$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft File: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft (raw, json) Hash identifier: zfg5S7gh8A+KA3riVVRhamEc/KgfVi4FdZX48j1DpWE= Subject key identifier: F4:BC:20:EE:2B:B9:3C:3A:9C:E7:FB:99:25:DB:17:46:B3:6D:A7:F7 Authority key identifier: DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 Certificate issuer: /CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Certificate serial: 010D0C9F4328584D92BCD9767C2F42FD951A5680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft Manifest number: 010D0C9F4328584D92BADCE892FDF17C6A5FCE02 Signing time: Mon 20 Apr 2026 21:30:03 +0000 Manifest this update: Mon 20 Apr 2026 21:30:03 +0000 Manifest next update: Thu 23 Apr 2026 21:00:00 +0000 Files and hashes: 1: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl (hash: Osc0O4laE6gsMJXKfe5+9p0qz/DJvsyjT/3/swwdKGA=) 2: f594481f-b71f-3694-9566-972e2d639987.roa (hash: Nb04Djq3TY9tLjgVKrKK81aVLqDOARA3T6gBQiRX+X4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:bc:d9:76:7c:2f:42:fd:95:1a:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Validity Not Before: Apr 20 21:30:03 2026 GMT Not After : Apr 23 21:00:00 2026 GMT Subject: CN=9a776a8c-11b0-4a8e-9ab9-35fb728969f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:58:39:48:d4:de:5a:d3:9c:4a:49:99:39: b0:5d:cc:94:32:d9:f3:54:45:54:4b:96:a7:9a:fe: b9:74:b5:51:ce:db:0b:39:c0:ec:65:97:b4:39:3f: a2:bb:64:9b:c3:67:a8:db:76:9a:d7:8f:c0:e2:d1: cc:2b:db:5e:f6:c4:bf:8a:b0:73:c8:0a:19:6d:de: 78:a5:b2:4d:e1:9e:99:82:75:b4:31:9a:e1:a1:50: d2:93:ca:59:05:d8:f9:22:34:7f:c4:ed:2a:8b:1e: cd:fa:15:49:c0:9d:1b:86:d7:dd:48:29:b7:6d:7d: 7a:04:85:b8:dd:4f:de:01:d2:f7:c0:2d:2d:93:cd: d7:1f:ca:6f:a9:4a:8e:21:b7:13:53:88:f0:33:94: 3c:f7:60:fd:6a:ff:e9:46:97:de:6c:a1:05:ad:76: be:f4:c8:89:48:b6:11:b9:b0:b6:44:45:3a:10:93: 04:dc:89:8e:89:e6:d9:5a:b5:77:ac:5c:1e:c2:16: f0:c4:bf:f9:cc:d7:a5:3f:83:9b:29:d4:e3:63:87: bf:8e:90:18:f4:c5:06:24:84:79:9e:9f:25:75:88: 4a:a1:0c:e7:b1:5c:ad:e7:2f:49:c5:5e:cf:68:7e: 3b:b5:82:e0:27:4d:14:a6:8c:1a:25:81:52:88:28: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:20:EE:2B:B9:3C:3A:9C:E7:FB:99:25:DB:17:46:B3:6D:A7:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl X509v3 Authority Key Identifier: keyid:DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b0:d0:c5:55:b5:8a:b3:c6:bc:97:e2:fc:4f:42:f8:1f:5e: 74:a8:e9:8f:cb:6f:87:d2:8f:4d:7f:18:dd:5b:e2:99:5a:d8: 23:10:e1:ac:bd:be:39:e2:b0:a3:2f:05:24:27:ab:da:fa:4d: a5:1f:8d:f5:e6:d7:18:3b:de:0b:74:c5:ae:ff:b3:e0:6a:57: a1:f6:97:99:58:0a:0c:14:3a:fe:3c:09:2f:45:d8:66:d3:cd: 17:75:ec:4d:91:9e:a8:a3:81:6c:25:46:21:70:18:62:a9:60: b5:f4:07:69:51:00:12:ac:c1:6a:c4:5d:bc:3d:ff:2d:0f:d6: 52:34:a3:31:d4:ed:50:48:63:a4:51:45:03:a3:25:46:fa:18: 5e:25:04:dd:78:d0:05:d3:c0:82:dc:57:80:48:4e:c4:28:6e: 99:28:3f:3d:45:7a:17:cb:ac:d2:d5:41:09:f7:ae:dd:81:bc: af:c1:d5:a5:02:d1:68:4e:b2:ed:ab:ce:7c:4c:58:2a:b4:70: 48:2b:d7:8a:54:89:8e:fa:a7:02:c2:12:ec:1d:bc:88:4d:5c: 15:00:80:51:ec:4c:ce:f5:54:70:6e:92:16:5b:e5:e2:31:43: 0c:67:2a:02:d2:4e:6c:93:cd:74:ae:34:c9:90:92:ed:4c:06: fd:e5:5d:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2SvNl2fC9C/ZUaVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4YzJiMWYtZjU4Zi00ZWRhLWI5NTMtMzVjNmU4ZTBh MWQzMB4XDTI2MDQyMDIxMzAwM1oXDTI2MDQyMzIxMDAwMFowLzEtMCsGA1UEAxMk OWE3NzZhOGMtMTFiMC00YThlLTlhYjktMzVmYjcyODk2OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXRYOUjU3lrTnEpJmTmwXcyUMtnzVEVUS5an mv65dLVRztsLOcDsZZe0OT+iu2Sbw2eo23aa14/A4tHMK9te9sS/irBzyAoZbd54 pbJN4Z6ZgnW0MZrhoVDSk8pZBdj5IjR/xO0qix7N+hVJwJ0bhtfdSCm3bX16BIW4 3U/eAdL3wC0tk83XH8pvqUqOIbcTU4jwM5Q892D9av/pRpfebKEFrXa+9MiJSLYR ubC2REU6EJME3ImOiebZWrV3rFwewhbwxL/5zNelP4ObKdTjY4e/jpAY9MUGJIR5 np8ldYhKoQznsVyt5y9JxV7PaH47tYLgJ00UpowaJYFSiCjxfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPS8IO4ruTw6nOf7mSXbF0azbaf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzhj MmIxZi1mNThmLTRlZGEtYjk1My0zNWM2ZThlMGExZDMvODM4YzJiMWYtZjU4Zi00 ZWRhLWI5NTMtMzVjNmU4ZTBhMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4YzJiMWYtZjU4Zi00ZWRhLWI5 NTMtMzVjNmU4ZTBhMWQzLzgzOGMyYjFmLWY1OGYtNGVkYS1iOTUzLTM1YzZlOGUw YTFkMy5jcmwwHwYDVR0jBBgwFoAU3vgfdlol2WZKekh0kn4VKZJYaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzhjMmIxZi1mNThmLTRlZGEtYjk1My0zNWM2 ZThlMGExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSsNDFVbWKs8a8l+L8T0L4 H150qOmPy2+H0o9NfxjdW+KZWtgjEOGsvb454rCjLwUkJ6va+k2lH4315tcYO94L dMWu/7Pgaleh9peZWAoMFDr+PAkvRdhm080XdexNkZ6oo4FsJUYhcBhiqWC19Adp UQASrMFqxF28Pf8tD9ZSNKMx1O1QSGOkUUUDoyVG+hheJQTdeNAF08CC3FeASE7E KG6ZKD89RXoXy6zS1UEJ967dgbyvwdWlAtFoTrLtq858TFgqtHBIK9eKVImO+qcC whLsHbyITVwVAIBR7EzO9VRwbpIWW+XiMUMMZyoC0k5sk810rjTJkJLtTAb95V3x -----END CERTIFICATE-----Generated at Wed Apr 22 05:14:21 2026 by rpki-client