$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft File: 04c216c1-5924-4a66-9346-a1f215800ceb.mft (raw, json) Hash identifier: SYw0TbLKiI4/oAjAEUQx6JOsIGXUuhmK1NOzDmfKjz0= Subject key identifier: 22:51:04:6A:95:0F:8D:51:60:E6:94:B6:CA:B2:83:62:BD:F9:09:6B Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584D91666497EB7C2DE3A8A8B540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft Manifest number: 010D0C9F432858415AC3099EB8CEE51DC161B2C0 Signing time: Mon 20 Apr 2026 10:00:03 +0000 Manifest this update: Mon 20 Apr 2026 10:00:03 +0000 Manifest next update: Thu 23 Apr 2026 10:00:00 +0000 Files and hashes: 1: 04c216c1-5924-4a66-9346-a1f215800ceb.crl (hash: 7PpMxA2eoi7CeMAYXb3qjFtCnfHrszzI4RwmNcofDt8=) 2: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (hash: E8FcaXFRdL+Ac0T+ZNWIw05XPt+kvp8+Cc9YHefVmAk=) 3: 6b6443a0-cb19-30e9-83ff-997349a7b259.roa (hash: uek1EYAz1Vq//WsEk7jSZsVzOq88fMsX1kEbw89k5F0=) 4: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (hash: WwQj/9HeEQ7yRpfNcheD2rFet1TFjcGP1pB+Mrnp8ZM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:66:64:97:eb:7c:2d:e3:a8:a8:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Apr 20 10:00:03 2026 GMT Not After : Apr 23 10:00:00 2026 GMT Subject: CN=1994f08f-2d7f-4f56-ae42-04a499194aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:5f:ed:d7:1d:47:e1:04:88:35:8e:8d:90: 66:4a:29:76:30:de:e0:2d:21:97:09:53:6b:62:b6: 09:64:fd:f4:a7:14:e0:68:0c:de:ea:aa:eb:17:2e: e8:63:8b:f4:41:40:2a:86:bb:42:75:f5:5c:c8:31: a0:65:43:3c:46:53:42:7d:8c:ca:1e:36:ed:5a:74: a0:e9:7d:f1:5d:46:80:6e:57:4b:28:e7:78:70:bb: 84:0c:d9:c9:fe:e5:ad:ad:b3:3d:5c:67:8f:c5:35: e9:0f:55:ad:96:68:1a:62:95:f2:dd:0b:40:0e:2f: e5:6d:92:e4:56:1e:66:40:fb:8d:00:e5:69:52:35: e4:ab:c6:19:ef:04:28:d7:c1:a3:e8:83:be:e3:cf: df:f6:2b:3d:50:da:f4:d2:e1:3f:d5:23:ec:98:ee: 06:9c:c0:d3:98:53:84:84:31:93:ad:ba:92:37:11: 2f:f7:c6:6f:d4:c8:92:03:d4:f7:56:21:e5:f5:6e: 6a:7c:35:5a:e2:d3:61:dd:f5:4c:6f:91:b0:6c:34: 6d:22:fd:e7:61:77:b3:49:03:d7:7e:93:9f:c7:ae: b8:06:b7:a3:8e:b2:64:af:0c:b9:03:39:dd:55:c6: 97:ce:0b:46:d3:dd:5b:73:57:35:83:2d:8a:01:5c: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:51:04:6A:95:0F:8D:51:60:E6:94:B6:CA:B2:83:62:BD:F9:09:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:55:7a:7e:91:b8:f6:8d:68:8c:a2:b9:e5:69:ea:11:56:2e: 53:f3:f4:7d:ff:44:f0:aa:09:76:d6:f4:b9:4a:1e:7d:0c:7c: c8:41:2b:18:25:6f:5e:0e:17:29:15:88:e1:0e:65:7d:99:dc: fd:bc:d0:32:ec:9f:01:7a:93:03:c9:e4:49:8b:27:3b:35:92: 57:ce:c6:2b:ea:a0:8d:25:f9:37:a3:26:50:ec:73:9c:f6:9e: d5:3f:e7:24:ed:3d:16:71:7e:c1:9e:7a:a6:91:55:8b:f9:95: ea:d5:c4:0f:d5:b7:91:40:1d:77:0b:04:6f:84:52:52:7f:69: 70:5d:4f:7a:a6:8d:e3:f6:81:54:6f:79:31:3a:c8:b6:81:ae: bf:cf:f0:91:ca:00:9b:35:d4:e9:db:74:d7:0b:74:c8:30:f4: df:2b:e0:f7:ac:00:3d:a9:94:12:26:66:99:e5:9d:c3:d2:d8: e9:b9:59:b4:dc:69:4a:1c:d4:67:9b:4b:c7:de:ee:82:ac:ee: 9f:66:27:e2:fe:a0:b4:9e:34:34:1e:1b:d1:44:b5:99:9f:c1: 74:0e:7e:51:07:fd:38:72:c3:d8:2c:67:1a:8e:bb:35:c8:a1: cd:20:86:90:11:bb:91:53:8b:ae:3c:15:87:c5:57:0e:4f:51: 23:77:11:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2RZmSX63wt46iotUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI2MDQyMDEwMDAwM1oXDTI2MDQyMzEwMDAwMFowLzEtMCsGA1UEAxMk MTk5NGYwOGYtMmQ3Zi00ZjU2LWFlNDItMDRhNDk5MTk0YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwahf7dcdR+EEiDWOjZBmSil2MN7gLSGXCVNr YrYJZP30pxTgaAze6qrrFy7oY4v0QUAqhrtCdfVcyDGgZUM8RlNCfYzKHjbtWnSg 6X3xXUaAbldLKOd4cLuEDNnJ/uWtrbM9XGePxTXpD1WtlmgaYpXy3QtADi/lbZLk Vh5mQPuNAOVpUjXkq8YZ7wQo18Gj6IO+48/f9is9UNr00uE/1SPsmO4GnMDTmFOE hDGTrbqSNxEv98Zv1MiSA9T3ViHl9W5qfDVa4tNh3fVMb5GwbDRtIv3nYXezSQPX fpOfx664BrejjrJkrwy5AzndVcaXzgtG091bc1c1gy2KAVygSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJRBGqVD41RYOaUtsqyg2K9+QlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvMDRjMjE2YzEtNTkyNC00 YTY2LTkzNDYtYTFmMjE1ODAwY2ViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5VXp+kbj2jWiMornlaeoR Vi5T8/R9/0Twqgl21vS5Sh59DHzIQSsYJW9eDhcpFYjhDmV9mdz9vNAy7J8BepMD yeRJiyc7NZJXzsYr6qCNJfk3oyZQ7HOc9p7VP+ck7T0WcX7BnnqmkVWL+ZXq1cQP 1beRQB13CwRvhFJSf2lwXU96po3j9oFUb3kxOsi2ga6/z/CRygCbNdTp23TXC3TI MPTfK+D3rAA9qZQSJmaZ5Z3D0tjpuVm03GlKHNRnm0vH3u6CrO6fZifi/qC0njQ0 HhvRRLWZn8F0Dn5RB/04csPYLGcajrs1yKHNIIaQEbuRU4uuPBWHxVcOT1EjdxFI -----END CERTIFICATE-----Generated at Mon Apr 20 22:28:40 2026 by rpki-client