$ rpki-client -vvvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft File: 3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json) Hash identifier: T5f4zYomOwtEbh4sUYE8LDm4fszD4yeZ+iYzYuPej7c= Subject key identifier: 0C:CB:C0:0D:88:3B:EC:6F:07:AE:B3:6F:7F:76:F6:76:76:66:CD:FC Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5 Certificate issuer: /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5 Certificate serial: 539BE98E0BDD48C2C1D1CE0476BF33E606AA2DBF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft Manifest number: 02D7 Signing time: Tue 10 Nov 2026 08:42:23 +0000 Manifest this update: Tue 10 Nov 2026 08:37:23 +0000 Manifest next update: Wed 11 Nov 2026 12:26:23 +0000 Files and hashes: 1: 3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa (hash: LEjTWe6fpK8sHggE9hBQ7iuKgwnA3HoC/5f5zkwhZbE=) 2: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: mG18Yt+KfqTK3aoDgAwAvD4TEbeecSWoJkCbL4KXC7I=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 12:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9b:e9:8e:0b:dd:48:c2:c1:d1:ce:04:76:bf:33:e6:06:aa:2d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5 Validity Not Before: Nov 10 08:37:23 2026 GMT Not After : Nov 11 12:26:23 2026 GMT Subject: CN=0CCBC00D883BEC6F07AEB36F7F76F6767666CDFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2c:27:87:ca:a3:21:65:f7:8e:ca:7f:ba:c4: a7:dd:4e:33:71:c9:68:34:54:46:ca:62:65:08:cc: ab:e2:93:6f:cc:99:bc:d4:ec:1a:7c:a7:6f:c4:0b: cf:fc:04:23:03:4c:22:14:20:50:b1:21:7c:57:49: 65:22:e0:3c:c4:05:f0:01:74:88:26:cc:2a:5d:c3: db:0e:05:7a:b6:ba:9e:95:93:7c:e1:50:d9:44:8b: 5e:8a:53:b1:fb:b0:f5:d3:89:72:20:e7:18:83:bb: e0:37:0f:17:2a:8d:b2:84:ee:26:fe:fe:b5:b1:ed: 82:9d:05:5e:aa:b9:5a:87:3f:61:22:df:bd:ff:e7: a6:f6:92:54:8b:4b:a0:f3:7e:23:ce:ef:93:a2:da: d7:57:62:b2:82:2e:a4:db:db:6a:9b:7f:c7:d8:b2: 4b:0f:0a:53:a6:5b:3a:79:c0:50:5b:64:a9:71:1a: c0:ea:f6:a0:5f:65:25:26:de:7e:50:01:02:35:a0: 67:52:8a:60:cb:54:bb:27:06:83:9c:03:8c:b1:16: bb:89:df:d4:d4:e7:9b:78:f5:bf:bc:a0:13:13:a2: 34:cc:96:30:2d:31:e4:a6:c5:5e:d3:e1:95:45:69: 05:3f:48:15:8d:dd:fe:09:ab:66:8c:0e:4b:88:a3: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CB:C0:0D:88:3B:EC:6F:07:AE:B3:6F:7F:76:F6:76:76:66:CD:FC X509v3 Authority Key Identifier: keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:07:ee:8d:f6:00:18:90:a9:8e:d7:be:c8:87:07:79:7f:95: 96:f7:6e:6e:02:66:fd:fe:d6:b1:01:f5:59:93:e0:6c:5e:46: 9d:0c:3b:98:6e:8f:37:24:4e:a5:19:81:cd:43:5c:7d:c6:0f: ad:a3:ab:ff:8b:0a:b1:fe:ed:f3:0c:c1:b1:a9:e5:a3:b5:7d: 04:ac:b9:d5:b6:1a:ef:f6:80:73:2d:50:e1:2a:52:8a:ee:0f: da:6c:69:e6:7b:d4:65:64:34:af:2b:b1:2a:e4:89:99:39:ff: 89:6d:53:46:c4:ba:7f:1b:f5:6d:95:f6:c6:81:d9:b7:e6:3a: f0:97:96:e5:dd:e6:b1:90:14:f6:0a:74:86:fe:fe:9e:00:97: 8f:5d:a0:70:da:e4:8a:32:3a:e8:59:a7:77:5a:04:3d:c2:14: 6f:d7:47:e2:85:5d:4a:01:e0:44:5f:30:7a:af:7c:7f:c0:45: e2:72:b7:25:4f:b4:68:63:6e:1d:2e:00:88:18:16:61:1a:1d: a2:bf:cc:72:25:a2:69:07:0a:6e:e2:ff:7f:3d:08:c7:c7:26: 68:a8:f1:ab:77:c0:a4:74:7c:0d:d6:ca:a2:35:c8:25:15:e4: 3a:5a:b6:00:0d:f5:e9:58:66:24:eb:cb:d0:e5:98:cf:38:39: 5e:d8:31:da -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUU5vpjgvdSMLB0c4Edr8z5gaqLb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzAxRUUwMDAwMTEwLwYDVQQFEygzRjY3MDU3Rjc3 Qjg2NjAzQjZDMjE2RkY1NzdDQjMxNDYwNTNFNEU1MB4XDTI2MTExMDA4MzcyM1oX DTI2MTExMTEyMjYyM1owMzExMC8GA1UEAxMoMENDQkMwMEQ4ODNCRUM2RjA3QUVC MzZGN0Y3NkY2NzY3NjY2Q0RGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOksJ4fKoyFl947Kf7rEp91OM3HJaDRURspiZQjMq+KTb8yZvNTsGnynb8QL z/wEIwNMIhQgULEhfFdJZSLgPMQF8AF0iCbMKl3D2w4Fera6npWTfOFQ2USLXopT sfuw9dOJciDnGIO74DcPFyqNsoTuJv7+tbHtgp0FXqq5Woc/YSLfvf/npvaSVItL oPN+I87vk6La11disoIupNvbapt/x9iySw8KU6ZbOnnAUFtkqXEawOr2oF9lJSbe flABAjWgZ1KKYMtUuycGg5wDjLEWu4nf1NTnm3j1v7ygExOiNMyWMC0x5KbFXtPh lUVpBT9IFY3d/gmrZowOS4ijk80CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQMy8AN iDvsbweus29/dvZ2dmbN/DAfBgNVHSMEGDAWgBQ/ZwV/d7hmA7bCFv9XfLMUYFPk 5TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8wLzNGNjcwNTdGNzdCODY2MDNCNkMyMTZGRjU3N0NCMzE0NjA1 M0U0RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL1AyY0ZmM2U0WmdPMndoYl9WM3l6RkdCVDVPVS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3 LzAvM0Y2NzA1N0Y3N0I4NjYwM0I2QzIxNkZGNTc3Q0IzMTQ2MDUzRTRFNS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIH7o32ABiQqY7XvsiHB3l/lZb3bm4CZv3+1rEB9VmT4GxeRp0MO5hu jzckTqUZgc1DXH3GD62jq/+LCrH+7fMMwbGp5aO1fQSsudW2Gu/2gHMtUOEqUoru D9psaeZ71GVkNK8rsSrkiZk5/4ltU0bEun8b9W2V9saB2bfmOvCXluXd5rGQFPYK dIb+/p4Al49doHDa5IoyOuhZp3daBD3CFG/XR+KFXUoB4ERfMHqvfH/AReJytyVP tGhjbh0uAIgYFmEaHaK/zHIlomkHCm7i/389CMfHJmio8at3wKR0fA3WyqI1yCUV 5DpatgAN9elYZiTry9DlmM84OV7YMdo= -----END CERTIFICATE-----Generated at Tue Nov 10 16:51:57 2026 by rpki-client