$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft File: c17dbfd2-c39f-4314-88e6-57ca9f713453.mft (raw, json) Hash identifier: RYZaFChYcdhPVLC0Rk2It9Lwmizwz3KVoRsIkrc9ACQ= Subject key identifier: 88:BA:E1:82:64:4F:46:75:0C:FB:EA:29:9D:28:CD:DD:FD:B1:E9:20 Authority key identifier: 71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10 Certificate issuer: /CN=c17dbfd2-c39f-4314-88e6-57ca9f713453 Certificate serial: 010D0C9F4328584DA38BDAE44A3490331318C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft Manifest number: 010D0C9F4328584073A823A7132189461001C73A Signing time: Sun 26 Apr 2026 22:00:04 +0000 Manifest this update: Sun 26 Apr 2026 22:00:04 +0000 Manifest next update: Tue 28 Apr 2026 22:00:00 +0000 Files and hashes: 1: 2f20d648-a11b-3249-b9f6-a2fee3e09f2f.roa (hash: bxRSBEcOGQKr1CZOWMm70szy4Dujmt9Zyvbl02XAn8E=) 2: c17dbfd2-c39f-4314-88e6-57ca9f713453.crl (hash: anWC7Bx2g1iaEFTDPGBd0uXY5lPu1cvaGcg1x3QIeZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:8b:da:e4:4a:34:90:33:13:18:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17dbfd2-c39f-4314-88e6-57ca9f713453 Validity Not Before: Apr 26 22:00:04 2026 GMT Not After : Apr 28 22:00:00 2026 GMT Subject: CN=3acf15f8-9718-45d1-86c2-b7c54d0e73a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:f3:04:de:a7:ba:4c:2a:d6:ec:45:b2:4c: e1:51:0b:9f:5a:07:0e:2d:6b:fc:0a:02:31:40:09: 68:b1:24:eb:f8:f8:06:ad:14:5c:95:e5:49:26:78: de:f7:79:62:3b:e8:10:69:98:be:df:ef:cc:75:e2: 26:e1:31:70:63:4e:8c:5a:36:29:9e:42:a2:f1:76: 6d:3d:1a:d7:46:d6:b8:81:73:a5:3a:83:59:90:b2: 72:88:39:61:a0:0c:da:67:79:89:96:21:7a:ed:f6: 20:a1:f8:98:5c:32:63:8d:78:90:fa:1e:01:5f:3d: 01:af:25:d1:19:8c:60:b2:33:50:0b:d4:0d:e0:87: b0:8d:02:11:40:a8:70:8b:56:5d:93:22:3a:5c:ce: 12:e7:81:7d:e7:6c:de:ce:45:2c:b2:41:d5:54:e7: 2f:ea:0c:a0:39:de:e1:2e:bd:63:b1:53:f2:f6:49: d0:0a:5d:b6:41:a4:8a:8e:b1:df:e2:39:b0:0b:32: a8:0e:3a:aa:c0:90:a5:d3:33:be:68:c6:83:43:c8: 82:3a:3b:ad:f6:ab:32:5b:94:30:25:87:ff:2f:3f: e8:ee:1f:01:3f:40:e5:17:38:67:e1:c3:a7:4e:fb: 25:f8:a6:40:b6:04:2f:07:0d:7d:fd:05:cc:dc:1c: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BA:E1:82:64:4F:46:75:0C:FB:EA:29:9D:28:CD:DD:FD:B1:E9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.crl X509v3 Authority Key Identifier: keyid:71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ca:a7:20:e4:65:a5:89:09:5e:22:22:b5:29:40:71:03:54: a8:13:af:53:c1:41:8d:55:c8:2a:f7:6b:65:4d:52:9b:e7:25: d0:c8:4a:4f:de:51:f9:40:f2:3c:6a:82:d9:90:cd:24:da:60: 50:20:68:8b:b7:41:c9:b7:00:3c:d8:38:7c:1b:ad:80:32:18: 48:02:7d:ba:8e:12:2a:88:af:e1:d6:29:59:3b:72:44:84:22: 15:c8:58:b6:b8:73:3b:95:e0:d5:d6:53:db:56:d3:53:bc:13: 53:23:0c:24:3c:b0:bc:54:39:9d:9c:2c:fb:dc:60:da:e4:c2: 3d:b0:c2:f0:e9:d5:a2:35:11:54:fb:63:7f:6c:3f:ba:e6:57: 1e:c8:4a:4c:f9:b9:8a:53:07:c9:77:d0:b3:2b:90:7f:25:30: ee:27:8e:09:6d:b7:80:bd:6a:9a:30:e0:7e:00:eb:c4:c3:88: 7a:09:11:e7:88:6f:bf:79:59:de:f9:1b:fa:e2:aa:8b:0d:a7: 1e:9d:cd:4a:f9:9f:b9:58:dd:66:31:86:db:5a:c3:b0:59:2e: 50:5d:a4:c4:e2:9d:78:cf:d8:20:23:1d:fc:9d:82:03:3f:87: aa:04:1e:91:ae:be:2d:42:69:39:af:aa:e2:67:4e:68:91:07: 99:7f:e0:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2ji9rkSjSQMxMYwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZGJmZDItYzM5Zi00MzE0LTg4ZTYtNTdjYTlmNzEz NDUzMB4XDTI2MDQyNjIyMDAwNFoXDTI2MDQyODIyMDAwMFowLzEtMCsGA1UEAxMk M2FjZjE1ZjgtOTcxOC00NWQxLTg2YzItYjdjNTRkMGU3M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsTzBN6nukwq1uxFskzhUQufWgcOLWv8CgIx QAlosSTr+PgGrRRcleVJJnje93liO+gQaZi+3+/MdeIm4TFwY06MWjYpnkKi8XZt PRrXRta4gXOlOoNZkLJyiDlhoAzaZ3mJliF67fYgofiYXDJjjXiQ+h4BXz0BryXR GYxgsjNQC9QN4IewjQIRQKhwi1ZdkyI6XM4S54F952zezkUsskHVVOcv6gygOd7h Lr1jsVPy9knQCl22QaSKjrHf4jmwCzKoDjqqwJCl0zO+aMaDQ8iCOjut9qsyW5Qw JYf/Lz/o7h8BP0DlFzhn4cOnTvsl+KZAtgQvBw19/QXM3BwplQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIi64YJkT0Z1DPvqKZ0ozd39sekgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMTdk YmZkMi1jMzlmLTQzMTQtODhlNi01N2NhOWY3MTM0NTMvYzE3ZGJmZDItYzM5Zi00 MzE0LTg4ZTYtNTdjYTlmNzEzNDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzE3ZGJmZDItYzM5Zi00MzE0LTg4 ZTYtNTdjYTlmNzEzNDUzL2MxN2RiZmQyLWMzOWYtNDMxNC04OGU2LTU3Y2E5Zjcx MzQ1My5jcmwwHwYDVR0jBBgwFoAUcaUyBHa+aRLXrhZrIG0VPB6oBBAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMTdkYmZkMi1jMzlmLTQzMTQtODhlNi01N2Nh OWY3MTM0NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxyqcg5GWliQleIiK1KUBx A1SoE69TwUGNVcgq92tlTVKb5yXQyEpP3lH5QPI8aoLZkM0k2mBQIGiLt0HJtwA8 2Dh8G62AMhhIAn26jhIqiK/h1ilZO3JEhCIVyFi2uHM7leDV1lPbVtNTvBNTIwwk PLC8VDmdnCz73GDa5MI9sMLw6dWiNRFU+2N/bD+65lceyEpM+bmKUwfJd9CzK5B/ JTDuJ44JbbeAvWqaMOB+AOvEw4h6CRHniG+/eVne+Rv64qqLDacenc1K+Z+5WN1m MYbbWsOwWS5QXaTE4p14z9ggIx38nYIDP4eqBB6Rrr4tQmk5r6riZ05okQeZf+AM -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:19 2026 by rpki-client