$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft File: 3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft (raw, json) Hash identifier: NtNEtq8NOJBsWLk3rQfdMi2RVjQ60CT53BilFVOevrc= Subject key identifier: 35:D0:EC:DF:5D:32:A4:BE:54:F0:91:00:90:70:52:DF:1E:3B:16:16 Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Certificate serial: 010D0C9F4328584D6AE5B6339BC0488A0D5E7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft Manifest number: 010D0C9F4328584A89E8131CAF1B17A99DE9A991 Signing time: Mon 06 Apr 2026 15:00:03 +0000 Manifest this update: Mon 06 Apr 2026 15:00:03 +0000 Manifest next update: Thu 09 Apr 2026 15:00:00 +0000 Files and hashes: 1: 3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl (hash: fgE1uVSQR7UgbBHVPH+gfJc3bpB63sR77R7olKCTHAI=) 2: 4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa (hash: H3hHd5MKn4Uqx6F+4gtyUM7Z6gK8+m1dOQNBzKbM9uM=) 3: 7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa (hash: u1cVwRbYJUe70w/TnTv7jZmtAHrU8B27osEq2dC+hUA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:e5:b6:33:9b:c0:48:8a:0d:5e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Validity Not Before: Apr 6 15:00:03 2026 GMT Not After : Apr 9 15:00:00 2026 GMT Subject: CN=4e72ee8f-92dc-4e98-a672-b311b2107d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:86:3f:f5:fd:b4:d0:6b:1f:c2:59:30:a1: 29:7a:dd:de:09:18:9c:27:44:5d:5d:01:a3:a3:d7: 4a:53:c3:da:06:97:a1:02:a2:c3:8f:30:11:2c:a1: 7c:a0:f0:7e:cf:3d:1b:2c:06:06:86:db:d8:c9:f8: 67:1e:99:79:15:7f:7a:9d:46:02:d6:e5:15:21:3a: 44:9a:65:f4:af:aa:7d:75:38:d6:75:85:92:fa:fb: f7:fd:c3:ac:89:06:b0:72:45:bb:af:03:2c:3a:b6: d3:e7:d3:78:0a:99:1d:13:e6:68:27:bb:29:ff:3d: a7:2c:1c:f5:4e:fe:46:f3:a3:62:c2:96:79:55:78: 8f:8b:0a:56:24:b0:cc:27:f3:72:e0:a4:38:d8:da: 75:8f:9a:63:f9:aa:9f:a9:b4:e2:f1:f5:73:1d:92: 82:4f:3e:99:b8:cc:48:d9:b4:14:ea:67:54:6a:2e: 17:06:8b:33:3e:81:7c:dd:61:89:08:3a:b3:33:1f: 07:80:21:6a:79:f6:d5:e1:13:c8:d7:9b:9c:8a:e1: 4d:5e:99:cc:2d:91:7b:98:91:bd:47:6d:a7:3a:6f: 33:9d:67:24:c6:c4:56:0d:7b:88:1e:e8:b0:5c:3d: 57:4b:4c:f1:a0:70:3c:30:0d:f2:03:0e:41:9c:6e: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:EC:DF:5D:32:A4:BE:54:F0:91:00:90:70:52:DF:1E:3B:16:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl X509v3 Authority Key Identifier: keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:79:37:ee:3a:d5:50:99:7d:c8:f1:ea:ad:c1:46:7e:5c:73: 25:1f:63:fa:44:bf:ef:a8:9a:a5:17:9c:93:af:53:3f:c8:37: f2:36:d0:3b:d4:87:c6:e3:31:05:ed:be:27:95:ec:dd:24:62: 33:8d:f8:bf:88:fa:0f:e1:0a:60:9e:90:4b:45:1f:e0:98:66: d2:c6:61:b4:01:09:12:7e:11:87:ec:23:a0:a8:4b:4b:72:01: 97:cf:b8:09:f4:c6:99:9d:69:30:a1:17:0d:20:95:04:cb:2c: 12:eb:26:38:a4:a3:b6:52:1e:94:85:bf:36:69:c5:c2:65:81: 56:35:be:4a:9b:97:b7:f1:37:a8:c6:56:61:82:e7:ac:fa:97: 07:b9:b9:c8:ad:2d:c2:95:81:f5:2d:fd:ca:ee:5e:a2:d5:89: c4:ed:96:34:61:dc:f5:1c:34:72:44:9e:a6:1f:b7:51:ac:d0: c5:b9:35:86:e2:a4:e9:39:c3:69:7c:cf:f7:ee:09:cc:4a:a3: bf:a3:d9:9f:c4:ff:b6:b0:74:0a:9c:69:f6:80:0e:a2:19:d1: 38:28:0f:10:89:e5:eb:27:c8:06:c0:20:b4:be:44:74:a2:05: 71:f3:39:ac:d2:d0:44:29:be:17:72:91:63:d1:cb:6c:f3:ad: 93:ab:23:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1q5bYzm8BIig1efYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4YTk3ZmEtZmI2ZS00NmQ0LTllOGUtZWZkZDQzNThh NzQwMB4XDTI2MDQwNjE1MDAwM1oXDTI2MDQwOTE1MDAwMFowLzEtMCsGA1UEAxMk NGU3MmVlOGYtOTJkYy00ZTk4LWE2NzItYjMxMWIyMTA3ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjouGP/X9tNBrH8JZMKEpet3eCRicJ0RdXQGj o9dKU8PaBpehAqLDjzARLKF8oPB+zz0bLAYGhtvYyfhnHpl5FX96nUYC1uUVITpE mmX0r6p9dTjWdYWS+vv3/cOsiQawckW7rwMsOrbT59N4CpkdE+ZoJ7sp/z2nLBz1 Tv5G86NiwpZ5VXiPiwpWJLDMJ/Ny4KQ42Np1j5pj+aqfqbTi8fVzHZKCTz6ZuMxI 2bQU6mdUai4XBoszPoF83WGJCDqzMx8HgCFqefbV4RPI15uciuFNXpnMLZF7mJG9 R22nOm8znWckxsRWDXuIHuiwXD1XS0zxoHA8MA3yAw5BnG4p/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDXQ7N9dMqS+VPCRAJBwUt8eOxYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhh OTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRkNDM1OGE3NDAvM2Y4YTk3ZmEtZmI2ZS00 NmQ0LTllOGUtZWZkZDQzNThhNzQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Y4YTk3ZmEtZmI2ZS00NmQ0LTll OGUtZWZkZDQzNThhNzQwLzNmOGE5N2ZhLWZiNmUtNDZkNC05ZThlLWVmZGQ0MzU4 YTc0MC5jcmwwHwYDVR0jBBgwFoAUYRaTXw4eJhCS+xK0VJWAkRb0sDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhhOTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRk NDM1OGE3NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUeTfuOtVQmX3I8eqtwUZ+ XHMlH2P6RL/vqJqlF5yTr1M/yDfyNtA71IfG4zEF7b4nlezdJGIzjfi/iPoP4Qpg npBLRR/gmGbSxmG0AQkSfhGH7COgqEtLcgGXz7gJ9MaZnWkwoRcNIJUEyywS6yY4 pKO2Uh6Uhb82acXCZYFWNb5Km5e38TeoxlZhgues+pcHubnIrS3ClYH1Lf3K7l6i 1YnE7ZY0Ydz1HDRyRJ6mH7dRrNDFuTWG4qTpOcNpfM/37gnMSqO/o9mfxP+2sHQK nGn2gA6iGdE4KA8QieXrJ8gGwCC0vkR0ogVx8zms0tBEKb4XcpFj0cts862TqyOD -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:32 2026 by rpki-client