$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft File: d47a94a4-ac39-4383-91f3-389070353c6d.mft (raw, json) Hash identifier: 8Sx1f/7jnehau86SQzUQI4M/rnqbJvp65dLS1qK3BpQ= Subject key identifier: 32:21:27:FD:F0:18:6A:3E:01:32:7F:B8:23:61:70:E6:60:41:23:4D Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F4328584D7C3AB499272ACEBDDB962320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft Manifest number: 010D0C9F43285840D2B61A936326539069E0911C Signing time: Sun 12 Apr 2026 20:00:03 +0000 Manifest this update: Sun 12 Apr 2026 20:00:03 +0000 Manifest next update: Tue 14 Apr 2026 20:00:00 +0000 Files and hashes: 1: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (hash: O5frti7YxZbWFZ466Hfuhi0yIZu003thshOlKnBIop8=) 2: d47a94a4-ac39-4383-91f3-389070353c6d.crl (hash: CUaH4kFAiaaWGdMBa5kiwLRyMCt4oo0qDd6f+HxFVlk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:3a:b4:99:27:2a:ce:bd:db:96:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Apr 12 20:00:03 2026 GMT Not After : Apr 14 20:00:00 2026 GMT Subject: CN=2d621136-f094-4307-b9ad-91625d331e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:fc:78:dc:fb:49:93:4f:77:9d:bd:51:38: 5c:2b:ba:1b:84:2a:45:8f:9d:45:5f:b5:fa:d7:c6: c7:4f:ce:3f:c4:52:4e:a2:26:1e:71:c4:b8:09:ff: d2:5d:e6:c2:cd:d7:a7:7e:e8:14:94:f1:80:a4:0a: a9:ee:2f:9a:f0:b0:ce:85:c6:6c:24:f1:d8:1b:e8: 0e:2a:ae:7a:3f:08:f1:91:77:7f:e0:c1:2c:0b:a5: 39:4c:e1:72:b0:d4:12:de:30:f4:36:69:22:00:c9: fb:9d:82:e0:e0:09:6f:14:fb:7f:27:4a:bd:b9:cd: 2b:d7:6f:d8:84:8d:70:02:9c:c5:e6:f8:8e:79:67: 12:49:8c:7e:34:d9:2c:7a:8f:be:0a:81:22:f3:1e: 00:d6:1b:6c:d1:f5:09:bf:e5:ea:63:43:99:23:f5: 06:ea:71:d7:74:cc:bb:03:61:cc:18:58:3f:b7:10: 60:1b:99:c1:32:8f:3e:1d:e4:f0:7b:ba:0b:db:b4: 45:09:1e:65:36:91:98:c6:99:d1:e2:4e:a0:b5:6c: aa:36:1e:60:19:a9:f0:e8:ec:be:24:de:c9:8a:c6: b9:d7:3d:28:f4:38:a6:b5:af:49:34:36:37:40:ba: 98:e5:f3:74:ab:f3:e3:cd:d0:86:d2:bd:25:f4:19: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:27:FD:F0:18:6A:3E:01:32:7F:B8:23:61:70:E6:60:41:23:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b5:b9:5c:88:3f:88:21:57:1f:b4:11:93:0a:c5:50:86:b7: a3:80:86:22:3b:04:e0:5e:57:21:10:a0:41:54:4b:15:ab:20: c9:f3:54:d7:4a:9b:4b:6b:dc:1e:43:b6:d7:5c:9f:9f:79:18: ad:05:90:0f:0f:8f:09:6b:9a:60:7d:f2:08:8e:07:20:b5:18: 41:53:3d:b2:85:0b:2f:2f:da:e2:e6:9a:56:af:53:7d:75:27: 50:45:5d:36:2c:45:52:dc:ad:71:96:c9:b6:17:0f:17:a5:91: 7b:6c:34:52:26:76:1a:92:15:b7:8a:45:6c:da:53:d8:1b:98: b4:66:53:39:c9:b4:13:af:0d:d4:3e:e8:21:5a:b4:73:c7:40: f6:89:d1:b7:fd:d1:66:76:d8:d8:61:d2:0f:ac:c4:a7:d6:db: 09:7d:fe:54:57:54:45:a5:c2:a7:4c:c5:07:5a:42:68:95:c6: b5:c7:d6:05:94:08:24:11:bd:9e:cf:42:c9:a0:4c:43:2e:4c: cb:4e:3e:fb:b5:63:67:9e:ca:e5:77:ab:1c:77:79:f7:b4:6c: f4:24:4b:71:cf:83:2b:af:a0:45:66:f5:27:59:66:1d:1c:62: bd:92:66:fc:ff:08:58:22:16:53:29:38:57:21:22:36:91:cd: e1:04:b0:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE18OrSZJyrOvduWIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI2MDQxMjIwMDAwM1oXDTI2MDQxNDIwMDAwMFowLzEtMCsGA1UEAxMk MmQ2MjExMzYtZjA5NC00MzA3LWI5YWQtOTE2MjVkMzMxZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx38eNz7SZNPd529UThcK7obhCpFj51FX7X6 18bHT84/xFJOoiYeccS4Cf/SXebCzdenfugUlPGApAqp7i+a8LDOhcZsJPHYG+gO Kq56PwjxkXd/4MEsC6U5TOFysNQS3jD0NmkiAMn7nYLg4AlvFPt/J0q9uc0r12/Y hI1wApzF5viOeWcSSYx+NNkseo++CoEi8x4A1hts0fUJv+XqY0OZI/UG6nHXdMy7 A2HMGFg/txBgG5nBMo8+HeTwe7oL27RFCR5lNpGYxpnR4k6gtWyqNh5gGanw6Oy+ JN7Jisa51z0o9Dimta9JNDY3QLqY5fN0q/PjzdCG0r0l9BnouwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDIhJ/3wGGo+ATJ/uCNhcOZgQSNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvZDQ3YTk0YTQtYWMzOS00 MzgzLTkxZjMtMzg5MDcwMzUzYzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBetblciD+IIVcftBGTCsVQ hrejgIYiOwTgXlchEKBBVEsVqyDJ81TXSptLa9weQ7bXXJ+feRitBZAPD48Ja5pg ffIIjgcgtRhBUz2yhQsvL9ri5ppWr1N9dSdQRV02LEVS3K1xlsm2Fw8XpZF7bDRS JnYakhW3ikVs2lPYG5i0ZlM5ybQTrw3UPughWrRzx0D2idG3/dFmdtjYYdIPrMSn 1tsJff5UV1RFpcKnTMUHWkJolca1x9YFlAgkEb2ez0LJoExDLkzLTj77tWNnnsrl d6scd3n3tGz0JEtxz4Mrr6BFZvUnWWYdHGK9kmb8/whYIhZTKThXISI2kc3hBLBz -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:47 2026 by rpki-client