$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft File: 3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft (raw, json) Hash identifier: FOfJnWFupCqZh/5bXlkXVictPo7l3xzs+gzRXG8nrEk= Subject key identifier: B1:BB:35:DA:99:EE:19:F1:78:82:30:3B:EE:85:CF:29:69:E5:FD:A1 Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Certificate issuer: /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Certificate serial: 010D0C9F4328584D6B0382881DC808DA05B8CA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft Manifest number: 010D0C9F4328584A7948C2D16CFD12786C439995 Signing time: Mon 06 Apr 2026 16:00:03 +0000 Manifest this update: Mon 06 Apr 2026 16:00:03 +0000 Manifest next update: Thu 09 Apr 2026 16:00:00 +0000 Files and hashes: 1: 3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl (hash: xuUz+SEh7sqZ6D1TqS3XPQzMhyiKTHTT1/mgEu7AbYM=) 2: 47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (hash: 7feFXZNY5tg/i9edI/qOs8IhJDNZZLA5q0Z1j9f0jq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:03:82:88:1d:c8:08:da:05:b8:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Validity Not Before: Apr 6 16:00:03 2026 GMT Not After : Apr 9 16:00:00 2026 GMT Subject: CN=ff51d753-b42d-4c9d-bc01-4acbd3e55f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ce:89:f7:30:25:b0:d3:f4:07:de:93:f3:61: e7:67:db:5f:11:dc:68:5e:d6:91:62:bb:2f:c2:53: df:bc:95:4d:e3:ed:16:ca:ea:05:97:d8:70:b2:6c: 05:2c:13:10:fe:a9:dc:01:ea:cc:78:e0:30:b0:17: 99:10:9b:73:42:b3:85:9d:0b:92:dc:39:c3:a3:2d: cd:10:7d:3d:a3:66:70:8b:59:70:f0:eb:8f:6a:4c: 24:a9:db:38:24:9f:77:04:e0:05:10:5c:27:ed:75: cb:af:6f:19:31:7d:50:69:14:9e:fb:60:58:0c:6d: 5c:25:ab:ce:6c:7a:3e:30:32:a3:ef:de:ad:c5:bf: 7f:8d:43:4b:5d:f1:4b:29:27:0c:cf:02:31:1b:53: 82:f2:44:35:54:f7:5c:73:d7:a3:d8:bd:67:27:ba: 5f:7c:53:89:24:59:45:6d:f6:61:a2:ab:14:d4:9c: 02:07:51:dd:b9:6b:a2:1f:37:c1:c0:f3:da:e5:9d: 5c:fa:95:f2:f8:5e:50:2f:91:4f:c5:e1:11:01:de: 79:e4:6b:12:bb:3f:6d:ff:04:63:91:80:b7:71:b2: 36:d5:f1:2d:c1:92:70:af:26:98:b3:c9:c0:18:d0: 77:0a:d0:db:43:83:3b:fc:20:7c:0a:67:89:e5:e6: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BB:35:DA:99:EE:19:F1:78:82:30:3B:EE:85:CF:29:69:E5:FD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl X509v3 Authority Key Identifier: keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f3:b0:51:55:37:27:3d:04:65:99:c4:1d:45:72:96:ab:63: 97:03:8e:a7:86:5d:09:a3:65:6d:e1:15:88:b2:19:8b:6d:d7: 8d:5e:70:9d:f6:dc:f7:53:cd:87:11:30:6f:81:8b:69:75:e0: e8:cb:1a:04:ce:34:82:f6:51:d8:11:f4:c1:b7:47:96:7b:eb: cd:10:50:74:b7:4c:b6:01:7a:ff:52:0c:c2:5f:e5:2d:b5:7e: 5f:81:0d:1a:dd:01:2c:76:8e:9c:68:4e:aa:fa:96:ff:d0:1c: 8e:68:10:cf:f4:15:df:09:37:30:f2:aa:d6:22:e3:8f:57:77: 11:41:80:53:d0:bf:6e:4a:8b:85:ee:5c:cc:3c:78:a8:65:3b: 5c:c9:ef:91:3a:f1:c5:ca:f4:fb:a4:ce:2f:be:4d:61:6a:4c: ba:5c:b7:c7:4a:52:98:e8:80:58:6a:83:8b:b6:30:c9:37:88: 65:50:46:cd:87:42:99:d1:5d:e9:b8:de:c9:5e:46:40:50:e3: 68:8f:f5:27:c4:9e:01:a6:fe:3a:8a:a5:da:39:77:3c:73:3a: 15:db:22:66:38:f9:ef:90:2c:5b:b6:4f:0b:f4:92:ae:78:45: 75:8c:ed:b8:dd:9a:62:fc:9a:80:b5:5f:a5:1b:29:08:33:93: e2:48:8e:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rA4KIHcgI2gW4yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzOWJmYTctZWQ1MS00ZDE3LTljZTUtNTM2YTRiOTBh NjJmMB4XDTI2MDQwNjE2MDAwM1oXDTI2MDQwOTE2MDAwMFowLzEtMCsGA1UEAxMk ZmY1MWQ3NTMtYjQyZC00YzlkLWJjMDEtNGFjYmQzZTU1ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM6J9zAlsNP0B96T82HnZ9tfEdxoXtaRYrsv wlPfvJVN4+0WyuoFl9hwsmwFLBMQ/qncAerMeOAwsBeZEJtzQrOFnQuS3DnDoy3N EH09o2Zwi1lw8OuPakwkqds4JJ93BOAFEFwn7XXLr28ZMX1QaRSe+2BYDG1cJavO bHo+MDKj796txb9/jUNLXfFLKScMzwIxG1OC8kQ1VPdcc9ej2L1nJ7pffFOJJFlF bfZhoqsU1JwCB1HduWuiHzfBwPPa5Z1c+pXy+F5QL5FPxeERAd555GsSuz9t/wRj kYC3cbI21fEtwZJwryaYs8nAGNB3CtDbQ4M7/CB8CmeJ5eYejwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLG7NdqZ7hnxeIIwO+6Fzylp5f2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5 YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5MGE2MmYvM2UzOWJmYTctZWQ1MS00 ZDE3LTljZTUtNTM2YTRiOTBhNjJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2UzOWJmYTctZWQ1MS00ZDE3LTlj ZTUtNTM2YTRiOTBhNjJmLzNlMzliZmE3LWVkNTEtNGQxNy05Y2U1LTUzNmE0Yjkw YTYyZi5jcmwwHwYDVR0jBBgwFoAUcWui+aDPLJNZzNxUg3FABNoMzCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZh NGI5MGE2MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCq87BRVTcnPQRlmcQdRXKW q2OXA46nhl0Jo2Vt4RWIshmLbdeNXnCd9tz3U82HETBvgYtpdeDoyxoEzjSC9lHY EfTBt0eWe+vNEFB0t0y2AXr/UgzCX+UttX5fgQ0a3QEsdo6caE6q+pb/0ByOaBDP 9BXfCTcw8qrWIuOPV3cRQYBT0L9uSouF7lzMPHioZTtcye+ROvHFyvT7pM4vvk1h aky6XLfHSlKY6IBYaoOLtjDJN4hlUEbNh0KZ0V3puN7JXkZAUONoj/UnxJ4Bpv46 iqXaOXc8czoV2yJmOPnvkCxbtk8L9JKueEV1jO243Zpi/JqAtV+lGykIM5PiSI56 -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:42 2026 by rpki-client