$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft File: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft (raw, json) Hash identifier: fNEdvhEk6Kls5fd2Pt/dzE0uQM5K5eTsFC234TR9cGg= Subject key identifier: 1B:69:CF:7C:9B:A0:0B:4E:5E:E3:2D:DF:B4:12:77:EC:60:77:8A:C5 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584D8C65F0E62FDE938127C6CE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft Manifest number: 010D0C9F432858480A52F9CC8E966E7AFF5A7B58 Signing time: Sat 18 Apr 2026 15:00:03 +0000 Manifest this update: Sat 18 Apr 2026 15:00:03 +0000 Manifest next update: Mon 20 Apr 2026 15:00:00 +0000 Files and hashes: 1: 018a088a-1bc5-39ce-a432-b15481e87054.roa (hash: qOZKSY3vHkeb8+iCx1Ft9JgXiZwlCoDKP2HvQFwf5kA=) 2: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (hash: roitIYvPruZZf2GwpJnluNGJqlbaFIejHWgBv8NcUCc=) 3: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl (hash: eSJEeiDDePNBU52srdn5XJeBpJ/FFcnkMVEX2W8U890=) 4: 481ae520-6967-3ac1-8b79-c8677bf7adfa.roa (hash: Fv00g5KtFHGl4gnbp/G/eB+Fzcjw9uF/8yDIZumQETM=) 5: 7ca41dda-e456-3247-b2ab-cfdb860809e0.roa (hash: nGusG6VJefgM/DhyhSgtbCrUsPYQwC1QAskQfS4DjI8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:65:f0:e6:2f:de:93:81:27:c6:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Apr 18 15:00:03 2026 GMT Not After : Apr 20 15:00:00 2026 GMT Subject: CN=02813450-c2cf-417c-8988-0f6e671b964e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:5d:42:3f:22:12:22:8e:0b:d4:6f:01:5e: 7c:24:0b:c1:4e:a3:f2:12:9b:96:e5:15:52:b3:41: 5a:95:39:e5:e7:1a:b4:31:0d:bc:f1:a4:28:ad:6c: d4:10:19:82:c5:8c:34:e1:86:26:96:37:d8:99:4c: e4:09:dc:c7:6c:b3:32:7c:17:2d:01:bd:2c:fa:57: 0b:b3:a0:00:0c:f8:f0:48:ba:dc:3d:5f:99:5e:82: 51:79:b4:4a:8b:1f:98:9f:b0:2f:a2:4f:55:8b:85: 65:87:9a:d7:a0:fa:a3:9e:fd:0e:77:79:a5:c6:58: 43:0b:9b:55:a9:34:2f:b1:0d:0e:ef:e4:87:23:53: 81:3c:e0:41:ec:c4:21:08:ed:42:52:4c:1a:39:fa: 3d:b3:cb:94:0b:87:e1:f8:af:9f:78:4f:1b:60:33: 33:d4:99:07:fb:24:68:56:24:86:74:1b:28:7a:21: e4:10:f8:c7:6e:78:11:81:cb:21:6c:fd:ef:b2:69: e3:f0:a0:96:a1:bd:27:93:e3:51:47:c8:94:a4:30: 99:80:45:36:37:a5:f5:e3:5d:fb:a3:7f:b1:18:84: 8b:bc:33:97:6f:4e:3a:0a:db:dd:be:b0:9f:58:da: f8:85:14:13:42:ca:75:7a:21:e6:d9:ba:57:66:ae: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:CF:7C:9B:A0:0B:4E:5E:E3:2D:DF:B4:12:77:EC:60:77:8A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d0:ff:41:48:17:ce:31:be:3f:09:0a:21:80:30:49:da:b2: 5e:a2:ad:c3:98:1e:ec:03:e1:a4:d9:63:63:35:88:7b:d1:40: b7:e0:5b:06:73:52:7a:20:58:9b:d8:5d:33:78:6a:ed:2c:88: 53:1d:33:d5:f7:13:3f:19:24:b8:fe:60:42:39:4e:e2:2d:99: 0a:b7:cb:62:94:ed:7a:df:9a:74:12:d1:26:47:5b:1e:8f:5a: f8:63:cd:b2:53:c6:7c:a3:dd:4d:4e:ac:64:e5:44:d6:7d:1c: 01:1a:d8:c3:c0:cc:84:24:0c:4c:00:f3:f9:c7:f8:fe:ed:48: 45:b0:51:6a:58:f0:86:91:06:1a:ea:65:32:d9:c6:68:2f:6a: 6e:0e:c9:c5:2c:4a:26:f7:f6:16:be:8f:a8:75:5f:6e:60:a7: ae:ee:69:9f:28:44:ec:97:5b:34:4b:b9:a2:a6:f2:5a:74:36: f1:9b:7d:ed:37:fb:49:97:33:b9:72:e3:d9:7b:f1:02:f2:32: 40:6d:7b:b5:9d:97:ab:33:91:14:d6:50:4f:1d:b3:77:c2:c0: d1:11:19:bf:29:d0:60:dc:c9:44:58:69:ea:98:79:10:98:45: 62:f4:d1:9a:97:ea:17:e3:19:e7:d6:5a:32:01:b6:67:48:d0: f8:9c:0b:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MZfDmL96TgSfGzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI2MDQxODE1MDAwM1oXDTI2MDQyMDE1MDAwMFowLzEtMCsGA1UEAxMk MDI4MTM0NTAtYzJjZi00MTdjLTg5ODgtMGY2ZTY3MWI5NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFBdQj8iEiKOC9RvAV58JAvBTqPyEpuW5RVS s0FalTnl5xq0MQ288aQorWzUEBmCxYw04YYmljfYmUzkCdzHbLMyfBctAb0s+lcL s6AADPjwSLrcPV+ZXoJRebRKix+Yn7Avok9Vi4Vlh5rXoPqjnv0Od3mlxlhDC5tV qTQvsQ0O7+SHI1OBPOBB7MQhCO1CUkwaOfo9s8uUC4fh+K+feE8bYDMz1JkH+yRo ViSGdBsoeiHkEPjHbngRgcshbP3vsmnj8KCWob0nk+NRR8iUpDCZgEU2N6X14137 o3+xGISLvDOXb046CtvdvrCfWNr4hRQTQsp1eiHm2bpXZq4z1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBtpz3yboAtOXuMt37QSd+xgd4rFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvM2E5NTlhYmEtZWY2OS00 YTU2LWFhNmItMWNhMWZhNWFmM2EwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAb0P9BSBfOMb4/CQohgDBJ 2rJeoq3DmB7sA+Gk2WNjNYh70UC34FsGc1J6IFib2F0zeGrtLIhTHTPV9xM/GSS4 /mBCOU7iLZkKt8tilO1635p0EtEmR1sej1r4Y82yU8Z8o91NTqxk5UTWfRwBGtjD wMyEJAxMAPP5x/j+7UhFsFFqWPCGkQYa6mUy2cZoL2puDsnFLEom9/YWvo+odV9u YKeu7mmfKETsl1s0S7mipvJadDbxm33tN/tJlzO5cuPZe/EC8jJAbXu1nZerM5EU 1lBPHbN3wsDRERm/KdBg3MlEWGnqmHkQmEVi9NGal+oX4xnn1loyAbZnSND4nAuR -----END CERTIFICATE-----Generated at Sat Apr 18 23:38:55 2026 by rpki-client