$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft File: 3d17c017-30b5-444a-aa30-048cc30971e3.mft (raw, json) Hash identifier: yO+sMnwX3nYK6bZH1tqrqx+M/CNXVdRFPGnSB4y9WtY= Subject key identifier: 99:F8:CE:9B:E9:25:52:67:EF:FE:40:DE:4E:00:BD:1A:1F:F4:DE:1F Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584D6B3F0D6D66CB676B4A8A9880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft Manifest number: 010D0C9F4328584AEEBB1810A11CCF289AF9B7AC Signing time: Mon 06 Apr 2026 18:00:03 +0000 Manifest this update: Mon 06 Apr 2026 18:00:03 +0000 Manifest next update: Thu 09 Apr 2026 18:00:00 +0000 Files and hashes: 1: 3d17c017-30b5-444a-aa30-048cc30971e3.crl (hash: jzDuty0/M4OvE5sH81yGpouzsCxwZFBxaAQ8rkJShSk=) 2: a45363ac-38b7-3765-9fd2-71955777f847.roa (hash: SqJlJhYIrof/cq5pfR4U27zFT1Gc/xRsqCBSvuxYXxA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:3f:0d:6d:66:cb:67:6b:4a:8a:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Apr 6 18:00:03 2026 GMT Not After : Apr 9 18:00:00 2026 GMT Subject: CN=1a766e19-9aa9-4e7b-b9e7-c450922023e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:51:d8:3b:de:46:3f:db:a8:18:c6:5d:db:1d: 4a:54:be:8d:a7:55:ae:36:9e:88:69:73:75:52:b2: 0e:f3:8f:f2:85:d2:81:51:7c:4c:ad:69:16:a0:43: 05:ff:3a:20:90:84:86:de:78:5a:90:c3:6d:0f:e9: 06:3b:ca:d4:62:47:5e:5b:1e:bd:82:be:b3:cf:85: b3:33:07:d8:71:25:7e:4d:31:1e:0b:39:15:8f:90: bf:49:56:89:76:8b:21:3c:19:e5:a3:a6:e0:02:d3: 95:21:e9:05:7a:a8:27:e0:42:2c:4b:be:eb:70:4f: 64:81:e1:eb:67:a1:61:74:1e:f9:c4:25:00:07:76: c0:90:fe:82:ac:16:5f:77:34:cf:8a:b2:6d:64:3e: 6b:b1:e3:34:34:32:0d:e0:69:6e:7b:30:7b:c4:75: dc:7f:80:3e:17:70:ca:2d:b8:f3:1c:7b:81:63:28: 57:71:c7:7e:f9:2b:27:45:69:b9:6e:0f:30:b8:03: ea:02:03:9d:82:47:f0:90:9a:9c:35:a8:da:0d:d6: 8b:75:92:49:41:39:f3:0f:95:14:1e:c5:85:49:6e: 1a:d8:f6:5b:20:8e:c8:a9:a4:ac:a6:a1:ef:6a:c8: 71:b3:30:04:15:c7:81:a4:fb:16:d9:9a:fd:cd:05: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F8:CE:9B:E9:25:52:67:EF:FE:40:DE:4E:00:BD:1A:1F:F4:DE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fc:1e:11:32:10:a1:53:84:ae:3d:6b:9b:30:86:71:29:eb: e9:5b:96:6b:b6:5a:5b:91:4b:a2:24:ed:d9:b5:58:aa:7a:91: 9d:ed:0c:7f:94:1e:44:71:92:bf:29:37:09:cd:48:bb:9b:92: 9f:e7:62:e2:a4:70:51:31:66:d4:3a:a0:e4:e4:fc:1a:31:8a: 83:63:20:5b:45:4c:92:79:c0:e3:12:10:db:5b:af:82:41:27: 03:43:02:7c:02:d2:1e:a1:a6:7a:d5:25:da:b9:9f:42:b8:27: 7a:5d:f4:80:03:a8:51:d1:15:25:08:5b:3b:e7:30:6c:1f:26: aa:16:85:3e:cb:86:16:01:72:6c:ac:5d:64:42:11:01:d4:34: 88:d9:25:e0:0d:91:62:2d:a5:1c:bd:1e:6d:98:28:e3:f6:6c: 54:1b:47:ea:d0:ad:da:66:95:4b:29:ef:0c:21:95:d3:77:03: bb:9b:f6:b0:9b:42:65:2f:88:e3:14:b6:1e:89:72:c0:fb:7e: bb:20:7a:08:7c:b5:46:6a:b4:f3:11:92:f9:00:fc:9f:22:59: 08:de:23:bc:23:d3:43:b6:1e:70:f1:68:d1:e1:b5:ca:0a:e2: c1:ae:17:0e:d9:d3:2e:df:9f:37:28:d3:58:12:a4:77:a5:24: 70:3e:6c:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rPw1tZstna0qKmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI2MDQwNjE4MDAwM1oXDTI2MDQwOTE4MDAwMFowLzEtMCsGA1UEAxMk MWE3NjZlMTktOWFhOS00ZTdiLWI5ZTctYzQ1MDkyMjAyM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVHYO95GP9uoGMZd2x1KVL6Np1WuNp6IaXN1 UrIO84/yhdKBUXxMrWkWoEMF/zogkISG3nhakMNtD+kGO8rUYkdeWx69gr6zz4Wz MwfYcSV+TTEeCzkVj5C/SVaJdoshPBnlo6bgAtOVIekFeqgn4EIsS77rcE9kgeHr Z6FhdB75xCUAB3bAkP6CrBZfdzTPirJtZD5rseM0NDIN4GluezB7xHXcf4A+F3DK LbjzHHuBYyhXccd++SsnRWm5bg8wuAPqAgOdgkfwkJqcNajaDdaLdZJJQTnzD5UU HsWFSW4a2PZbII7IqaSspqHvashxszAEFceBpPsW2Zr9zQUGeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJn4zpvpJVJn7/5A3k4AvRof9N4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvM2QxN2MwMTctMzBiNS00 NDRhLWFhMzAtMDQ4Y2MzMDk3MWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG/B4RMhChU4SuPWubMIZx KevpW5ZrtlpbkUuiJO3ZtViqepGd7Qx/lB5EcZK/KTcJzUi7m5Kf52LipHBRMWbU OqDk5PwaMYqDYyBbRUySecDjEhDbW6+CQScDQwJ8AtIeoaZ61SXauZ9CuCd6XfSA A6hR0RUlCFs75zBsHyaqFoU+y4YWAXJsrF1kQhEB1DSI2SXgDZFiLaUcvR5tmCjj 9mxUG0fq0K3aZpVLKe8MIZXTdwO7m/awm0JlL4jjFLYeiXLA+367IHoIfLVGarTz EZL5APyfIlkI3iO8I9NDth5w8WjR4bXKCuLBrhcO2dMu3583KNNYEqR3pSRwPmzh -----END CERTIFICATE-----Generated at Tue Apr 7 15:17:40 2026 by rpki-client