$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft File: a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft (raw, json) Hash identifier: ogc2nifLSiVEIqba/s/k/NsPJNVOXUMdvsMNKfoliNw= Subject key identifier: D2:C4:8D:B2:EE:7A:60:8F:2E:45:C4:C9:BC:08:39:DA:3E:3E:5A:CD Authority key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Certificate issuer: /CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Certificate serial: 010D0C9F4328584D8D90B1EE3DAACD248CA86060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft Manifest number: 010D0C9F4328584ACA762691C4D9087D8F0FF446 Signing time: Sun 19 Apr 2026 01:02:03 +0000 Manifest this update: Sun 19 Apr 2026 01:02:03 +0000 Manifest next update: Mon 20 Apr 2026 19:00:00 +0000 Files and hashes: 1: a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl (hash: gXKza6hpviqDOwn6xvP9JwLtbWjsLvCy466ma7sdH4k=) 2: bc7894b0-13bb-3996-a597-d19d7ca6829d.roa (hash: sUczAZr/L5DE8A0O1f9He6wcfZpxRa15Ph1JewdAifw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:90:b1:ee:3d:aa:cd:24:8c:a8:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Validity Not Before: Apr 19 01:02:03 2026 GMT Not After : Apr 20 19:00:00 2026 GMT Subject: CN=3201f95b-282e-4050-9bde-5f26a7f06019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:35:8f:79:9d:ce:77:a3:d5:40:ad:98:55: 7c:d5:56:d3:35:6d:e1:7d:5f:cb:07:67:b7:7f:6a: ea:23:e7:b2:0c:31:07:9b:ba:c1:3e:22:e7:f9:dc: c2:00:72:bc:7f:38:e4:ba:62:52:1e:ea:95:b2:03: 4c:b4:38:b0:cc:61:be:52:c3:57:a6:96:46:b4:c2: 4a:c6:1c:00:6a:b0:15:19:3b:61:e4:0d:77:c2:4a: ed:6f:06:42:9b:74:07:14:0d:8f:6a:14:a7:db:7a: 7a:4b:79:0d:78:f9:87:b2:95:d7:b0:43:e8:76:5c: d0:57:ce:4f:f0:ad:2b:95:4b:c1:69:d8:3c:25:ca: 5c:f9:62:8c:0e:a3:17:b7:76:fc:8b:17:46:63:7e: 38:18:05:21:e3:a8:66:aa:61:56:31:2f:0d:55:2d: da:c4:be:c0:36:e4:f3:dd:44:67:22:d7:bf:6b:45: ef:fa:42:ad:cf:66:40:f5:0d:fa:eb:ac:c2:8b:40: f4:fa:48:35:21:e9:8a:8e:98:f1:7c:34:29:e3:5b: 83:eb:ee:0f:d8:2f:8d:b2:d5:0c:db:3b:6d:ee:48: 5b:b6:4c:da:88:d7:35:e2:f5:d8:e2:a7:cc:58:16: 88:e7:53:8d:ed:06:25:8a:ff:3a:1d:56:a2:b9:6c: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:8D:B2:EE:7A:60:8F:2E:45:C4:C9:BC:08:39:DA:3E:3E:5A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl X509v3 Authority Key Identifier: keyid:1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f5:0e:0c:9a:8a:ae:07:37:b8:82:e2:80:6c:11:08:81:96: 23:cb:d9:d8:72:50:67:49:b8:84:29:74:ba:8c:a5:c9:8a:a3: ac:a2:4a:5f:1c:4a:4f:53:19:ba:c7:4a:30:49:14:90:d4:47: 6a:cd:08:10:78:e3:ac:e8:b6:eb:ff:ea:1c:13:a9:b4:1b:b1: 90:75:ab:aa:07:33:79:12:c2:d4:d5:29:cc:bc:28:1c:82:b8: 5b:1f:5e:e2:9a:d0:a3:aa:39:a1:58:9b:b3:75:26:fb:07:1e: 69:a0:e4:0c:80:33:88:b5:54:38:c5:22:6c:b5:f8:0f:93:d3: 41:d9:42:8a:9b:1f:03:75:4f:e4:22:9e:48:b9:70:01:81:37: aa:54:49:8e:76:9a:e3:18:8a:db:25:79:e2:a8:d7:b3:a4:c9: 99:dc:1a:4e:79:8b:cc:91:ea:3a:a2:c8:c5:c7:20:7c:39:56: 9a:1b:40:dd:d6:0f:5b:ba:53:b8:0a:8d:56:37:9d:43:87:53: 3f:dc:b5:dd:00:f2:70:0d:7e:4e:bc:48:34:80:93:4e:2a:1d: 95:42:21:fb:52:4b:d5:07:c6:89:f6:ce:4d:c5:8e:f0:9e:4e: 44:18:c1:7d:51:b9:06:85:77:e0:63:1b:93:8f:b6:92:0a:01: cd:51:bd:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2NkLHuParNJIyoYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkN2Y5MDItY2MwMC00MTc1LTk1MWEtZmUzYTUwYzBj ZWFiMB4XDTI2MDQxOTAxMDIwM1oXDTI2MDQyMDE5MDAwMFowLzEtMCsGA1UEAxMk MzIwMWY5NWItMjgyZS00MDUwLTliZGUtNWYyNmE3ZjA2MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXA1j3mdznej1UCtmFV81VbTNW3hfV/LB2e3 f2rqI+eyDDEHm7rBPiLn+dzCAHK8fzjkumJSHuqVsgNMtDiwzGG+UsNXppZGtMJK xhwAarAVGTth5A13wkrtbwZCm3QHFA2PahSn23p6S3kNePmHspXXsEPodlzQV85P 8K0rlUvBadg8Jcpc+WKMDqMXt3b8ixdGY344GAUh46hmqmFWMS8NVS3axL7ANuTz 3URnIte/a0Xv+kKtz2ZA9Q3666zCi0D0+kg1IemKjpjxfDQp41uD6+4P2C+NstUM 2ztt7khbtkzaiNc14vXY4qfMWBaI51ON7QYliv86HVaiuWxpmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLEjbLuemCPLkXEybwIOdo+PlrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hOWQ3 ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBjMGNlYWIvYTlkN2Y5MDItY2MwMC00 MTc1LTk1MWEtZmUzYTUwYzBjZWFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTlkN2Y5MDItY2MwMC00MTc1LTk1 MWEtZmUzYTUwYzBjZWFiL2E5ZDdmOTAyLWNjMDAtNDE3NS05NTFhLWZlM2E1MGMw Y2VhYi5jcmwwHwYDVR0jBBgwFoAUHXOhNSIE0a4VmTfIxQDKeZGsO10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hOWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNh NTBjMGNlYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw9Q4MmoquBze4guKAbBEI gZYjy9nYclBnSbiEKXS6jKXJiqOsokpfHEpPUxm6x0owSRSQ1EdqzQgQeOOs6Lbr /+ocE6m0G7GQdauqBzN5EsLU1SnMvCgcgrhbH17imtCjqjmhWJuzdSb7Bx5poOQM gDOItVQ4xSJstfgPk9NB2UKKmx8DdU/kIp5IuXABgTeqVEmOdprjGIrbJXniqNez pMmZ3BpOeYvMkeo6osjFxyB8OVaaG0Dd1g9bulO4Co1WN51Dh1M/3LXdAPJwDX5O vEg0gJNOKh2VQiH7UkvVB8aJ9s5NxY7wnk5EGMF9UbkGhXfgYxuTj7aSCgHNUb2G -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:23 2026 by rpki-client