$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.mft File: c84c7cab-d491-46ad-9ed1-28e7397421e7.mft (raw, json) Hash identifier: snMY4R5CjN/LD4M76pn5isVQ69Iyl2Qje1hTJB7Jmh0= Subject key identifier: 20:B1:7A:9E:6B:9F:68:29:13:CA:AC:B4:36:D5:76:3A:A3:18:FE:17 Authority key identifier: 51:5C:79:7A:2D:D6:B2:61:3E:8E:82:59:EC:BF:BB:A5:4D:56:8E:D4 Certificate issuer: /CN=c84c7cab-d491-46ad-9ed1-28e7397421e7 Certificate serial: 010D0C9F4328584D6AE5B6C2BE2FAABC7C90F6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.mft Manifest number: 010D0C9F4328584B126B1FBCC431C2948F5522DC Signing time: Mon 06 Apr 2026 15:00:03 +0000 Manifest this update: Mon 06 Apr 2026 15:00:03 +0000 Manifest next update: Wed 08 Apr 2026 15:00:00 +0000 Files and hashes: 1: 3adde67c-430f-320d-902b-ae38c1c3a785.roa (hash: WQzKnMy2f3HweO6AMDKB5+hYUbioNLb0B4Y8QQ1rU4c=) 2: c84c7cab-d491-46ad-9ed1-28e7397421e7.crl (hash: pWgHgR/2YocxeNTTfNP3hB7aVaSpSWj0ZlZohzBpDOI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:e5:b6:c2:be:2f:aa:bc:7c:90:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84c7cab-d491-46ad-9ed1-28e7397421e7 Validity Not Before: Apr 6 15:00:03 2026 GMT Not After : Apr 8 15:00:00 2026 GMT Subject: CN=25b0bddd-fe66-4583-9815-10a83d99e75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:ab:59:7a:a2:47:1d:57:8c:53:9a:3d:48: 48:d4:24:e3:6d:e2:4f:af:55:e0:41:d3:77:7d:a3: 77:bb:54:ca:46:0e:5e:8a:9d:53:76:20:d5:fb:6c: 43:8c:1d:e8:33:1b:65:f7:ae:02:49:93:e6:cf:2e: d6:31:92:f1:f9:35:57:1c:24:d5:a0:40:a2:08:4f: 8a:dd:3e:8a:69:e3:30:65:af:1d:11:9d:98:e5:80: a4:0d:0c:73:c0:61:fc:a1:7a:0b:1e:8a:4e:a5:01: 44:b8:fc:82:85:38:bc:b4:3f:51:a1:ca:ac:46:1e: fb:ef:3e:00:88:a5:22:41:54:67:8b:83:a1:5c:46: d3:47:25:8a:ab:08:3b:28:55:2b:61:e5:dd:d4:a5: 93:43:f6:88:31:cf:54:8b:9f:bd:2e:4c:61:31:cf: c9:00:39:0d:5e:d9:89:ae:c4:da:34:b2:38:41:2c: 9c:dd:35:de:3f:18:33:f3:cd:93:0e:17:01:2f:70: 7a:61:80:d0:fa:30:23:ac:91:9b:58:ac:20:b9:07: 50:e6:bf:02:15:0c:0b:23:7f:27:96:a3:ab:10:0a: 8a:2f:86:92:10:be:38:66:b6:30:20:ed:df:78:49: 99:da:41:cb:7d:bf:38:24:22:17:d6:14:58:6c:2f: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B1:7A:9E:6B:9F:68:29:13:CA:AC:B4:36:D5:76:3A:A3:18:FE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.crl X509v3 Authority Key Identifier: keyid:51:5C:79:7A:2D:D6:B2:61:3E:8E:82:59:EC:BF:BB:A5:4D:56:8E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2b:75:6e:f4:8d:5a:6d:dd:9c:6f:9e:0d:0d:34:41:e1:0f: 58:ab:39:e4:61:79:3a:bb:d5:80:6d:8a:d0:47:07:d1:70:a6: 50:b7:f5:50:a1:a9:2a:f6:1d:92:20:39:ba:af:2a:a5:db:85: 37:f4:bf:0a:2d:a7:39:36:3f:01:7e:5c:92:c7:48:91:c6:fc: ec:ad:eb:f7:9a:c1:6d:ae:19:d8:6f:4a:c3:ab:15:95:b0:f5: bf:22:12:3b:78:73:80:c4:ab:c4:c1:a0:a7:e0:de:fb:a1:26: 03:99:cd:6b:d3:0b:d1:93:15:30:f8:6e:96:79:16:4b:58:7a: d0:f5:95:1a:dc:6f:71:42:75:d4:0e:75:7a:a4:63:c5:e9:4e: 93:79:c6:bf:ee:91:91:df:b6:f1:eb:06:95:8a:ac:c6:c5:23: 98:73:a9:95:a8:a1:5f:a4:d6:e2:59:0c:ed:65:e8:07:19:3f: 78:15:c4:35:95:f2:fa:80:ad:8f:d8:25:ab:8b:e4:29:38:ca: bf:5b:8c:92:7b:1a:46:48:e0:88:36:4e:98:20:7a:3e:b7:17: 43:75:90:ac:fc:0d:d9:b7:16:4c:ee:05:86:35:b0:9f:bd:1b: 14:87:dc:f7:ff:bd:b9:14:7b:a9:be:81:70:80:4a:bf:8d:03: 43:d6:18:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1q5bbCvi+qvHyQ9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0YzdjYWItZDQ5MS00NmFkLTllZDEtMjhlNzM5NzQy MWU3MB4XDTI2MDQwNjE1MDAwM1oXDTI2MDQwODE1MDAwMFowLzEtMCsGA1UEAxMk MjViMGJkZGQtZmU2Ni00NTgzLTk4MTUtMTBhODNkOTllNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw+rWXqiRx1XjFOaPUhI1CTjbeJPr1XgQdN3 faN3u1TKRg5eip1TdiDV+2xDjB3oMxtl964CSZPmzy7WMZLx+TVXHCTVoECiCE+K 3T6KaeMwZa8dEZ2Y5YCkDQxzwGH8oXoLHopOpQFEuPyChTi8tD9RocqsRh777z4A iKUiQVRni4OhXEbTRyWKqwg7KFUrYeXd1KWTQ/aIMc9Ui5+9LkxhMc/JADkNXtmJ rsTaNLI4QSyc3TXePxgz882TDhcBL3B6YYDQ+jAjrJGbWKwguQdQ5r8CFQwLI38n lqOrEAqKL4aSEL44ZrYwIO3feEmZ2kHLfb84JCIX1hRYbC999QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCCxep5rn2gpE8qstDbVdjqjGP4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jODRj N2NhYi1kNDkxLTQ2YWQtOWVkMS0yOGU3Mzk3NDIxZTcvYzg0YzdjYWItZDQ5MS00 NmFkLTllZDEtMjhlNzM5NzQyMWU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzg0YzdjYWItZDQ5MS00NmFkLTll ZDEtMjhlNzM5NzQyMWU3L2M4NGM3Y2FiLWQ0OTEtNDZhZC05ZWQxLTI4ZTczOTc0 MjFlNy5jcmwwHwYDVR0jBBgwFoAUUVx5ei3WsmE+joJZ7L+7pU1WjtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jODRjN2NhYi1kNDkxLTQ2YWQtOWVkMS0yOGU3 Mzk3NDIxZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxK3Vu9I1abd2cb54NDTRB 4Q9YqznkYXk6u9WAbYrQRwfRcKZQt/VQoakq9h2SIDm6ryql24U39L8KLac5Nj8B flySx0iRxvzsrev3msFtrhnYb0rDqxWVsPW/IhI7eHOAxKvEwaCn4N77oSYDmc1r 0wvRkxUw+G6WeRZLWHrQ9ZUa3G9xQnXUDnV6pGPF6U6Teca/7pGR37bx6waViqzG xSOYc6mVqKFfpNbiWQztZegHGT94FcQ1lfL6gK2P2CWri+QpOMq/W4ySexpGSOCI Nk6YIHo+txdDdZCs/A3ZtxZM7gWGNbCfvRsUh9z3/725FHupvoFwgEq/jQND1hhl -----END CERTIFICATE-----Generated at Tue Apr 7 15:11:05 2026 by rpki-client