$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft File: bf65551a-76c3-44b0-b183-7019ab1cdb35.mft (raw, json) Hash identifier: 2huLhQ1XmA4VuNERDSfczX09WM8dWwpK6ftUDPY9QpM= Subject key identifier: FA:25:77:4C:D1:4E:B5:02:64:5C:08:1B:3D:E4:99:A2:05:2E:E0:0A Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584D6C2D489BC7E0379FE423E240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft Manifest number: 010D0C9F4328584073A835E183BB157CB0E73B46 Signing time: Tue 07 Apr 2026 02:00:03 +0000 Manifest this update: Tue 07 Apr 2026 02:00:03 +0000 Manifest next update: Thu 09 Apr 2026 02:00:00 +0000 Files and hashes: 1: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (hash: XJAhRuGOg3rgJJI+bpZV7DL6TOdaULre+9FnDMRHx5w=) 2: 91659b14-1fa3-39a1-8710-69be8ad85679.roa (hash: UHBBL6zW5Tj5cgEpPtFtB9zcaUIqfNjGlv/CklL8QkY=) 3: 97e432fe-99ef-32d7-be43-8c4c824afc6f.roa (hash: CCYkYouLjFFzA3RRitfPZ30qfo4MdJnKiv+Wz8x/MXE=) 4: a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa (hash: 02mvkGjJ99pPp79i2i4Q5s3S9VH0uz/6EbbcuR7DPio=) 5: bf65551a-76c3-44b0-b183-7019ab1cdb35.crl (hash: 2Ncq75jwo5JgTJ3LziEuVOTMkC1s//CTqQgiqVpJruQ=) 6: c0abde07-4a6d-396c-b836-ba3936287aac.roa (hash: qgezC68SkJb/t9i8GFbuz5ygKxrNRaqxUvM+2RVNsMs=) 7: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (hash: sOfOAZmYHtImc02HLemJGg9glN7dm/6YtRmZJbliopI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:2d:48:9b:c7:e0:37:9f:e4:23:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 7 02:00:03 2026 GMT Not After : Apr 9 02:00:00 2026 GMT Subject: CN=5630f0b9-a9b9-45b7-b18e-e86f3cba9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:98:ff:ff:5d:89:ec:47:92:48:08:6c:d9:89: 4a:70:f5:d9:f3:f1:51:b0:f4:e4:83:de:db:70:83: eb:02:95:0d:5c:b3:24:66:6a:18:05:e7:54:1c:c1: ee:58:0c:56:12:fe:9f:31:b5:19:8e:0d:95:db:94: 84:36:90:95:85:89:90:bb:82:f0:1c:65:67:ae:11: 37:8d:c2:3e:2f:f4:71:08:ff:34:df:3d:6c:ab:0a: bd:f4:c4:6d:c4:f3:37:4e:a7:f1:5f:8a:c4:9c:3a: 19:a5:dd:3e:a2:94:12:1e:fb:58:88:ba:74:fe:e5: bb:8e:6b:45:9f:69:8c:42:f6:52:07:eb:08:22:ad: 51:c3:ad:d4:ec:cf:4e:a0:19:5d:46:e5:e2:0b:66: 1f:c3:1f:a1:09:3d:46:63:56:8d:ea:ff:71:86:4b: b2:07:db:6c:a4:d1:0d:e4:97:47:e8:d1:18:e3:d1: 1a:ee:2a:ac:f1:e3:ea:01:5a:97:6e:4a:c5:d4:93: 66:66:55:9a:41:2a:a3:77:25:73:59:ef:18:02:ee: 2c:73:7c:ef:b9:95:b2:14:02:2c:75:32:a4:bc:9f: e9:08:06:ab:e4:4b:f2:26:96:89:ba:23:51:54:5d: bb:9d:99:1a:76:0f:e0:c5:67:4b:2e:5b:5e:ae:83: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:77:4C:D1:4E:B5:02:64:5C:08:1B:3D:E4:99:A2:05:2E:E0:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:17:89:74:95:9c:43:76:c4:a9:07:97:75:54:ec:52:ba:46: 7f:27:9d:ff:9b:cb:61:25:f8:89:ca:e3:61:b4:d2:c1:92:87: e5:eb:e3:fa:e9:c9:b6:c0:82:3a:dd:68:e5:8b:41:d8:13:55: c3:81:df:80:75:10:70:d7:41:b1:38:35:86:19:12:32:3d:4e: 5f:8f:70:3e:02:b5:e2:e6:5a:bd:f7:99:70:35:a6:ea:3a:82: 63:e0:97:ae:1c:d9:03:e9:92:69:ce:75:2f:33:79:e3:67:d6: 56:dc:f0:10:33:c2:5b:81:0f:b5:d6:16:94:dc:5a:65:05:e3: 19:81:f5:3b:f0:a1:e1:ae:c8:43:4b:82:44:28:72:93:3d:a6: ae:aa:12:39:21:de:25:5c:d2:36:63:82:20:fc:62:6c:53:b2: 5f:fd:79:e8:d7:dc:90:7e:86:0c:dd:2e:0c:2a:71:55:c3:c3: 34:83:f0:b3:24:ca:80:02:ea:27:40:75:b2:9e:87:3f:d8:60: bc:cd:48:28:da:10:d6:0c:ab:fc:1c:b9:bb:2f:96:62:90:f0: fe:1b:46:c3:d4:0c:8e:a0:a4:ca:0d:ce:4e:1a:0e:3b:e4:a9: a2:1e:53:ee:e2:c7:98:05:e6:40:2c:64:5e:d7:85:41:26:0b: c2:f9:dd:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1sLUibx+A3n+Qj4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDQwNzAyMDAwM1oXDTI2MDQwOTAyMDAwMFowLzEtMCsGA1UEAxMk NTYzMGYwYjktYTliOS00NWI3LWIxOGUtZTg2ZjNjYmE5MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpj//12J7EeSSAhs2YlKcPXZ8/FRsPTkg97b cIPrApUNXLMkZmoYBedUHMHuWAxWEv6fMbUZjg2V25SENpCVhYmQu4LwHGVnrhE3 jcI+L/RxCP803z1sqwq99MRtxPM3TqfxX4rEnDoZpd0+opQSHvtYiLp0/uW7jmtF n2mMQvZSB+sIIq1Rw63U7M9OoBldRuXiC2Yfwx+hCT1GY1aN6v9xhkuyB9tspNEN 5JdH6NEY49Ea7iqs8ePqAVqXbkrF1JNmZlWaQSqjdyVzWe8YAu4sc3zvuZWyFAIs dTKkvJ/pCAar5EvyJpaJuiNRVF27nZkadg/gxWdLLlteroMA8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPold0zRTrUCZFwIGz3kmaIFLuAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYmY2NTU1MWEtNzZjMy00 NGIwLWIxODMtNzAxOWFiMWNkYjM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2F4l0lZxDdsSpB5d1VOxS ukZ/J53/m8thJfiJyuNhtNLBkofl6+P66cm2wII63Wjli0HYE1XDgd+AdRBw10Gx ODWGGRIyPU5fj3A+ArXi5lq995lwNabqOoJj4JeuHNkD6ZJpznUvM3njZ9ZW3PAQ M8JbgQ+11haU3FplBeMZgfU78KHhrshDS4JEKHKTPaauqhI5Id4lXNI2Y4Ig/GJs U7Jf/Xno19yQfoYM3S4MKnFVw8M0g/CzJMqAAuonQHWynoc/2GC8zUgo2hDWDKv8 HLm7L5ZikPD+G0bD1AyOoKTKDc5OGg475KmiHlPu4seYBeZALGRe14VBJgvC+d2n -----END CERTIFICATE-----Generated at Tue Apr 7 12:06:59 2026 by rpki-client