$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft File: 3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft (raw, json) Hash identifier: 5NJei3uoGuxqcI6nrNOdTNvYxKMtcFHTI5L7t2JKrvk= Subject key identifier: 56:5C:D1:20:EF:7D:D3:D8:3F:04:51:18:FF:F7:34:17:1F:B3:EC:AA Authority key identifier: 91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA Certificate issuer: /CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19 Certificate serial: 010D0C9F4328584D7BFF274D1F70B7920A9C2680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft Manifest number: 010D0C9F4328584BB22FE819BEB25ACDBDD81D2A Signing time: Sun 12 Apr 2026 18:00:03 +0000 Manifest this update: Sun 12 Apr 2026 18:00:03 +0000 Manifest next update: Wed 15 Apr 2026 18:00:00 +0000 Files and hashes: 1: 30bd9f78-f7ca-3103-8b20-13a228c2ef2f.roa (hash: fgfBWkQmOoJGLSM65aNaMhTrQe6SVw6p97gmAjQsXxU=) 2: 3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl (hash: VHYRrCt9drPcFesNEwEiPBiqQCDPF7CR9QgUox1zRtc=) 3: 376df6f5-a235-341a-9edd-7f05fa6ea0a1.roa (hash: Ly1DeCqJ1T0dUAR6IDZ2Ht0AcuEohM8mrhGA92l4eLY=) 4: e93b34e6-9cb0-3bfc-8467-91d67706f31e.roa (hash: R5Ypn2uvQOOQ+Y/7wWZ3wejpAMLxLzrvdmEqB61WDLc=) 5: ee5442f0-2739-340d-b087-f18695c6629e.roa (hash: lhGiKKNU9vmRGXNgtS/hEW81bjf+jBGxn+VY3i1ciUA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:ff:27:4d:1f:70:b7:92:0a:9c:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19 Validity Not Before: Apr 12 18:00:03 2026 GMT Not After : Apr 15 18:00:00 2026 GMT Subject: CN=8aac4702-4a9f-4abe-8ed1-bba7c25148fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:81:31:df:40:b4:19:5d:62:4d:de:ff:16: e4:91:c2:f7:e4:bf:ba:3e:fe:3b:6b:11:14:82:c0: 33:63:25:38:d4:12:9b:c2:c0:0a:ac:b0:aa:98:50: b5:39:ed:f3:3b:a9:71:4f:25:e2:6c:f5:c2:92:6f: 77:81:ed:0f:4c:53:fe:72:8e:76:fa:ba:d6:fb:fa: e4:af:5d:e2:e5:9c:58:ed:7d:f7:78:2f:81:9b:63: 62:67:32:9d:be:95:b5:cd:0c:70:0f:db:d0:86:59: d5:a1:65:f6:d7:74:1e:dc:5b:ea:db:f1:55:0e:85: 6e:70:56:e6:54:d2:ee:91:db:51:d0:ff:01:65:84: 47:61:59:3e:01:08:4e:2b:fe:ea:78:72:48:fe:90: 4a:d8:23:57:b9:77:f0:e3:13:be:31:ec:b6:f0:4f: 82:2f:f6:7c:19:22:fb:17:ca:dd:c9:37:a4:78:75: 6f:f2:61:04:c7:00:b1:33:7d:2e:5f:e4:e0:af:46: 23:06:15:28:7c:a0:75:c5:ea:2f:74:4e:db:db:2b: e7:bf:18:8a:c7:8a:e3:61:dc:51:d9:5b:6f:c9:45: a5:48:22:97:6e:63:16:e7:72:29:89:fa:f2:c7:1e: f7:db:4d:a1:bf:56:9e:0b:2f:0a:bd:81:18:14:e8: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:D1:20:EF:7D:D3:D8:3F:04:51:18:FF:F7:34:17:1F:B3:EC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl X509v3 Authority Key Identifier: keyid:91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:59:31:39:36:c1:5f:57:ae:8a:4c:49:b7:b5:88:49:91:df: 76:50:48:c0:42:6a:ba:15:c4:31:00:42:cf:58:e2:df:c4:fb: ed:d5:6d:82:40:57:6f:e2:3e:55:f5:e3:44:44:29:ac:ff:fc: 95:be:64:b6:35:77:ba:4c:26:f6:00:06:f4:8e:46:28:de:fa: 22:e0:20:0b:ad:20:35:60:2f:c9:52:cd:dc:df:31:12:15:c3: ba:9a:77:5f:dd:8a:45:a5:aa:e7:9c:c6:7a:6a:db:82:0d:b9: b5:36:8d:a7:11:b5:8c:eb:e6:7d:ac:fc:81:af:4e:7c:4a:d2: 6f:ba:39:aa:ea:2b:17:a2:1d:e1:a8:d0:a6:19:f7:b5:95:bb: 11:e3:cc:63:41:c2:ba:a5:47:b8:5d:e5:5e:c5:5d:c7:12:08: 5f:25:56:d5:ad:56:14:e1:30:d5:c2:90:8a:da:62:22:51:a9: a1:e8:a2:71:08:d7:72:18:60:2a:4f:d4:7c:02:8b:49:43:58: b3:41:1c:27:9b:f0:de:3b:86:09:ea:a5:e1:7a:fc:f3:5d:d5: a6:19:c9:f1:e8:18:7f:80:d8:fb:98:23:f2:d2:88:35:8d:c9: 07:18:c1:0f:3d:de:1b:11:04:dd:fa:ac:8d:78:02:08:1d:0b: ef:3c:85:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE17/ydNH3C3kgqcJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUyNWQwMjQtOGJjNy00YjhkLWIzM2EtNDBlZjFjOGZh YTE5MB4XDTI2MDQxMjE4MDAwM1oXDTI2MDQxNTE4MDAwMFowLzEtMCsGA1UEAxMk OGFhYzQ3MDItNGE5Zi00YWJlLThlZDEtYmJhN2MyNTE0OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqCBMd9AtBldYk3e/xbkkcL35L+6Pv47axEU gsAzYyU41BKbwsAKrLCqmFC1Oe3zO6lxTyXibPXCkm93ge0PTFP+co52+rrW+/rk r13i5ZxY7X33eC+Bm2NiZzKdvpW1zQxwD9vQhlnVoWX213Qe3Fvq2/FVDoVucFbm VNLukdtR0P8BZYRHYVk+AQhOK/7qeHJI/pBK2CNXuXfw4xO+Mey28E+CL/Z8GSL7 F8rdyTekeHVv8mEExwCxM30uX+Tgr0YjBhUofKB1xeovdE7b2yvnvxiKx4rjYdxR 2VtvyUWlSCKXbmMW53Ipifryxx73202hv1aeCy8KvYEYFOhhgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFZc0SDvfdPYPwRRGP/3NBcfs+yqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNTI1 ZDAyNC04YmM3LTRiOGQtYjMzYS00MGVmMWM4ZmFhMTkvMzUyNWQwMjQtOGJjNy00 YjhkLWIzM2EtNDBlZjFjOGZhYTE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzUyNWQwMjQtOGJjNy00YjhkLWIz M2EtNDBlZjFjOGZhYTE5LzM1MjVkMDI0LThiYzctNGI4ZC1iMzNhLTQwZWYxYzhm YWExOS5jcmwwHwYDVR0jBBgwFoAUkR2cmhGb4HAtSKJ5oQncq1xKcNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNTI1ZDAyNC04YmM3LTRiOGQtYjMzYS00MGVm MWM4ZmFhMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDWTE5NsFfV66KTEm3tYhJ kd92UEjAQmq6FcQxAELPWOLfxPvt1W2CQFdv4j5V9eNERCms//yVvmS2NXe6TCb2 AAb0jkYo3voi4CALrSA1YC/JUs3c3zESFcO6mndf3YpFparnnMZ6atuCDbm1No2n EbWM6+Z9rPyBr058StJvujmq6isXoh3hqNCmGfe1lbsR48xjQcK6pUe4XeVexV3H EghfJVbVrVYU4TDVwpCK2mIiUamh6KJxCNdyGGAqT9R8AotJQ1izQRwnm/DeO4YJ 6qXhevzzXdWmGcnx6Bh/gNj7mCPy0og1jckHGMEPPd4bEQTd+qyNeAIIHQvvPIVW -----END CERTIFICATE-----Generated at Mon Apr 13 10:34:28 2026 by rpki-client