$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: RzwxH1LJmBF+TkvmQjhGHLn1x9i+xHwWXHFLDz4wZ+I= Subject key identifier: 41:57:C9:3C:52:9B:31:2E:AF:15:82:C2:94:E7:17:74:FE:28:7D:DB Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584DAB3939808AB3CF37844ECD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C836 Signing time: Wed 29 Apr 2026 16:00:03 +0000 Manifest this update: Wed 29 Apr 2026 16:00:03 +0000 Manifest next update: Sat 02 May 2026 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: tUOqTZKXDIU/XAzM2NnJ83Hkvhg75sfhnBvMIXSnMu0=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: HWWtnbVJ2OOxbVTjI89PdwoPgrIDtFjhW7RvJphyDRo=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: x3kn0qFGEu+VQUC5xROvevxpf5XkMG7ZK+KkIPdZ8Fw=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: OepYGEtECbUMlvpxf1/TPaGicf+iqBq/yPgWG2kCSms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:39:39:80:8a:b3:cf:37:84:4e:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Apr 29 16:00:03 2026 GMT Not After : May 2 16:00:00 2026 GMT Subject: CN=f4f5fb17-26c4-421a-b4b5-23fc90f87d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:77:a4:0a:a5:f5:af:fc:0e:67:6f:d1:2e: 83:c0:25:bb:08:fd:73:53:b4:e3:e6:44:9f:f7:e9: 93:96:c8:a0:ed:56:69:82:29:81:3a:9c:a5:e3:d1: 64:b3:05:84:c5:28:bf:c6:cc:7c:bd:6b:d8:cb:52: 39:1b:a7:7b:b1:85:7b:f2:51:f2:5d:d0:86:6c:ee: b8:68:08:dd:56:02:46:80:3c:fb:09:ff:30:06:a8: 6e:09:5d:69:f0:57:1d:43:d9:c3:b3:0c:20:69:cc: 0f:4e:9c:57:2f:bb:9b:6b:f6:20:5e:1e:0f:ce:fd: 97:4b:c7:25:5b:f3:c7:f2:32:99:95:95:d9:e9:61: 0c:28:da:71:b5:6a:84:38:99:d4:19:4d:3c:10:f8: b4:50:d6:13:15:27:19:c6:51:60:4a:2e:d7:27:2f: e9:ab:87:f2:63:26:3f:bc:61:f8:4b:b4:e8:48:0e: 49:21:6a:8f:d6:40:02:df:21:3f:e2:29:73:15:2d: b5:0e:fd:c8:70:80:30:d3:f5:5c:6b:e2:cf:c8:dc: 3f:4b:18:8d:fe:97:d1:18:d0:a8:e9:2b:14:e9:5d: cc:fa:38:54:40:60:eb:06:0f:07:62:5a:fe:e6:da: ab:dc:24:5e:a0:44:63:a2:0b:fe:2b:21:f2:07:f3: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:C9:3C:52:9B:31:2E:AF:15:82:C2:94:E7:17:74:FE:28:7D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:20:f6:5f:ae:f4:8c:ca:70:44:8c:46:bc:da:5e:f9:2a:7a: c9:d5:13:fc:7f:d1:f0:75:cf:f1:2a:a3:37:d2:01:76:c3:b5: da:84:66:2f:a5:af:f7:0e:f5:6b:1e:75:2a:ba:44:83:91:2f: 7d:ca:e4:e3:fe:55:e8:19:ba:ab:f3:7a:5e:97:76:98:7b:75: cb:8e:89:81:f3:6e:fc:81:2a:29:d5:60:66:7a:da:9b:68:d2: e9:a8:6c:80:0a:3a:29:54:9c:b4:88:a0:fb:bf:e1:01:96:c5: ca:b5:86:56:5f:5d:cf:95:b1:db:56:1c:58:0c:53:38:03:d0: 97:50:d9:71:0e:3d:c4:cb:37:e2:f9:51:bd:3b:88:f1:ae:24: ab:8d:07:9c:be:78:41:1a:b4:62:96:77:ef:71:80:78:f4:f0: 23:8e:4e:48:eb:b2:59:22:6d:47:ee:52:87:76:38:96:31:36: f9:cb:0b:41:ba:06:1d:78:e2:26:fd:3c:3f:03:9d:53:96:e9: 3a:2d:f9:62:aa:a6:02:3a:16:fc:66:ee:f9:ca:9a:52:19:48: d2:41:4d:83:c9:fd:b6:13:1b:ab:e3:1a:65:dc:0d:93:c5:9d: 0b:b4:1f:0d:19:ff:13:f3:31:f0:f1:2e:d8:37:a2:64:61:41: b7:be:52:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2rOTmAirPPN4ROzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI2MDQyOTE2MDAwM1oXDTI2MDUwMjE2MDAwMFowLzEtMCsGA1UEAxMk ZjRmNWZiMTctMjZjNC00MjFhLWI0YjUtMjNmYzkwZjg3ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiox3pAql9a/8Dmdv0S6DwCW7CP1zU7Tj5kSf 9+mTlsig7VZpgimBOpyl49FkswWExSi/xsx8vWvYy1I5G6d7sYV78lHyXdCGbO64 aAjdVgJGgDz7Cf8wBqhuCV1p8FcdQ9nDswwgacwPTpxXL7uba/YgXh4Pzv2XS8cl W/PH8jKZlZXZ6WEMKNpxtWqEOJnUGU08EPi0UNYTFScZxlFgSi7XJy/pq4fyYyY/ vGH4S7ToSA5JIWqP1kAC3yE/4ilzFS21Dv3IcIAw0/Vca+LPyNw/SxiN/pfRGNCo 6SsU6V3M+jhUQGDrBg8HYlr+5tqr3CReoERjogv+KyHyB/N3XwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEFXyTxSmzEurxWCwpTnF3T+KH3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxIPZfrvSMynBEjEa82l75 KnrJ1RP8f9Hwdc/xKqM30gF2w7XahGYvpa/3DvVrHnUqukSDkS99yuTj/lXoGbqr 83pel3aYe3XLjomB8278gSop1WBmetqbaNLpqGyACjopVJy0iKD7v+EBlsXKtYZW X13PlbHbVhxYDFM4A9CXUNlxDj3Eyzfi+VG9O4jxriSrjQecvnhBGrRilnfvcYB4 9PAjjk5I67JZIm1H7lKHdjiWMTb5ywtBugYdeOIm/Tw/A51Tluk6LfliqqYCOhb8 Zu75yppSGUjSQU2Dyf22Exur4xpl3A2TxZ0LtB8NGf8T8zHw8S7YN6JkYUG3vlLo -----END CERTIFICATE-----Generated at Thu Apr 30 15:16:27 2026 by rpki-client