$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: rLYMAbujvPGUjbG2FyXYJUL+cUWHYbFElpx0+y4GDO8= Subject key identifier: 74:83:75:C0:B7:E9:90:46:02:81:3B:EF:A8:99:8C:45:4B:18:29:AA Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584D8A125B38FFC5CD69EBBD7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA6C3 Signing time: Fri 17 Apr 2026 19:00:03 +0000 Manifest this update: Fri 17 Apr 2026 19:00:03 +0000 Manifest next update: Mon 20 Apr 2026 19:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: 43jCvaoKwcOEnTk2f3L99RdNW7Lg47sL0vYr4BdArr0=) 2: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: LQiwGDCbxJ8Hb6el3x7tyTQlfReSPhQSJJybizsOrAk=) 3: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: GGVo550DEhxZpRCtwVKnaCLim+6XNi+grz0WU0JUKg8=) 4: d779b9b9-5804-3150-8ebf-8baf0661eeaf.roa (hash: 2R02wcR6mbh6Etuzp5E3qrmn8RpdzjgX+ApSMbpx4hQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:12:5b:38:ff:c5:cd:69:eb:bd:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Apr 17 19:00:03 2026 GMT Not After : Apr 20 19:00:00 2026 GMT Subject: CN=b6cc07a5-b3e7-4881-a89d-9eea5d0efdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:57:d0:71:5c:bc:d5:b3:48:13:05:c1:ca:23: 03:53:42:11:ea:0d:16:ba:40:b4:8e:86:32:15:90: 42:1a:dc:de:68:e9:b9:5c:7c:d7:23:3b:25:9c:85: 7f:e8:e4:50:d2:ea:e7:f5:db:61:41:7f:da:60:90: 34:be:f0:5d:76:df:90:47:51:71:cc:59:06:37:76: bb:b9:93:17:5c:fc:6b:fc:82:2a:62:4a:90:ec:d8: 12:4c:b0:0a:62:35:1a:a2:89:05:13:b6:21:5a:7a: 5c:07:aa:b6:36:ba:04:69:c0:21:8f:69:77:63:5e: d0:56:55:07:c0:8a:78:9b:35:14:cc:28:6b:32:1f: 3e:a7:30:76:88:52:fb:5c:64:57:02:31:63:c2:60: b2:21:4f:d9:c4:c7:e4:b8:77:91:49:d4:27:6a:2e: 1f:83:1c:53:7f:2a:7f:83:f6:9c:35:55:f9:14:a0: dc:15:6c:12:52:8e:7b:d8:eb:51:e4:75:6f:6e:08: d4:1f:92:56:e8:05:40:45:21:53:65:d6:81:14:39: 9e:8c:fa:96:ae:4c:03:4c:39:69:85:bd:39:06:45: 6b:9f:31:c0:3b:b2:cd:60:08:b8:58:31:ad:c0:0e: 00:9d:44:93:bc:f1:89:33:08:84:03:8e:26:7a:11: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:83:75:C0:B7:E9:90:46:02:81:3B:EF:A8:99:8C:45:4B:18:29:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b6:48:35:bb:ad:83:eb:08:b7:b8:37:01:d6:e3:dc:00:45: 8d:0b:1d:aa:84:fd:a2:dd:c7:a1:33:a1:86:59:40:1f:58:19: 4a:cd:c6:ab:67:0a:4f:1c:1e:8a:cf:cd:19:17:32:14:4a:28: 85:cd:18:92:eb:d6:13:0d:dc:6a:91:2e:4f:63:7e:70:40:e5: 86:bb:08:17:a5:fd:10:73:06:2e:84:ab:d6:10:a8:a3:7f:ba: 57:65:f3:bd:5e:8b:30:48:da:e7:7b:5d:17:1e:26:2c:54:28: d2:11:a0:26:bb:a0:66:33:9b:17:39:eb:3b:48:1c:03:2b:7a: 3a:27:a4:4b:09:04:9b:8d:c3:17:33:f5:76:d9:fe:8c:66:29: 6b:e0:91:cd:d7:e6:7f:e3:b7:ef:98:53:2f:79:23:07:5e:95: ab:02:34:de:f8:ad:0f:71:01:aa:4f:c8:75:b3:f8:eb:f1:88: 1d:fa:b4:5b:e8:da:78:f7:75:61:69:45:24:70:8e:17:8f:ea: 49:64:a4:b6:1c:79:d5:65:ea:8f:78:65:31:a2:53:4e:c2:80: cf:44:df:fb:7f:56:d6:70:9a:15:c3:a9:ad:d2:d7:7e:f7:21: 1a:d1:13:46:7a:d5:4a:d4:ac:95:ec:d3:70:eb:c8:45:d8:d8: 0e:de:08:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2KEls4/8XNaeu9dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MDQxNzE5MDAwM1oXDTI2MDQyMDE5MDAwMFowLzEtMCsGA1UEAxMk YjZjYzA3YTUtYjNlNy00ODgxLWE4OWQtOWVlYTVkMGVmZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlfQcVy81bNIEwXByiMDU0IR6g0WukC0joYy FZBCGtzeaOm5XHzXIzslnIV/6ORQ0urn9dthQX/aYJA0vvBddt+QR1FxzFkGN3a7 uZMXXPxr/IIqYkqQ7NgSTLAKYjUaookFE7YhWnpcB6q2NroEacAhj2l3Y17QVlUH wIp4mzUUzChrMh8+pzB2iFL7XGRXAjFjwmCyIU/ZxMfkuHeRSdQnai4fgxxTfyp/ g/acNVX5FKDcFWwSUo572OtR5HVvbgjUH5JW6AVARSFTZdaBFDmejPqWrkwDTDlp hb05BkVrnzHAO7LNYAi4WDGtwA4AnUSTvPGJMwiEA44mehHmEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHSDdcC36ZBGAoE776iZjEVLGCmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3tkg1u62D6wi3uDcB1uPc AEWNCx2qhP2i3cehM6GGWUAfWBlKzcarZwpPHB6Kz80ZFzIUSiiFzRiS69YTDdxq kS5PY35wQOWGuwgXpf0QcwYuhKvWEKijf7pXZfO9XoswSNrne10XHiYsVCjSEaAm u6BmM5sXOes7SBwDK3o6J6RLCQSbjcMXM/V22f6MZilr4JHN1+Z/47fvmFMveSMH XpWrAjTe+K0PcQGqT8h1s/jr8Ygd+rRb6Np493VhaUUkcI4Xj+pJZKS2HHnVZeqP eGUxolNOwoDPRN/7f1bWcJoVw6mt0td+9yEa0RNGetVK1KyV7NNw68hF2NgO3gjW -----END CERTIFICATE-----Generated at Fri Apr 17 23:52:30 2026 by rpki-client