$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json) Hash identifier: /ZjCrFx74ZE1X3dq4YIWMbx7URTTlLlK7bntjcxuDXQ= Subject key identifier: 39:EC:D9:B6:D4:38:36:52:2F:C2:43:F7:36:54:A2:2D:E4:72:FB:A8 Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584D6B037F617A4D75E23739C700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A560448 Signing time: Mon 06 Apr 2026 16:00:03 +0000 Manifest this update: Mon 06 Apr 2026 16:00:03 +0000 Manifest next update: Thu 09 Apr 2026 16:00:00 +0000 Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: vBecV37Yfbj6lWWTjQPTsIEzFuefyxlbPq0I6ix/FUM=) 2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: 6TtDxov2dHe2kqS0Ri1lHbu6VUiHzaph8pPG5KVKcxg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:03:7f:61:7a:4d:75:e2:37:39:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Apr 6 16:00:03 2026 GMT Not After : Apr 9 16:00:00 2026 GMT Subject: CN=1fd8c900-a664-4ed0-98c9-b65e6ef8cca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:a4:f7:b5:d7:28:d4:f1:b6:26:6d:d1:a3: 15:6c:35:fe:42:d3:cf:c1:88:d9:70:cf:d3:f2:e9: 51:5c:bd:10:05:25:4f:5b:7c:0d:ce:47:3b:85:a6: 4e:bd:6f:21:8f:c7:fe:5a:fb:e6:4d:00:81:fc:cc: 26:f0:69:4d:07:84:eb:64:44:f0:2d:a6:63:8d:7c: aa:c9:cf:52:6d:73:ea:ce:7b:52:4d:94:75:3a:f6: 90:f2:66:d5:7c:2d:9f:4a:bc:13:03:c1:b0:3a:14: bf:5a:61:92:29:e3:c9:68:ad:19:fe:89:33:9f:1c: 2e:7c:22:d3:1f:1b:1e:ea:bb:5b:26:4b:89:a1:01: 88:9d:43:23:f1:22:1b:93:a5:49:ad:9a:9f:ae:59: 71:1f:f2:e6:ac:0b:c2:e3:d5:a0:48:c6:10:d2:85: c6:25:a0:e1:c8:62:15:8e:f4:27:19:ff:8a:27:12: 01:73:de:e6:14:06:bd:98:b8:00:39:d6:ae:3d:41: f7:11:2b:08:1a:f0:af:71:72:17:b5:7b:57:07:24: ac:8a:18:d6:0e:46:b5:ba:d3:a7:16:f9:f3:4b:92: 3e:94:16:e0:94:07:2c:3c:4a:8f:aa:fb:9f:95:34: 5c:96:46:35:9f:cb:48:0a:75:42:d5:78:1b:49:ef: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:D9:B6:D4:38:36:52:2F:C2:43:F7:36:54:A2:2D:E4:72:FB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:3d:01:70:e3:6a:5d:4a:f9:a2:fd:64:59:6f:a7:00:9d:6b: 41:46:10:5e:3a:f7:4e:ee:9c:60:93:ba:23:23:cb:6b:e2:82: 5e:01:89:16:1a:ba:2b:cd:76:10:ca:5c:ad:da:a8:9e:d0:a3: 05:8f:dc:dd:e5:59:70:71:b5:3f:99:de:f3:73:65:e1:66:c0: fb:9e:53:66:f0:42:f1:e3:81:23:d8:79:10:9a:12:ba:85:bc: f3:85:c3:60:ad:f2:b7:5d:97:1f:27:3e:ad:4c:16:1f:74:70: 8a:c7:90:0a:eb:24:f0:98:83:d1:20:f0:c3:ed:57:6d:b5:8f: 80:10:3a:d3:64:90:9d:58:b8:c8:70:6d:a7:ad:2a:87:ef:24: 54:0e:e8:ae:90:17:e8:db:68:47:a7:12:cc:c2:73:38:04:d3: 30:6f:3e:87:75:53:69:4c:32:73:5d:4d:69:4c:d2:84:73:32: 5b:74:b4:10:ad:d9:45:ee:22:5b:d4:65:22:5f:68:a9:d7:fa: d2:53:25:64:63:42:2b:cb:67:97:c7:20:f2:e6:70:39:1e:a6: 95:28:d6:52:d1:bd:75:cd:20:0b:03:77:8b:98:61:57:d1:9f: 93:eb:8b:e4:59:b1:4c:90:96:01:6a:3c:04:95:77:d4:0b:b9: 00:ef:ce:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rA39hek114jc5xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI2MDQwNjE2MDAwM1oXDTI2MDQwOTE2MDAwMFowLzEtMCsGA1UEAxMk MWZkOGM5MDAtYTY2NC00ZWQwLTk4YzktYjY1ZTZlZjhjY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyGk97XXKNTxtiZt0aMVbDX+QtPPwYjZcM/T 8ulRXL0QBSVPW3wNzkc7haZOvW8hj8f+WvvmTQCB/Mwm8GlNB4TrZETwLaZjjXyq yc9SbXPqzntSTZR1OvaQ8mbVfC2fSrwTA8GwOhS/WmGSKePJaK0Z/okznxwufCLT Hxse6rtbJkuJoQGInUMj8SIbk6VJrZqfrllxH/LmrAvC49WgSMYQ0oXGJaDhyGIV jvQnGf+KJxIBc97mFAa9mLgAOdauPUH3ESsIGvCvcXIXtXtXBySsihjWDka1utOn FvnzS5I+lBbglAcsPEqPqvuflTRclkY1n8tICnVC1XgbSe+gBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDns2bbUODZSL8JD9zZUoi3kcvuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00 ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGPQFw42pdSvmi/WRZb6cA nWtBRhBeOvdO7pxgk7ojI8tr4oJeAYkWGrorzXYQylyt2qie0KMFj9zd5VlwcbU/ md7zc2XhZsD7nlNm8ELx44Ej2HkQmhK6hbzzhcNgrfK3XZcfJz6tTBYfdHCKx5AK 6yTwmIPRIPDD7VdttY+AEDrTZJCdWLjIcG2nrSqH7yRUDuiukBfo22hHpxLMwnM4 BNMwbz6HdVNpTDJzXU1pTNKEczJbdLQQrdlF7iJb1GUiX2ip1/rSUyVkY0Iry2eX xyDy5nA5HqaVKNZS0b11zSALA3eLmGFX0Z+T64vkWbFMkJYBajwElXfUC7kA7876 -----END CERTIFICATE-----Generated at Tue Apr 7 16:55:26 2026 by rpki-client