$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft File: 961facb0-d9c9-4d9b-8bfa-17d54168d407.mft (raw, json) Hash identifier: I0f5zMzLOWKsQX164XypDiqfCoc0NUkWqEoOacpov5E= Subject key identifier: 6F:69:42:7C:ED:EB:5A:1C:4C:A0:66:DA:3E:C7:30:E9:3D:46:F7:25 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584D8CA17D0C687B7A0B9A322E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft Manifest number: 010D0C9F432858423550E010AA06C9AA53026582 Signing time: Sat 18 Apr 2026 17:00:03 +0000 Manifest this update: Sat 18 Apr 2026 17:00:03 +0000 Manifest next update: Tue 21 Apr 2026 17:00:00 +0000 Files and hashes: 1: 1c34de81-a92a-31ca-993f-2c9182338067.roa (hash: vKmIB2lVPwt4yJ1gZxsfdHz22qXPmryN8AqBJCQ6dYs=) 2: 27dfa34e-e99b-3a95-afac-f983350fa289.roa (hash: N4PvgvHiMbXWFbr8Qepj3LSJX8L4R2U0fbs4YBBmdVM=) 3: 961facb0-d9c9-4d9b-8bfa-17d54168d407.crl (hash: 4+uP06psGpR2jn6jbDNVKILbrAtkkMOLo730pcaCe1M=) 4: a19e3195-8a84-3cd1-96c4-4347391db867.roa (hash: G0YsRA2CvwdJ4DAw7Qg6bop5eO+qMc7BORqHyS+AWfU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:a1:7d:0c:68:7b:7a:0b:9a:32:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Apr 18 17:00:03 2026 GMT Not After : Apr 21 17:00:00 2026 GMT Subject: CN=4203bec1-69fe-46f8-b7b4-f4963eecb7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:a8:3e:d1:1b:68:0f:e1:a8:e2:78:04:58: 1c:26:2c:95:da:09:18:4c:15:98:4c:7c:7c:62:bc: 7c:35:cf:df:7f:60:63:be:ab:3b:fb:f2:e5:25:d7: f0:0e:90:0a:17:36:b7:74:1b:cc:8e:79:d1:2d:f9: dc:32:43:e8:66:e9:cc:1e:72:af:e6:46:b4:69:04: 34:9c:3e:f1:26:66:92:69:48:1a:93:b3:ee:a5:77: 91:3f:79:ab:a5:ea:70:45:9b:de:30:b7:04:ed:da: 4b:1b:21:d9:4a:40:f3:0e:ef:ed:22:5b:17:a2:d6: 02:31:17:f2:23:9f:00:16:ad:95:cc:2e:63:2e:f0: ab:9d:27:1f:c8:7d:2e:47:c6:27:46:1e:2a:a1:d4: 24:f0:62:00:68:92:9d:a5:7c:a9:8b:b8:27:95:0d: 2c:58:9c:85:15:26:31:a5:3e:55:0b:db:85:81:a5: 78:24:aa:9d:3d:0e:16:73:bf:80:40:4d:8a:97:fc: a4:1f:1e:85:ef:47:52:53:38:7e:e9:88:b4:e0:7c: 6f:3e:47:f9:81:e7:f3:62:87:68:1b:eb:9d:a3:e4: 91:c5:4f:55:0a:69:4b:e4:f4:a2:ae:c9:b8:ed:38: 62:53:19:db:ee:f2:b8:50:80:5f:a6:f6:6d:a9:68: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:69:42:7C:ED:EB:5A:1C:4C:A0:66:DA:3E:C7:30:E9:3D:46:F7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5a:b5:1b:bf:e6:73:6d:a6:d7:b2:9e:2d:57:75:99:84:d2: 76:2d:1e:7d:04:fc:67:b9:eb:b4:1c:00:06:1f:6d:4f:15:61: b0:ef:55:b1:95:f1:73:d8:d9:f5:59:8f:eb:5e:e5:6a:2b:c3: c5:5d:e0:fd:4e:ba:07:80:e1:c9:6a:bf:f8:d7:b2:14:3b:72: f3:17:88:da:d1:7b:49:67:ad:9b:b7:e1:c9:39:31:83:a3:23: 5d:5b:84:18:c3:f2:cd:fd:5a:a3:48:4c:eb:ef:a8:d6:62:ae: fa:3e:f2:e0:36:89:a2:3e:ab:fc:52:d6:95:63:d9:41:72:df: 0a:fe:4f:52:5d:14:eb:ee:58:f3:d0:86:4b:51:81:4d:9b:69: 64:54:d4:59:9b:32:3f:e0:28:fc:6c:88:fb:09:6a:dc:e8:d8: 9f:1a:1c:6b:26:10:32:9e:41:2c:7b:ee:64:84:56:20:30:ca: 46:44:45:b9:18:6a:5f:60:1f:72:7b:15:15:51:bb:67:95:da: f4:41:56:db:84:f4:28:86:47:de:e6:a9:c5:b3:05:da:ef:e6: ca:8e:55:99:9c:73:65:f3:5b:b0:89:4f:31:ab:70:39:0f:98: 11:da:4c:53:f3:c1:93:72:35:3b:8b:97:a6:8a:37:0c:6e:bd: 8a:9f:fd:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MoX0MaHt6C5oyLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI2MDQxODE3MDAwM1oXDTI2MDQyMTE3MDAwMFowLzEtMCsGA1UEAxMk NDIwM2JlYzEtNjlmZS00NmY4LWI3YjQtZjQ5NjNlZWNiN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OyoPtEbaA/hqOJ4BFgcJiyV2gkYTBWYTHx8 Yrx8Nc/ff2Bjvqs7+/LlJdfwDpAKFza3dBvMjnnRLfncMkPoZunMHnKv5ka0aQQ0 nD7xJmaSaUgak7PupXeRP3mrpepwRZveMLcE7dpLGyHZSkDzDu/tIlsXotYCMRfy I58AFq2VzC5jLvCrnScfyH0uR8YnRh4qodQk8GIAaJKdpXypi7gnlQ0sWJyFFSYx pT5VC9uFgaV4JKqdPQ4Wc7+AQE2Kl/ykHx6F70dSUzh+6Yi04HxvPkf5gefzYodo G+udo+SRxU9VCmlL5PSirsm47ThiUxnb7vK4UIBfpvZtqWiWlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG9pQnzt61ocTKBm2j7HMOk9RvclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvOTYxZmFjYjAtZDljOS00 ZDliLThiZmEtMTdkNTQxNjhkNDA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgWrUbv+ZzbabXsp4tV3WZ hNJ2LR59BPxnueu0HAAGH21PFWGw71WxlfFz2Nn1WY/rXuVqK8PFXeD9TroHgOHJ ar/417IUO3LzF4ja0XtJZ62bt+HJOTGDoyNdW4QYw/LN/VqjSEzr76jWYq76PvLg NomiPqv8UtaVY9lBct8K/k9SXRTr7ljz0IZLUYFNm2lkVNRZmzI/4Cj8bIj7CWrc 6NifGhxrJhAynkEse+5khFYgMMpGREW5GGpfYB9yexUVUbtnldr0QVbbhPQohkfe 5qnFswXa7+bKjlWZnHNl81uwiU8xq3A5D5gR2kxT88GTcjU7i5emijcMbr2Kn/0c -----END CERTIFICATE-----Generated at Sun Apr 19 00:55:12 2026 by rpki-client