$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft File: 3f8ce937-b65c-4889-8a3c-145d71949e14.mft (raw, json) Hash identifier: x2R6QgMTRGIaend8ktYoZeGvcu4KZ2DOwNpL4swlidE= Subject key identifier: D8:C3:6E:20:6E:79:CA:F2:24:ED:03:5D:01:EE:D1:0F:72:F4:5F:DC Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B Certificate issuer: /CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Certificate serial: 010D0C9F4328584DAA868E90CD607889242D2240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft Manifest number: 010D0C9F432858468E5D7ABA139861D50B68902E Signing time: Wed 29 Apr 2026 10:00:03 +0000 Manifest this update: Wed 29 Apr 2026 10:00:03 +0000 Manifest next update: Sat 02 May 2026 10:00:00 +0000 Files and hashes: 1: 10a98a9b-b733-37e9-901d-63dd77533c16.roa (hash: Et9ifzmzLUwRjOXmX6dMeiCTLcsBe8M9kEg3ec08TCs=) 2: 22994742-2c3d-3ea1-b9cf-f0dce7d08b2d.roa (hash: 6P3titO0mMSxDL8ON2ai1E/nq4tzTZ57Mw7zNWP3edE=) 3: 3f8ce937-b65c-4889-8a3c-145d71949e14.crl (hash: f+jiyIisZ3kdTQYjbeQwK04f+v0uU2Nk3ySenYrsuIw=) 4: 7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (hash: XJkr5fnvRSagS6VRyvNO93OrrvYSfNfOo6AWz9wlhdY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:86:8e:90:cd:60:78:89:24:2d:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Validity Not Before: Apr 29 10:00:03 2026 GMT Not After : May 2 10:00:00 2026 GMT Subject: CN=7846dd3a-95cb-4414-af29-26f3e83a3234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:c7:9c:94:bb:2b:90:50:cc:a9:b2:a4:d4: 2f:37:dd:1c:d8:5a:4e:c1:99:40:d4:84:20:c3:d5: 3c:86:50:14:6c:94:91:17:ca:62:72:d7:97:1f:19: 80:c3:03:7a:3f:31:b9:42:67:4b:67:19:ad:5c:ee: 61:19:0a:df:72:1c:e9:5e:4a:5b:f9:0c:2a:8d:4e: af:8f:36:89:e7:c2:37:dd:7f:80:87:6b:d4:a7:6b: 68:c2:1c:db:bc:b4:ba:87:14:a4:22:02:03:be:0a: f3:09:34:cd:ae:8d:19:f1:af:b3:8d:6f:26:d4:ec: a1:e7:6e:80:67:25:ea:35:87:b9:83:1f:f8:e1:c4: 0d:1d:44:4d:0c:8f:ed:3e:37:73:0f:fb:53:9d:67: 85:28:ed:cd:c6:0b:9a:fc:2c:f6:07:80:0b:b1:ea: f5:fc:5a:38:cd:5c:69:51:ce:88:30:b7:92:5e:66: cd:b6:79:4f:ef:67:7a:24:5f:82:2b:21:24:f2:e4: 76:09:18:a8:fe:00:cc:d4:77:a8:16:08:29:0e:97: 3d:e9:c3:49:dc:78:84:5d:0b:0e:ef:61:19:07:af: 63:6d:9a:b1:28:96:3d:61:2e:9a:0b:0f:21:3a:11: 5c:42:e0:c4:28:dd:68:76:97:ec:e2:12:cf:a2:78: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:6E:20:6E:79:CA:F2:24:ED:03:5D:01:EE:D1:0F:72:F4:5F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl X509v3 Authority Key Identifier: keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:c4:a6:ed:a4:1b:18:8c:65:5b:eb:4f:13:9f:2d:e8:b6:f1: 31:5f:5f:60:71:21:f9:77:d8:34:90:66:35:50:26:8d:ea:6e: 8e:c0:89:ba:5c:d0:ad:de:9e:e8:6f:28:4e:a1:c8:64:12:35: c3:69:d5:d7:3c:13:23:37:49:0d:ee:d1:77:1a:ce:1a:17:aa: 82:4b:b9:39:a2:ee:20:e6:bd:81:f0:53:e5:e5:ab:8a:35:49: d3:0a:83:a5:8c:b9:9c:f8:c0:f4:b9:31:3c:04:dc:cb:20:f3: f6:38:d9:4b:41:a5:14:18:1e:1a:d4:be:81:ac:61:36:da:5c: 6d:1b:d2:af:c8:f9:2d:c1:3f:13:9b:b2:7c:43:dd:00:5f:87: dc:7d:2b:40:de:f6:3e:80:ab:0f:75:47:a5:ff:8e:af:2a:ce: ae:73:63:0e:0f:96:a2:c1:74:29:c3:03:28:d4:48:e5:db:0e: ee:a4:f2:48:7b:91:6b:ff:8b:ee:a8:99:47:e9:40:8b:5b:e0: dd:fb:1d:ba:4b:95:61:da:ee:4e:32:8c:bb:e0:45:95:2f:a5: 35:31:f1:00:76:5f:9c:23:6f:c4:3c:3d:f0:3b:0f:01:fe:8b: 06:b6:27:c2:92:70:77:fa:18:2a:d1:dd:ba:5f:3c:0a:1d:bf: 28:da:c9:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2qho6QzWB4iSQtIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5 ZTE0MB4XDTI2MDQyOTEwMDAwM1oXDTI2MDUwMjEwMDAwMFowLzEtMCsGA1UEAxMk Nzg0NmRkM2EtOTVjYi00NDE0LWFmMjktMjZmM2U4M2EzMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb/HnJS7K5BQzKmypNQvN90c2FpOwZlA1IQg w9U8hlAUbJSRF8picteXHxmAwwN6PzG5QmdLZxmtXO5hGQrfchzpXkpb+QwqjU6v jzaJ58I33X+Ah2vUp2towhzbvLS6hxSkIgIDvgrzCTTNro0Z8a+zjW8m1Oyh526A ZyXqNYe5gx/44cQNHURNDI/tPjdzD/tTnWeFKO3Nxgua/Cz2B4ALser1/Fo4zVxp Uc6IMLeSXmbNtnlP72d6JF+CKyEk8uR2CRio/gDM1HeoFggpDpc96cNJ3HiEXQsO 72EZB69jbZqxKJY9YS6aCw8hOhFcQuDEKN1odpfs4hLPonh+JQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNjDbiBuecryJO0DXQHu0Q9y9F/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvM2Y4Y2U5MzctYjY1Yy00 ODg5LThhM2MtMTQ1ZDcxOTQ5ZTE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0 OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk NzE5NDllMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC6xKbtpBsYjGVb608Tny3o tvExX19gcSH5d9g0kGY1UCaN6m6OwIm6XNCt3p7obyhOochkEjXDadXXPBMjN0kN 7tF3Gs4aF6qCS7k5ou4g5r2B8FPl5auKNUnTCoOljLmc+MD0uTE8BNzLIPP2ONlL QaUUGB4a1L6BrGE22lxtG9KvyPktwT8Tm7J8Q90AX4fcfStA3vY+gKsPdUel/46v Ks6uc2MOD5aiwXQpwwMo1Ejl2w7upPJIe5Fr/4vuqJlH6UCLW+Dd+x26S5Vh2u5O Moy74EWVL6U1MfEAdl+cI2/EPD3wOw8B/osGtifCknB3+hgq0d26XzwKHb8o2snw -----END CERTIFICATE-----Generated at Wed Apr 29 14:36:01 2026 by rpki-client