$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft File: 1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft (raw, json) Hash identifier: 1tTMHJ3cNl7QoX5a7+KmSLueqk9C/EmPdu1if69jLok= Subject key identifier: CF:04:9F:6E:98:75:33:21:70:D0:3B:FD:5C:B9:D1:D4:63:F1:CE:6E Authority key identifier: 19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 Certificate issuer: /CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Certificate serial: 010D0C9F4328584D6B7A9C557463156D74BFF740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft Manifest number: 010D0C9F4328584AA3B2F590EC717D4035CEDC90 Signing time: Mon 06 Apr 2026 20:00:03 +0000 Manifest this update: Mon 06 Apr 2026 20:00:03 +0000 Manifest next update: Wed 08 Apr 2026 20:00:00 +0000 Files and hashes: 1: 1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl (hash: 7r8b3eGdQmA41VQIAR1kPcuoc5Mto9B39XJXIzr6i3A=) 2: 5c61e36a-6107-3475-8f1b-e616b1350dbe.roa (hash: 8oEySdJLeAB5nPWnlOMQ5k28VLbZWoyl8aCiwfpHnEI=) 3: 62e1a76d-ff8f-3f0f-9800-cad36d4fa1fa.roa (hash: hPH6g96zNSDfYiBf24RRdEFTsvJkPQih49szjdoRvFg=) 4: 8ee9fa63-2436-3b1c-ba3e-9586b50ba310.roa (hash: Avr72eUUBHqis+As8tcyGttRVBJKRMhQTzpUfCA7GjE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:7a:9c:55:74:63:15:6d:74:bf:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Validity Not Before: Apr 6 20:00:03 2026 GMT Not After : Apr 8 20:00:00 2026 GMT Subject: CN=35b1af39-f2eb-4a79-94ed-cb6fafa75d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:25:67:c6:89:1e:47:34:84:fe:7e:60:3f: 3a:8a:97:f1:b1:cb:04:68:04:4b:49:ca:9a:aa:4d: 49:87:ee:64:d3:95:b5:8e:17:d4:9d:71:3c:53:ec: 97:ae:83:4c:23:c2:ab:e4:6a:88:39:24:81:76:89: a8:26:da:1f:25:03:61:a9:37:0b:fc:a9:a7:a0:34: f0:fe:33:06:1f:0d:83:77:be:38:5d:a5:c1:3e:94: 79:bd:9a:0d:37:d7:e2:00:7a:27:cc:9c:fa:f2:8b: 78:0f:47:9a:85:60:f2:b4:4e:1b:61:54:e6:56:17: 97:42:fb:1b:33:ce:1b:35:a9:ab:a3:ab:08:56:36: fc:fe:2c:ac:14:5d:14:fb:e5:b0:c7:49:56:89:c4: c2:91:5d:22:3b:f5:15:09:72:1b:a4:b2:f2:36:1a: 6e:92:22:34:0d:78:2d:b1:18:3c:e7:4b:00:16:9b: a4:fc:74:05:29:c0:74:78:44:b6:e9:81:30:4e:62: 90:f9:79:da:05:3c:7b:ac:d6:a9:65:2d:6f:c0:ac: e9:75:73:ec:7b:5b:86:c4:52:9e:c0:11:a3:39:ac: 0e:17:91:e4:39:64:c9:bd:72:5b:a2:01:b8:27:21: 70:24:98:96:9b:1f:9d:76:cd:56:91:31:18:c3:d4: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:04:9F:6E:98:75:33:21:70:D0:3B:FD:5C:B9:D1:D4:63:F1:CE:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl X509v3 Authority Key Identifier: keyid:19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:21:b7:c9:5b:88:09:f1:5b:b6:36:6c:ee:36:dc:79:d0:0a: 16:7d:93:e8:01:df:75:4e:50:a0:02:1c:f8:dc:c3:4c:5a:34: 2d:24:8b:54:fa:84:45:89:aa:71:5e:30:ce:ac:09:f6:dc:57: df:ba:b0:23:b1:28:2d:13:a6:39:f0:dc:31:2c:59:53:53:71: be:9c:d2:47:fe:cd:32:3a:e9:87:47:78:cb:e8:b4:cc:a4:eb: fe:b6:da:ee:87:97:78:42:9f:3f:05:3e:84:04:ec:4f:5d:e9: fc:b3:a4:a9:e7:27:96:a5:76:02:5c:19:ae:4f:cc:cf:4d:75: 2e:40:b7:27:94:75:6d:e4:6b:3c:49:b3:8e:89:29:8c:23:c0: f3:9f:4f:50:d2:55:f0:c2:42:3c:98:38:f2:4c:f0:6d:ca:5f: 78:e7:4a:2c:d4:d3:ff:09:26:b3:a1:c8:96:44:cd:c2:07:20: 25:cf:0c:3a:b9:67:89:60:ab:1e:ff:46:d4:55:22:5f:1d:0b: ea:3a:ea:07:12:fe:51:f6:c8:d8:b4:01:2e:8a:fd:06:d4:80: 01:cc:48:8f:f7:95:62:be:98:10:5e:e1:1b:74:64:4e:cb:fc: 77:a9:4f:cb:32:1d:73:bf:77:73:89:43:33:53:fd:a0:24:98: 84:5a:b4:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1repxVdGMVbXS/90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI0ZDk5NGMtMTk2Yi00YjRhLWEyYzAtMGYyZTRiNGFj ZjU0MB4XDTI2MDQwNjIwMDAwM1oXDTI2MDQwODIwMDAwMFowLzEtMCsGA1UEAxMk MzViMWFmMzktZjJlYi00YTc5LTk0ZWQtY2I2ZmFmYTc1ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7YlZ8aJHkc0hP5+YD86ipfxscsEaARLScqa qk1Jh+5k05W1jhfUnXE8U+yXroNMI8Kr5GqIOSSBdomoJtofJQNhqTcL/KmnoDTw /jMGHw2Dd744XaXBPpR5vZoNN9fiAHonzJz68ot4D0eahWDytE4bYVTmVheXQvsb M84bNamro6sIVjb8/iysFF0U++Wwx0lWicTCkV0iO/UVCXIbpLLyNhpukiI0DXgt sRg850sAFpuk/HQFKcB0eES26YEwTmKQ+XnaBTx7rNapZS1vwKzpdXPse1uGxFKe wBGjOawOF5HkOWTJvXJbogG4JyFwJJiWmx+dds1WkTEYw9TGTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM8En26YdTMhcNA7/Vy50dRj8c5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRk OTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJlNGI0YWNmNTQvMWI0ZDk5NGMtMTk2Yi00 YjRhLWEyYzAtMGYyZTRiNGFjZjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWI0ZDk5NGMtMTk2Yi00YjRhLWEy YzAtMGYyZTRiNGFjZjU0LzFiNGQ5OTRjLTE5NmItNGI0YS1hMmMwLTBmMmU0YjRh Y2Y1NC5jcmwwHwYDVR0jBBgwFoAUGU3Xozsv0HPfJ9YW4+MgY3AlxyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRkOTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJl NGI0YWNmNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbIbfJW4gJ8Vu2NmzuNtx5 0AoWfZPoAd91TlCgAhz43MNMWjQtJItU+oRFiapxXjDOrAn23FffurAjsSgtE6Y5 8NwxLFlTU3G+nNJH/s0yOumHR3jL6LTMpOv+ttruh5d4Qp8/BT6EBOxPXen8s6Sp 5yeWpXYCXBmuT8zPTXUuQLcnlHVt5Gs8SbOOiSmMI8Dzn09Q0lXwwkI8mDjyTPBt yl9450os1NP/CSazociWRM3CByAlzww6uWeJYKse/0bUVSJfHQvqOuoHEv5R9sjY tAEuiv0G1IABzEiP95VivpgQXuEbdGROy/x3qU/LMh1zv3dziUMzU/2gJJiEWrR3 -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:05 2026 by rpki-client