$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft File: 0499e690-23fd-496a-a697-cd290d3127f5.mft (raw, json) Hash identifier: obbQv+0f8EAq8q3HcciJifDQwU7quO/Ug2qpMmmUqoM= Subject key identifier: 3A:C7:B5:A2:F3:9C:25:38:16:2E:89:F9:E4:F4:95:98:7B:48:E7:74 Authority key identifier: DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C Certificate issuer: /CN=0499e690-23fd-496a-a697-cd290d3127f5 Certificate serial: 010D0C9F4328584DA3328451F7D57FD2DD5CDA98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft Manifest number: 010D0C9F43285845F2A4FA22127B84E8C06B5054 Signing time: Sun 26 Apr 2026 19:00:04 +0000 Manifest this update: Sun 26 Apr 2026 19:00:04 +0000 Manifest next update: Tue 28 Apr 2026 19:00:00 +0000 Files and hashes: 1: 0499e690-23fd-496a-a697-cd290d3127f5.crl (hash: 5V6VlXyd0xl3cp2eAcbVpQN0SDTCIUER6CjzFPIYC6c=) 2: 62e3aae7-d67e-33d5-8a5d-16320c5b1c17.roa (hash: Ls0GQ4QW/qIHq7Q8s4ZXMPu+8YrRC/FNSCdZaVqVV3M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:32:84:51:f7:d5:7f:d2:dd:5c:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0499e690-23fd-496a-a697-cd290d3127f5 Validity Not Before: Apr 26 19:00:04 2026 GMT Not After : Apr 28 19:00:00 2026 GMT Subject: CN=c758b5ef-2697-412c-a12b-40a186ad0066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:9c:db:e8:69:3a:78:19:77:e2:1d:08:0c: a9:4b:d7:71:a6:a6:61:86:dd:22:57:66:ad:8e:d4: aa:c0:21:e2:4a:b9:e5:7a:72:78:0e:84:aa:5e:95: 75:86:66:1a:9e:4a:3a:d2:3b:0f:d8:df:53:b2:ff: 68:b7:0b:d0:9d:f6:40:f8:18:48:43:ab:60:24:5b: e8:0b:31:25:db:9c:fb:74:c5:22:62:ed:53:bf:e7: 96:9a:10:5b:bb:ed:f4:e0:d4:67:d0:39:32:02:5d: ff:77:74:88:9a:7a:d2:18:47:ef:e2:6c:74:6c:86: d5:e5:c9:18:5b:23:4a:31:e5:07:b6:9c:34:cf:0f: 1f:c0:22:f4:83:6b:86:63:c9:4b:ff:2f:e4:47:f1: eb:3e:82:b1:9f:17:b1:c5:13:7e:66:0a:3b:14:25: 68:46:9e:fb:6d:08:85:3a:ad:57:f8:b8:22:5c:72: 21:03:a4:46:60:99:13:ed:ae:a0:d3:69:d3:16:68: db:76:b5:41:b2:e8:4c:46:c0:7e:1c:c1:e0:1c:34: f6:17:fb:83:1e:da:4c:70:42:f9:24:54:c1:7e:47: 88:2a:c7:88:36:a4:46:59:74:45:57:35:03:1b:80: 4a:d9:e6:97:81:ad:9b:56:21:89:e8:00:ee:cd:b3: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:B5:A2:F3:9C:25:38:16:2E:89:F9:E4:F4:95:98:7B:48:E7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl X509v3 Authority Key Identifier: keyid:DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a8:d8:cf:43:ed:25:e4:b7:0c:94:ef:c7:5d:43:60:f5:bc: 82:fb:90:60:65:db:b9:bc:43:4b:64:a8:3b:65:38:e7:b2:70: 0a:c2:a9:8f:6e:c3:3e:d8:7e:81:79:81:96:3f:f7:2c:ef:c7: f9:96:cf:6f:77:72:61:e5:76:28:a2:29:92:44:1a:2c:71:38: b4:a2:89:ae:ca:87:9c:5f:bd:fa:45:d7:18:42:6c:43:a0:78: ca:98:ac:94:de:4c:ff:3f:38:a4:77:11:66:9e:16:2c:b8:38: 78:c3:ba:f1:bc:33:e8:e4:cb:fa:d9:99:0f:8c:ce:71:ff:05: 46:81:b8:52:a0:9f:89:34:58:12:f6:40:7b:81:30:32:c4:3d: 53:ab:63:22:ca:23:12:f7:31:3d:cf:1d:13:be:b0:07:21:72: d9:00:4d:07:91:74:e6:e2:f7:50:c5:6e:3e:26:dc:e5:19:bc: 58:28:52:b7:b5:33:bb:bf:ff:0f:45:24:89:1b:32:d7:aa:16: a5:10:0c:0c:df:74:df:94:2e:e3:c6:cb:21:2c:55:18:b8:28: 40:5b:2b:4c:bc:51:da:25:6f:f6:c5:3e:40:a1:a5:b1:82:5d: 4b:86:1e:47:fc:35:bf:21:2c:a9:e9:d4:1f:e0:55:45:49:60: 87:38:e4:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jMoRR99V/0t1c2pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ5OWU2OTAtMjNmZC00OTZhLWE2OTctY2QyOTBkMzEy N2Y1MB4XDTI2MDQyNjE5MDAwNFoXDTI2MDQyODE5MDAwMFowLzEtMCsGA1UEAxMk Yzc1OGI1ZWYtMjY5Ny00MTJjLWExMmItNDBhMTg2YWQwMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWuc2+hpOngZd+IdCAypS9dxpqZhht0iV2at jtSqwCHiSrnlenJ4DoSqXpV1hmYanko60jsP2N9Tsv9otwvQnfZA+BhIQ6tgJFvo CzEl25z7dMUiYu1Tv+eWmhBbu+304NRn0DkyAl3/d3SImnrSGEfv4mx0bIbV5ckY WyNKMeUHtpw0zw8fwCL0g2uGY8lL/y/kR/HrPoKxnxexxRN+Zgo7FCVoRp77bQiF Oq1X+LgiXHIhA6RGYJkT7a6g02nTFmjbdrVBsuhMRsB+HMHgHDT2F/uDHtpMcEL5 JFTBfkeIKseINqRGWXRFVzUDG4BK2eaXga2bViGJ6ADuzbPR6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDrHtaLznCU4Fi6J+eT0lZh7SOd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5 ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5MGQzMTI3ZjUvMDQ5OWU2OTAtMjNmZC00 OTZhLWE2OTctY2QyOTBkMzEyN2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDQ5OWU2OTAtMjNmZC00OTZhLWE2 OTctY2QyOTBkMzEyN2Y1LzA0OTllNjkwLTIzZmQtNDk2YS1hNjk3LWNkMjkwZDMx MjdmNS5jcmwwHwYDVR0jBBgwFoAU2l8J0mVwJfrYhNuhc0YSUhBV3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5 MGQzMTI3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnqNjPQ+0l5LcMlO/HXUNg 9byC+5BgZdu5vENLZKg7ZTjnsnAKwqmPbsM+2H6BeYGWP/cs78f5ls9vd3Jh5XYo oimSRBoscTi0oomuyoecX736RdcYQmxDoHjKmKyU3kz/PzikdxFmnhYsuDh4w7rx vDPo5Mv62ZkPjM5x/wVGgbhSoJ+JNFgS9kB7gTAyxD1Tq2MiyiMS9zE9zx0TvrAH IXLZAE0HkXTm4vdQxW4+JtzlGbxYKFK3tTO7v/8PRSSJGzLXqhalEAwM33TflC7j xsshLFUYuChAWytMvFHaJW/2xT5AoaWxgl1Lhh5H/DW/ISyp6dQf4FVFSWCHOOQu -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:14 2026 by rpki-client