$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft File: 65a67cfc-305d-4049-900c-33f3b01e742a.mft (raw, json) Hash identifier: /BEIqSY83l/h36Xqmn6NX3PhohuPh2xvMRFNy6RUkwc= Subject key identifier: DD:6F:7F:BD:17:67:F4:F7:47:51:EE:F5:26:FE:F9:0F:CB:63:E6:A8 Authority key identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 Certificate issuer: /CN=65a67cfc-305d-4049-900c-33f3b01e742a Certificate serial: 010D0C9F4328584D716950615FB5C3ABC6E97FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft Manifest number: 010D0C9F4328584073A82EC0CBDAAFEE66C86AC3 Signing time: Wed 08 Apr 2026 23:00:03 +0000 Manifest this update: Wed 08 Apr 2026 23:00:03 +0000 Manifest next update: Fri 10 Apr 2026 23:00:00 +0000 Files and hashes: 1: 65a67cfc-305d-4049-900c-33f3b01e742a.crl (hash: sFDDdLc5jSRob3+ikmD5kpN1d6w5y1X3Imj2AR/sLp0=) 2: f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa (hash: RcwwYGPZ3WyFQfgShcUl8R0U17yzdMKiN9cJ1OBUQUY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:69:50:61:5f:b5:c3:ab:c6:e9:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a67cfc-305d-4049-900c-33f3b01e742a Validity Not Before: Apr 8 23:00:03 2026 GMT Not After : Apr 10 23:00:00 2026 GMT Subject: CN=729dd182-0e17-4be5-abea-1f5d99586e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:af:ef:77:2e:34:29:ae:87:38:ca:cd:9e: 57:1d:21:ac:95:f4:20:aa:7e:d6:5c:13:b5:e5:1c: 3c:46:b9:a5:1e:53:6d:df:15:01:23:47:3b:8e:11: de:22:49:c1:e1:97:82:43:74:a7:7a:86:b2:e2:b8: df:b1:d0:a2:cf:13:f6:d5:4e:f4:e2:a1:86:29:7e: 5f:5a:b8:fe:2b:85:f6:bb:ce:74:79:4e:b0:24:00: 92:15:31:42:85:5e:4c:01:37:be:15:39:9d:bc:28: dd:e8:37:72:b4:c3:29:cc:1b:94:11:2b:f0:66:c0: 1c:70:73:f0:49:f6:28:99:ef:87:ba:95:17:5a:42: 79:9a:d6:ed:e1:37:81:f8:31:97:a9:41:1c:18:02: 2d:eb:62:e1:a4:0e:aa:30:73:51:71:d4:d7:09:a3: e5:01:d3:00:84:7c:6b:9a:5d:38:de:28:53:9a:ab: 9b:1e:ad:01:be:f3:3f:ef:2e:01:7e:ad:87:43:8a: 7d:05:0c:3c:28:32:4a:ae:9b:f4:ee:33:d8:05:5c: 52:7d:2d:19:98:a4:f0:d7:6c:63:b7:bd:c9:cb:52: 8b:83:b5:b1:07:9d:0c:5c:a0:75:b3:ad:c0:95:55: db:11:40:5e:ae:1a:91:78:32:57:57:eb:0e:64:9b: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6F:7F:BD:17:67:F4:F7:47:51:EE:F5:26:FE:F9:0F:CB:63:E6:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl X509v3 Authority Key Identifier: keyid:9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:33:74:35:86:ba:03:9d:83:ee:e5:fa:b6:db:ba:03:75:8f: f5:5d:87:39:1f:ce:62:e4:9d:d6:f3:3f:45:c2:8b:85:fe:69: bf:fc:f2:1a:be:f0:12:ad:5d:8d:8b:36:bc:ed:d2:00:63:19: c6:98:e5:38:c4:98:cc:98:cf:b6:a1:b1:83:e8:91:b9:67:d9: 73:a4:2e:4d:f6:ed:09:5d:ca:de:6a:80:8c:77:94:fb:df:65: 94:99:99:c0:4b:98:bd:10:01:35:c4:2d:90:6c:7e:5b:57:b4: 60:0c:3f:e0:9e:37:39:1d:0f:4e:35:6e:d1:16:3a:e1:be:e7: 14:dd:40:8e:0e:5a:36:83:2d:51:9a:d2:4e:3e:90:57:bb:59: bf:68:6e:63:30:1d:d8:d0:92:87:44:67:77:e6:12:1a:29:75: 67:3b:48:7b:a6:12:d2:5c:85:ef:1f:6e:91:ad:93:2b:91:96: e9:5b:2d:2c:de:fe:be:c0:6d:0f:d1:a3:20:a7:07:1d:97:3b: a2:ad:22:2c:c1:01:a4:59:b5:82:74:95:af:a8:c5:b7:04:04: 33:3a:17:f1:fc:4a:9e:e7:b8:80:d2:42:f8:44:ea:81:42:fa: ed:3e:39:98:ed:30:bf:45:aa:78:61:ba:f2:41:23:63:55:cb: 90:af:36:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1xaVBhX7XDq8bpf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhNjdjZmMtMzA1ZC00MDQ5LTkwMGMtMzNmM2IwMWU3 NDJhMB4XDTI2MDQwODIzMDAwM1oXDTI2MDQxMDIzMDAwMFowLzEtMCsGA1UEAxMk NzI5ZGQxODItMGUxNy00YmU1LWFiZWEtMWY1ZDk5NTg2ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhWv73cuNCmuhzjKzZ5XHSGslfQgqn7WXBO1 5Rw8RrmlHlNt3xUBI0c7jhHeIknB4ZeCQ3Sneoay4rjfsdCizxP21U704qGGKX5f Wrj+K4X2u850eU6wJACSFTFChV5MATe+FTmdvCjd6DdytMMpzBuUESvwZsAccHPw SfYome+HupUXWkJ5mtbt4TeB+DGXqUEcGAIt62LhpA6qMHNRcdTXCaPlAdMAhHxr ml043ihTmqubHq0BvvM/7y4Bfq2HQ4p9BQw8KDJKrpv07jPYBVxSfS0ZmKTw12xj t73Jy1KLg7WxB50MXKB1s63AlVXbEUBerhqReDJXV+sOZJubgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN1vf70XZ/T3R1Hu9Sb++Q/LY+aoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NWE2 N2NmYy0zMDVkLTQwNDktOTAwYy0zM2YzYjAxZTc0MmEvNjVhNjdjZmMtMzA1ZC00 MDQ5LTkwMGMtMzNmM2IwMWU3NDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjVhNjdjZmMtMzA1ZC00MDQ5LTkw MGMtMzNmM2IwMWU3NDJhLzY1YTY3Y2ZjLTMwNWQtNDA0OS05MDBjLTMzZjNiMDFl NzQyYS5jcmwwHwYDVR0jBBgwFoAUnhnAKyCYsTJMIVyBr/J+ZZqTpXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NWE2N2NmYy0zMDVkLTQwNDktOTAwYy0zM2Yz YjAxZTc0MmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIM3Q1hroDnYPu5fq227oD dY/1XYc5H85i5J3W8z9FwouF/mm//PIavvASrV2Niza87dIAYxnGmOU4xJjMmM+2 obGD6JG5Z9lzpC5N9u0JXcreaoCMd5T732WUmZnAS5i9EAE1xC2QbH5bV7RgDD/g njc5HQ9ONW7RFjrhvucU3UCODlo2gy1RmtJOPpBXu1m/aG5jMB3Y0JKHRGd35hIa KXVnO0h7phLSXIXvH26RrZMrkZbpWy0s3v6+wG0P0aMgpwcdlzuirSIswQGkWbWC dJWvqMW3BAQzOhfx/Eqe57iA0kL4ROqBQvrtPjmY7TC/Rap4YbryQSNjVcuQrzYG -----END CERTIFICATE-----Generated at Thu Apr 9 21:39:32 2026 by rpki-client