$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft File: 3e511aed-c666-436d-b4a4-947790e6c9e5.mft (raw, json) Hash identifier: vShv1NmXaAEk4JseG+Vm6m/Pn+Vjq9SqtIiOupwNqLc= Subject key identifier: 1B:3A:2D:BE:7E:27:43:FC:7B:5C:8E:E6:33:B7:EF:90:67:3A:B8:40 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584D6C4B0E21F8F381D08984C180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft Manifest number: 010D0C9F432858442FB69E4685B850D03895F664 Signing time: Tue 07 Apr 2026 03:00:03 +0000 Manifest this update: Tue 07 Apr 2026 03:00:03 +0000 Manifest next update: Thu 09 Apr 2026 03:00:00 +0000 Files and hashes: 1: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (hash: Hw+5zdRVHM5Nl1ALYhu570we/9eZPPakPOEcDX3USG0=) 2: 3e511aed-c666-436d-b4a4-947790e6c9e5.crl (hash: m8RKIQfv74Q3Kcrl/tRLJ7dQScU5/Ivyy6fAuwrJJQ8=) 3: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (hash: GsJeyJp0PU/ngZeNqNOUGkm5LY8R5vd7CSk6U3LjXLA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:4b:0e:21:f8:f3:81:d0:89:84:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Apr 7 03:00:03 2026 GMT Not After : Apr 9 03:00:00 2026 GMT Subject: CN=04e58428-26b1-49e3-a02c-66624aff8f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5a:4d:a5:7f:87:79:b7:bb:84:08:fb:3f:98: 5b:ce:e7:d9:62:b9:e7:3e:f6:b2:b9:f4:65:22:dc: 86:92:30:cd:af:ee:9d:20:2c:3d:38:aa:b3:ec:59: 14:06:d4:dc:40:36:a7:53:a8:f5:97:00:0a:16:ca: a1:f8:31:50:23:12:83:12:7b:b2:47:66:3c:d8:dd: e9:2c:2b:1f:fd:38:18:77:c4:c2:1f:91:84:1b:e6: ca:54:35:a3:e6:ba:ea:5f:81:6c:95:95:33:4d:6c: cb:7b:2b:80:f1:38:22:ba:c5:08:8c:9a:6e:51:a4: c7:fc:eb:9b:a0:3a:88:6f:33:17:22:6e:5a:fd:6f: aa:40:ff:97:d3:4e:a0:ce:9e:67:44:17:25:46:91: 35:f5:b9:be:ad:31:8f:52:e6:76:d3:5e:b7:14:8b: af:8a:c4:51:2d:b6:fc:95:78:6d:4a:ea:ef:9a:c0: de:ef:3f:49:d1:9b:88:dd:76:89:99:99:b8:84:8d: 59:0a:37:69:35:ac:24:42:ba:8e:e1:22:89:1e:57: 90:ba:da:23:ab:b8:38:6a:b6:8f:2d:4f:5f:45:cf: f5:ab:57:d1:1c:64:c7:0a:03:19:ee:b8:58:5c:14: d6:40:ae:bd:02:09:f4:b3:4b:88:d2:c7:6c:81:8c: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:2D:BE:7E:27:43:FC:7B:5C:8E:E6:33:B7:EF:90:67:3A:B8:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:83:3b:4f:36:2d:e7:1a:b0:f7:b8:30:28:0d:ef:bd:60: 43:10:1b:51:f2:70:88:97:03:08:72:52:d6:52:93:f0:e3:d9: 15:da:05:76:4a:51:3c:c5:07:c8:cf:59:e6:74:4e:58:26:01: 45:2a:f7:bb:d9:1d:46:1a:e1:67:6b:71:b2:56:2f:9d:d6:3f: a4:c4:b8:a2:83:1d:8e:d9:c7:dc:c5:bc:6d:68:c2:c3:2a:74: ab:f5:c8:1c:2a:97:1f:ea:d8:97:51:9d:9e:47:85:a7:82:9a: 18:9c:c6:df:56:e9:33:30:16:a5:6a:c5:3f:7d:c2:58:91:bb: 5e:f1:59:10:a1:3b:18:9c:bf:33:e3:85:c4:de:89:1a:3e:e3: c5:4d:72:d9:12:96:26:89:be:76:77:92:60:6b:45:92:5a:99: 55:bc:00:8e:a9:73:44:14:c6:ab:69:cc:11:cf:c5:33:06:64: e1:95:27:0a:36:16:a2:fd:7d:da:2a:3c:73:bb:ec:9e:0e:d5: 39:da:b2:97:49:76:46:9d:bc:49:a6:c7:50:5b:dd:3d:19:4b: 30:ed:8b:d8:db:35:98:55:8c:a1:16:61:49:5e:f6:00:c8:78: 87:a5:a0:27:37:63:fd:ee:8e:a1:68:d4:e0:83:db:4e:47:bc: 58:1e:36:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1sSw4h+POB0ImEwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI2MDQwNzAzMDAwM1oXDTI2MDQwOTAzMDAwMFowLzEtMCsGA1UEAxMk MDRlNTg0MjgtMjZiMS00OWUzLWEwMmMtNjY2MjRhZmY4ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71pNpX+Hebe7hAj7P5hbzufZYrnnPvayufRl ItyGkjDNr+6dICw9OKqz7FkUBtTcQDanU6j1lwAKFsqh+DFQIxKDEnuyR2Y82N3p LCsf/TgYd8TCH5GEG+bKVDWj5rrqX4FslZUzTWzLeyuA8TgiusUIjJpuUaTH/Oub oDqIbzMXIm5a/W+qQP+X006gzp5nRBclRpE19bm+rTGPUuZ20163FIuvisRRLbb8 lXhtSurvmsDe7z9J0ZuI3XaJmZm4hI1ZCjdpNawkQrqO4SKJHleQutojq7g4araP LU9fRc/1q1fRHGTHCgMZ7rhYXBTWQK69Agn0s0uI0sdsgYysVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBs6Lb5+J0P8e1yO5jO375BnOrhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvM2U1MTFhZWQtYzY2Ni00 MzZkLWI0YTQtOTQ3NzkwZTZjOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU9oM7TzYt5xqw97gwKA3v vWBDEBtR8nCIlwMIclLWUpPw49kV2gV2SlE8xQfIz1nmdE5YJgFFKve72R1GGuFn a3GyVi+d1j+kxLiigx2O2cfcxbxtaMLDKnSr9cgcKpcf6tiXUZ2eR4WngpoYnMbf VukzMBalasU/fcJYkbte8VkQoTsYnL8z44XE3okaPuPFTXLZEpYmib52d5Jga0WS WplVvACOqXNEFMaracwRz8UzBmThlScKNhai/X3aKjxzu+yeDtU52rKXSXZGnbxJ psdQW909GUsw7YvY2zWYVYyhFmFJXvYAyHiHpaAnN2P97o6haNTgg9tOR7xYHjYe -----END CERTIFICATE-----Generated at Tue Apr 7 12:06:56 2026 by rpki-client