$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft File: 3299f656-5665-469b-8729-13b669bb2153.mft (raw, json) Hash identifier: N2D2olHu9jTvnQ5NNcZN7llot8H5LRmDS0rckPvOCCQ= Subject key identifier: B0:20:1D:2D:AA:4F:DE:D0:2C:D2:1F:1D:25:B6:45:D6:A8:4E:FB:A1 Authority key identifier: 19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63 Certificate issuer: /CN=3299f656-5665-469b-8729-13b669bb2153 Certificate serial: 010D0C9F4328584D845F3855657B38AF03B32500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft Manifest number: 010D0C9F432858493B4E3F09445C2A18040FF7A2 Signing time: Wed 15 Apr 2026 18:00:03 +0000 Manifest this update: Wed 15 Apr 2026 18:00:03 +0000 Manifest next update: Fri 17 Apr 2026 18:00:00 +0000 Files and hashes: 1: 294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa (hash: QndiI49holv4G9rOzH2cEIE5H6KKpTU3svK4n4p6kbk=) 2: 3299f656-5665-469b-8729-13b669bb2153.crl (hash: EPw6hMCKhNWu+KVjoif/rDW+jv8WM6zh6OKuE0V6sh8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:84:5f:38:55:65:7b:38:af:03:b3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3299f656-5665-469b-8729-13b669bb2153 Validity Not Before: Apr 15 18:00:03 2026 GMT Not After : Apr 17 18:00:00 2026 GMT Subject: CN=8b679197-dfa0-4200-82aa-c6b818c7bdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:4b:38:9b:df:93:1f:21:c9:cd:6c:b9:c5: 2d:49:59:11:30:dc:16:7a:b7:23:74:d0:1d:21:d6: 8e:b7:63:c2:1e:12:f0:4d:85:9c:2b:69:52:29:0b: 30:3f:8b:7e:07:74:2d:43:93:8a:1e:87:92:0f:8a: a7:b0:fd:ac:a7:a3:71:6c:7d:b2:56:8c:31:85:47: 4d:2b:8d:31:15:54:b9:89:dc:09:a9:a5:f1:bf:98: 69:85:74:9a:e8:f4:47:3c:b6:d6:9b:12:60:46:1b: c4:1f:23:12:57:df:d7:73:2b:ee:ea:dd:0a:7b:88: 3b:ec:9a:77:82:93:85:a6:bd:4d:ab:e4:81:1b:2c: c8:1b:72:c5:a1:7d:20:35:87:3d:c0:02:09:d4:ce: ee:9f:04:f6:3b:e6:c1:a8:4b:03:c3:74:d7:c0:28: bf:10:20:6f:52:90:8e:38:0e:1e:2b:4d:ac:ab:8c: 22:76:1d:d5:81:6a:01:ba:06:d1:67:f4:9b:06:2e: 33:ce:40:3b:25:59:46:3e:49:65:bf:8d:be:8b:89: 52:fd:b5:f6:88:49:0b:64:e1:50:20:4c:7a:0b:1b: 3e:a9:6c:4d:73:b9:42:63:d5:1f:6c:18:58:e8:3a: 09:e8:ce:a1:34:fe:88:0e:f7:e8:31:f1:ff:d4:40: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:1D:2D:AA:4F:DE:D0:2C:D2:1F:1D:25:B6:45:D6:A8:4E:FB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl X509v3 Authority Key Identifier: keyid:19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:84:4b:ef:c3:99:33:b6:57:4a:9b:cd:62:c2:88:e4:f1:bf: 8a:cc:84:4f:1b:ea:3c:31:5f:14:21:f5:00:2b:3d:c2:bd:4c: 25:c3:79:c3:8d:24:0c:ff:1e:b8:55:ff:26:60:2e:0d:06:5f: d9:b0:29:69:11:c8:1e:b6:92:51:a4:f3:28:71:df:a8:e4:a8: aa:15:50:53:c7:39:16:2b:62:80:53:4e:93:2a:28:04:f8:14: 8c:f4:0b:71:4c:80:ac:37:2e:3c:67:c1:df:5c:63:b6:f2:50: 8e:00:1b:78:c9:68:d6:e1:09:9d:db:08:dc:34:f4:e2:e0:39: 51:c0:2f:2b:67:0e:cd:4c:cf:fc:57:41:0e:ec:97:c2:69:25: 39:69:2c:78:10:3f:d5:fa:40:56:3e:5c:bc:b9:51:7d:30:22: c9:bc:1d:7f:fb:21:7b:81:3a:fb:65:bb:5f:29:0d:9e:da:ee: 5b:e6:fb:06:8a:34:67:25:3f:c7:f9:95:93:40:37:38:92:d0: 86:85:53:f0:5a:ce:d6:dd:a8:2f:d5:5c:5a:15:c6:2d:a2:66: 43:2e:b7:8d:ee:65:9e:39:8f:8f:14:a6:a2:76:36:80:42:57: 41:b4:83:0d:be:e3:11:59:ef:42:ff:6d:ca:fd:d8:cc:ae:47: a4:bb:02:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2EXzhVZXs4rwOzJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5OWY2NTYtNTY2NS00NjliLTg3MjktMTNiNjY5YmIy MTUzMB4XDTI2MDQxNTE4MDAwM1oXDTI2MDQxNzE4MDAwMFowLzEtMCsGA1UEAxMk OGI2NzkxOTctZGZhMC00MjAwLTgyYWEtYzZiODE4YzdiZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle9LOJvfkx8hyc1sucUtSVkRMNwWercjdNAd IdaOt2PCHhLwTYWcK2lSKQswP4t+B3QtQ5OKHoeSD4qnsP2sp6NxbH2yVowxhUdN K40xFVS5idwJqaXxv5hphXSa6PRHPLbWmxJgRhvEHyMSV9/Xcyvu6t0Ke4g77Jp3 gpOFpr1Nq+SBGyzIG3LFoX0gNYc9wAIJ1M7unwT2O+bBqEsDw3TXwCi/ECBvUpCO OA4eK02sq4widh3VgWoBugbRZ/SbBi4zzkA7JVlGPkllv42+i4lS/bX2iEkLZOFQ IEx6Cxs+qWxNc7lCY9UfbBhY6DoJ6M6hNP6IDvfoMfH/1EAm+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLAgHS2qT97QLNIfHSW2RdaoTvuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjk5 ZjY1Ni01NjY1LTQ2OWItODcyOS0xM2I2NjliYjIxNTMvMzI5OWY2NTYtNTY2NS00 NjliLTg3MjktMTNiNjY5YmIyMTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI5OWY2NTYtNTY2NS00NjliLTg3 MjktMTNiNjY5YmIyMTUzLzMyOTlmNjU2LTU2NjUtNDY5Yi04NzI5LTEzYjY2OWJi MjE1My5jcmwwHwYDVR0jBBgwFoAUGRM7HR1eZ5k1QsfcC6zSG4kLdGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjk5ZjY1Ni01NjY1LTQ2OWItODcyOS0xM2I2 NjliYjIxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNhEvvw5kztldKm81iwojk 8b+KzIRPG+o8MV8UIfUAKz3CvUwlw3nDjSQM/x64Vf8mYC4NBl/ZsClpEcgetpJR pPMocd+o5KiqFVBTxzkWK2KAU06TKigE+BSM9AtxTICsNy48Z8HfXGO28lCOABt4 yWjW4Qmd2wjcNPTi4DlRwC8rZw7NTM/8V0EO7JfCaSU5aSx4ED/V+kBWPly8uVF9 MCLJvB1/+yF7gTr7ZbtfKQ2e2u5b5vsGijRnJT/H+ZWTQDc4ktCGhVPwWs7W3agv 1VxaFcYtomZDLreN7mWeOY+PFKaidjaAQldBtIMNvuMRWe9C/23K/djMrkekuwLK -----END CERTIFICATE-----Generated at Thu Apr 16 02:13:40 2026 by rpki-client