$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: iclzoMxvKHKNzW7a5naW3TZiLFtUh4cexTWPuQjVicc= Subject key identifier: 99:30:35:86:A5:33:14:CB:98:12:93:E0:05:81:B0:67:24:04:0D:10 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584DA402F73E51D11903E44CA900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337A7C Signing time: Mon 27 Apr 2026 02:00:03 +0000 Manifest this update: Mon 27 Apr 2026 02:00:03 +0000 Manifest next update: Wed 29 Apr 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: 4+LDLGdZzBRhLwZVa2xZTZYnWEhRgU3b4vMKTe0TD9E=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: EB2LWe+1WD39PSjs8qyH3cT1b6F92AbWWjUA+TOk25o=) 3: b24dbab2-534c-3e59-b62f-16d920e96e56.asa (hash: 9pC72qb6/k7yBVQ51FTAYivgq50rF/AFWbG77QAJVB0=) 4: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: BGIbeVNSjzfCJbmpISrRiLgoaop9oIE/thFjY5aR2r8=) 5: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: X5H56wCb54eyPhgVf26tVICvXkywU3s4OFWmShVgH8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:02:f7:3e:51:d1:19:03:e4:4c:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Apr 27 02:00:03 2026 GMT Not After : Apr 29 02:00:00 2026 GMT Subject: CN=63288d27-6008-4e4d-8f62-09f0abdb1824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:fa:c4:83:9e:31:64:42:d9:4c:47:91:23: 44:5f:8d:2f:1e:4d:a3:ae:05:50:b5:70:b9:86:0d: c8:08:89:ba:f1:d1:2c:a1:dd:89:cd:c9:bc:4e:4f: 8d:62:de:e8:28:08:74:da:72:76:e4:93:de:5b:bc: e0:0f:e3:8a:e8:f1:f9:16:e9:9e:09:56:23:aa:71: f7:81:18:1d:c5:94:91:ec:42:75:92:3d:9a:cf:28: b5:de:8b:fa:9b:d4:44:20:4b:cf:b6:f0:09:24:71: ac:04:12:c2:13:37:50:80:42:2a:d0:c8:fe:e1:fe: ec:4e:07:d5:13:78:1f:ff:28:fd:33:e5:62:e3:8f: 00:63:88:e1:7e:b8:96:a1:47:a0:82:69:6a:1f:46: 5b:39:1f:62:a2:37:d7:00:50:35:0e:fc:b1:61:fb: 09:01:db:ac:7c:9b:ad:2d:22:40:d8:ed:e3:2b:09: 71:d4:62:84:c2:59:ba:c7:38:e9:ba:c5:65:43:e0: be:ae:1b:65:45:14:b6:f8:6a:33:cf:b1:1f:d1:87: 43:ba:f2:ab:26:82:3e:0f:f1:5e:d7:85:af:b3:ac: e3:fa:e2:e1:b9:a5:55:34:c4:67:7e:83:55:ea:97: c0:14:2b:d5:0e:9f:dd:18:71:66:2a:6a:4a:f6:82: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:30:35:86:A5:33:14:CB:98:12:93:E0:05:81:B0:67:24:04:0D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:55:b3:e2:cc:f7:4a:21:b4:29:c0:f7:d1:a1:d3:14:0c:df: cb:df:4a:61:14:9c:3d:dd:3d:35:82:4b:03:0a:63:69:f9:10: 27:73:42:df:ea:a1:dd:77:31:6b:64:c5:d4:a2:90:03:b9:94: 25:6f:3a:1b:78:3b:67:54:98:b8:fe:b8:30:af:d2:c5:a5:78: c0:f2:5d:2a:97:67:75:f9:57:0b:d5:ba:a7:45:f0:4f:50:da: e7:19:fe:72:74:6b:5a:9a:08:e6:1a:6f:59:64:6f:5e:28:0c: 58:8f:84:5c:9b:61:0a:76:d9:8b:2c:1f:bc:8d:28:29:b0:be: 6a:33:2a:5f:8b:d7:e9:3f:45:f0:98:38:83:95:fc:16:e0:54: 58:ea:c7:1b:8b:d8:83:fa:bc:87:d3:9e:35:59:4f:bf:72:0b: 21:20:ca:34:d6:93:4d:f3:47:cd:d9:41:53:90:5b:5b:f7:9a: f8:2d:95:f0:48:3d:be:e3:c8:e7:82:ee:b8:dd:93:23:c3:9b: d4:d2:16:af:ed:0e:bf:75:de:94:19:8c:94:28:f1:be:e7:f7: 54:65:b7:4c:48:a9:ec:37:30:bd:b5:63:38:5b:9c:7c:2f:ac: cd:fe:ce:ac:0e:41:29:52:24:c5:9d:69:94:4d:f2:14:19:0a: 5f:ac:a6:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2kAvc+UdEZA+RMqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDQyNzAyMDAwM1oXDTI2MDQyOTAyMDAwMFowLzEtMCsGA1UEAxMk NjMyODhkMjctNjAwOC00ZTRkLThmNjItMDlmMGFiZGIxODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPj6xIOeMWRC2UxHkSNEX40vHk2jrgVQtXC5 hg3ICIm68dEsod2Jzcm8Tk+NYt7oKAh02nJ25JPeW7zgD+OK6PH5FumeCVYjqnH3 gRgdxZSR7EJ1kj2azyi13ov6m9REIEvPtvAJJHGsBBLCEzdQgEIq0Mj+4f7sTgfV E3gf/yj9M+Vi448AY4jhfriWoUeggmlqH0ZbOR9iojfXAFA1DvyxYfsJAdusfJut LSJA2O3jKwlx1GKEwlm6xzjpusVlQ+C+rhtlRRS2+Gozz7Ef0YdDuvKrJoI+D/Fe 14Wvs6zj+uLhuaVVNMRnfoNV6pfAFCvVDp/dGHFmKmpK9oJJAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJkwNYalMxTLmBKT4AWBsGckBA0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiVbPizPdKIbQpwPfRodMU DN/L30phFJw93T01gksDCmNp+RAnc0Lf6qHddzFrZMXUopADuZQlbzobeDtnVJi4 /rgwr9LFpXjA8l0ql2d1+VcL1bqnRfBPUNrnGf5ydGtamgjmGm9ZZG9eKAxYj4Rc m2EKdtmLLB+8jSgpsL5qMypfi9fpP0XwmDiDlfwW4FRY6scbi9iD+ryH0541WU+/ cgshIMo01pNN80fN2UFTkFtb95r4LZXwSD2+48jngu643ZMjw5vU0hav7Q6/dd6U GYyUKPG+5/dUZbdMSKnsNzC9tWM4W5x8L6zN/s6sDkEpUiTFnWmUTfIUGQpfrKbh -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:11 2026 by rpki-client