$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft File: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft (raw, json) Hash identifier: jy32UTOrMmvYYNTbTR0UcmxxVk8q4Qyt1G763en56w0= Subject key identifier: DC:D0:BB:57:A9:1F:D9:50:AA:E3:21:D9:E3:8B:7F:AF:D2:5A:D7:09 Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Certificate issuer: /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Certificate serial: 010D0C9F4328584D88181EEBDB42FC3777C97380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft Manifest number: 010D0C9F4328584595004A1770E5FE451D02FCEB Signing time: Fri 17 Apr 2026 02:00:03 +0000 Manifest this update: Fri 17 Apr 2026 02:00:03 +0000 Manifest next update: Sun 19 Apr 2026 02:00:00 +0000 Files and hashes: 1: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl (hash: M6cE2H7quEj/IIsq2Cbx/6Xn4x3BY+VvGNlF4q+s81M=) 2: 94b3319a-658a-3317-bf87-91c877d6dd90.roa (hash: gwkHjLAA6K7h9cXN7lQJJkfx7F+z2qUWXeyEne9Ymjs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:18:1e:eb:db:42:fc:37:77:c9:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Validity Not Before: Apr 17 02:00:03 2026 GMT Not After : Apr 19 02:00:00 2026 GMT Subject: CN=3a8bab6b-cd3e-4dee-8275-3218b2d15bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:84:cb:8f:bf:e1:d1:e5:75:5d:97:cc:2f: f7:46:13:a5:24:d8:09:6c:1f:3c:3e:00:73:c6:81: 85:03:a7:de:99:bd:02:36:b9:b5:00:47:a0:19:0c: e9:a0:89:b5:ee:8b:9e:ad:26:88:d6:44:5d:16:ac: 17:5b:b0:2b:ce:1d:cf:97:2b:0f:0f:ef:85:e8:76: fc:c7:78:6f:4d:f7:38:21:5c:bd:19:b9:77:76:e0: 23:f5:6b:ad:b9:79:a2:31:38:32:34:68:6f:9f:b6: ec:08:b5:31:6e:f4:28:d4:00:6d:0e:e7:08:97:b4: 1e:a3:d6:61:85:8f:cf:c5:9c:1c:8e:94:71:d6:37: 0e:2f:34:b0:bf:e1:2c:92:60:76:fd:d3:1b:c0:ab: 21:73:39:4c:41:66:ca:30:a1:c2:36:84:59:ab:14: 58:03:2d:5b:af:3b:21:8c:3d:28:ef:e3:26:97:6b: fd:e7:46:e9:dd:50:d5:10:97:bd:20:61:92:03:37: f6:38:c1:c1:c1:9d:79:68:74:e3:4c:67:5d:90:5b: db:25:a7:84:6a:ae:57:2b:15:c5:31:05:49:00:55: 61:bd:d1:b9:eb:c3:60:a4:a5:e2:64:02:b1:de:a6: ca:a7:3d:6d:b4:bf:68:6e:ac:bb:02:ba:68:a9:13: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:BB:57:A9:1F:D9:50:AA:E3:21:D9:E3:8B:7F:AF:D2:5A:D7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl X509v3 Authority Key Identifier: keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:63:a7:06:d2:34:bb:96:af:57:81:7c:69:bf:2a:71:c5:fc: 66:b1:3c:86:ca:06:3e:75:18:cd:e4:52:fb:c3:b6:5f:1e:e9: 92:94:4a:1f:b9:6b:1d:81:e0:71:7c:78:5d:eb:77:75:96:dd: 7f:c4:20:78:42:04:13:2b:21:6a:d6:f0:cb:4b:19:e3:21:cb: e4:71:e9:ac:09:b1:85:ec:0d:a2:6b:7f:56:89:51:4f:77:23: 3a:a2:c9:f7:3a:88:a0:fd:5b:50:44:0b:08:4a:cf:71:82:19: 1d:f6:cd:c7:0e:07:c0:76:59:bb:7e:48:48:38:1c:68:5f:45: 54:4b:3c:bf:f9:78:6b:e8:96:92:80:a7:38:c5:e7:28:27:28: ce:1d:89:dd:14:87:40:06:a6:08:d5:8c:6b:c6:40:f1:6d:5e: d3:69:2c:39:8b:ec:06:ab:48:98:37:73:ad:a0:f9:fd:fb:16: c5:d2:5d:76:de:83:6e:92:e5:b8:16:25:bf:35:77:5e:fb:df: 72:78:dd:ba:a3:ff:1d:48:1e:01:eb:03:ca:5c:37:a5:49:9b: 3d:a8:5d:4e:65:98:0c:aa:05:00:5d:62:cd:21:82:e1:69:02: c6:be:39:5a:30:13:56:d7:6c:b5:d3:ad:0d:c4:91:df:2d:10: 44:32:82:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IGB7r20L8N3fJc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2 ZTAyMB4XDTI2MDQxNzAyMDAwM1oXDTI2MDQxOTAyMDAwMFowLzEtMCsGA1UEAxMk M2E4YmFiNmItY2QzZS00ZGVlLTgyNzUtMzIxOGIyZDE1YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGEy4+/4dHldV2XzC/3RhOlJNgJbB88PgBz xoGFA6femb0CNrm1AEegGQzpoIm17ouerSaI1kRdFqwXW7Arzh3PlysPD++F6Hb8 x3hvTfc4IVy9Gbl3duAj9WutuXmiMTgyNGhvn7bsCLUxbvQo1ABtDucIl7Qeo9Zh hY/PxZwcjpRx1jcOLzSwv+EskmB2/dMbwKshczlMQWbKMKHCNoRZqxRYAy1brzsh jD0o7+Mml2v950bp3VDVEJe9IGGSAzf2OMHBwZ15aHTjTGddkFvbJaeEaq5XKxXF MQVJAFVhvdG568NgpKXiZAKx3qbKpz1ttL9obqy7ArpoqROqUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNzQu1epH9lQquMh2eOLf6/SWtcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTNi NTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvM2UzYjUyYzctYjdhNS00 NWIwLWEyYTQtZjgyNDJiMmI2ZTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UzYjUyYzctYjdhNS00NWIwLWEy YTQtZjgyNDJiMmI2ZTAyLzNlM2I1MmM3LWI3YTUtNDViMC1hMmE0LWY4MjQyYjJi NmUwMi5jcmwwHwYDVR0jBBgwFoAUtHC2EXrIXwKKvpTGbVycJLrG+u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0 MmIyYjZlMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsY6cG0jS7lq9XgXxpvypx xfxmsTyGygY+dRjN5FL7w7ZfHumSlEofuWsdgeBxfHhd63d1lt1/xCB4QgQTKyFq 1vDLSxnjIcvkcemsCbGF7A2ia39WiVFPdyM6osn3Ooig/VtQRAsISs9xghkd9s3H DgfAdlm7fkhIOBxoX0VUSzy/+Xhr6JaSgKc4xecoJyjOHYndFIdABqYI1YxrxkDx bV7TaSw5i+wGq0iYN3OtoPn9+xbF0l123oNukuW4FiW/NXde+99yeN26o/8dSB4B 6wPKXDelSZs9qF1OZZgMqgUAXWLNIYLhaQLGvjlaMBNW12y1060NxJHfLRBEMoJc -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:56 2026 by rpki-client