$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft File: c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft (raw, json) Hash identifier: SRTFKpK0xrL5X414tFNXKciHW8yUkugXhN3M6+PHkkQ= Subject key identifier: 7A:64:6A:4C:1F:C1:D5:1E:C2:6B:D4:06:C3:E6:78:BF:D1:8C:BA:CB Authority key identifier: C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F Certificate issuer: /CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Certificate serial: 010D0C9F4328584D94A8338B045E06D876A6EE90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft Manifest number: 010D0C9F4328584AEE60C2451783F1E28DF046F9 Signing time: Tue 21 Apr 2026 14:00:03 +0000 Manifest this update: Tue 21 Apr 2026 14:00:03 +0000 Manifest next update: Thu 23 Apr 2026 14:00:00 +0000 Files and hashes: 1: c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl (hash: ipH2L3uT9otptwMNF/zSYBaIrO1JoOMoDX018OPCDwI=) 2: e96993f5-ca60-3022-be74-738b3dcf4ced.roa (hash: ZjvalYpgLU5WfaUTe8vt2AVl7+5UpaO2xmx2UEdUXZ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:a8:33:8b:04:5e:06:d8:76:a6:ee:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Validity Not Before: Apr 21 14:00:03 2026 GMT Not After : Apr 23 14:00:00 2026 GMT Subject: CN=e15cbb69-2b04-40d6-b7d0-0a14f76136d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:ba:fc:6c:38:49:e8:4d:a7:58:c6:c9:71: 98:15:59:7e:ef:5e:d0:de:48:1a:77:83:f4:5e:ea: 2e:2e:f6:05:da:21:7f:f3:ac:e0:ef:a2:9a:00:d1: 65:7e:c4:15:11:2b:31:82:3b:12:bc:f7:5d:9e:db: 41:3f:a3:2b:44:7b:42:32:46:fc:e0:e9:ab:11:c4: 3e:36:38:b4:ce:f9:93:5a:29:33:48:5d:5a:7a:c6: 0f:79:f2:86:11:e5:54:e8:9d:76:78:59:ae:45:cf: e5:2b:78:ce:d2:05:57:33:79:bc:98:eb:7e:a2:a1: 32:78:b2:b7:fe:88:c3:aa:5e:dc:6e:be:02:cb:11: 89:13:47:95:fe:e2:d7:61:66:c2:41:5f:71:7c:a5: a8:61:90:6b:9e:3c:24:62:8a:e2:e2:cd:2b:52:1a: b7:15:05:e5:1d:b1:53:b0:96:ba:74:07:01:da:19: 70:5f:51:e6:71:fa:9c:ff:c9:a1:20:67:f7:f5:1a: 0c:57:b9:aa:26:4a:be:43:13:b2:be:41:1a:43:b7: de:2f:2c:68:e1:ec:27:ea:f9:eb:f9:c2:87:07:fd: 46:44:a3:22:f3:20:66:aa:33:01:25:bf:51:1c:81: e5:6b:22:e2:7d:6d:1f:25:d1:d9:95:88:04:83:92: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:64:6A:4C:1F:C1:D5:1E:C2:6B:D4:06:C3:E6:78:BF:D1:8C:BA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl X509v3 Authority Key Identifier: keyid:C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a6:76:94:c2:53:77:28:91:ce:99:32:22:ec:c1:c1:f3:c4: e3:c0:39:fb:c3:9e:48:cc:69:27:42:44:e3:7b:b2:98:ef:71: b8:9e:3f:e5:23:8d:18:62:38:b7:b2:9d:85:1f:27:3a:24:3b: a2:cd:02:d0:16:d0:9e:30:eb:f5:cc:54:e4:cf:26:77:80:4e: f8:fc:30:eb:9f:73:1c:52:0c:10:fd:5c:a0:53:9e:98:d2:df: 98:62:34:34:23:cf:c6:41:48:99:3c:d9:c6:74:8b:b5:8d:fa: ed:6b:4a:f0:39:b1:d0:8a:3c:d2:91:22:3e:7b:10:1c:39:54: 37:80:54:02:bb:0d:dc:07:4d:ae:05:37:da:c8:5a:84:1d:4d: 3f:7b:2d:b3:ab:85:c0:82:ed:d7:05:29:d5:28:87:43:ca:27: d1:8c:d9:bc:42:85:21:d1:04:91:db:44:51:c2:6d:32:c2:a5: a0:8a:bb:e2:95:f0:d6:95:eb:e6:38:fc:e8:c0:ee:75:14:7f: f7:05:1e:7a:80:7b:c5:a9:a9:8e:13:b6:ce:c1:59:b4:30:27: 15:8b:35:b7:d2:90:56:c0:5f:df:13:e0:a3:60:59:9a:9f:2a: 6c:46:88:c0:63:e2:c6:2c:e1:2a:d9:f3:1d:72:2b:40:08:f7: 0f:8f:8d:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2UqDOLBF4G2Ham7pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMzQ5ZGItNmMwYi00OWQ4LWFjZWItN2I0ODg4YTIy YjFkMB4XDTI2MDQyMTE0MDAwM1oXDTI2MDQyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZTE1Y2JiNjktMmIwNC00MGQ2LWI3ZDAtMGExNGY3NjEzNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqe6/Gw4SehNp1jGyXGYFVl+717Q3kgad4P0 XuouLvYF2iF/86zg76KaANFlfsQVESsxgjsSvPddnttBP6MrRHtCMkb84OmrEcQ+ Nji0zvmTWikzSF1aesYPefKGEeVU6J12eFmuRc/lK3jO0gVXM3m8mOt+oqEyeLK3 /ojDql7cbr4CyxGJE0eV/uLXYWbCQV9xfKWoYZBrnjwkYori4s0rUhq3FQXlHbFT sJa6dAcB2hlwX1Hmcfqc/8mhIGf39RoMV7mqJkq+QxOyvkEaQ7feLyxo4ewn6vnr +cKHB/1GRKMi8yBmqjMBJb9RHIHlayLifW0fJdHZlYgEg5IXGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHpkakwfwdUewmvUBsPmeL/RjLrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIz NDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4ODhhMjJiMWQvYzQyMzQ5ZGItNmMwYi00 OWQ4LWFjZWItN2I0ODg4YTIyYjFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQyMzQ5ZGItNmMwYi00OWQ4LWFj ZWItN2I0ODg4YTIyYjFkL2M0MjM0OWRiLTZjMGItNDlkOC1hY2ViLTdiNDg4OGEy MmIxZC5jcmwwHwYDVR0jBBgwFoAUwMMXJ3A9h/7fzpLNMnfWDBKkIJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIzNDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4 ODhhMjJiMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAepnaUwlN3KJHOmTIi7MHB 88TjwDn7w55IzGknQkTje7KY73G4nj/lI40YYji3sp2FHyc6JDuizQLQFtCeMOv1 zFTkzyZ3gE74/DDrn3McUgwQ/VygU56Y0t+YYjQ0I8/GQUiZPNnGdIu1jfrta0rw ObHQijzSkSI+exAcOVQ3gFQCuw3cB02uBTfayFqEHU0/ey2zq4XAgu3XBSnVKIdD yifRjNm8QoUh0QSR20RRwm0ywqWgirvilfDWlevmOPzowO51FH/3BR56gHvFqamO E7bOwVm0MCcVizW30pBWwF/fE+CjYFmanypsRojAY+LGLOEq2fMdcitACPcPj43u -----END CERTIFICATE-----Generated at Tue Apr 21 19:09:50 2026 by rpki-client