$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft File: 643177f7-12a4-4138-aa72-1b5beaada59f.mft (raw, json) Hash identifier: BhVxTA6Zcuhw/yBdxwoZeG6RGIBpAve0u3WBT5arZ10= Subject key identifier: 18:2F:52:2D:9C:CA:19:8D:07:0C:15:A6:1E:A4:F2:7D:0D:8D:6F:F7 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584D6B5CDAEC9C80FC0349DA8A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft Manifest number: 010D0C9F4328584B34AFE1DCD460592DE4D3F352 Signing time: Mon 06 Apr 2026 19:00:03 +0000 Manifest this update: Mon 06 Apr 2026 19:00:03 +0000 Manifest next update: Wed 08 Apr 2026 19:00:00 +0000 Files and hashes: 1: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (hash: 4LpoSy6XvicIRtqkUfmRyPlsFNE5ZXfnUa5dKJT5Eds=) 2: 4e2655fb-9643-3251-b316-c102da99b510.roa (hash: Lnj8979PnUuk6Mbvm96IMXfQLovIs3oP5w2XQ6hCZbk=) 3: 643177f7-12a4-4138-aa72-1b5beaada59f.crl (hash: M9hxZ28T+kgowIXnNK9XUDiBN3R3mM5x6jNarqukf9k=) 4: d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa (hash: /nq4zrb1YSVrZACawOETqiPechHqZqdHoAn4x44ciK0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:5c:da:ec:9c:80:fc:03:49:da:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Apr 6 19:00:03 2026 GMT Not After : Apr 8 19:00:00 2026 GMT Subject: CN=61da66a0-c10f-4fa2-a2b1-1a48d3a9f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:63:30:18:6b:2d:a2:f7:1a:2b:09:fe:c5:7e: 9d:2c:e3:b5:b1:e6:6c:c7:44:3d:3c:d7:84:37:5b: 12:e8:80:e7:22:1a:23:f2:4a:76:55:70:14:db:a0: 7e:05:12:88:04:6b:9d:d9:91:fc:22:3f:0d:c8:62: 1c:ef:f7:cc:d1:e0:2b:2a:6e:40:97:ec:f2:37:3c: e1:a6:da:03:f4:92:c3:7f:f5:08:49:28:71:93:d8: 01:ca:35:4c:12:f5:fe:eb:e6:79:38:75:40:a1:63: e2:28:9d:fa:1f:8e:a5:49:df:d4:7f:0c:ef:80:be: c8:96:8d:73:a4:2f:0d:68:43:0b:6d:22:26:db:d5: 7b:f6:5f:fc:06:28:c9:5f:e8:00:41:e2:b9:95:8c: 04:44:80:4d:62:7e:18:6c:01:e4:aa:dc:0b:a3:9a: 71:1b:cb:a5:b0:e0:c2:5d:63:56:83:61:92:2f:00: 11:08:61:72:eb:f9:2c:52:a1:03:df:8b:e7:bc:a9: a2:aa:1e:19:57:9b:0a:99:cf:db:0a:86:db:22:a9: 74:7d:1f:03:cf:d1:4a:aa:f7:80:32:47:53:02:00: c4:8c:42:f9:0f:9f:32:4d:d0:e9:a2:cd:68:1d:59: 9b:8e:3e:74:44:3d:ec:15:47:64:f9:3c:7f:af:60: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2F:52:2D:9C:CA:19:8D:07:0C:15:A6:1E:A4:F2:7D:0D:8D:6F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6b:1a:71:19:9e:35:45:4a:6e:1e:15:8a:28:69:73:3f:80: 49:61:c8:3d:ff:ec:65:89:74:b9:74:64:ab:ec:20:50:c5:95: 04:60:0a:d8:4e:35:45:30:ea:4f:d9:a2:8c:19:86:c8:fb:b4: e4:6d:25:1a:49:1a:f9:8b:27:b4:7d:c1:18:02:19:f9:a3:b7: cd:a7:3f:6f:b5:a4:1a:52:9b:bd:ef:66:2a:72:b2:f1:0d:bc: c4:2a:60:0d:e6:2d:ed:79:d3:c0:85:6d:54:7b:7a:eb:0d:a7: c8:5c:bc:3f:b3:93:46:e8:5c:86:b2:81:35:c4:b9:60:04:d9: fc:d4:df:be:d5:47:34:5b:67:0f:52:ff:1b:0b:5c:a7:39:61: 1a:26:59:cb:2b:a1:64:f0:d6:3f:6e:84:13:07:e2:40:94:b1: f5:69:ea:2f:8f:ca:8b:87:69:f3:7e:07:f8:ae:98:50:32:06: 7b:70:b6:f7:9f:cb:1e:a7:a1:b9:3a:25:56:a0:47:b6:7c:e6: b6:c5:a4:87:33:df:ca:f3:49:f5:88:e4:7c:59:49:2a:be:a8: 88:b8:a3:ca:b8:2e:7b:68:15:fa:5c:d8:da:e5:d0:30:01:c6: da:b9:e4:ee:7f:d9:f1:f5:c6:05:4d:73:06:73:f3:6f:a0:5e: 9e:4d:80:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rXNrsnID8A0naioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDQwNjE5MDAwM1oXDTI2MDQwODE5MDAwMFowLzEtMCsGA1UEAxMk NjFkYTY2YTAtYzEwZi00ZmEyLWEyYjEtMWE0OGQzYTlmM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGMwGGstovcaKwn+xX6dLOO1seZsx0Q9PNeE N1sS6IDnIhoj8kp2VXAU26B+BRKIBGud2ZH8Ij8NyGIc7/fM0eArKm5Al+zyNzzh ptoD9JLDf/UISShxk9gByjVMEvX+6+Z5OHVAoWPiKJ36H46lSd/UfwzvgL7Ilo1z pC8NaEMLbSIm29V79l/8BijJX+gAQeK5lYwERIBNYn4YbAHkqtwLo5pxG8ulsODC XWNWg2GSLwARCGFy6/ksUqED34vnvKmiqh4ZV5sKmc/bCobbIql0fR8Dz9FKqveA MkdTAgDEjEL5D58yTdDpos1oHVmbjj50RD3sFUdk+Tx/r2DSzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBgvUi2cyhmNBwwVph6k8n0NjW/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvNjQzMTc3ZjctMTJhNC00 MTM4LWFhNzItMWI1YmVhYWRhNTlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9axpxGZ41RUpuHhWKKGlz P4BJYcg9/+xliXS5dGSr7CBQxZUEYArYTjVFMOpP2aKMGYbI+7TkbSUaSRr5iye0 fcEYAhn5o7fNpz9vtaQaUpu972YqcrLxDbzEKmAN5i3tedPAhW1Ue3rrDafIXLw/ s5NG6FyGsoE1xLlgBNn81N++1Uc0W2cPUv8bC1ynOWEaJlnLK6Fk8NY/boQTB+JA lLH1aeovj8qLh2nzfgf4rphQMgZ7cLb3n8sep6G5OiVWoEe2fOa2xaSHM9/K80n1 iOR8WUkqvqiIuKPKuC57aBX6XNja5dAwAcbaueTuf9nx9cYFTXMGc/NvoF6eTYDJ -----END CERTIFICATE-----Generated at Tue Apr 7 15:11:25 2026 by rpki-client