$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft File: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft (raw, json) Hash identifier: Dx9ncaEeofanxq3xx4sF5tynzcl6ee+E0PmgsROUfSQ= Subject key identifier: F0:69:27:59:D5:32:AC:DE:95:AF:85:5C:41:0B:0A:E3:2D:F5:94:C6 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F4328584D87A100BF0E9B380A58C33F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft Manifest number: 010D0C9F4328584073A82DA05FED0AA5E6119999 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sat 18 Apr 2026 22:00:00 +0000 Files and hashes: 1: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (hash: ELMH6Pl/Ozg3gF4CmaI/cn6rWKRjpfs29+aTYCsx9xc=) 2: 4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (hash: zLyg3zilca760IVI7n2SUpuHIBwOOFLLVI8ypEWHxUk=) 3: 6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa (hash: cuKSIL6wf0CzEToTNR6NrCfdk2dKKSMgDUxVztNC8nQ=) 4: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl (hash: RUCPnuo6ez+s/c36FQKDMh7K35ASbGzh24/BNVGXhEM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:00:bf:0e:9b:38:0a:58:c3:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 18 22:00:00 2026 GMT Subject: CN=cd7f4a24-be31-4b7e-a29e-7a489adb9a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:cd:6a:2d:8a:c6:f5:15:8e:58:d2:22:7d: 6b:84:6c:19:0b:02:18:d0:d5:08:9d:69:a4:80:6b: ee:32:5b:9b:0b:50:a3:57:0c:34:13:59:17:b8:15: 61:5c:91:d5:e6:ee:79:bd:9e:6c:ce:c9:11:f6:16: 8d:15:60:00:38:29:78:bd:e0:16:b1:a3:71:65:6d: d2:22:83:88:31:30:77:67:4a:ca:ab:65:fa:51:55: 2f:ba:e5:1e:ff:a1:ff:2b:2d:23:cc:65:7e:ce:0f: 84:6b:d9:c8:92:56:7e:cf:0e:c1:c0:3f:69:23:c3: ac:80:d1:cf:69:d6:65:fb:d5:a2:15:0d:a5:85:7f: 53:81:a3:d8:10:85:15:d0:5b:c4:24:5f:d7:5a:ab: 75:68:d5:dd:69:c5:02:31:6b:9c:d8:37:a2:6a:19: 57:1a:f5:ea:1f:ea:18:80:81:85:bd:fe:a9:ec:90: 3c:be:f6:c5:9f:23:54:26:60:e3:29:7b:db:dd:ef: ee:cd:ce:e8:03:95:b5:8a:c1:37:ae:5f:c6:89:17: e3:f9:f3:2f:f8:9b:95:48:cd:a3:1d:ff:52:89:03: 0c:dc:fe:bf:63:ba:48:39:9f:1f:8e:41:91:b6:6e: e8:9d:9b:5d:2e:7f:a8:af:8c:e7:4a:42:8d:24:f9: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:69:27:59:D5:32:AC:DE:95:AF:85:5C:41:0B:0A:E3:2D:F5:94:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6e:14:87:08:31:77:47:90:3b:43:43:8c:fc:5c:24:ab:1d: bd:81:07:26:e3:da:f3:42:53:12:29:ff:79:94:72:ab:ff:c4: 1d:e0:28:72:ac:da:51:bd:47:27:2a:c1:f8:4f:a1:6e:a2:f1: a1:e9:da:24:ec:74:6f:31:5b:af:83:4f:d5:de:ee:67:35:1b: dd:a4:a5:bd:35:f9:fc:16:45:99:6b:a9:95:7e:6c:81:93:c4: e2:dd:60:50:ba:99:1d:bc:a1:54:d2:47:97:4f:39:e2:81:42: 42:84:8b:4d:ae:c6:6f:2d:3b:70:a3:36:de:66:c7:bc:6e:c5: e0:55:8c:e2:20:62:f4:8f:c2:48:73:48:ba:c3:2f:ad:58:0c: 16:49:d7:17:e6:be:b2:f5:1b:62:85:db:da:84:10:e7:18:f0: f9:18:45:ae:4d:49:45:ba:13:76:20:4e:2c:f6:f5:e9:97:86: c1:54:db:c3:7b:11:60:c0:72:f8:0a:8d:5a:c3:7f:72:2a:56: 8a:96:cf:bc:72:1b:36:1d:5e:bc:2c:57:8d:20:aa:52:da:0c: 5b:fd:ac:2e:d5:ed:e1:63:7a:37:05:1b:86:f4:11:f7:45:17: ce:36:23:00:7e:c0:f2:a4:5f:dc:da:af:e5:65:4c:54:91:6b: f5:4d:37:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQC/Dps4CljDP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxODIyMDAwMFowLzEtMCsGA1UEAxMk Y2Q3ZjRhMjQtYmUzMS00YjdlLWEyOWUtN2E0ODlhZGI5YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhzNai2KxvUVjljSIn1rhGwZCwIY0NUInWmk gGvuMlubC1CjVww0E1kXuBVhXJHV5u55vZ5szskR9haNFWAAOCl4veAWsaNxZW3S IoOIMTB3Z0rKq2X6UVUvuuUe/6H/Ky0jzGV+zg+Ea9nIklZ+zw7BwD9pI8OsgNHP adZl+9WiFQ2lhX9TgaPYEIUV0FvEJF/XWqt1aNXdacUCMWuc2DeiahlXGvXqH+oY gIGFvf6p7JA8vvbFnyNUJmDjKXvb3e/uzc7oA5W1isE3rl/GiRfj+fMv+JuVSM2j Hf9SiQMM3P6/Y7pIOZ8fjkGRtm7onZtdLn+or4znSkKNJPmVvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPBpJ1nVMqzela+FXEELCuMt9ZTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvY2QyZDdkODUtNjFkMC00 YmE2LWI0ZDItYWZkYTliODIwYTc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBObhSHCDF3R5A7Q0OM/Fwk qx29gQcm49rzQlMSKf95lHKr/8Qd4ChyrNpRvUcnKsH4T6FuovGh6dok7HRvMVuv g0/V3u5nNRvdpKW9Nfn8FkWZa6mVfmyBk8Ti3WBQupkdvKFU0keXTznigUJChItN rsZvLTtwozbeZse8bsXgVYziIGL0j8JIc0i6wy+tWAwWSdcX5r6y9RtihdvahBDn GPD5GEWuTUlFuhN2IE4s9vXpl4bBVNvDexFgwHL4Co1aw39yKlaKls+8chs2HV68 LFeNIKpS2gxb/awu1e3hY3o3BRuG9BH3RRfONiMAfsDypF/c2q/lZUxUkWv1TTdd -----END CERTIFICATE-----Generated at Fri Apr 17 10:26:52 2026 by rpki-client