$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft File: 4e84d19a-da77-4951-9413-0914c81e76e1.mft (raw, json) Hash identifier: sHXb9mBMcW69e+gYdJJe/w50w+2pCc43S8jwlTHn6Ic= Subject key identifier: ED:26:72:4B:CF:ED:70:1D:94:E1:94:E4:5A:7E:4E:20:71:DC:CD:BD Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584D87A105B7E87008E6F8FC8680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft Manifest number: 010D0C9F43285848D747B47D9F75BCF18E54CCF9 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sun 19 Apr 2026 22:00:00 +0000 Files and hashes: 1: 387f6db0-20d1-3de5-86c6-570f32283f2a.roa (hash: 30yc1vK1jWqQBRc9mZXs4G4ONW+hDmQYRZhP43ikoH4=) 2: 4e84d19a-da77-4951-9413-0914c81e76e1.crl (hash: h3bJ8hgyI8qmf8jrMrWbzyi17kyVk8vBQvPVQuN1GdA=) 3: 829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (hash: 0+wrhljr2NiTeetNyAN3lzvAR2UMIqUdu6REwL8R/YE=) 4: f03671be-0e2c-3c3a-8be5-263749fffc37.roa (hash: ewVVR7pKBP7LECGRIuShOGHUbcMXC8bnbv2woZb58FM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:05:b7:e8:70:08:e6:f8:fc:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 19 22:00:00 2026 GMT Subject: CN=bc3a5e5a-67ee-4e6b-ba61-a6a1af7c02d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:8c:9d:cb:4c:6f:8e:1a:a0:c5:cc:e2:9d: 91:2c:a3:2e:ed:2c:aa:8d:b4:ef:8c:7f:9d:91:17: 19:ee:9c:4a:ed:fd:c2:4d:72:a5:3a:01:07:b1:0d: ec:54:8d:89:b6:c2:ce:88:b5:91:7b:65:5a:a9:a8: 5c:d8:08:91:0b:31:aa:8d:be:f4:9a:32:7e:04:8e: 79:ba:2b:73:fa:83:82:da:f3:0c:09:2c:5d:08:4b: ed:de:ec:90:8b:90:9f:5a:a7:46:00:d7:9d:85:76: 79:d3:c7:90:50:95:d9:ee:ba:4c:3f:e5:f5:80:c4: 3a:dd:44:c7:c2:64:96:b3:fe:87:e5:e8:51:18:6d: 58:8f:c5:28:22:78:43:cf:8b:d2:e0:c0:5b:43:ec: 70:f3:db:27:ad:79:12:d1:fa:ad:46:bd:f0:4c:c9: 42:31:61:d3:63:0b:9a:0f:4c:68:23:aa:3b:73:b0: c0:4d:56:18:bd:6f:a2:9d:1d:31:f7:07:76:f8:65: 97:f1:2a:bd:3e:6d:fc:a9:0a:e3:ec:51:8d:bc:66: 85:7e:0c:60:a7:d0:c8:ba:7e:fb:51:f4:6e:c4:cb: a9:84:0b:41:de:9a:f6:1d:e9:2b:3f:f5:0a:62:08: 34:8c:d0:95:6a:f5:0d:44:ab:56:1c:38:ac:2a:6e: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:26:72:4B:CF:ED:70:1D:94:E1:94:E4:5A:7E:4E:20:71:DC:CD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b6:67:ae:c4:e5:36:b6:62:3b:c1:88:7d:59:9b:3a:27:9e: d9:d1:a3:d3:81:75:e9:fc:75:b0:c7:3f:05:94:e0:f1:a2:86: 33:8e:e3:06:75:19:80:4d:65:4a:87:6e:d5:32:b4:32:cb:22: 9a:ed:52:37:91:a6:c7:61:9c:68:4d:39:e4:00:3a:6b:a2:f3: 1e:3e:52:07:a6:a7:87:f8:9a:ab:99:d0:74:59:0c:a6:33:a7: 73:e7:b6:24:d5:a7:93:a9:64:f5:ac:3e:d8:55:39:ee:68:a4: e0:c9:ed:50:a6:c7:1f:01:b5:c2:c6:ba:6e:dc:47:ea:55:8d: 32:67:a5:43:15:31:39:c9:39:13:c6:29:31:6e:f7:9f:e4:a9: b4:3a:06:c7:93:7f:4a:a8:1d:88:f0:0e:58:36:93:bc:a8:0a: 66:e5:c3:72:69:21:0d:b0:f5:99:79:55:e8:77:59:aa:52:74: ff:b0:72:2a:8c:59:97:a5:49:f9:a3:2d:bf:d1:0e:f4:1c:3b: ab:1d:d2:13:8a:4e:0a:db:1f:ae:6c:32:59:36:b5:d9:7a:58: 68:d5:6c:e6:97:fe:bd:f3:03:d5:b0:c5:77:aa:0a:c7:b0:5a: c8:77:a0:e7:14:4c:e7:0c:75:96:82:f0:92:f7:45:e0:1e:5a: 8d:60:b7:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQW36HAI5vj8hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxOTIyMDAwMFowLzEtMCsGA1UEAxMk YmMzYTVlNWEtNjdlZS00ZTZiLWJhNjEtYTZhMWFmN2MwMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oSMnctMb44aoMXM4p2RLKMu7SyqjbTvjH+d kRcZ7pxK7f3CTXKlOgEHsQ3sVI2JtsLOiLWRe2Vaqahc2AiRCzGqjb70mjJ+BI55 uitz+oOC2vMMCSxdCEvt3uyQi5CfWqdGANedhXZ508eQUJXZ7rpMP+X1gMQ63UTH wmSWs/6H5ehRGG1Yj8UoInhDz4vS4MBbQ+xw89snrXkS0fqtRr3wTMlCMWHTYwua D0xoI6o7c7DATVYYvW+inR0x9wd2+GWX8Sq9Pm38qQrj7FGNvGaFfgxgp9DIun77 UfRuxMuphAtB3pr2HekrP/UKYgg0jNCVavUNRKtWHDisKm5w5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO0mckvP7XAdlOGU5Fp+TiBx3M29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvNGU4NGQxOWEtZGE3Ny00 OTUxLTk0MTMtMDkxNGM4MWU3NmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAstmeuxOU2tmI7wYh9WZs6 J57Z0aPTgXXp/HWwxz8FlODxooYzjuMGdRmATWVKh27VMrQyyyKa7VI3kabHYZxo TTnkADprovMePlIHpqeH+JqrmdB0WQymM6dz57Yk1aeTqWT1rD7YVTnuaKTgye1Q pscfAbXCxrpu3EfqVY0yZ6VDFTE5yTkTxikxbvef5Km0OgbHk39KqB2I8A5YNpO8 qApm5cNyaSENsPWZeVXod1mqUnT/sHIqjFmXpUn5oy2/0Q70HDurHdITik4K2x+u bDJZNrXZelho1Wzml/698wPVsMV3qgrHsFrId6DnFEznDHWWgvCS90XgHlqNYLc0 -----END CERTIFICATE-----Generated at Fri Apr 17 17:47:12 2026 by rpki-client