$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft File: db3948d9-e295-422b-8439-1e057eb4673b.mft (raw, json) Hash identifier: VFKybzMcxJleXzfI5hUw377z4GWbNx/KrcxkQITrQiQ= Subject key identifier: C4:9F:04:9A:2D:98:6C:8C:D0:4F:26:D5:BF:EC:4F:32:31:40:24:21 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584D838EC057C4D6457896014830 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft Manifest number: 010D0C9F43285845292D99C252463B75123B5183 Signing time: Wed 15 Apr 2026 11:00:03 +0000 Manifest this update: Wed 15 Apr 2026 11:00:03 +0000 Manifest next update: Sat 18 Apr 2026 11:00:00 +0000 Files and hashes: 1: 1d451688-703a-3240-a025-644e72116111.roa (hash: iSGTmMyZO8fqKQ/+G91s5TmXEdUIZgWv81F+5jjrcYE=) 2: 2103a370-9d5f-301c-a437-332e3bd3d5c6.roa (hash: tcPdHd/qneAnkUvC3lqkkZdkoRjirT5eZ3g7aW7fyXQ=) 3: 3fded6f2-8c28-3c58-9beb-d917169b6841.roa (hash: pJ3lwOq+f8pjsL12xemeugoOST7SiOLUsGHBt+A35ZA=) 4: 43c254ec-8ada-324f-adcb-40210fe23258.roa (hash: /2oHm6fvBC5nYflb/P2dSbwzLVPAjDHt6YOaBvXJFmc=) 5: 99108de1-a260-3cba-901e-0df77fa06cae.roa (hash: bxp0NyJKblNnC1zTgNPA0Xv6k3CJtEqL42j/27gG8No=) 6: af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa (hash: 9LLqpSvtJJphIssX5ahveIZThi/aDtIGR2qAx2ybeQ8=) 7: d532a486-29c6-3280-81e5-af871505b46c.roa (hash: g0OZyyfy3w6tpPBAuAX9OWFJmFrXaL3vJP2S3gtGL/w=) 8: db3948d9-e295-422b-8439-1e057eb4673b.crl (hash: d4pszO9q/0Q85/gONhNHY6rtAEGZNZkGuwy6jreax2Y=) 9: e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa (hash: VJHZv6B0xjxtsFw6FplfJ70JlR7p5lLHf0uibGjdxaw=) 10: f2520776-3efa-3c5b-a5ed-f429a9e1e3b0.roa (hash: yezeJTfIMB/S7nhMnFvGgGBC5HKsQcRG6Qt0L5Sfe+A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:8e:c0:57:c4:d6:45:78:96:01:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Apr 15 11:00:03 2026 GMT Not After : Apr 18 11:00:00 2026 GMT Subject: CN=3d8ccaf6-5696-44d8-8e77-348e134cb578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:21:11:4f:7d:75:4e:c4:9b:2d:43:40:02: cf:31:35:42:d3:9e:40:dd:4a:da:6c:84:b8:10:4c: d1:f3:e6:59:ef:87:ec:ec:57:46:f3:08:ec:b1:b6: 7d:4f:25:2e:80:5b:72:9e:fe:c4:f9:64:70:c8:88: 0e:6c:6f:ef:da:a2:72:35:e0:3e:ca:fa:47:05:a1: 62:ba:54:d7:6c:59:60:91:02:16:79:06:a0:b5:f7: e3:39:7a:2c:51:0e:8c:4a:ae:4d:d4:88:90:f1:62: 5e:af:d3:47:de:51:e0:3b:9b:0e:45:58:2c:59:89: 8f:09:c2:7c:bb:03:43:d4:4b:99:07:3f:a5:6d:c4: 46:ab:e2:82:e7:5b:6a:22:26:48:ff:0e:27:9a:7a: 88:95:76:9f:54:2d:83:06:0b:e7:fc:00:fd:68:2d: 8a:a4:e5:37:d2:61:cb:77:4d:94:bd:74:26:1f:b5: b7:fc:2e:8e:c9:f5:54:a7:2b:2b:11:a4:46:30:11: 0d:11:3e:98:01:b8:75:e4:cf:54:66:22:c0:ba:57: a2:f8:40:3d:0e:33:29:8c:be:5b:c0:2f:a1:d2:ac: 5a:0a:b2:04:c9:a7:cd:62:56:af:a1:7a:e4:b2:ba: 9f:60:88:cb:ce:2e:3b:08:68:32:4d:90:32:9b:95: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9F:04:9A:2D:98:6C:8C:D0:4F:26:D5:BF:EC:4F:32:31:40:24:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cc:2b:22:83:a8:20:c2:73:9a:82:e8:24:0a:2c:7a:28:4d: 1e:a5:93:4b:7a:92:78:e1:15:27:eb:32:13:97:f1:e6:94:d3: ad:5e:15:16:4f:d5:6c:cd:ae:f7:74:8a:1e:18:3f:92:7c:8b: c2:f4:cf:81:97:0a:b2:0e:af:07:67:44:d8:b9:16:e4:a3:4e: d5:e7:79:4f:b2:51:2f:ae:ea:cf:91:70:af:89:c7:88:dd:a0: 20:cd:5f:ba:36:a7:e6:67:da:84:95:bd:0c:27:2d:30:db:e0: af:1e:b9:ec:1b:9c:a7:ae:32:34:47:ff:19:6d:9e:6b:69:fa: 55:72:98:1b:61:26:d8:26:58:4a:df:2e:b2:b8:e9:03:e3:2b: f6:a7:39:9e:e9:67:39:84:7a:a9:7e:d4:14:03:f7:b7:a0:9a: ca:c8:16:08:fd:b8:43:b4:db:76:75:f7:5a:bd:bd:03:54:82: d7:0c:9a:b3:95:a3:e9:f4:cc:80:15:99:11:c2:ed:4d:97:d5: da:40:aa:b9:73:37:a6:d2:39:85:79:fb:48:5e:20:2c:09:71: 26:5a:70:fc:16:dd:7c:ae:7f:b7:3f:5e:16:40:91:bf:e4:ea: 42:c7:c8:52:6a:dc:f9:36:77:46:d3:2e:75:87:40:18:aa:13: 00:3e:ae:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2DjsBXxNZFeJYBSDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDQxNTExMDAwM1oXDTI2MDQxODExMDAwMFowLzEtMCsGA1UEAxMk M2Q4Y2NhZjYtNTY5Ni00NGQ4LThlNzctMzQ4ZTEzNGNiNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8hEU99dU7Emy1DQALPMTVC055A3UrabIS4 EEzR8+ZZ74fs7FdG8wjssbZ9TyUugFtynv7E+WRwyIgObG/v2qJyNeA+yvpHBaFi ulTXbFlgkQIWeQagtffjOXosUQ6MSq5N1IiQ8WJer9NH3lHgO5sORVgsWYmPCcJ8 uwND1EuZBz+lbcRGq+KC51tqIiZI/w4nmnqIlXafVC2DBgvn/AD9aC2KpOU30mHL d02UvXQmH7W3/C6OyfVUpysrEaRGMBENET6YAbh15M9UZiLAulei+EA9DjMpjL5b wC+h0qxaCrIEyafNYlavoXrksrqfYIjLzi47CGgyTZAym5UgLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMSfBJotmGyM0E8m1b/sTzIxQCQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZGIzOTQ4ZDktZTI5NS00 MjJiLTg0MzktMWUwNTdlYjQ2NzNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkzCsig6ggwnOagugkCix6 KE0epZNLepJ44RUn6zITl/HmlNOtXhUWT9Vsza73dIoeGD+SfIvC9M+BlwqyDq8H Z0TYuRbko07V53lPslEvrurPkXCviceI3aAgzV+6NqfmZ9qElb0MJy0w2+CvHrns G5ynrjI0R/8ZbZ5rafpVcpgbYSbYJlhK3y6yuOkD4yv2pzme6Wc5hHqpftQUA/e3 oJrKyBYI/bhDtNt2dfdavb0DVILXDJqzlaPp9MyAFZkRwu1Nl9XaQKq5czem0jmF eftIXiAsCXEmWnD8Ft18rn+3P14WQJG/5OpCx8hSatz5NndG0y51h0AYqhMAPq76 -----END CERTIFICATE-----Generated at Wed Apr 15 16:35:16 2026 by rpki-client