$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft File: 3878fd50-eae1-4b38-a142-8eff8910579b.mft (raw, json) Hash identifier: SX5sKAs7gX/58lR28gW9VxCT19U3GOF4gYkc3/IpoZw= Subject key identifier: 30:F3:17:50:68:3B:C2:6D:1B:73:53:6D:A3:93:D3:86:7F:09:B5:19 Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 Certificate issuer: /CN=3878fd50-eae1-4b38-a142-8eff8910579b Certificate serial: 010D0C9F4328584DA97B8B50E85FCB8E96709F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft Manifest number: 010D0C9F4328584619751223A5CE74CFE50C1EE8 Signing time: Wed 29 Apr 2026 01:02:03 +0000 Manifest this update: Wed 29 Apr 2026 01:02:03 +0000 Manifest next update: Thu 30 Apr 2026 15:00:00 +0000 Files and hashes: 1: 08d290d6-558a-31e0-b42d-51ab17937ab7.roa (hash: r+nMGZqRR+7wmJ585Ialz6cIMCZ77X7lcX1HwPqgFmo=) 2: 35152e5a-7906-3a3d-9b36-103f014eba0a.asa (hash: 3MtBoskzAkI/rpdCFvfMqknr5M7gw272jkXg7dBnYCI=) 3: 3878fd50-eae1-4b38-a142-8eff8910579b.crl (hash: FvjJNnzpudVczfXPiIcTQqJFskV9eAfCuwglOgD+kjc=) 4: 6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa (hash: CTGAp+kW/vyZOuJwYukP9v4jpo0OqvxdQSI3AdDfHqU=) 5: c461166b-112b-3bc7-8e64-5dbf1d5f8474.roa (hash: Yg1GueobROIJwjSa1FjdJ/e5vw3uRI5Zt9dnIEx4wNg=) 6: d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (hash: 5Y+6NgvCgheNeqzeMBXq9QLUNN6JPiLJtJQEDvG1H88=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:7b:8b:50:e8:5f:cb:8e:96:70:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b Validity Not Before: Apr 29 01:02:03 2026 GMT Not After : Apr 30 15:00:00 2026 GMT Subject: CN=870b8662-bde3-46e2-8b62-627453ee8567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:fd:dd:d5:b7:2e:8d:24:67:74:ce:f6:12: 46:66:d1:e0:55:44:f4:05:9c:b6:78:1b:3d:da:b9: db:9d:a1:56:10:bb:da:b2:ba:d8:de:ba:fb:84:cf: ea:d4:a8:c3:af:01:0f:84:23:1c:7f:0f:e1:d3:57: 4b:ae:1a:07:25:40:17:e4:9a:1e:2e:8b:0e:b4:dd: 6e:92:90:36:2a:38:5c:7d:4e:c2:16:fc:4c:8d:25: 7d:bb:89:07:c3:66:6a:3b:b4:3f:1e:46:86:0c:36: 11:28:9c:e4:6c:34:6e:88:92:d2:58:06:6e:7e:d9: ee:3f:fb:98:e5:1b:b3:13:06:7e:fa:a1:61:23:6e: 5b:76:e8:e4:48:c6:c3:45:f4:5b:bd:f7:9b:27:c9: d7:8b:05:e6:b9:ad:4c:d0:6a:a8:41:11:79:0b:a3: 0a:e2:66:0a:3b:02:7e:9d:36:47:99:2f:b2:a9:6c: 58:e5:ac:4e:6d:89:0e:82:49:80:50:8b:a0:9f:12: d4:f7:72:55:03:74:85:aa:f1:fd:95:a1:0f:fc:87: b2:dd:ae:d2:00:59:50:09:78:10:48:cb:52:67:84: f0:3c:0a:7e:25:f2:4e:94:46:ee:20:5c:85:f3:09: 0c:14:b2:b7:d9:16:23:76:e2:b3:70:df:f6:15:4e: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F3:17:50:68:3B:C2:6D:1B:73:53:6D:A3:93:D3:86:7F:09:B5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl X509v3 Authority Key Identifier: keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:13:c7:83:3e:ec:2f:3b:9c:7a:26:20:86:46:3c:85:63:22: a6:ce:8e:7f:87:14:83:2e:8d:ea:bc:a5:7a:f8:a2:f3:fd:c7: 7c:9f:22:7f:78:d5:ae:de:cf:25:7b:50:72:f5:84:cc:4e:0b: 91:03:e2:1e:2f:67:73:17:cc:ca:99:88:1f:49:84:2f:47:5f: 44:5b:ba:ee:7b:aa:4e:df:63:9f:ae:53:3e:6f:71:8e:5a:b2: b6:da:e7:0b:e0:72:e1:cc:24:db:da:b0:f2:2f:be:18:16:d5: 2c:4e:c9:c8:43:af:9e:82:d4:07:ae:da:68:ff:85:9b:a2:1c: 93:17:2a:c8:23:02:3c:db:7f:b0:81:db:73:d4:89:31:6f:73: ce:5b:ea:b5:c8:c3:6b:71:95:81:e5:ed:94:6f:41:6c:8c:0b: 15:58:01:7a:4f:d6:40:36:9b:c9:a9:6e:d7:9d:bd:ac:c7:4a: 45:69:98:a0:9b:da:3c:4e:dc:41:4c:3a:35:81:9d:a9:f9:41: dd:6b:4c:4c:e2:c6:54:7e:9a:04:c3:a0:84:50:b4:5e:3c:19: b0:cb:ee:c0:12:9d:ec:77:f8:e7:23:de:28:ac:67:28:61:b4: 5f:25:81:3a:55:5a:97:a8:57:ee:7f:6d:a0:20:b0:d6:ab:5e: ab:49:ed:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2pe4tQ6F/LjpZwn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1 NzliMB4XDTI2MDQyOTAxMDIwM1oXDTI2MDQzMDE1MDAwMFowLzEtMCsGA1UEAxMk ODcwYjg2NjItYmRlMy00NmUyLThiNjItNjI3NDUzZWU4NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMz93dW3Lo0kZ3TO9hJGZtHgVUT0BZy2eBs9 2rnbnaFWELvasrrY3rr7hM/q1KjDrwEPhCMcfw/h01dLrhoHJUAX5JoeLosOtN1u kpA2KjhcfU7CFvxMjSV9u4kHw2ZqO7Q/HkaGDDYRKJzkbDRuiJLSWAZuftnuP/uY 5RuzEwZ++qFhI25bdujkSMbDRfRbvfebJ8nXiwXmua1M0GqoQRF5C6MK4mYKOwJ+ nTZHmS+yqWxY5axObYkOgkmAUIugnxLU93JVA3SFqvH9laEP/Iey3a7SAFlQCXgQ SMtSZ4TwPAp+JfJOlEbuIFyF8wkMFLK32RYjduKzcN/2FU5ckwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDDzF1BoO8JtG3NTbaOT04Z/CbUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4 ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvMzg3OGZkNTAtZWFlMS00 YjM4LWExNDItOGVmZjg5MTA1NzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm ODkxMDU3OWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8E8eDPuwvO5x6JiCGRjyF YyKmzo5/hxSDLo3qvKV6+KLz/cd8nyJ/eNWu3s8le1By9YTMTguRA+IeL2dzF8zK mYgfSYQvR19EW7rue6pO32OfrlM+b3GOWrK22ucL4HLhzCTb2rDyL74YFtUsTsnI Q6+egtQHrtpo/4WbohyTFyrIIwI823+wgdtz1Ikxb3POW+q1yMNrcZWB5e2Ub0Fs jAsVWAF6T9ZANpvJqW7Xnb2sx0pFaZigm9o8TtxBTDo1gZ2p+UHda0xM4sZUfpoE w6CEULRePBmwy+7AEp3sd/jnI94orGcoYbRfJYE6VVqXqFfuf22gILDWq16rSe0X -----END CERTIFICATE-----Generated at Wed Apr 29 14:35:10 2026 by rpki-client