$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft File: 432c4e45-9934-4a21-b56f-b27d7aa21e49.mft (raw, json) Hash identifier: k2wjHfYgWrCIJ4Li92gAmfj0Q1BSoXSyJooGvg4O2gc= Subject key identifier: E2:39:A3:98:13:E6:02:8D:76:15:80:08:8A:AA:4C:B3:10:C8:4F:1D Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584DAF4B7818D117793E42E5BA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft Manifest number: 010D0C9F4328584528435719157927FE2C784CA1 Signing time: Fri 01 May 2026 03:00:03 +0000 Manifest this update: Fri 01 May 2026 03:00:03 +0000 Manifest next update: Mon 04 May 2026 03:00:00 +0000 Files and hashes: 1: 432c4e45-9934-4a21-b56f-b27d7aa21e49.crl (hash: AE9zYuvntdkgeOZWRaELMlSjpf5mrg78h+8Ten/fHpw=) 2: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (hash: qNMRNR1jH0i9xjYTy3jnziu6Ytt7RuqTuPk3HdU6IM0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:4b:78:18:d1:17:79:3e:42:e5:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: May 1 03:00:03 2026 GMT Not After : May 4 03:00:00 2026 GMT Subject: CN=3afeb094-0295-4260-81f2-aa121913c09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:a4:4e:5e:bf:3c:79:51:c2:ed:1c:a3:84: 1b:3b:b6:d6:0a:73:59:08:61:73:34:e3:dd:a2:13: 94:9a:78:1c:60:7e:20:fa:4f:ff:32:3a:53:95:65: ae:a8:b4:69:22:bb:7a:0f:5d:2d:cc:48:33:d1:16: 00:82:3f:f5:9b:92:47:b6:aa:23:48:da:90:59:5e: 5b:f6:b4:e1:f9:12:c1:10:73:cb:ac:0f:d3:c5:66: 2e:de:42:f5:4c:01:3d:ac:0a:06:bc:95:51:e0:80: 4a:f3:3c:39:6d:31:ef:5d:1b:5c:54:c8:7f:f5:00: fb:49:38:49:64:36:47:dd:0d:b8:e5:9d:fd:c7:be: 07:9c:77:94:fa:cb:61:c9:23:6b:18:d1:a9:51:95: 59:eb:9e:e1:ba:17:e4:d0:ff:76:79:ad:15:f0:ea: 4f:52:90:e9:3d:71:e2:ea:5b:6d:31:94:83:c7:31: b9:81:3d:2d:e3:06:ff:dd:d1:b2:48:8a:a7:78:97: 06:f4:9d:2e:be:aa:48:e6:cb:01:f5:20:4c:3e:db: 74:7f:03:23:35:ae:8c:86:a1:af:58:15:47:98:4a: cf:91:1e:ce:04:3c:40:43:57:01:28:98:27:a2:e9: be:99:21:03:ef:ca:2a:af:17:33:e5:3a:1d:df:4d: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:A3:98:13:E6:02:8D:76:15:80:08:8A:AA:4C:B3:10:C8:4F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1f:d0:4f:cb:cc:2d:31:8c:23:59:12:60:bc:aa:d0:cb:dd: bd:57:8a:6e:26:76:98:d6:ff:cc:0a:d5:41:2e:73:57:c1:28: 51:60:e8:24:67:b3:c5:eb:41:0e:9c:cb:90:10:a8:8c:95:a1: 75:cc:19:a1:90:09:92:52:87:06:1d:3e:3b:ab:3d:d8:ae:02: a4:08:75:3d:fc:19:4c:01:0a:bf:63:e2:f7:f1:f6:a0:7d:8a: 83:83:45:5e:4e:3d:e9:7b:bb:3c:86:f7:72:22:28:66:02:64: cf:7e:e7:90:d4:aa:09:fa:2b:34:a3:82:ea:fb:d9:d6:91:24: f1:87:b3:d5:27:44:d9:e9:de:59:91:de:2c:68:b6:bc:82:43: a4:41:65:2e:35:44:45:95:75:70:95:5e:ef:3a:99:b6:9f:49: 28:7a:b8:66:80:21:63:ec:67:90:00:64:f9:76:40:9d:28:8e: 74:15:ad:cf:bb:f2:89:83:83:a2:63:4e:d3:e7:84:88:45:e6: f5:46:f0:14:33:5e:10:31:13:07:a6:44:7c:c8:88:69:ef:e6: 05:79:45:3e:42:83:5a:fa:01:f8:84:5b:3f:c9:5e:12:b1:52: 16:6f:fe:26:d8:2b:1c:d4:cb:60:ab:ac:14:ea:1e:7e:8f:c8: 8e:87:58:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2vS3gY0Rd5PkLluoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI2MDUwMTAzMDAwM1oXDTI2MDUwNDAzMDAwMFowLzEtMCsGA1UEAxMk M2FmZWIwOTQtMDI5NS00MjYwLTgxZjItYWExMjE5MTNjMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyykTl6/PHlRwu0co4QbO7bWCnNZCGFzNOPd ohOUmngcYH4g+k//MjpTlWWuqLRpIrt6D10tzEgz0RYAgj/1m5JHtqojSNqQWV5b 9rTh+RLBEHPLrA/TxWYu3kL1TAE9rAoGvJVR4IBK8zw5bTHvXRtcVMh/9QD7SThJ ZDZH3Q245Z39x74HnHeU+sthySNrGNGpUZVZ657huhfk0P92ea0V8OpPUpDpPXHi 6lttMZSDxzG5gT0t4wb/3dGySIqneJcG9J0uvqpI5ssB9SBMPtt0fwMjNa6MhqGv WBVHmErPkR7OBDxAQ1cBKJgnoum+mSED78oqrxcz5Tod303AUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOI5o5gT5gKNdhWACIqqTLMQyE8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNDMyYzRlNDUtOTkzNC00 YTIxLWI1NmYtYjI3ZDdhYTIxZTQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpH9BPy8wtMYwjWRJgvKrQ y929V4puJnaY1v/MCtVBLnNXwShRYOgkZ7PF60EOnMuQEKiMlaF1zBmhkAmSUocG HT47qz3YrgKkCHU9/BlMAQq/Y+L38fagfYqDg0VeTj3pe7s8hvdyIihmAmTPfueQ 1KoJ+is0o4Lq+9nWkSTxh7PVJ0TZ6d5Zkd4saLa8gkOkQWUuNURFlXVwlV7vOpm2 n0koerhmgCFj7GeQAGT5dkCdKI50Fa3Pu/KJg4OiY07T54SIReb1RvAUM14QMRMH pkR8yIhp7+YFeUU+QoNa+gH4hFs/yV4SsVIWb/4m2Csc1Mtgq6wU6h5+j8iOh1g8 -----END CERTIFICATE-----Generated at Fri May 1 19:36:58 2026 by rpki-client