$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft File: 804e20e1-66d3-4b19-8356-82071ce2a249.mft (raw, json) Hash identifier: AErzej4YFWcqBtujY+JwgWm+aOM5qlizOxHkWxGpajQ= Subject key identifier: F7:C1:F0:72:46:58:EE:C0:11:6F:32:0E:62:7D:39:44:E6:11:BF:B9 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584D92CBBED5ABDFB72F37375720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft Manifest number: 010D0C9F4328584073A82BE94AF06297D1D97CD1 Signing time: Mon 20 Apr 2026 22:00:03 +0000 Manifest this update: Mon 20 Apr 2026 22:00:03 +0000 Manifest next update: Wed 22 Apr 2026 22:00:00 +0000 Files and hashes: 1: 804e20e1-66d3-4b19-8356-82071ce2a249.crl (hash: P+vGdRYKdD7pSxPBnocuqq7rZruGLCwuztr432KCxoQ=) 2: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (hash: zcTY/AuJsinB5zVqbP5qfeDPrTemmbRni2L9QXu3+ZA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:cb:be:d5:ab:df:b7:2f:37:37:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Apr 20 22:00:03 2026 GMT Not After : Apr 22 22:00:00 2026 GMT Subject: CN=3233d749-4e01-4647-8030-11ec11b26c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:2d:f0:63:24:88:05:17:04:43:02:60:01: 65:cf:20:1c:6a:2d:da:71:38:52:a6:f4:71:08:6f: 08:98:d5:51:96:f6:d5:bd:29:4a:61:2f:f2:0c:8c: 49:ba:69:87:69:ea:1c:e3:1e:de:ac:96:94:2f:ab: 53:25:b2:1f:32:82:19:75:52:01:58:db:9c:c2:2d: f1:da:5f:2e:c4:77:45:2d:32:6c:61:c8:7f:a5:4c: 4f:6b:69:dc:cb:37:82:75:20:84:52:c1:18:5d:91: 81:15:c2:f6:d8:da:6b:0d:3c:30:6f:af:3e:50:75: b0:cc:57:38:94:3c:5a:6b:72:f4:e1:fc:9a:d3:24: d6:ee:36:88:33:f7:ef:cd:b0:d9:71:6f:2d:fb:2f: 6a:9c:68:6d:91:3d:eb:a4:a3:6c:9f:88:24:07:2d: 7c:5d:73:36:12:89:d0:17:43:fb:7f:c0:e0:ee:15: 22:a3:26:5f:6e:8d:e4:b2:09:81:41:20:16:97:00: cd:ae:ce:a4:e3:c3:5a:0e:a5:d5:42:3a:97:03:33: 23:31:7e:b2:bc:85:b6:e4:24:28:27:2b:1b:02:c6: de:9a:d1:6a:87:ad:3f:3b:39:00:b9:fe:07:7b:eb: 59:44:c7:c4:7b:92:26:74:d4:4d:b7:8b:0a:75:c3: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C1:F0:72:46:58:EE:C0:11:6F:32:0E:62:7D:39:44:E6:11:BF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:21:1b:d0:8c:8d:c0:e5:db:f6:87:2f:2b:c5:59:be:c5:8a: 40:f7:71:1f:f3:43:0d:42:73:2b:b0:65:b6:1c:67:52:ac:38: ba:f4:ba:6d:99:f6:77:1d:93:36:76:a2:8e:68:56:c4:d7:20: 86:f8:ef:68:7e:74:d3:15:5d:f4:a2:66:92:06:ec:c7:3b:27: 64:64:73:0b:6e:ba:d3:30:de:34:2c:5e:96:27:0b:37:28:c9: c5:2d:52:ac:a0:06:16:e3:c8:30:a0:d3:b7:be:57:62:b6:ea: fc:45:f7:d9:0f:e6:23:74:97:16:8b:e6:1d:41:58:97:61:12: 46:5a:2c:6a:fe:ea:e9:10:0d:0a:4f:3a:a7:9c:46:db:52:25: 8f:0a:da:be:4d:d1:18:0b:b0:71:a9:c1:de:6c:30:17:cd:1b: e1:ef:0e:81:a8:28:17:f3:fa:e6:e0:83:5e:df:b3:d1:6c:36: 36:de:67:57:e5:0a:49:ce:ba:8b:d9:85:7e:9f:11:78:a0:c1: 71:3b:19:0d:d6:d1:44:80:40:a8:7e:94:99:e8:11:8b:d5:fd: 59:19:7b:9d:a2:0a:59:b2:8a:2f:95:58:b6:96:2a:9a:93:a5: fd:a4:00:d9:73:c1:b6:53:ef:c2:fd:a7:0e:4b:ef:dc:e2:48: 59:ae:d4:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Sy77Vq9+3Lzc3VyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI2MDQyMDIyMDAwM1oXDTI2MDQyMjIyMDAwMFowLzEtMCsGA1UEAxMk MzIzM2Q3NDktNGUwMS00NjQ3LTgwMzAtMTFlYzExYjI2YzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ust8GMkiAUXBEMCYAFlzyAcai3acThSpvRx CG8ImNVRlvbVvSlKYS/yDIxJummHaeoc4x7erJaUL6tTJbIfMoIZdVIBWNucwi3x 2l8uxHdFLTJsYch/pUxPa2ncyzeCdSCEUsEYXZGBFcL22NprDTwwb68+UHWwzFc4 lDxaa3L04fya0yTW7jaIM/fvzbDZcW8t+y9qnGhtkT3rpKNsn4gkBy18XXM2EonQ F0P7f8Dg7hUioyZfbo3ksgmBQSAWlwDNrs6k48NaDqXVQjqXAzMjMX6yvIW25CQo JysbAsbemtFqh60/OzkAuf4He+tZRMfEe5ImdNRNt4sKdcMRZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPfB8HJGWO7AEW8yDmJ9OUTmEb+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvODA0ZTIwZTEtNjZkMy00 YjE5LTgzNTYtODIwNzFjZTJhMjQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJIRvQjI3A5dv2hy8rxVm+ xYpA93Ef80MNQnMrsGW2HGdSrDi69LptmfZ3HZM2dqKOaFbE1yCG+O9ofnTTFV30 omaSBuzHOydkZHMLbrrTMN40LF6WJws3KMnFLVKsoAYW48gwoNO3vlditur8RffZ D+YjdJcWi+YdQViXYRJGWixq/urpEA0KTzqnnEbbUiWPCtq+TdEYC7BxqcHebDAX zRvh7w6BqCgX8/rm4INe37PRbDY23mdX5QpJzrqL2YV+nxF4oMFxOxkN1tFEgECo fpSZ6BGL1f1ZGXudogpZsoovlVi2liqak6X9pADZc8G2U+/C/acOS+/c4khZrtTj -----END CERTIFICATE-----Generated at Mon Apr 20 23:35:21 2026 by rpki-client