$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft File: cb00fdf5-e28b-4e9d-9620-9504972438e2.mft (raw, json) Hash identifier: bd1JgChwGvS40isSiohEaOIPHN51wMEZBc8prra1rqY= Subject key identifier: DB:CB:89:BF:8F:82:FE:7C:EE:39:4C:3D:8D:D7:34:62:21:7C:FF:0E Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584D94A8325B7A2D0061685C6F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft Manifest number: 010D0C9F4328584A89D04070D903DD88600D0B9D Signing time: Tue 21 Apr 2026 14:00:03 +0000 Manifest this update: Tue 21 Apr 2026 14:00:03 +0000 Manifest next update: Thu 23 Apr 2026 14:00:00 +0000 Files and hashes: 1: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (hash: lIkk8i4+6OEo8gfesAfsXg3B0wZeai24b8iZzPyMkGI=) 2: cb00fdf5-e28b-4e9d-9620-9504972438e2.crl (hash: E99wJlZCbsxQP3SnkS6KWbD9Bmg3lnU+8V9kY/i2xg4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:a8:32:5b:7a:2d:00:61:68:5c:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Apr 21 14:00:03 2026 GMT Not After : Apr 23 14:00:00 2026 GMT Subject: CN=a12b5cb6-5afc-4686-8045-2c4e96cddd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:ed:f5:22:9c:30:6b:b7:d2:20:d4:f9:48: cf:65:f4:2a:ca:9c:3d:ab:5c:55:1e:6f:ea:06:63: 51:6d:20:ce:c1:64:ad:61:d4:a9:2a:df:38:c5:f9: 7a:da:e5:d6:f7:db:38:f6:de:15:72:1e:11:b0:57: f7:6c:a6:bb:8b:0e:fc:d3:85:e7:da:d3:d0:52:eb: 14:30:32:a4:c3:5f:9b:d1:b1:ea:4b:18:3a:41:99: b8:5c:b0:39:f5:ae:c6:bd:cd:d2:05:a8:bb:70:7d: 72:f4:1d:79:db:c3:de:fa:b1:96:2f:22:b7:49:99: cc:f1:eb:05:c3:f0:c6:b0:31:c5:a8:f8:c0:63:6d: a7:56:61:e3:e0:5c:b8:0b:82:29:4b:b2:c3:da:58: b4:59:92:e1:14:6e:30:00:15:26:4f:c7:26:e2:af: 15:c8:ba:9b:84:da:7e:94:1f:50:1b:eb:1b:18:5a: 46:e5:cf:44:be:00:26:19:5d:bb:59:20:ff:4b:06: 75:69:6b:4a:d4:e9:38:7f:4e:6c:93:87:45:c2:20: 6a:0b:34:81:5d:9f:f4:61:a5:a4:3b:b4:23:bf:b8: 11:50:64:92:90:bd:09:af:53:2d:bb:07:90:51:78: 7b:a0:aa:5d:0c:39:dc:42:b7:82:5e:22:11:fe:d4: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CB:89:BF:8F:82:FE:7C:EE:39:4C:3D:8D:D7:34:62:21:7C:FF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:df:a0:97:d0:b4:8b:0c:53:7c:f4:fc:5c:ed:b0:0f:a3:b1: 43:e4:ff:92:3e:38:5c:f6:d5:4b:1d:2f:73:33:60:99:ee:38: a5:54:ad:b6:0e:78:31:63:ad:a7:13:c6:03:9e:34:61:2c:63: 69:92:e4:3e:75:e9:89:a7:25:ca:68:e4:d7:53:0a:27:46:bd: 93:91:ce:40:ed:ee:75:50:b5:93:1c:97:d6:96:31:54:8e:a8: 65:dc:0a:c8:66:5e:90:20:ba:ec:df:74:85:a9:ec:91:70:5c: 36:6c:83:5e:d9:83:37:db:98:83:10:7d:0c:15:f1:41:07:c4: 54:a1:fa:6a:ff:a1:17:93:10:0f:86:f1:66:fe:dc:0e:ca:01: 94:db:cb:1f:c7:76:8a:a6:77:55:65:1d:78:c8:ec:79:73:86: 2d:5c:12:c2:bb:89:35:80:6c:f8:74:4a:ef:5a:19:28:96:34: 3b:de:35:50:c5:c1:23:0b:93:87:20:d9:7c:2b:c9:5f:05:22: 83:21:a6:9d:46:e2:25:bf:26:0d:98:6b:c4:a4:b4:c9:b3:d9: 2b:25:9a:35:b7:56:d1:24:61:24:be:44:a5:29:21:32:73:f0: ea:c3:3f:b4:b1:9a:fe:57:df:0d:8e:e9:2e:30:eb:6a:80:61: 3f:c1:c4:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2UqDJbei0AYWhcb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI2MDQyMTE0MDAwM1oXDTI2MDQyMzE0MDAwMFowLzEtMCsGA1UEAxMk YTEyYjVjYjYtNWFmYy00Njg2LTgwNDUtMmM0ZTk2Y2RkZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaXt9SKcMGu30iDU+UjPZfQqypw9q1xVHm/q BmNRbSDOwWStYdSpKt84xfl62uXW99s49t4Vch4RsFf3bKa7iw7804Xn2tPQUusU MDKkw1+b0bHqSxg6QZm4XLA59a7Gvc3SBai7cH1y9B1528Pe+rGWLyK3SZnM8esF w/DGsDHFqPjAY22nVmHj4Fy4C4IpS7LD2li0WZLhFG4wABUmT8cm4q8VyLqbhNp+ lB9QG+sbGFpG5c9EvgAmGV27WSD/SwZ1aWtK1Ok4f05sk4dFwiBqCzSBXZ/0YaWk O7Qjv7gRUGSSkL0Jr1MtuweQUXh7oKpdDDncQreCXiIR/tTSSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNvLib+Pgv587jlMPY3XNGIhfP8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvY2IwMGZkZjUtZTI4Yi00 ZTlkLTk2MjAtOTUwNDk3MjQzOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBA36CX0LSLDFN89Pxc7bAP o7FD5P+SPjhc9tVLHS9zM2CZ7jilVK22DngxY62nE8YDnjRhLGNpkuQ+demJpyXK aOTXUwonRr2Tkc5A7e51ULWTHJfWljFUjqhl3ArIZl6QILrs33SFqeyRcFw2bINe 2YM325iDEH0MFfFBB8RUofpq/6EXkxAPhvFm/twOygGU28sfx3aKpndVZR14yOx5 c4YtXBLCu4k1gGz4dErvWhkoljQ73jVQxcEjC5OHINl8K8lfBSKDIaadRuIlvyYN mGvEpLTJs9krJZo1t1bRJGEkvkSlKSEyc/Dqwz+0sZr+V98NjukuMOtqgGE/wcRI -----END CERTIFICATE-----Generated at Wed Apr 22 09:57:53 2026 by rpki-client