98:3b:3f: a0:25:38:4a:5e:25:80:77:f9:3d:b0:a7:81:6f:45: da:7c:2d:75:16:dc:7a:85:18:d4:b7:09:84:c5:01: 45:81:86:05:c1:ca:d9:2a:87:51:e7:6e:3e:5e:cf: 57:f6:67:b7:24:81:da:67:8c:32:23:22:a3:87:52: ad:98:45:07:30:ff:12:fb:a0:fa:09:29:ce:19:03: 96:90:58:a7:dc:af:f2:39:97:26:bf:7d:03:fa:ff: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CA:18:32:0B:8A:91:65:A7:80:E3:E9:4A:46:63:4D:83:0B:F8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl X509v3 Authority Key Identifier: keyid:38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:6b:c9:a3:bf:a9:5a:96:99:dc:88:7f:a1:e0:91:e8:3d: 2c:32:db:11:f2:d0:ac:08:2a:e5:34:63:40:fa:94:1b:1f:4a: 68:9a:37:8f:c9:32:eb:cc:9d:25:7f:bf:57:6f:14:19:8a:84: 21:4b:68:ff:4f:39:fa:24:40:c3:85:4b:58:d5:da:21:ba:4a: 1f:9a:ac:6a:0a:9d:2f:7c:7b:b0:44:07:f7:7b:fa:fc:3b:a1: e0:95:fa:0d:ff:75:42:76:37:8f:60:6c:b0:b2:64:a6:36:b1: 3f:8c:98:84:52:7e:46:4d:c0:97:b7:ee:e3:a7:06:b0:db:9a: 58:de:0b:41:8c:a2:6e:d6:d5:c5:07:fa:6e:2d:91:a9:74:58: e3:f6:6d:ff:40:b8:04:b9:e3:b6:35:c7:1a:78:bb:29:60:77: 6b:70:2c:02:6d:27:d7:46:b6:48:80:39:3f:4d:8d:6d:3a:d0: 1d:a6:8e:f9:20:da:5c:0e:fb:5b:8c:1d:2e:3e:1e:b9:21:ce: 45:4b:89:58:0e:8c:b3:f3:36:e1:10:38:65:b7:60:a0:1c:e7: 6d:97:3d:d5:a5:59:ed:5c:8e:7b:18:45:d8:b7:77:7e:39:1f: df:98:2f:e4:33:e8:98:28:ec:bc:0c:0a:99:a7:cf:e2:9f:c0: e4:00:eb:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IGBzjb+wKSgaxvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlMjAzMDMtMjM5MC00N2E3LWI4OWMtODQyMzY3YmU0 NTg0MB4XDTI2MDQxNzAyMDAwM1oXDTI2MDQxOTAyMDAwMFowLzEtMCsGA1UEAxMk ZTJhNjI5OWYtNTgxNC00N2ZkLTg0MGQtZTY1MmIzYjEzOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4VsVFaPGsqAk8uITgeEKyQ1TmU5e7wysMBR bHxxtRzpIlaL6sZ2pLIdgxiT39xhZ0TyZ6t0UvC4j2Z3NMkR+sUTSHoviMcBtlHm TEdrVmbobu8i7mCmXDXYeJ9518azp3L3R9Amx4MtFN1k5/LwcPRGOUuVefiwrARc jOgMeLLyoB0pKGObSWa9WmBhUh1U8vkI/sFT8HAN1q8+bXSu/aSYOz+gJThKXiWA d/k9sKeBb0XafC11Ftx6hRjUtwmExQFFgYYFwcrZKodR524+Xs9X9me3JIHaZ4wy IyKjh1KtmEUHMP8S+6D6CSnOGQOWkFin3K/yOZcmv30D+v+CsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOzKGDILipFlp4Dj6UpGY02DC/joMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Uy MDMwMy0yMzkwLTQ3YTctYjg5Yy04NDIzNjdiZTQ1ODQvZDdlMjAzMDMtMjM5MC00 N2E3LWI4OWMtODQyMzY3YmU0NTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdlMjAzMDMtMjM5MC00N2E3LWI4 OWMtODQyMzY3YmU0NTg0L2Q3ZTIwMzAzLTIzOTAtNDdhNy1iODljLTg0MjM2N2Jl NDU4NC5jcmwwHwYDVR0jBBgwFoAUODA5kWnxd3j4cFZ5GDkCwiGGSJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2UyMDMwMy0yMzkwLTQ3YTctYjg5Yy04NDIz NjdiZTQ1ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOtmvJo7+pWpaZ3Ih/oeCR 6D0sMtsR8tCsCCrlNGNA+pQbH0pomjePyTLrzJ0lf79XbxQZioQhS2j/Tzn6JEDD hUtY1dohukofmqxqCp0vfHuwRAf3e/r8O6HglfoN/3VCdjePYGywsmSmNrE/jJiE Un5GTcCXt+7jpwaw25pY3gtBjKJu1tXFB/puLZGpdFjj9m3/QLgEueO2NccaeLsp YHdrcCwCbSfXRrZIgDk/TY1tOtAdpo75INpcDvtbjB0uPh65Ic5FS4lYDoyz8zbh EDhlt2CgHOdtlz3VpVntXI57GEXYt3d+OR/fmC/kM+iYKOy8DAqZp8/in8DkAOsg -----END CERTIFICATE-----Generated at Fri Apr 17 20:57:50 2026 by rpki-client