$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft File: 8c902da3-488d-44d9-9833-f1295a9fd887.mft (raw, json) Hash identifier: DjSwlX5Tu3HigimtwkLvYcc/K6JBI970bKWm877mTQ0= Subject key identifier: 45:66:57:45:93:78:86:99:DF:0C:7B:36:42:AC:6D:18:4F:05:57:52 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F4328584DA36E1012543BD4DA181D3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft Manifest number: 010D0C9F4328584073A828BE490A7E22F4117C2A Signing time: Sun 26 Apr 2026 21:00:03 +0000 Manifest this update: Sun 26 Apr 2026 21:00:03 +0000 Manifest next update: Tue 28 Apr 2026 21:00:00 +0000 Files and hashes: 1: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (hash: l0/km8e1EmrXPodOINRAeNaOkQO++PRzwwA1WYssGWk=) 2: 77026aec-a6c7-3339-9364-ade3cc39f353.roa (hash: YNY+7vT0CwOkYmMgIF6U8tnEE/db9+jNYXNDsA8r/WA=) 3: 8c902da3-488d-44d9-9833-f1295a9fd887.crl (hash: wIG0AG8gbutlKhiE9Ff8gnNxcL4PMhMbUCbYvxQdjzg=) 4: e08a62cd-b2f1-3a90-b0e6-f8c1dd9b5e04.roa (hash: WhDQiwD5tBvOARsqHrlPzQWu2k0TA2XFhH2loZ/T024=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:6e:10:12:54:3b:d4:da:18:1d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Apr 26 21:00:03 2026 GMT Not After : Apr 28 21:00:00 2026 GMT Subject: CN=4ca01eec-12f2-40f2-bf96-2d1d1789178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a1:2d:f5:e9:42:8a:a2:e0:64:c2:ea:dd:31: 06:d4:b0:d8:1c:3a:25:d8:9b:1c:4c:95:9a:90:d5: 56:3a:78:c1:b2:de:3f:0b:f6:cc:61:5d:62:ab:9a: ce:45:50:4f:a1:19:0b:05:d1:87:7e:ab:17:1a:2f: 47:47:4b:40:a4:67:82:cf:d3:af:f7:18:9e:3b:04: 81:2a:69:1a:c8:51:60:fe:91:2c:3d:09:26:c2:bb: f7:46:a9:fe:6c:59:9f:cc:c5:4f:01:48:b3:5c:b5: f1:20:25:52:46:29:cb:be:43:22:c9:05:73:00:ad: 21:db:72:1b:35:fc:06:96:f7:b2:e3:d9:b4:c5:b8: 14:25:81:cc:b5:02:74:96:60:89:86:4c:0d:07:92: e1:5f:18:cf:43:df:55:02:14:34:8a:42:fa:24:63: df:e6:85:37:66:92:53:ce:a1:96:3c:ce:be:2f:6f: b3:85:6c:da:26:52:1f:88:95:3d:d1:6f:57:d0:99: e7:4b:1b:88:99:c1:fe:8b:29:86:67:fc:5c:f2:67: 3f:9b:a6:3f:ff:ac:5e:9d:f4:07:30:c3:c4:df:1a: 29:9a:7d:04:5c:f5:da:82:85:39:d6:a3:c8:0f:ef: 65:49:38:7c:29:ad:f4:d0:44:29:4f:31:26:89:44: 61:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:66:57:45:93:78:86:99:DF:0C:7B:36:42:AC:6D:18:4F:05:57:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:7f:db:2d:d0:35:af:82:f2:1d:94:91:2a:63:b4:3d:5f:5d: 9e:5c:91:7c:ad:f4:e1:8f:4b:e9:63:dd:41:84:87:3c:ad:f7: 6f:2f:dc:6d:a2:93:80:82:3c:d6:49:18:56:47:18:02:ac:f5: bc:21:41:51:96:5b:42:c7:de:c8:d9:d5:d8:6b:68:66:ad:fb: e8:42:92:0f:6b:c5:5b:db:5a:56:9e:c1:a6:1e:50:f1:2e:3f: 2f:30:9f:66:4e:d9:83:13:a4:c2:f1:76:0c:1c:0d:c0:be:ed: bc:2b:82:65:80:f9:02:4a:46:0b:76:4b:84:d6:5e:e6:34:5e: b8:5b:c3:c0:26:47:9d:60:dd:c5:e9:e8:ec:a0:d4:9e:bf:b3: fa:97:3f:bd:0d:4a:08:ae:64:92:2c:5b:86:5e:c3:1e:05:d9: 32:d7:5d:c4:35:3b:22:b8:fb:63:9d:e3:ae:3e:3c:91:27:81: 2b:c4:86:b7:80:ec:77:12:c2:44:9f:46:7c:0f:4e:ef:1f:e2: 32:08:42:fb:bb:9f:ab:e3:e4:64:25:58:10:b0:1a:2c:d6:97: 4e:30:fc:d1:d0:d4:e1:3e:52:66:45:46:00:b4:f4:83:e1:d4: a9:6e:09:4a:6f:6d:ea:f5:e5:1c:8f:c7:02:02:a2:65:78:e7: 4c:53:de:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jbhASVDvU2hgdMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI2MDQyNjIxMDAwM1oXDTI2MDQyODIxMDAwMFowLzEtMCsGA1UEAxMk NGNhMDFlZWMtMTJmMi00MGYyLWJmOTYtMmQxZDE3ODkxNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aEt9elCiqLgZMLq3TEG1LDYHDol2JscTJWa kNVWOnjBst4/C/bMYV1iq5rORVBPoRkLBdGHfqsXGi9HR0tApGeCz9Ov9xieOwSB KmkayFFg/pEsPQkmwrv3Rqn+bFmfzMVPAUizXLXxICVSRinLvkMiyQVzAK0h23Ib NfwGlvey49m0xbgUJYHMtQJ0lmCJhkwNB5LhXxjPQ99VAhQ0ikL6JGPf5oU3ZpJT zqGWPM6+L2+zhWzaJlIfiJU90W9X0JnnSxuImcH+iymGZ/xc8mc/m6Y//6xenfQH MMPE3xopmn0EXPXagoU51qPID+9lSTh8Ka300EQpTzEmiURhrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVmV0WTeIaZ3wx7NkKsbRhPBVdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvOGM5MDJkYTMtNDg4ZC00 NGQ5LTk4MzMtZjEyOTVhOWZkODg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaf9st0DWvgvIdlJEqY7Q9 X12eXJF8rfThj0vpY91BhIc8rfdvL9xtopOAgjzWSRhWRxgCrPW8IUFRlltCx97I 2dXYa2hmrfvoQpIPa8Vb21pWnsGmHlDxLj8vMJ9mTtmDE6TC8XYMHA3Avu28K4Jl gPkCSkYLdkuE1l7mNF64W8PAJkedYN3F6ejsoNSev7P6lz+9DUoIrmSSLFuGXsMe Bdky113ENTsiuPtjneOuPjyRJ4ErxIa3gOx3EsJEn0Z8D07vH+IyCEL7u5+r4+Rk JVgQsBos1pdOMPzR0NThPlJmRUYAtPSD4dSpbglKb23q9eUcj8cCAqJleOdMU97S -----END CERTIFICATE-----Generated at Mon Apr 27 14:28:28 2026 by rpki-client