$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: Y/mR2A2RiQLvL7jYOMQQK4kPwUjZgq+t3FGTry7YLj8= Subject key identifier: 18:F0:B2:EC:9F:1C:65:D3:19:08:5E:F8:44:74:8D:7E:8E:26:C9:70 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584DA2BB64BFF3C208E9DB775A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A478AF Signing time: Sun 26 Apr 2026 15:00:03 +0000 Manifest this update: Sun 26 Apr 2026 15:00:03 +0000 Manifest next update: Wed 29 Apr 2026 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: HKALk7APB9C5aWicLi6TTCgStel3ebW62XQl7OQXD3w=) 2: fd5ce922-adeb-39b9-a14f-b3d570e2f73c.asa (hash: yf8fK2f0oBklUJffvqCqJd066VXf3VkHsLMbG+4UDfQ=) 3: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: 32YdO1bpCmN6uxTSn83eu7bMVkJkDiojGuOzSMCCL6M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:bb:64:bf:f3:c2:08:e9:db:77:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Apr 26 15:00:03 2026 GMT Not After : Apr 29 15:00:00 2026 GMT Subject: CN=e5db0c3e-16b0-4fad-abc2-2e62c813cdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:f5:91:1e:53:ea:27:08:cd:d8:95:21:3e: f8:d4:87:98:4b:01:25:8e:90:7a:7d:15:0f:f0:63: d8:b8:ea:98:11:cd:34:ce:a3:bb:93:cb:bf:b4:24: 82:95:fe:a6:07:4e:aa:de:5c:6e:c0:94:fe:18:45: 95:10:a1:ea:7b:89:01:e7:95:d6:0a:0a:57:81:f0: e7:8f:7a:05:3a:e2:a2:73:13:62:9c:e0:cd:02:57: 64:23:02:b4:61:7c:a5:c8:bb:d2:2b:98:64:87:08: ea:46:04:f0:1d:ff:54:f3:16:85:29:74:03:ee:df: 02:c9:da:01:97:dc:47:83:35:c3:53:e3:d0:f7:37: fa:24:06:d6:98:51:98:e6:4b:71:01:0c:e1:1e:81: db:7d:15:01:58:59:60:54:6a:28:0e:4f:16:d6:ca: db:eb:76:3e:7c:bd:a9:c1:2f:13:30:bd:a0:1b:c4: dd:0e:d7:a4:34:b6:89:f3:b3:cd:c7:03:14:40:9f: 6b:ab:df:44:be:90:b1:51:33:99:35:8c:65:29:1c: e5:a5:6e:31:a6:21:b7:b3:28:1a:71:70:e7:65:25: 3d:44:20:1a:cf:0f:1a:b3:2f:02:a3:8e:b8:90:e3: 42:f2:a7:6d:2f:4c:b9:83:72:cd:c0:3a:92:75:eb: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:B2:EC:9F:1C:65:D3:19:08:5E:F8:44:74:8D:7E:8E:26:C9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:41:d2:05:a1:70:1a:8f:7a:38:80:3f:ee:6b:d6:cd:60:d3: 5d:e2:3f:af:2d:14:98:76:e9:1f:56:49:f0:e2:b3:08:91:48: c0:bd:ed:d5:84:3e:1b:ca:21:5e:b5:b8:cd:0e:90:9f:5f:82: f9:4f:7f:1b:7f:c1:91:1c:f8:94:20:02:3e:9c:d1:99:1c:b2: 36:ca:f5:b0:35:a5:56:7e:f4:4c:21:bd:9c:33:29:8c:e8:d0: 28:ca:67:26:be:ae:46:81:3a:2f:61:61:90:66:7b:01:66:57: fd:9b:c3:7c:7c:be:fe:18:66:f1:2c:d6:61:89:3f:d6:78:1d: 4e:77:9b:bb:72:33:3f:cc:0e:95:8d:25:ec:6d:be:5c:ec:e5: c6:be:b0:bf:06:3e:cc:fa:98:6e:68:ed:7a:10:3b:09:55:f0: b0:2b:be:f0:f5:1c:03:3b:c2:16:88:6c:d5:7d:df:b1:e7:bb: 9a:b7:be:28:db:fd:1a:2b:7b:cc:65:6a:20:d5:1f:50:80:30: 73:76:ce:dc:28:07:e0:b9:df:87:be:21:61:71:44:76:53:c3: e7:47:49:7e:af:e3:be:8a:40:7a:05:20:74:17:fa:c4:1a:65: 1c:34:43:5b:14:8d:de:5b:3b:b7:29:ed:2c:2a:ed:0d:93:9d: d2:f3:28:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2iu2S/88II6dt3WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI2MDQyNjE1MDAwM1oXDTI2MDQyOTE1MDAwMFowLzEtMCsGA1UEAxMk ZTVkYjBjM2UtMTZiMC00ZmFkLWFiYzItMmU2MmM4MTNjZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9/1kR5T6icIzdiVIT741IeYSwEljpB6fRUP 8GPYuOqYEc00zqO7k8u/tCSClf6mB06q3lxuwJT+GEWVEKHqe4kB55XWCgpXgfDn j3oFOuKicxNinODNAldkIwK0YXylyLvSK5hkhwjqRgTwHf9U8xaFKXQD7t8CydoB l9xHgzXDU+PQ9zf6JAbWmFGY5ktxAQzhHoHbfRUBWFlgVGooDk8W1srb63Y+fL2p wS8TML2gG8TdDtekNLaJ87PNxwMUQJ9rq99EvpCxUTOZNYxlKRzlpW4xpiG3syga cXDnZSU9RCAazw8asy8Co464kONC8qdtL0y5g3LNwDqSdevGtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBjwsuyfHGXTGQhe+ER0jX6OJslwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsQdIFoXAaj3o4gD/ua9bN YNNd4j+vLRSYdukfVknw4rMIkUjAve3VhD4byiFetbjNDpCfX4L5T38bf8GRHPiU IAI+nNGZHLI2yvWwNaVWfvRMIb2cMymM6NAoymcmvq5GgTovYWGQZnsBZlf9m8N8 fL7+GGbxLNZhiT/WeB1Od5u7cjM/zA6VjSXsbb5c7OXGvrC/Bj7M+phuaO16EDsJ VfCwK77w9RwDO8IWiGzVfd+x57uat74o2/0aK3vMZWog1R9QgDBzds7cKAfgud+H viFhcUR2U8PnR0l+r+O+ikB6BSB0F/rEGmUcNENbFI3eWzu3Ke0sKu0Nk53S8yhW -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:02 2026 by rpki-client