$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft File: d0125580-9deb-4d15-b1e7-1a6f7958b187.mft (raw, json) Hash identifier: aSXYKM6wwZjT9aJUAS92hQOlmLbgm0bfiL2Ua+eFwb8= Subject key identifier: 85:B8:9F:90:68:D8:28:39:32:5A:47:36:8E:36:88:57:51:B9:95:CF Authority key identifier: 27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19 Certificate issuer: /CN=d0125580-9deb-4d15-b1e7-1a6f7958b187 Certificate serial: 010D0C9F4328584D86B2C5A318F21BBEB3826280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft Manifest number: 010D0C9F432858473393E189E31C34275427A096 Signing time: Thu 16 Apr 2026 14:00:03 +0000 Manifest this update: Thu 16 Apr 2026 14:00:03 +0000 Manifest next update: Sun 19 Apr 2026 14:00:00 +0000 Files and hashes: 1: 5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa (hash: 1ftqLCcZxrGbhpA0VXiHFXxTKxah886+qUXI0EyHPMA=) 2: d0125580-9deb-4d15-b1e7-1a6f7958b187.crl (hash: iCkNuvSDmVIOvdFEHe6kmH5kKOWQNK9xOidBZYczBOM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b2:c5:a3:18:f2:1b:be:b3:82:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0125580-9deb-4d15-b1e7-1a6f7958b187 Validity Not Before: Apr 16 14:00:03 2026 GMT Not After : Apr 19 14:00:00 2026 GMT Subject: CN=80b54e2a-d66c-4f75-81fd-ec97d4ed52e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:e0:91:65:15:82:46:fb:7c:c0:40:79:e1: b2:a7:4d:78:b2:13:d6:86:ab:57:c5:18:ae:99:0f: cc:8d:a8:38:a2:78:a1:5c:93:fe:38:44:ea:df:26: 7b:65:fc:1b:06:a2:a4:19:4f:62:b4:c7:77:c8:59: 3f:8a:fe:36:d7:a8:7e:b8:00:73:3e:2d:2b:fd:33: f4:a1:db:d6:6e:cf:34:85:d0:76:03:16:16:22:10: c3:9f:82:10:84:46:e7:f7:2d:9f:d7:cc:e8:9c:3a: 95:28:70:48:68:36:41:59:33:7f:24:63:a1:91:33: 90:48:ec:a9:40:52:0a:7b:5d:93:c7:e6:6d:b0:b7: 20:d7:03:2f:1b:30:61:85:13:3a:97:f7:b7:8a:31: 8c:30:25:83:ee:65:a6:b9:ea:88:7a:7b:4b:51:9a: 6c:20:95:ed:e7:ad:e1:61:23:6c:4a:ca:b7:67:9a: 4d:41:92:98:00:23:35:25:00:88:fe:3a:4b:3f:c0: 33:38:90:1f:d5:5e:fd:ca:2a:03:f9:c3:50:6c:89: cd:75:b9:3d:4b:95:31:7a:f7:f3:af:3d:26:48:71: 8d:1e:40:a8:e0:1a:e9:c0:25:32:f5:19:ca:7c:d4: 37:2b:f6:fd:eb:cf:e3:e5:47:1f:dd:3d:97:7e:6d: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B8:9F:90:68:D8:28:39:32:5A:47:36:8E:36:88:57:51:B9:95:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl X509v3 Authority Key Identifier: keyid:27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:62:fc:72:af:f1:fb:c7:a5:58:43:78:e3:0e:02:15:6e:06: da:e9:f5:aa:01:a2:ab:ee:08:8d:82:55:7b:69:f5:8c:58:e7: 02:8f:59:30:de:96:bf:71:db:bf:e1:66:80:c1:82:f3:fd:e6: 17:00:73:5f:89:ab:9f:7a:74:ee:25:53:e2:d3:08:c1:14:6a: 99:50:ac:3a:6e:13:aa:b2:e1:70:2d:88:35:c8:d0:a6:b0:1b: e5:03:e5:33:9a:95:68:4d:43:80:ed:c7:43:e5:a9:7a:64:fa: 05:c3:3b:08:83:69:b7:62:da:ca:a3:d8:93:80:ac:a0:f1:94: 0c:01:f8:aa:43:e7:4f:0e:58:be:c8:21:57:b5:36:e4:4c:2a: d7:51:37:be:ec:7e:76:18:ad:1d:fa:f8:52:b8:2c:5c:30:21: 92:b5:8a:05:39:d3:c2:da:ad:0d:4a:1c:60:c6:95:be:89:bb: ac:bd:4d:ce:94:b5:8a:bf:a8:6d:f6:46:8c:b7:95:ef:09:eb: f2:3d:43:f0:42:ba:b4:14:d5:ab:ca:2a:62:ac:30:b2:70:18: 83:2c:c8:aa:33:91:2a:46:f6:44:2b:20:b4:29:24:c9:f8:de: 4a:f9:fa:6f:8f:9d:d5:71:51:38:52:39:dd:46:24:af:fd:df: b4:73:18:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GssWjGPIbvrOCYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAxMjU1ODAtOWRlYi00ZDE1LWIxZTctMWE2Zjc5NThi MTg3MB4XDTI2MDQxNjE0MDAwM1oXDTI2MDQxOTE0MDAwMFowLzEtMCsGA1UEAxMk ODBiNTRlMmEtZDY2Yy00Zjc1LTgxZmQtZWM5N2Q0ZWQ1MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R/gkWUVgkb7fMBAeeGyp014shPWhqtXxRiu mQ/Mjag4onihXJP+OETq3yZ7ZfwbBqKkGU9itMd3yFk/iv4216h+uABzPi0r/TP0 odvWbs80hdB2AxYWIhDDn4IQhEbn9y2f18zonDqVKHBIaDZBWTN/JGOhkTOQSOyp QFIKe12Tx+ZtsLcg1wMvGzBhhRM6l/e3ijGMMCWD7mWmueqIentLUZpsIJXt563h YSNsSsq3Z5pNQZKYACM1JQCI/jpLP8AzOJAf1V79yioD+cNQbInNdbk9S5Uxevfz rz0mSHGNHkCo4BrpwCUy9RnKfNQ3K/b968/j5Ucf3T2Xfm3nCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIW4n5Bo2Cg5MlpHNo42iFdRuZXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMDEy NTU4MC05ZGViLTRkMTUtYjFlNy0xYTZmNzk1OGIxODcvZDAxMjU1ODAtOWRlYi00 ZDE1LWIxZTctMWE2Zjc5NThiMTg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDAxMjU1ODAtOWRlYi00ZDE1LWIx ZTctMWE2Zjc5NThiMTg3L2QwMTI1NTgwLTlkZWItNGQxNS1iMWU3LTFhNmY3OTU4 YjE4Ny5jcmwwHwYDVR0jBBgwFoAUJx73rH5Oev5QSwlm08z0teZIqRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMDEyNTU4MC05ZGViLTRkMTUtYjFlNy0xYTZm Nzk1OGIxODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNYvxyr/H7x6VYQ3jjDgIV bgba6fWqAaKr7giNglV7afWMWOcCj1kw3pa/cdu/4WaAwYLz/eYXAHNfiaufenTu JVPi0wjBFGqZUKw6bhOqsuFwLYg1yNCmsBvlA+UzmpVoTUOA7cdD5al6ZPoFwzsI g2m3YtrKo9iTgKyg8ZQMAfiqQ+dPDli+yCFXtTbkTCrXUTe+7H52GK0d+vhSuCxc MCGStYoFOdPC2q0NShxgxpW+ibusvU3OlLWKv6ht9kaMt5XvCevyPUPwQrq0FNWr yipirDCycBiDLMiqM5EqRvZEKyC0KSTJ+N5K+fpvj53VcVE4UjndRiSv/d+0cxiw -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:46 2026 by rpki-client