$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: cN3pxm5nQsV4e4+KWX5p+SNkynvI2ej/uOX7zEwDYrg= Subject key identifier: 07:09:8F:38:46:21:02:12:2C:4A:25:BC:43:DD:84:55:B0:2A:B9:58 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584D5DDE8426702185AAAAE3C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CB5A Signing time: Wed 01 Apr 2026 23:00:03 +0000 Manifest this update: Wed 01 Apr 2026 23:00:03 +0000 Manifest next update: Sat 04 Apr 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: FdgcLu5c6DKRkOgzbYxHM4aNkQITSncejoa1UlvpVXk=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: paFTnhtNnT11KFi1hSpcunqTlG2y2j6A2LrpdgzkqFU=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: ReXijWiCt72HfGklSzmyQ1AvYCXKk9mCCrr6DIPA7bI=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: Sv3kt3zKTHyMtLkyPcXpX6sDSVe3Y0DqZurh+T6Hgoc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:de:84:26:70:21:85:aa:aa:e3:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Apr 1 23:00:03 2026 GMT Not After : Apr 4 23:00:00 2026 GMT Subject: CN=551022b8-fe3b-4f5a-adfb-f35610db8f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:a0:e9:25:ff:a6:e2:a3:9b:4c:a4:db:90: bc:23:84:46:06:a4:7b:68:e1:ea:80:fe:08:35:74: c3:4f:7b:d8:dd:e1:3d:29:8c:35:15:27:d6:47:00: 44:d3:75:5f:65:29:3a:da:28:1d:e6:c9:7c:a7:7a: 44:56:8e:60:e0:98:6b:f0:68:92:3a:3f:fd:6e:18: 32:82:8c:4c:1c:73:dd:34:fb:4a:1f:71:83:fe:50: b8:dd:e7:6b:62:30:98:69:d9:90:28:5a:e1:ff:d3: 66:c6:c8:cf:57:df:22:62:b1:f3:23:a8:c6:14:c7: 8c:b9:6a:c2:44:3f:34:71:4f:19:2e:fa:f0:d2:d9: 84:91:d7:2d:84:01:39:44:e4:c7:db:64:0d:40:d5: 65:29:9e:30:11:b0:c6:c6:41:1b:e5:e1:0a:49:56: 41:81:cc:5b:6c:db:fc:2e:cc:cd:1d:54:d2:50:a0: f3:d7:b5:0d:ec:08:c0:ba:66:d2:3c:61:88:78:bf: 0c:4f:d7:d5:14:29:77:40:ff:4f:fa:57:ec:e0:8a: 9a:c1:b4:04:30:44:02:4a:a6:b8:ec:24:3e:61:ed: dc:22:67:14:2f:a8:8a:be:ae:b6:40:0d:3d:eb:e0: ba:c4:f2:2c:ce:c6:ed:0b:19:b9:a1:90:e9:c0:b4: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:09:8F:38:46:21:02:12:2C:4A:25:BC:43:DD:84:55:B0:2A:B9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:00:83:a4:5f:72:33:78:83:c0:8d:66:8f:71:3e:0e:66:c5: d3:1d:08:8e:03:30:03:6c:d3:ea:0c:ad:36:90:8c:bf:9a:3a: 77:8f:3a:31:d7:3b:c4:57:80:01:9f:a4:44:61:dd:57:d0:a0: 32:ba:57:52:86:92:01:72:bc:f3:3d:31:07:86:a4:c1:54:60: 24:6f:9a:9c:44:b3:09:ba:c2:80:ab:53:7e:38:ce:b6:e7:50: 3d:ef:5f:09:eb:4c:b1:f6:cd:93:84:04:b0:f0:8d:1a:93:33: 19:74:1f:f6:31:01:68:17:1f:76:ad:f4:5d:0a:c9:fa:22:8b: 8d:5a:7c:7a:8e:e3:82:a8:49:49:6f:e0:7f:bb:74:97:23:89: a5:5b:ee:94:9e:7a:3f:3a:3d:63:3a:82:5b:4b:93:5f:7a:f6: f1:a8:f3:0b:2a:9d:57:07:b8:ec:f2:b7:81:31:4c:dc:cd:b8: b3:23:cf:b2:fd:6a:ad:38:13:33:27:3f:da:e3:a6:65:1b:9f: 85:b6:e0:04:9d:39:62:28:7c:21:30:43:57:f3:99:bb:be:f5: 5e:2d:82:8f:35:21:e5:71:f2:38:8a:b4:b7:22:71:3b:99:e3: f7:af:df:bb:d1:7c:9e:6c:84:69:be:51:60:59:5e:43:37:0d: 58:35:8d:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1d3oQmcCGFqqrjyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDQwMTIzMDAwM1oXDTI2MDQwNDIzMDAwMFowLzEtMCsGA1UEAxMk NTUxMDIyYjgtZmUzYi00ZjVhLWFkZmItZjM1NjEwZGI4ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh2g6SX/puKjm0yk25C8I4RGBqR7aOHqgP4I NXTDT3vY3eE9KYw1FSfWRwBE03VfZSk62igd5sl8p3pEVo5g4Jhr8GiSOj/9bhgy goxMHHPdNPtKH3GD/lC43edrYjCYadmQKFrh/9NmxsjPV98iYrHzI6jGFMeMuWrC RD80cU8ZLvrw0tmEkdcthAE5ROTH22QNQNVlKZ4wEbDGxkEb5eEKSVZBgcxbbNv8 LszNHVTSUKDz17UN7AjAumbSPGGIeL8MT9fVFCl3QP9P+lfs4IqawbQEMEQCSqa4 7CQ+Ye3cImcUL6iKvq62QA096+C6xPIszsbtCxm5oZDpwLT/1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAcJjzhGIQISLEolvEPdhFWwKrlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCAIOkX3IzeIPAjWaPcT4O ZsXTHQiOAzADbNPqDK02kIy/mjp3jzox1zvEV4ABn6REYd1X0KAyuldShpIBcrzz PTEHhqTBVGAkb5qcRLMJusKAq1N+OM6251A9718J60yx9s2ThASw8I0akzMZdB/2 MQFoFx92rfRdCsn6IouNWnx6juOCqElJb+B/u3SXI4mlW+6Unno/Oj1jOoJbS5Nf evbxqPMLKp1XB7js8reBMUzczbizI8+y/WqtOBMzJz/a46ZlG5+FtuAEnTliKHwh MENX85m7vvVeLYKPNSHlcfI4irS3InE7meP3r9+70XyebIRpvlFgWV5DNw1YNY1N -----END CERTIFICATE-----Generated at Thu Apr 2 11:08:26 2026 by rpki-client