$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: pSbpFjS5MTTRwTFP+ay4hKpAHj0ghqIjhthYqDFZ5H8= Subject key identifier: F0:F1:38:6F:4E:C6:60:A4:43:20:F8:74:63:85:2A:F1:DF:39:FA:B7 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584D81B24DE78F1EA022C2AF4180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A8AB Signing time: Tue 14 Apr 2026 19:00:03 +0000 Manifest this update: Tue 14 Apr 2026 19:00:03 +0000 Manifest next update: Fri 17 Apr 2026 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: QVUQrxHSPTbWojYG+aeHpI8ns30LIjkmVr9Cx3SupCI=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: JOcSktPJau5cC2ghfKoPAYcMJte2rUNbqDNQOsgcrM0=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: u7C3imds6wSENZSO6Ugdvto5e2g0yKgRLmrjaB/ZKa0=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: Ht+nmjyKyhPz8JXCEahwh/5awWsbMR2ZQGWKk8WL+ps=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:b2:4d:e7:8f:1e:a0:22:c2:af:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Apr 14 19:00:03 2026 GMT Not After : Apr 17 19:00:00 2026 GMT Subject: CN=1252df40-7db3-4cb8-81ff-bfdafa86fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:03:5b:d9:71:22:59:f9:da:44:65:e9:0f:af: 64:56:f7:0f:98:52:6a:38:63:0b:a1:b0:1a:2e:8f: 75:cf:88:65:4b:c5:77:64:98:c7:70:e0:7f:8e:01: 73:88:f3:fb:43:b8:df:11:dc:e6:58:9a:b1:4c:34: 0d:0a:b9:c0:d1:23:c2:11:34:32:14:2e:cc:07:3b: f0:03:0e:0a:0d:67:32:93:f2:d3:5f:ab:34:f2:6d: 7c:f3:53:a7:9c:b6:03:e9:e5:20:e6:48:57:65:8f: 6b:5c:98:38:73:27:e6:fc:20:78:08:9e:03:c6:66: a8:19:a5:3e:18:88:57:4b:e4:54:f3:6f:3d:22:5d: 47:a2:90:38:ec:fd:b4:db:e7:2a:d6:64:6d:cd:f8: 50:7a:8a:71:e2:56:b0:62:57:44:d0:02:c0:01:3a: 8f:d7:91:7f:a1:b7:0c:c8:d4:5e:ed:46:47:5a:28: 4b:5f:91:40:84:6a:cd:b0:1d:de:c6:87:bf:4a:e2: 04:23:e1:92:06:30:f5:5b:77:20:9e:14:e6:66:59: bd:a4:3d:99:e7:05:a0:eb:b9:a5:d8:72:eb:6e:a1: e4:c2:71:3f:78:66:3a:f7:ca:5f:db:07:75:10:67: 5e:51:41:93:db:19:2a:7d:64:be:af:bb:c6:21:c0: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:38:6F:4E:C6:60:A4:43:20:F8:74:63:85:2A:F1:DF:39:FA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:97:aa:b2:5b:37:ec:a8:52:57:7a:63:a4:30:84:36:e5:08: f4:df:87:8e:96:33:65:e2:4b:ca:07:03:85:27:79:e1:88:19: ee:f2:f0:16:3e:cb:93:45:d6:ab:29:d6:34:e6:53:7f:83:03: 25:22:83:1d:29:45:61:86:df:f5:2b:c2:2a:c5:3d:74:44:2d: 09:06:60:4c:0a:dd:9e:47:71:b6:f1:09:8c:09:29:04:03:6d: e9:8a:2c:21:8a:b6:b2:ec:83:dc:92:3c:c5:e5:83:4b:4a:b6: eb:e8:10:90:74:e6:23:b8:9d:84:5c:93:30:49:38:2e:c8:28: 9d:02:f2:3d:99:db:77:74:0f:76:56:93:b9:da:ee:cf:8c:11: 8a:5f:1b:62:dd:bf:70:0f:ba:b4:1f:dd:67:6e:52:8d:76:7f: 16:5f:57:49:f1:95:90:1f:9d:2b:22:4d:a9:a7:52:9d:01:05: 02:0d:bb:7c:57:62:3e:6d:2c:7a:71:d0:d2:dc:7c:a9:29:a8: 41:a2:27:85:3a:93:6d:40:a7:bd:2c:a3:61:2e:87:f0:82:cd: 24:e1:ef:bf:3b:6f:0c:c9:77:95:84:1d:b9:57:66:28:73:29: f1:8c:1d:b1:55:c4:08:2f:5d:5f:1c:40:68:7c:b1:08:d7:49: d8:4f:8c:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Bsk3njx6gIsKvQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI2MDQxNDE5MDAwM1oXDTI2MDQxNzE5MDAwMFowLzEtMCsGA1UEAxMk MTI1MmRmNDAtN2RiMy00Y2I4LTgxZmYtYmZkYWZhODZmZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwNb2XEiWfnaRGXpD69kVvcPmFJqOGMLobAa Lo91z4hlS8V3ZJjHcOB/jgFziPP7Q7jfEdzmWJqxTDQNCrnA0SPCETQyFC7MBzvw Aw4KDWcyk/LTX6s08m1881OnnLYD6eUg5khXZY9rXJg4cyfm/CB4CJ4DxmaoGaU+ GIhXS+RU8289Il1HopA47P202+cq1mRtzfhQeopx4lawYldE0ALAATqP15F/obcM yNRe7UZHWihLX5FAhGrNsB3exoe/SuIEI+GSBjD1W3cgnhTmZlm9pD2Z5wWg67ml 2HLrbqHkwnE/eGY698pf2wd1EGdeUUGT2xkqfWS+r7vGIcCQ/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPDxOG9OxmCkQyD4dGOFKvHfOfq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKl6qyWzfsqFJXemOkMIQ2 5Qj034eOljNl4kvKBwOFJ3nhiBnu8vAWPsuTRdarKdY05lN/gwMlIoMdKUVhht/1 K8IqxT10RC0JBmBMCt2eR3G28QmMCSkEA23piiwhiray7IPckjzF5YNLSrbr6BCQ dOYjuJ2EXJMwSTguyCidAvI9mdt3dA92VpO52u7PjBGKXxti3b9wD7q0H91nblKN dn8WX1dJ8ZWQH50rIk2pp1KdAQUCDbt8V2I+bSx6cdDS3HypKahBoieFOpNtQKe9 LKNhLofwgs0k4e+/O28MyXeVhB25V2YocynxjB2xVcQIL11fHEBofLEI10nYT4zO -----END CERTIFICATE-----Generated at Wed Apr 15 14:36:48 2026 by rpki-client