$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: BgTaXEOtgMyEUyRJnYAguzoIhNHNW60QetIVV4o7eU0= Subject key identifier: 43:A1:82:13:C6:C5:82:06:47:82:33:FA:5F:64:05:F3:E9:C1:93:EE Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584D6D39485E92887A24EDFF0E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCB34 Signing time: Tue 07 Apr 2026 11:00:03 +0000 Manifest this update: Tue 07 Apr 2026 11:00:03 +0000 Manifest next update: Thu 09 Apr 2026 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: ifxsDzZ8lkCW5KxKIo/1wsveMsxiWSanXhdOcRScUQg=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: /jt5DEvcaWI3EbPpHD8awNgmy8royGEOxqcY+7ipUWE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:39:48:5e:92:88:7a:24:ed:ff:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Apr 7 11:00:03 2026 GMT Not After : Apr 9 11:00:00 2026 GMT Subject: CN=e081b4c2-cf12-4960-8177-ead2679c3764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f6:44:34:c0:bf:e9:e9:69:d6:1d:45:39:54: 43:ab:d9:89:55:aa:65:4e:42:c5:58:61:2d:f0:47: c6:a6:77:3c:b4:d9:42:97:d9:eb:23:6a:53:52:24: 9d:54:aa:47:fa:e5:e5:4c:80:38:22:cf:01:e3:50: cc:25:20:3e:f9:79:44:66:63:9c:9b:7a:b4:e2:06: f9:43:93:b4:29:5c:02:7a:ef:9c:ef:b3:6e:d4:08: 0a:75:10:b9:dc:a0:41:e4:36:59:8b:ad:bd:89:0b: 82:b6:74:b0:82:ec:8f:b1:8d:44:0f:2b:f2:1d:22: 0f:46:b3:e7:04:e7:63:cc:c0:83:29:ce:3a:a2:df: 4d:c1:80:35:b9:6f:e2:7f:15:d7:e5:16:65:15:a8: 42:b1:e4:02:e4:c9:96:1b:46:7e:76:2b:e8:4e:af: b5:7b:12:a9:ef:a6:83:08:c4:d1:1b:34:59:9b:42: bf:fe:6a:ed:91:c7:f5:c3:32:b2:d8:79:8c:79:db: 20:33:df:22:91:52:24:a3:bd:14:03:c6:cd:21:0d: 55:88:49:05:39:cf:a3:de:7c:15:df:45:97:2f:75: 16:02:d7:2d:fc:c8:96:65:1e:bd:5f:fc:2b:bb:92: b2:b2:d4:cb:f7:aa:bc:32:20:90:0e:46:87:30:16: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A1:82:13:C6:C5:82:06:47:82:33:FA:5F:64:05:F3:E9:C1:93:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:87:87:d4:e8:0e:6b:c4:c9:9e:2c:48:7a:5c:9c:10:0f:6e: db:f9:79:db:99:19:cb:1e:2c:3a:bd:cd:44:9a:91:c8:e9:ce: a7:b1:b0:34:e3:e2:9e:14:70:61:6e:c9:a9:f6:51:ea:89:b6: a1:e4:c9:6c:02:3e:a5:d5:79:ee:07:ab:06:34:c9:af:86:f2: be:1d:cd:47:85:b5:ed:dd:06:bb:28:44:3c:76:08:58:50:ce: 1b:b3:d9:60:70:1c:26:d8:00:04:78:f0:eb:eb:29:4b:96:3e: 5b:a8:4d:f2:b1:66:26:d8:7a:61:ad:e5:2a:50:c9:20:d9:8c: 87:2a:e3:74:5d:71:8a:3e:c5:4b:0e:2e:c7:5f:e0:fc:4a:01: fb:fd:2d:bb:4d:0e:e4:f3:b2:a9:74:0c:51:c7:bf:83:c0:bb: b8:0b:77:15:53:4f:f4:c0:5a:f6:c5:af:d3:75:eb:ef:cc:e4: 29:83:04:67:0c:85:01:d0:1f:41:95:a3:0f:32:43:83:dc:56: 88:63:ee:8b:42:ef:12:f2:6b:ed:62:04:a2:28:17:d8:ca:87: a4:17:62:cb:05:24:9a:4c:b4:a5:db:bb:84:9c:13:06:76:a1: bf:ac:38:3c:0e:3b:0b:c6:9d:ae:31:c5:ea:c4:b5:54:24:b5: 7e:e8:a4:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1tOUhekoh6JO3/DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI2MDQwNzExMDAwM1oXDTI2MDQwOTExMDAwMFowLzEtMCsGA1UEAxMk ZTA4MWI0YzItY2YxMi00OTYwLTgxNzctZWFkMjY3OWMzNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PZENMC/6elp1h1FOVRDq9mJVaplTkLFWGEt 8EfGpnc8tNlCl9nrI2pTUiSdVKpH+uXlTIA4Is8B41DMJSA++XlEZmOcm3q04gb5 Q5O0KVwCeu+c77Nu1AgKdRC53KBB5DZZi629iQuCtnSwguyPsY1EDyvyHSIPRrPn BOdjzMCDKc46ot9NwYA1uW/ifxXX5RZlFahCseQC5MmWG0Z+divoTq+1exKp76aD CMTRGzRZm0K//mrtkcf1wzKy2HmMedsgM98ikVIko70UA8bNIQ1ViEkFOc+j3nwV 30WXL3UWAtct/MiWZR69X/wru5KystTL96q8MiCQDkaHMBYxQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEOhghPGxYIGR4Iz+l9kBfPpwZPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjh4fU6A5rxMmeLEh6XJwQ D27b+XnbmRnLHiw6vc1EmpHI6c6nsbA04+KeFHBhbsmp9lHqibah5MlsAj6l1Xnu B6sGNMmvhvK+Hc1HhbXt3Qa7KEQ8dghYUM4bs9lgcBwm2AAEePDr6ylLlj5bqE3y sWYm2HphreUqUMkg2YyHKuN0XXGKPsVLDi7HX+D8SgH7/S27TQ7k87KpdAxRx7+D wLu4C3cVU0/0wFr2xa/TdevvzOQpgwRnDIUB0B9BlaMPMkOD3FaIY+6LQu8S8mvt YgSiKBfYyoekF2LLBSSaTLSl27uEnBMGdqG/rDg8DjsLxp2uMcXqxLVUJLV+6KTT -----END CERTIFICATE-----Generated at Tue Apr 7 15:10:05 2026 by rpki-client