$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: 0WWXUQtuIAM4ojjiT8nP9YhBkDN8WPQVjhA9SGWpJVY= Subject key identifier: A1:A7:13:97:6C:6B:19:23:24:04:FD:5E:35:BF:ED:BD:36:7A:17:B7 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584ED05B4A12273513FB12BDE800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C8A7 Signing time: Wed 12 Aug 2026 16:00:23 +0000 Manifest this update: Wed 12 Aug 2026 16:00:23 +0000 Manifest next update: Fri 14 Aug 2026 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: aaawSOrK6GJH4LP3yo8Kt29qSuKTOmL7o0HtrzRKZOk=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: cwRI1yajdWrpFDkR07fO2Mk8s/uWAhUuLfXyRtQGsz4=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: ry3fnjCTJLZZpQ3QoYEvI4Jh58tQQ+0zsbUpHRz2218=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: yR0TW0HjQGbhdcnzHM8Z8FTZ+9HCpA5wa4OrcqSONOs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:5b:4a:12:27:35:13:fb:12:bd:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Aug 12 16:00:23 2026 GMT Not After : Aug 14 16:00:00 2026 GMT Subject: CN=64970d40-84af-44df-b457-2e21efa69fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:57:40:b8:47:84:21:80:f1:2c:4a:1b:0c: 2b:10:16:05:53:76:46:25:fb:46:8a:90:b9:5d:73: f2:50:05:94:84:92:1b:7e:65:10:e5:57:55:f4:c1: eb:22:c0:64:c4:b5:dc:99:86:2d:91:06:27:7c:cf: 1a:a4:56:ca:73:62:89:77:46:49:e3:63:86:78:ea: e8:67:f4:01:96:86:38:c1:2d:01:3d:b4:f6:82:ce: 5b:73:05:a7:e6:a6:bb:14:10:1f:96:2f:25:7d:cc: 9d:97:9c:fa:61:5a:26:90:55:fa:58:4a:7e:d3:7b: 17:f6:4f:03:5c:9d:f9:30:d6:48:60:42:d1:42:01: a2:08:b9:e1:55:53:92:e9:40:3a:74:7f:c9:d3:61: 76:59:04:fd:18:86:6b:d6:82:00:62:45:ae:89:d0: b2:25:58:b0:a2:5c:a1:45:bc:a0:37:e8:60:97:ae: ff:59:0c:9c:7e:60:2b:82:54:1e:71:fd:bf:64:24: 97:d6:b3:0f:6e:a2:4f:9c:f4:5b:48:c6:60:81:b3: a7:7e:bd:7b:a8:f7:f8:2a:10:e8:77:c6:ae:27:c5: 21:a7:98:9f:bc:a6:c9:cc:4a:2a:a0:2c:1f:f4:10: cf:78:9b:8f:a2:50:fa:b8:92:db:ce:07:96:33:f3: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:13:97:6C:6B:19:23:24:04:FD:5E:35:BF:ED:BD:36:7A:17:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:07:24:f1:94:67:4e:bd:72:7c:97:0c:2a:1a:fd:a3:16:c4: 83:55:36:d3:c2:6c:7b:2f:c2:cd:d7:3a:f4:53:47:1b:97:29: fe:22:2e:5c:51:45:99:d3:2d:72:79:ac:fd:09:20:71:50:f0: 66:5f:e6:68:1b:14:32:45:af:68:3b:32:c2:fb:5a:a9:4d:7b: 98:86:72:ed:87:8c:9e:b1:d9:89:1d:97:da:58:f7:ec:61:e9: 59:f6:9a:b8:dc:b7:a3:4a:74:72:c2:f0:55:32:ac:80:43:90: 2f:a3:84:41:a8:41:ce:20:57:80:59:81:ff:55:4b:f4:4a:bb: a2:69:57:c2:d4:23:c5:d5:30:32:a1:85:2c:cd:93:29:2c:d6: 8f:1c:0a:8a:4d:e4:ee:85:c0:99:3f:7e:c7:7a:45:c3:57:29: 59:16:8f:e0:37:dd:82:c2:66:eb:4f:7e:03:e8:0c:9f:2b:39: 58:2d:6c:53:8f:5a:ce:26:a7:6c:c0:01:1d:04:e1:0a:d8:43: d4:42:9f:4b:29:84:5b:e9:22:b6:6f:5c:97:67:19:d6:b9:04: 7d:37:ed:08:0b:cc:17:67:5a:f2:7b:a4:47:30:24:14:59:77: d3:63:a3:9b:06:5c:5f:58:d8:db:09:d0:d2:fe:42:61:f0:f8: 29:f0:8f:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7QW0oSJzUT+xK96AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI2MDgxMjE2MDAyM1oXDTI2MDgxNDE2MDAwMFowLzEtMCsGA1UEAxMk NjQ5NzBkNDAtODRhZi00NGRmLWI0NTctMmUyMWVmYTY5ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridXQLhHhCGA8SxKGwwrEBYFU3ZGJftGipC5 XXPyUAWUhJIbfmUQ5VdV9MHrIsBkxLXcmYYtkQYnfM8apFbKc2KJd0ZJ42OGeOro Z/QBloY4wS0BPbT2gs5bcwWn5qa7FBAfli8lfcydl5z6YVomkFX6WEp+03sX9k8D XJ35MNZIYELRQgGiCLnhVVOS6UA6dH/J02F2WQT9GIZr1oIAYkWuidCyJViwolyh RbygN+hgl67/WQycfmArglQecf2/ZCSX1rMPbqJPnPRbSMZggbOnfr17qPf4KhDo d8auJ8Uhp5ifvKbJzEoqoCwf9BDPeJuPolD6uJLbzgeWM/PwTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGnE5dsaxkjJAT9XjW/7b02ehe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1ByTxlGdOvXJ8lwwqGv2j FsSDVTbTwmx7L8LN1zr0U0cblyn+Ii5cUUWZ0y1yeaz9CSBxUPBmX+ZoGxQyRa9o OzLC+1qpTXuYhnLth4yesdmJHZfaWPfsYelZ9pq43LejSnRywvBVMqyAQ5Avo4RB qEHOIFeAWYH/VUv0SruiaVfC1CPF1TAyoYUszZMpLNaPHAqKTeTuhcCZP37HekXD VylZFo/gN92CwmbrT34D6AyfKzlYLWxTj1rOJqdswAEdBOEK2EPUQp9LKYRb6SK2 b1yXZxnWuQR9N+0IC8wXZ1rye6RHMCQUWXfTY6ObBlxfWNjbCdDS/kJh8Pgp8I/d -----END CERTIFICATE-----Generated at Thu Aug 13 16:17:08 2026 by rpki-client