$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: U9Fg0U5fO9BuL1IsVWE+h/FJBjveyIZVlKPV90e0Fps= Subject key identifier: BC:17:AE:7F:4A:2B:BF:40:AD:E1:BD:5B:39:6A:4B:2F:09:CF:1F:BE Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584D89D6CB8269230A6C19E07580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A016CF Signing time: Fri 17 Apr 2026 17:00:03 +0000 Manifest this update: Fri 17 Apr 2026 17:00:03 +0000 Manifest next update: Mon 20 Apr 2026 17:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: oqByNp0hAVJe3UOtTJfgU5LA6oRkFAirhz7n7cr86jQ=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 5pGegQdf2haRKgXyUjryYusCBm5WwLO3Peg+cTZxdlQ=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: KXkyaCKfacjxJNU2WbOAvxUFMdIIAThTysYpTgo0ZGU=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: KKt1wnmAB/zsyLlDFjvlSzbHGtJQud9mO/iKDqU3+o8=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: y+IKL7ihJEqKs0jTc3RnGwC9aNP/fqaR2bzI26rqHKY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:d6:cb:82:69:23:0a:6c:19:e0:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Apr 17 17:00:03 2026 GMT Not After : Apr 20 17:00:00 2026 GMT Subject: CN=242b1ceb-de37-4c5e-bfe4-56119d08ebf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:36:04:80:32:fb:41:60:d5:23:e0:95:6e:49: 84:1c:6e:e4:cb:bf:6e:0c:cb:89:b1:1d:c4:89:84: 00:98:a7:19:ff:2d:d8:55:af:de:18:a3:ad:35:a8: 7e:83:16:29:52:ae:d1:79:5e:13:81:f7:37:0a:f5: f0:84:8b:de:69:1d:8c:52:43:4d:5e:31:f5:89:05: 62:23:c8:15:61:96:27:bb:52:d0:1b:39:1e:fa:fd: de:3f:8a:8d:20:67:c7:73:3b:1c:ee:41:f2:42:af: 49:9f:0a:d0:b7:7d:95:a0:83:98:3c:92:62:9b:1f: c4:56:6f:90:83:0d:6f:3d:fb:19:6d:6a:0e:45:20: 07:34:30:84:19:14:bb:e8:95:30:b6:1d:5e:88:54: fd:d5:44:f4:8c:0a:a4:02:75:05:06:84:c5:8d:e5: 2c:9f:a8:81:aa:ae:9d:2f:60:37:cb:af:4c:19:b0: 1b:a2:9d:f6:63:8c:e4:3f:7e:12:49:0a:96:5f:b7: 07:3c:87:17:fa:b9:b2:6a:72:3e:04:28:bc:94:b5: 91:e2:09:36:bc:ec:e9:97:9a:e1:f7:86:3f:28:1a: 0b:34:54:ea:a8:1b:e4:23:57:a8:ef:8e:72:7c:cc: 07:a8:e8:1b:84:05:a1:5e:91:5e:56:90:c5:c9:3e: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:AE:7F:4A:2B:BF:40:AD:E1:BD:5B:39:6A:4B:2F:09:CF:1F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c7:53:49:f7:6f:e0:57:c7:3b:23:e8:e6:05:a2:2b:b1:c4: 41:bb:e6:b0:a7:09:50:1e:66:08:04:71:94:80:87:56:56:2f: da:4a:52:e6:6d:03:57:d1:72:b7:29:f1:bd:08:3e:26:e5:2d: b1:10:f2:e8:f1:08:8f:1e:37:65:cf:d2:16:c5:b9:b5:f6:6c: 08:26:bd:eb:98:32:2e:53:ed:a3:9a:99:bc:c5:a7:63:7b:d4: 9e:4a:4e:4d:8f:2d:4f:83:5c:ff:2c:6e:c3:dd:04:5b:70:8b: 98:ae:6c:b7:85:57:ad:e6:b6:52:93:2e:43:a7:ee:9d:50:5b: 05:42:d8:b3:85:db:87:d4:c9:7c:25:55:83:e3:f6:d0:d0:ae: 99:99:ca:01:ee:a0:c0:84:a0:54:6c:3a:00:64:98:b5:f1:31: 2d:e9:44:35:e0:0a:87:bd:2f:90:4d:0e:1b:53:8a:8f:68:c2: c4:31:17:8a:04:78:ad:38:29:43:05:c1:6c:70:1f:df:d2:37: 7d:a3:8f:ef:bc:24:eb:fd:72:38:60:c1:78:0b:2b:42:52:7e: f6:53:a8:30:d5:0c:7e:07:a1:8a:7b:04:c0:ca:05:f3:89:3d: fb:ea:cc:a9:2d:ff:5c:f4:2d:42:f7:c4:ba:00:d2:04:54:bc: 36:a1:0e:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2J1suCaSMKbBngdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI2MDQxNzE3MDAwM1oXDTI2MDQyMDE3MDAwMFowLzEtMCsGA1UEAxMk MjQyYjFjZWItZGUzNy00YzVlLWJmZTQtNTYxMTlkMDhlYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzYEgDL7QWDVI+CVbkmEHG7ky79uDMuJsR3E iYQAmKcZ/y3YVa/eGKOtNah+gxYpUq7ReV4Tgfc3CvXwhIveaR2MUkNNXjH1iQVi I8gVYZYnu1LQGzke+v3eP4qNIGfHczsc7kHyQq9JnwrQt32VoIOYPJJimx/EVm+Q gw1vPfsZbWoORSAHNDCEGRS76JUwth1eiFT91UT0jAqkAnUFBoTFjeUsn6iBqq6d L2A3y69MGbAbop32Y4zkP34SSQqWX7cHPIcX+rmyanI+BCi8lLWR4gk2vOzpl5rh 94Y/KBoLNFTqqBvkI1eo745yfMwHqOgbhAWhXpFeVpDFyT6/YQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLwXrn9KK79AreG9WzlqSy8Jzx++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzx1NJ92/gV8c7I+jmBaIr scRBu+awpwlQHmYIBHGUgIdWVi/aSlLmbQNX0XK3KfG9CD4m5S2xEPLo8QiPHjdl z9IWxbm19mwIJr3rmDIuU+2jmpm8xadje9SeSk5Njy1Pg1z/LG7D3QRbcIuYrmy3 hVet5rZSky5Dp+6dUFsFQtizhduH1Ml8JVWD4/bQ0K6ZmcoB7qDAhKBUbDoAZJi1 8TEt6UQ14AqHvS+QTQ4bU4qPaMLEMReKBHitOClDBcFscB/f0jd9o4/vvCTr/XI4 YMF4CytCUn72U6gw1Qx+B6GKewTAygXziT376sypLf9c9C1C98S6ANIEVLw2oQ7T -----END CERTIFICATE-----Generated at Fri Apr 17 22:22:26 2026 by rpki-client