$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: D68K93nBRIpAVYsuofR2vTN85QV7day5W8r4rUysN2g= Subject key identifier: 67:CF:59:8B:5B:BA:7F:30:34:E7:B7:E1:40:A5:16:CD:14:B7:4A:5D Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584D9325131CE782812592CAB380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91AC73 Signing time: Tue 21 Apr 2026 01:00:03 +0000 Manifest this update: Tue 21 Apr 2026 01:00:03 +0000 Manifest next update: Fri 24 Apr 2026 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: HVyxKq/t7U8xXd3Ygzce99cMIzVd+Fm+uC65pBW8wzk=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: DBgXHQaB1+r0OIv0qZKmNJmG7sn9PJd0JwsbOz+M2Tc=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: 7UR8vtBsVqvOAxjymFRZQ/GsuAbbzi84Jx7XQ4i/8Jo=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: sPjOFuBo+GyTCDz4Te2t6o7Ug4S3mUoKp7N7aDzOJv4=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: lbHpxqDCLqB43MMUlhJNsrB8YEmaIhdIMeVHMn/tYaM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:13:1c:e7:82:81:25:92:ca:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Apr 21 01:00:03 2026 GMT Not After : Apr 24 01:00:00 2026 GMT Subject: CN=9218b2f7-2898-47f2-ab24-539673c38570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:ff:d5:f0:84:8e:9e:80:ec:db:8a:08:8d: c9:6e:92:4a:15:75:22:0d:32:da:2f:dd:03:39:a8: ef:1d:f5:ac:e6:27:5c:c7:94:6a:fc:04:44:87:9c: eb:ea:59:34:68:8d:2d:17:69:34:b3:24:93:6b:01: d3:26:78:da:df:07:ce:b2:dd:ad:d3:5e:c9:3b:7c: 2f:22:df:43:0e:c0:c0:c5:32:95:67:8e:f4:32:36: b2:fc:76:1c:0e:d7:8e:d6:39:13:26:d7:ef:64:8a: ac:38:82:a0:df:68:94:91:e7:c9:b9:63:9c:b4:4d: 5c:5c:cd:dd:b7:86:7f:38:50:fe:4e:e0:f5:b0:ba: 16:cd:f1:6f:64:98:83:82:c4:f2:56:90:53:ec:d1: 68:80:70:3f:b9:4d:a0:32:60:4f:bb:03:76:e3:68: 62:55:59:c1:04:4d:2f:0a:ea:37:1e:51:91:86:48: 67:73:c3:7f:0c:99:7e:cb:64:c6:8d:de:63:9d:23: d3:18:fc:af:ae:5c:de:7b:6f:4a:23:49:fe:d9:a2: c0:fd:da:41:e6:71:d2:ca:c3:6f:dd:2b:0a:8c:13: ea:04:63:92:92:42:78:60:60:e7:b3:eb:28:9a:d8: 88:a5:d3:85:6f:fe:42:b6:fb:bf:bc:21:de:07:04: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CF:59:8B:5B:BA:7F:30:34:E7:B7:E1:40:A5:16:CD:14:B7:4A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4f:a1:9f:0a:59:b7:68:12:b9:18:74:fa:b3:46:f8:fe:4e: 95:75:9a:d5:69:0e:cd:ff:aa:a9:17:5b:01:5b:f8:89:55:97: 06:af:e6:f1:52:6e:1a:93:c0:5d:6a:be:20:85:2b:8b:bf:e2: 16:c4:ed:90:8d:3b:2a:1e:b5:f1:c8:93:1c:3a:a4:db:38:8a: 77:98:6b:76:24:1b:7f:2c:bd:3c:3d:58:88:0e:c7:f4:40:74: 55:9c:5f:c9:46:49:de:90:e1:ac:9a:96:60:53:7c:26:17:2a: 55:ba:39:10:26:fa:ab:56:8b:71:e0:ac:35:c8:69:ce:d2:87: b7:d1:5c:3e:00:1e:e0:74:9a:08:0f:5b:22:cb:2e:fd:b6:3a: 0f:3f:14:b6:73:64:13:b6:ab:3e:01:43:64:44:18:99:de:9f: 8e:d2:cf:81:0b:2e:1b:3b:a3:e2:4c:ac:ac:e6:91:f8:73:8c: 6f:c4:cc:d9:da:ef:21:fe:55:b5:5a:d8:78:96:f7:c8:23:08: c1:86:10:a0:28:78:80:25:20:82:dc:87:9f:51:f9:99:1b:bd: bd:a0:4e:1d:06:21:c4:c3:ab:b9:2a:50:65:5b:e7:00:11:8c: 6a:a2:b9:2d:fc:1e:cc:cf:54:8c:f0:26:65:f3:2f:ab:59:90: 90:a8:cf:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2TJRMc54KBJZLKs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI2MDQyMTAxMDAwM1oXDTI2MDQyNDAxMDAwMFowLzEtMCsGA1UEAxMk OTIxOGIyZjctMjg5OC00N2YyLWFiMjQtNTM5NjczYzM4NTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9H/1fCEjp6A7NuKCI3JbpJKFXUiDTLaL90D OajvHfWs5idcx5Rq/AREh5zr6lk0aI0tF2k0sySTawHTJnja3wfOst2t017JO3wv It9DDsDAxTKVZ470Mjay/HYcDteO1jkTJtfvZIqsOIKg32iUkefJuWOctE1cXM3d t4Z/OFD+TuD1sLoWzfFvZJiDgsTyVpBT7NFogHA/uU2gMmBPuwN242hiVVnBBE0v Cuo3HlGRhkhnc8N/DJl+y2TGjd5jnSPTGPyvrlzee29KI0n+2aLA/dpB5nHSysNv 3SsKjBPqBGOSkkJ4YGDns+somtiIpdOFb/5Ctvu/vCHeBwTXmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGfPWYtbun8wNOe34UClFs0Ut0pdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQT6GfClm3aBK5GHT6s0b4 /k6VdZrVaQ7N/6qpF1sBW/iJVZcGr+bxUm4ak8Bdar4ghSuLv+IWxO2QjTsqHrXx yJMcOqTbOIp3mGt2JBt/LL08PViIDsf0QHRVnF/JRknekOGsmpZgU3wmFypVujkQ JvqrVotx4Kw1yGnO0oe30Vw+AB7gdJoID1siyy79tjoPPxS2c2QTtqs+AUNkRBiZ 3p+O0s+BCy4bO6PiTKys5pH4c4xvxMzZ2u8h/lW1Wth4lvfIIwjBhhCgKHiAJSCC 3IefUfmZG729oE4dBiHEw6u5KlBlW+cAEYxqorkt/B7Mz1SM8CZl8y+rWZCQqM/m -----END CERTIFICATE-----Generated at Wed Apr 22 01:46:10 2026 by rpki-client