$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft File: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft (raw, json) Hash identifier: lLr6XiFGB1JJe05lT554ApNT/9Q4VRrn+ta6dn4Z0WM= Subject key identifier: 72:BD:15:C7:D8:A3:24:B8:0C:BC:EC:92:DA:4F:8B:C1:33:44:57:C2 Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 Certificate issuer: /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Certificate serial: 010D0C9F4328584DA86E8D6F4FA2EE6CBB019E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft Manifest number: 010D0C9F43285846A2A5DF805C012DA5D578D214 Signing time: Tue 28 Apr 2026 16:00:04 +0000 Manifest this update: Tue 28 Apr 2026 16:00:04 +0000 Manifest next update: Fri 01 May 2026 16:00:00 +0000 Files and hashes: 1: a082d65c-6976-35d6-be33-792a4918c345.roa (hash: CZY9hfLDjk4PMLIi45ZZahAqntD93WTbMb1cKwZIreA=) 2: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl (hash: nUxp5OsIBeeJf+HbBhg1YY6dH+CVT6ahgoEQQm8Usgw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:6e:8d:6f:4f:a2:ee:6c:bb:01:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Validity Not Before: Apr 28 16:00:04 2026 GMT Not After : May 1 16:00:00 2026 GMT Subject: CN=35ec0952-581e-4b37-8997-0d6a1171e4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:f0:fa:3c:51:28:f6:57:13:fe:8e:f1:28: 49:af:94:1e:82:36:1d:6e:8a:03:15:db:53:a1:85: c3:39:ed:38:1a:98:1b:47:87:a4:dd:8b:df:69:e3: 1d:bf:8c:41:63:2a:cd:a3:0f:ab:1c:3a:2c:b0:c4: e2:ea:c3:91:17:d5:43:ac:87:07:8c:8c:e9:f4:ce: c4:d0:53:d9:91:ce:e8:e0:c4:6d:b0:c7:91:ff:81: f5:97:b4:ec:22:a3:13:c9:27:5b:32:0b:b6:e4:f1: 88:5e:61:64:ed:5f:04:30:a8:d8:ec:6e:58:17:61: 83:9b:20:21:17:a2:bb:a2:a1:7b:bf:d9:0a:fa:72: 29:10:c3:98:9c:f0:90:cb:b5:ba:7b:20:6e:43:52: 27:8c:e7:65:3c:94:ae:a7:75:0f:00:4a:41:b1:54: 96:97:56:5a:00:97:b2:4a:bb:38:54:d4:cf:8c:1e: ee:4e:2b:86:aa:ff:d3:c6:35:09:56:75:53:c7:0c: 19:06:7c:44:d9:16:ad:21:61:08:3c:6a:61:4b:1e: e7:7a:e9:ce:89:1c:a4:87:90:09:52:c1:a2:ff:9d: 76:1e:ca:18:f7:bc:cc:a1:cd:5d:0f:89:8f:73:99: dd:be:70:7e:80:5f:06:dc:12:af:cb:73:45:4d:11: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:15:C7:D8:A3:24:B8:0C:BC:EC:92:DA:4F:8B:C1:33:44:57:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl X509v3 Authority Key Identifier: keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:db:88:b0:41:28:a2:b2:d1:f9:1d:36:38:6c:63:2a:de:11: d0:4f:22:39:44:32:6a:6f:6a:cf:2f:fd:67:91:be:e6:5b:15: 0f:1d:e7:c6:cd:32:90:0b:fa:05:5c:6e:45:35:9f:03:09:b9: 25:67:db:bf:88:f2:6d:2b:68:8b:34:2c:72:89:a8:bc:fe:87: 18:f9:d4:91:9b:0b:b4:2a:9b:7c:2d:4c:91:bb:50:66:1b:44: bc:16:da:56:a1:aa:b1:cb:bd:d4:71:48:91:12:45:ee:7e:81: 26:9d:87:06:9b:a6:3b:3b:32:5d:92:ae:a3:79:5f:0e:64:9b: cb:24:d7:df:11:c5:60:98:ab:a3:df:33:23:e0:c0:6a:1a:15: f0:d0:5b:ff:c1:7e:77:85:42:08:38:8d:68:9a:a4:7e:50:52: fb:ab:93:54:2b:2a:e5:a2:52:ca:aa:40:7b:3f:89:7d:49:a9: 86:0d:01:e5:74:64:5d:98:8a:77:9e:2f:8d:77:d1:cb:e0:19: 05:e8:17:fc:82:0b:1c:77:ab:0e:8e:f4:7f:85:45:7d:c2:9c: a9:72:14:08:d6:7f:af:0e:45:39:70:cb:f5:d7:e5:9a:62:18: 6b:b2:58:97:f3:55:35:56:67:e8:34:c4:66:e3:fc:10:85:b7: e2:42:73:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2obo1vT6LubLsBngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM5ODdhMDItOWViMy00Zjg4LThlOWEtMmJhNTUwYzM0 NDNiMB4XDTI2MDQyODE2MDAwNFoXDTI2MDUwMTE2MDAwMFowLzEtMCsGA1UEAxMk MzVlYzA5NTItNTgxZS00YjM3LTg5OTctMGQ2YTExNzFlNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdHw+jxRKPZXE/6O8ShJr5QegjYdbooDFdtT oYXDOe04GpgbR4ek3YvfaeMdv4xBYyrNow+rHDossMTi6sORF9VDrIcHjIzp9M7E 0FPZkc7o4MRtsMeR/4H1l7TsIqMTySdbMgu25PGIXmFk7V8EMKjY7G5YF2GDmyAh F6K7oqF7v9kK+nIpEMOYnPCQy7W6eyBuQ1InjOdlPJSup3UPAEpBsVSWl1ZaAJey Srs4VNTPjB7uTiuGqv/TxjUJVnVTxwwZBnxE2RatIWEIPGphSx7neunOiRykh5AJ UsGi/512HsoY97zMoc1dD4mPc5ndvnB+gF8G3BKvy3NFTREiZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHK9FcfYoyS4DLzsktpPi8EzRFfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMzk4 N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1NTBjMzQ0M2IvYjM5ODdhMDItOWViMy00 Zjg4LThlOWEtMmJhNTUwYzM0NDNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjM5ODdhMDItOWViMy00Zjg4LThl OWEtMmJhNTUwYzM0NDNiL2IzOTg3YTAyLTllYjMtNGY4OC04ZTlhLTJiYTU1MGMz NDQzYi5jcmwwHwYDVR0jBBgwFoAUQFs2D+DwLAsH4BdLT6Rmei8vxBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMzk4N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1 NTBjMzQ0M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCS24iwQSiistH5HTY4bGMq 3hHQTyI5RDJqb2rPL/1nkb7mWxUPHefGzTKQC/oFXG5FNZ8DCbklZ9u/iPJtK2iL NCxyiai8/ocY+dSRmwu0Kpt8LUyRu1BmG0S8FtpWoaqxy73UcUiREkXufoEmnYcG m6Y7OzJdkq6jeV8OZJvLJNffEcVgmKuj3zMj4MBqGhXw0Fv/wX53hUIIOI1omqR+ UFL7q5NUKyrlolLKqkB7P4l9SamGDQHldGRdmIp3ni+Nd9HL4BkF6Bf8ggscd6sO jvR/hUV9wpypchQI1n+vDkU5cMv11+WaYhhrsliX81U1VmfoNMRm4/wQhbfiQnOb -----END CERTIFICATE-----Generated at Wed Apr 29 14:34:57 2026 by rpki-client