$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft File: 5d42a494-a697-43ad-93a4-e9456779ed9a.mft (raw, json) Hash identifier: h8OZADZC34satSO1OnVOKhasww+2piQZVYjxyk83DeQ= Subject key identifier: 47:23:50:F0:F5:FF:25:5B:B7:79:2C:57:AD:E2:38:0D:9B:A8:EB:BA Authority key identifier: D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2 Certificate issuer: /CN=5d42a494-a697-43ad-93a4-e9456779ed9a Certificate serial: 010D0C9F4328584D87A10075E003A1C27F49B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft Manifest number: 010D0C9F4328584AE6DB14244263DEBD97D621F6 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sat 18 Apr 2026 22:00:00 +0000 Files and hashes: 1: 5d42a494-a697-43ad-93a4-e9456779ed9a.crl (hash: 688ZIWZhOpkv4ckwTzIywdJ7jd10TWG2rli1fM/RcLw=) 2: 99e556d5-93d1-3e21-bd16-71af71731fec.roa (hash: 5iQJB3wPoNiwhDLYWo0TJP11SBbvAbkjXfwxLj5FQxM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:00:75:e0:03:a1:c2:7f:49:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d42a494-a697-43ad-93a4-e9456779ed9a Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 18 22:00:00 2026 GMT Subject: CN=0fb42228-216d-4c46-95f7-82b549fdeb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:0e:1b:05:53:22:d1:11:fd:84:92:00:fc: 08:d2:1c:6a:22:0b:a9:da:bd:6d:db:3d:3a:f5:35: 1e:29:83:7d:6a:ae:af:69:a8:b1:95:a9:46:d0:9b: 46:d6:a2:3c:8d:36:30:95:37:3f:ca:89:4e:5e:40: dd:98:09:f3:e8:3d:0c:44:58:bf:a6:69:53:c3:fe: 0a:da:48:15:bb:5d:41:ff:1f:64:a0:61:9e:5a:d8: 41:4f:55:2b:3f:b7:a7:3e:f5:62:1e:4f:fc:5e:dc: 83:c3:d4:c6:ae:f9:ae:a0:9e:45:b4:86:9c:75:34: a5:e3:f3:b0:3e:ab:e3:04:a1:1c:1a:7e:8e:78:58: d2:94:58:63:6b:97:62:a5:6d:1c:d5:55:20:45:39: 10:13:e8:b4:60:2e:a7:3d:49:af:7e:cb:0c:1b:17: b0:a2:b9:11:2e:9f:56:f8:d1:7a:2b:72:33:a1:3a: b8:8f:c5:ba:42:1f:c4:e4:74:bf:d8:3a:14:1a:cf: 13:41:50:d4:a3:20:18:e6:30:54:fe:a5:55:c4:4a: c5:84:75:89:02:42:25:3e:88:66:1f:09:04:6d:f3: ff:2a:1b:71:3b:10:6c:d5:ae:55:8b:93:56:21:2c: 47:bd:2a:8d:d2:2d:88:a6:a1:ce:76:8b:03:9f:22: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:23:50:F0:F5:FF:25:5B:B7:79:2C:57:AD:E2:38:0D:9B:A8:EB:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl X509v3 Authority Key Identifier: keyid:D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:20:28:0a:86:d5:63:c4:8e:5f:71:38:25:7e:bf:7c:5c:fd: bc:c6:ae:88:64:5c:7e:05:f4:0c:f3:22:13:b9:f8:6f:4c:3c: 5e:2c:7f:33:e9:87:02:4e:a7:ee:a1:2c:e3:a4:fe:1e:b5:bb: ac:8e:46:a9:b0:25:47:f8:9d:a7:1a:ec:2e:02:59:b6:35:d4: eb:d7:a6:29:86:ec:00:bd:32:fb:38:b8:4c:68:46:39:56:62: 49:41:50:93:0b:76:6d:a0:9e:39:5e:c8:68:de:d5:97:be:a4: 22:be:9a:d7:80:10:d9:5e:a9:68:ad:ca:15:30:e3:ea:79:e8: 3b:45:c7:4f:50:61:8d:18:c8:b5:51:59:d4:46:05:85:dd:32: 34:63:a3:e6:ee:ad:ea:d9:9e:40:ba:7a:c3:74:f8:2b:01:ea: e6:65:fb:29:2b:87:d4:c5:f1:c0:a9:2b:39:99:7c:c1:a5:a4: 89:60:6b:49:ae:55:9e:ba:3e:5e:1d:2e:c7:52:1b:c2:94:07: 00:25:97:56:7d:d1:45:db:57:d1:a4:55:2b:53:84:17:d8:7d: ab:7a:bd:e6:fa:6f:b3:43:e2:93:a1:cf:0a:db:38:f6:de:af: 7c:f5:59:f0:47:93:a1:ab:9f:90:eb:eb:33:9e:52:85:ba:fe: 55:f6:7f:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQB14AOhwn9JtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ0MmE0OTQtYTY5Ny00M2FkLTkzYTQtZTk0NTY3Nzll ZDlhMB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxODIyMDAwMFowLzEtMCsGA1UEAxMk MGZiNDIyMjgtMjE2ZC00YzQ2LTk1ZjctODJiNTQ5ZmRlYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwokOGwVTItER/YSSAPwI0hxqIgup2r1t2z06 9TUeKYN9aq6vaaixlalG0JtG1qI8jTYwlTc/yolOXkDdmAnz6D0MRFi/pmlTw/4K 2kgVu11B/x9koGGeWthBT1UrP7enPvViHk/8XtyDw9TGrvmuoJ5FtIacdTSl4/Ow PqvjBKEcGn6OeFjSlFhja5dipW0c1VUgRTkQE+i0YC6nPUmvfssMGxeworkRLp9W +NF6K3IzoTq4j8W6Qh/E5HS/2DoUGs8TQVDUoyAY5jBU/qVVxErFhHWJAkIlPohm HwkEbfP/KhtxOxBs1a5Vi5NWISxHvSqN0i2IpqHOdosDnyLLUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEcjUPD1/yVbt3ksV63iOA2bqOu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZDQy YTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1Njc3OWVkOWEvNWQ0MmE0OTQtYTY5Ny00 M2FkLTkzYTQtZTk0NTY3NzllZDlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWQ0MmE0OTQtYTY5Ny00M2FkLTkz YTQtZTk0NTY3NzllZDlhLzVkNDJhNDk0LWE2OTctNDNhZC05M2E0LWU5NDU2Nzc5 ZWQ5YS5jcmwwHwYDVR0jBBgwFoAU2CCAJQ5ZXw78UtN21nfLqg8tCeIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZDQyYTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1 Njc3OWVkOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsICgKhtVjxI5fcTglfr98 XP28xq6IZFx+BfQM8yITufhvTDxeLH8z6YcCTqfuoSzjpP4etbusjkapsCVH+J2n GuwuAlm2NdTr16YphuwAvTL7OLhMaEY5VmJJQVCTC3ZtoJ45Xsho3tWXvqQivprX gBDZXqlorcoVMOPqeeg7RcdPUGGNGMi1UVnURgWF3TI0Y6Pm7q3q2Z5AunrDdPgr AermZfspK4fUxfHAqSs5mXzBpaSJYGtJrlWeuj5eHS7HUhvClAcAJZdWfdFF21fR pFUrU4QX2H2rer3m+m+zQ+KToc8K2zj23q989VnwR5Ohq5+Q6+sznlKFuv5V9n9r -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:18 2026 by rpki-client