$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft File: 32e1eff5-1423-4100-89f4-3340efd8f1ea.mft (raw, json) Hash identifier: FhtykwKf5svr29TEgPYUne5T5IiyTJWiWHnikHeeWKs= Subject key identifier: CA:70:23:B5:B0:BD:4E:97:C4:67:84:D3:38:31:D6:C3:EA:F9:A9:2B Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 Certificate issuer: /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Certificate serial: 010D0C9F4328584D87833942DF1213EEDC0BDDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft Manifest number: 010D0C9F43285847F4EEB68E0F8455B2D5797D0E Signing time: Thu 16 Apr 2026 21:00:03 +0000 Manifest this update: Thu 16 Apr 2026 21:00:03 +0000 Manifest next update: Sat 18 Apr 2026 21:00:00 +0000 Files and hashes: 1: 32e1eff5-1423-4100-89f4-3340efd8f1ea.crl (hash: Pfym20ohrhDov4T3swQV2yD5Q/AQnx6svQBQ2qrN/hM=) 2: b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa (hash: arOopM4Uivqgj3bOg51jtAttVG25ukeZRTDAPr91RQc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:83:39:42:df:12:13:ee:dc:0b:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Validity Not Before: Apr 16 21:00:03 2026 GMT Not After : Apr 18 21:00:00 2026 GMT Subject: CN=aba2f493-2052-43ad-85c9-9b6ff80d037b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:99:6f:f1:ad:f4:24:1e:7d:33:e8:6f:92: 8e:23:72:aa:e2:ac:09:b7:4f:2c:0f:fb:ab:49:68: de:5b:d2:a5:b7:81:12:d1:25:e9:9a:8d:36:fc:87: a9:52:ee:40:13:5f:54:b9:0a:37:86:a9:13:7f:e8: 91:d6:37:e6:bc:83:dd:43:d4:c1:af:e4:86:6f:cb: 45:04:69:a7:ae:2d:0a:6b:64:f5:21:14:46:24:61: 6b:82:40:89:7b:86:9a:7d:57:c7:62:45:95:15:d0: 6f:d6:54:6a:7f:79:c3:ff:d2:98:43:4b:b1:0a:93: 9c:54:47:62:50:52:16:b3:b4:c2:97:f4:8e:15:32: fe:32:9c:ec:bc:b3:ab:92:0c:6f:3c:ac:37:f1:69: 65:51:a6:a4:e5:b3:71:70:b2:7a:e0:5e:40:21:95: 62:c1:55:88:e0:2b:70:00:34:56:7d:83:57:62:07: 02:02:c7:85:62:d2:77:ff:da:cf:ab:80:c7:7c:05: c0:62:d9:6e:5a:b7:56:72:dd:2b:4b:ac:18:1b:e2: 5a:c1:21:0f:aa:c5:53:d8:73:d8:be:e1:e8:06:8c: a4:6e:56:a6:5f:a6:6e:d8:13:dc:98:da:9d:0a:8f: 2c:2c:7a:ce:6d:a1:0a:e5:9f:82:d2:8e:85:b3:3b: 43:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:23:B5:B0:BD:4E:97:C4:67:84:D3:38:31:D6:C3:EA:F9:A9:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl X509v3 Authority Key Identifier: keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bd:b7:ca:05:2e:32:5a:20:f0:05:a0:d3:c9:0c:b8:26:b8: 62:1c:07:0c:c7:c1:6b:73:a2:e9:7a:8c:b8:02:cd:f8:90:55: 0b:ca:63:03:df:b5:57:65:cf:47:75:6b:8a:6e:be:e0:04:c6: 6b:f1:b1:34:54:a8:27:c0:e8:cd:c0:e4:df:40:b8:59:6f:04: 77:86:98:9a:75:a8:ba:76:57:ed:90:70:60:a3:dd:b0:60:a6: f6:d9:cb:07:67:31:68:4e:86:81:41:cd:09:6f:52:cc:68:d2: 5a:81:01:08:32:b8:fe:7b:8a:44:5e:d7:f0:07:4e:fc:8c:7f: 55:29:ad:cc:39:39:11:05:17:ab:ae:d1:b4:20:e9:d3:6c:c7: 23:b3:00:9d:bb:18:63:28:a1:8e:bd:a4:64:09:d5:19:4b:a1: 29:dc:f4:db:90:15:f3:e2:af:bd:b2:13:04:9c:ff:0e:fb:b7: 04:34:fc:39:e5:c6:fb:69:bd:b5:7c:e9:1a:21:2e:9b:dd:55: 23:85:5d:81:89:60:f0:0a:1c:99:cd:f2:f4:74:c8:f0:19:45: c4:fa:6a:db:0e:16:3d:d7:60:34:e6:c5:c8:d9:64:63:49:ff: 08:ad:5a:52:85:84:9b:e9:c7:7d:1e:fa:34:19:83:1e:7f:04: 1a:da:9c:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HgzlC3xIT7twL3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlMWVmZjUtMTQyMy00MTAwLTg5ZjQtMzM0MGVmZDhm MWVhMB4XDTI2MDQxNjIxMDAwM1oXDTI2MDQxODIxMDAwMFowLzEtMCsGA1UEAxMk YWJhMmY0OTMtMjA1Mi00M2FkLTg1YzktOWI2ZmY4MGQwMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6uZb/Gt9CQefTPob5KOI3Kq4qwJt08sD/ur SWjeW9Klt4ES0SXpmo02/IepUu5AE19UuQo3hqkTf+iR1jfmvIPdQ9TBr+SGb8tF BGmnri0Ka2T1IRRGJGFrgkCJe4aafVfHYkWVFdBv1lRqf3nD/9KYQ0uxCpOcVEdi UFIWs7TCl/SOFTL+MpzsvLOrkgxvPKw38WllUaak5bNxcLJ64F5AIZViwVWI4Ctw ADRWfYNXYgcCAseFYtJ3/9rPq4DHfAXAYtluWrdWct0rS6wYG+JawSEPqsVT2HPY vuHoBoykblamX6Zu2BPcmNqdCo8sLHrObaEK5Z+C0o6FsztDuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMpwI7WwvU6XxGeE0zgx1sPq+akrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUx ZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQwZWZkOGYxZWEvMzJlMWVmZjUtMTQyMy00 MTAwLTg5ZjQtMzM0MGVmZDhmMWVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJlMWVmZjUtMTQyMy00MTAwLTg5 ZjQtMzM0MGVmZDhmMWVhLzMyZTFlZmY1LTE0MjMtNDEwMC04OWY0LTMzNDBlZmQ4 ZjFlYS5jcmwwHwYDVR0jBBgwFoAUJUAu2vdRljOCQujdZADl1BGI5/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUxZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQw ZWZkOGYxZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcvbfKBS4yWiDwBaDTyQy4 JrhiHAcMx8Frc6Lpeoy4As34kFULymMD37VXZc9HdWuKbr7gBMZr8bE0VKgnwOjN wOTfQLhZbwR3hpiadai6dlftkHBgo92wYKb22csHZzFoToaBQc0Jb1LMaNJagQEI Mrj+e4pEXtfwB078jH9VKa3MOTkRBRerrtG0IOnTbMcjswCduxhjKKGOvaRkCdUZ S6Ep3PTbkBXz4q+9shMEnP8O+7cENPw55cb7ab21fOkaIS6b3VUjhV2BiWDwChyZ zfL0dMjwGUXE+mrbDhY912A05sXI2WRjSf8IrVpShYSb6cd9Hvo0GYMefwQa2pyw -----END CERTIFICATE-----Generated at Fri Apr 17 16:56:55 2026 by rpki-client