$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft File: 249f7a2c-0438-4d20-8f0b-095a38d1046f.mft (raw, json) Hash identifier: iTM92sosZaogm/j3HS8OkZC8lv5HJThdJN+vfHlHS8w= Subject key identifier: F1:D6:8B:92:6B:B1:25:EF:FC:B4:99:F5:0C:12:D7:9E:20:A1:7D:69 Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Certificate serial: 010D0C9F4328584D8835E322776B8D21A6095680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft Manifest number: 010D0C9F4328584BEB0FA66CD497B3C1B8891C18 Signing time: Fri 17 Apr 2026 03:00:03 +0000 Manifest this update: Fri 17 Apr 2026 03:00:03 +0000 Manifest next update: Mon 20 Apr 2026 03:00:00 +0000 Files and hashes: 1: 249f7a2c-0438-4d20-8f0b-095a38d1046f.crl (hash: vCueq6DVKXQxRY2YxHhU5o2nSZgn4Nm5RZ13Y3KzhpA=) 2: fa929d22-5b04-3656-bfd5-92174907d027.roa (hash: dOaReEJUssfj8+0694OJs9+IhBSUrTBLSyh6r6JR1kQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:35:e3:22:77:6b:8d:21:a6:09:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Validity Not Before: Apr 17 03:00:03 2026 GMT Not After : Apr 20 03:00:00 2026 GMT Subject: CN=bb57d38b-1ffb-4c31-9524-f67c213d8964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:75:af:b0:7c:b8:8e:08:57:2f:8a:e7:8a:e5: 7f:a4:e7:61:7b:5f:75:da:e9:0f:c3:93:fe:0b:88: 15:ec:6f:37:c5:07:81:ff:81:f5:81:d5:33:67:ca: d0:94:66:01:35:9f:ef:2d:b2:86:30:f2:93:a8:96: 0e:cc:5d:e4:77:95:fb:48:89:92:d3:a3:9a:c5:bf: eb:90:f9:2c:5a:95:ed:e4:7f:a3:38:8d:59:e0:b4: 31:65:4f:0d:4f:1d:fd:21:ca:9b:fc:bd:b8:89:fd: 54:17:0f:d8:52:08:0d:9c:55:a2:69:08:ed:aa:9b: 66:00:86:fa:68:8f:48:4d:03:b5:72:cc:28:1a:fd: 59:ef:50:2c:c9:ab:07:53:03:51:9f:a8:51:8d:5e: 71:ff:3d:68:20:88:fa:fc:30:f8:f6:36:fe:f1:b4: df:98:74:03:54:1d:11:63:b2:66:31:c3:19:2f:f9: f8:13:59:66:ea:32:03:c2:45:ea:02:b2:1c:fb:bb: 0d:04:32:fb:f3:94:64:05:54:33:d6:8d:5d:73:f0: 79:ec:28:d8:96:38:a5:7d:24:3e:f3:e6:bc:e8:e5: 45:b2:5e:4b:28:70:e5:61:f6:ae:38:93:9c:6b:61: 3b:be:2b:ae:14:7a:97:50:ed:2b:ee:b9:5a:a1:b8: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D6:8B:92:6B:B1:25:EF:FC:B4:99:F5:0C:12:D7:9E:20:A1:7D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl X509v3 Authority Key Identifier: keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:50:5c:8d:79:ca:b5:6e:6a:af:1c:b5:29:45:36:91:1c:d9: 60:f8:e4:79:47:88:51:1c:a1:d1:3f:74:52:9e:77:f6:f5:fe: 4c:e3:f6:85:2e:56:7b:9d:74:e0:fb:fb:aa:16:88:5e:5b:43: 3d:63:aa:7b:1d:d2:03:b9:48:5b:3c:e7:cd:80:ed:3e:4b:e3: 6a:98:44:81:1d:8d:97:17:ad:33:93:d7:07:2f:08:39:73:52: 68:d1:86:12:67:a8:5e:33:2b:10:4c:1f:b4:7a:cb:3e:81:ad: 95:3b:22:15:8f:c7:4e:cd:0c:6d:68:3c:eb:30:4a:5f:dc:38: a0:22:dc:94:5c:0f:91:ed:6e:b9:bd:db:32:30:35:e3:02:2b: 82:76:d3:5d:8c:cf:4c:7a:3d:09:2b:79:52:8f:dc:70:2b:10: 7a:6c:86:0a:00:b4:81:71:94:87:e4:83:86:00:14:5e:ec:67: 97:1c:cd:ab:4a:f8:23:a5:0c:d2:71:c3:5c:86:c8:0a:3e:a2: 23:91:40:55:e9:36:be:e5:76:0e:8b:aa:59:ad:34:c8:67:e5: 48:00:9f:72:55:be:97:a6:33:08:8f:87:8a:86:ef:12:08:e8: a5:0e:22:f3:21:a6:da:7d:43:ee:a0:72:34:33:1b:10:7d:c2: 60:80:b6:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2INeMid2uNIaYJVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEw NDZmMB4XDTI2MDQxNzAzMDAwM1oXDTI2MDQyMDAzMDAwMFowLzEtMCsGA1UEAxMk YmI1N2QzOGItMWZmYi00YzMxLTk1MjQtZjY3YzIxM2Q4OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnWvsHy4jghXL4rniuV/pOdhe1912ukPw5P+ C4gV7G83xQeB/4H1gdUzZ8rQlGYBNZ/vLbKGMPKTqJYOzF3kd5X7SImS06Oaxb/r kPksWpXt5H+jOI1Z4LQxZU8NTx39Icqb/L24if1UFw/YUggNnFWiaQjtqptmAIb6 aI9ITQO1cswoGv1Z71AsyasHUwNRn6hRjV5x/z1oIIj6/DD49jb+8bTfmHQDVB0R Y7JmMcMZL/n4E1lm6jIDwkXqArIc+7sNBDL785RkBVQz1o1dc/B57CjYljilfSQ+ 8+a86OVFsl5LKHDlYfauOJOca2E7viuuFHqXUO0r7rlaobgoqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPHWi5JrsSXv/LSZ9QwS154goX1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlm N2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvMjQ5ZjdhMmMtMDQzOC00 ZDIwLThmMGItMDk1YTM4ZDEwNDZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjQ5ZjdhMmMtMDQzOC00ZDIwLThm MGItMDk1YTM4ZDEwNDZmLzI0OWY3YTJjLTA0MzgtNGQyMC04ZjBiLTA5NWEzOGQx MDQ2Zi5jcmwwHwYDVR0jBBgwFoAUNY2F6KzHAj/AIloDXSktnY57TSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVh MzhkMTA0NmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1UFyNecq1bmqvHLUpRTaR HNlg+OR5R4hRHKHRP3RSnnf29f5M4/aFLlZ7nXTg+/uqFoheW0M9Y6p7HdIDuUhb POfNgO0+S+NqmESBHY2XF60zk9cHLwg5c1Jo0YYSZ6heMysQTB+0ess+ga2VOyIV j8dOzQxtaDzrMEpf3DigItyUXA+R7W65vdsyMDXjAiuCdtNdjM9Mej0JK3lSj9xw KxB6bIYKALSBcZSH5IOGABRe7GeXHM2rSvgjpQzSccNchsgKPqIjkUBV6Ta+5XYO i6pZrTTIZ+VIAJ9yVb6XpjMIj4eKhu8SCOilDiLzIabafUPuoHI0MxsQfcJggLZ7 -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:56 2026 by rpki-client