$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: mrtClgWG9Ox6ddFdvLJx20HV21+OohEVNnPpSZB251U= Subject key identifier: A4:2C:6F:75:2E:FD:38:A5:3B:33:3E:4A:57:DD:36:43:01:5C:4E:D7 Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584D6BB6290680F9D80360695D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FAC95 Signing time: Mon 06 Apr 2026 22:00:03 +0000 Manifest this update: Mon 06 Apr 2026 22:00:03 +0000 Manifest next update: Thu 09 Apr 2026 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: e4VFXQdAyq2HxZpWxoIGWar8xbmF3ciGsYc5dVo5OVg=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WANSZim+EpRyVYMOFDXcDLCeV9llZK9KSpKxplaDkE4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:b6:29:06:80:f9:d8:03:60:69:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Apr 6 22:00:03 2026 GMT Not After : Apr 9 22:00:00 2026 GMT Subject: CN=df462fd5-104a-461b-a65e-796fb17ea85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:25:e8:08:0e:f7:02:ee:92:1d:fc:d5:68: 20:84:d8:df:e7:4f:6c:1a:6e:25:fd:60:f3:64:29: c3:e9:20:c6:0c:b2:56:f6:f2:98:37:bf:de:81:8f: e9:77:d2:24:97:ea:4a:c8:76:d7:b6:3d:9e:4a:76: 57:19:fd:70:e0:85:a8:f3:f4:76:39:d1:07:e8:ef: 6b:01:1f:5d:01:c8:d9:0e:a0:d2:e2:10:f4:fa:65: fe:18:b8:7f:9a:9b:4c:25:21:e2:69:0f:e3:4b:87: 78:52:b0:05:1c:a6:5f:35:de:2d:b1:7d:59:91:61: 3b:14:81:45:53:c9:28:2f:23:3e:0b:30:d4:0b:57: 71:8a:06:d5:35:70:f2:03:de:3c:50:51:8f:c0:ca: ec:d6:b8:64:58:40:68:fd:50:24:01:c0:2e:50:ab: a8:67:20:14:09:ab:bb:cb:ae:af:86:ed:62:f4:bb: a9:8b:45:7f:fe:6e:20:97:a1:cb:ba:14:8e:a0:ef: 5c:b7:ac:76:06:e4:a9:0e:cb:b8:30:75:5a:24:04: ea:80:f1:9c:1c:d8:f5:ba:51:39:e1:a5:9a:12:4f: e4:a7:dc:c0:b8:90:06:de:cd:d3:48:f1:ff:b0:5b: 99:62:e0:b6:94:b2:2b:c1:9f:84:3f:49:86:75:c5: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:6F:75:2E:FD:38:A5:3B:33:3E:4A:57:DD:36:43:01:5C:4E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6d:ac:fa:ca:3c:58:f9:9d:b5:81:38:8e:10:73:d5:a5:6d: 0a:fa:85:48:f2:86:6d:5c:ac:e7:5c:06:42:4c:be:a7:7a:6d: ef:09:d5:67:31:8d:35:2b:db:a7:72:a6:f6:b2:67:c8:e7:14: c6:98:f0:e6:6a:3a:ac:e6:af:8a:6d:2a:0a:6e:96:b1:1b:29: 5f:9e:d5:74:0c:44:9d:8e:7e:77:8f:57:6a:ab:75:42:f9:06: 12:67:57:d9:77:dc:76:23:b7:49:58:51:9b:a0:1a:22:a8:95: 40:ac:75:66:aa:09:1a:e3:89:df:1a:60:f7:83:d0:aa:02:e5: 33:40:35:de:b9:df:02:b9:19:b5:e5:2f:f3:fe:52:13:a5:17: d4:db:e5:7d:49:07:67:da:78:e9:f7:78:46:e0:34:6c:bd:e9: 8e:d4:cd:84:b7:be:5e:4b:4e:84:9f:f9:38:c5:72:8a:65:f5: ed:e9:2b:90:cc:a2:42:44:ac:c2:c7:f0:1f:ff:02:2a:5a:ff: d0:10:b1:15:47:af:d6:31:8f:2e:e4:9a:36:2c:ab:b2:19:53: e3:24:cc:09:f2:6a:1c:ac:a8:ee:e4:f7:5c:27:1e:a1:93:9e: 31:bd:bf:37:11:40:03:cb:81:a0:3e:c7:b6:17:d1:df:68:28: 0d:8b:43:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rtikGgPnYA2BpXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI2MDQwNjIyMDAwM1oXDTI2MDQwOTIyMDAwMFowLzEtMCsGA1UEAxMk ZGY0NjJmZDUtMTA0YS00NjFiLWE2NWUtNzk2ZmIxN2VhODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghQl6AgO9wLukh381WgghNjf509sGm4l/WDz ZCnD6SDGDLJW9vKYN7/egY/pd9Ikl+pKyHbXtj2eSnZXGf1w4IWo8/R2OdEH6O9r AR9dAcjZDqDS4hD0+mX+GLh/mptMJSHiaQ/jS4d4UrAFHKZfNd4tsX1ZkWE7FIFF U8koLyM+CzDUC1dxigbVNXDyA948UFGPwMrs1rhkWEBo/VAkAcAuUKuoZyAUCau7 y66vhu1i9Lupi0V//m4gl6HLuhSOoO9ct6x2BuSpDsu4MHVaJATqgPGcHNj1ulE5 4aWaEk/kp9zAuJAG3s3TSPH/sFuZYuC2lLIrwZ+EP0mGdcUGpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKQsb3Uu/TilOzM+SlfdNkMBXE7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+baz6yjxY+Z21gTiOEHPV pW0K+oVI8oZtXKznXAZCTL6nem3vCdVnMY01K9uncqb2smfI5xTGmPDmajqs5q+K bSoKbpaxGylfntV0DESdjn53j1dqq3VC+QYSZ1fZd9x2I7dJWFGboBoiqJVArHVm qgka44nfGmD3g9CqAuUzQDXeud8CuRm15S/z/lITpRfU2+V9SQdn2njp93hG4DRs vemO1M2Et75eS06En/k4xXKKZfXt6SuQzKJCRKzCx/Af/wIqWv/QELEVR6/WMY8u 5Jo2LKuyGVPjJMwJ8mocrKju5PdcJx6hk54xvb83EUADy4GgPse2F9HfaCgNi0N2 -----END CERTIFICATE-----Generated at Tue Apr 7 15:07:36 2026 by rpki-client