$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft File: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft (raw, json) Hash identifier: YMlvFu+HN4a7Jd/yOWkIRTlgHBIg5qPn/0FLibgw5bE= Subject key identifier: FB:79:F1:DD:E1:77:EA:33:A1:6B:36:8A:D2:CB:E1:90:06:3A:30:9F Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584D8729E428D298F4C767E9E800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft Manifest number: 010D0C9F4328584C48E9F1D11FEB13CE220B0975 Signing time: Thu 16 Apr 2026 18:00:03 +0000 Manifest this update: Thu 16 Apr 2026 18:00:03 +0000 Manifest next update: Sun 19 Apr 2026 18:00:00 +0000 Files and hashes: 1: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl (hash: h1lEJjS2juqrAXZ4cCJVav8F6NC8pW3nszj+rXuRqoQ=) 2: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (hash: 5dcBtcaxrSSIKnc6iMw7zxBtXc1F2FBezogUlWOQJpQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:29:e4:28:d2:98:f4:c7:67:e9:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Apr 16 18:00:03 2026 GMT Not After : Apr 19 18:00:00 2026 GMT Subject: CN=57e4c615-2f9f-47d1-bdcf-518338fb09f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:0d:db:83:cd:57:8b:fe:fa:05:f1:f7:a6: 4d:81:f0:e5:3f:b7:4c:26:27:9f:b1:84:eb:07:8a: 16:07:9b:6c:db:f8:61:f8:dd:cd:2e:2b:ab:c8:88: d4:10:83:08:58:94:5d:41:25:0b:72:0b:9d:60:43: c9:79:83:cb:70:aa:08:42:bd:f8:93:b8:07:1a:29: a9:89:cc:30:dc:3f:aa:25:b1:8a:d7:f3:2f:61:1f: 27:75:c0:f2:0d:1f:fd:52:00:54:c5:a0:c9:2b:b2: 22:ac:00:bc:9e:ab:b7:36:18:10:42:9b:c8:58:13: 2d:ef:70:dc:73:da:3f:4f:7e:46:92:43:8d:97:7c: 00:a6:a1:f0:31:84:cc:70:fb:39:e2:8d:2b:b6:78: 45:ca:6a:d9:18:9d:f2:dd:44:af:a7:ab:ae:e9:2b: 24:dd:f0:f3:ec:47:1d:e0:db:4e:a2:88:16:68:4c: 63:db:d3:72:18:3f:92:4f:00:b6:cb:91:e9:14:e6: 55:e8:d7:34:1b:8d:2c:5e:cd:c1:58:d7:59:52:31: 68:c2:c6:61:12:48:05:4a:1b:a8:eb:a4:8a:b4:de: 58:83:e9:45:8b:31:67:65:90:72:3d:2a:61:b6:08: 3d:7f:b6:d6:ca:5d:3e:01:45:92:57:d3:09:8c:d3: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:79:F1:DD:E1:77:EA:33:A1:6B:36:8A:D2:CB:E1:90:06:3A:30:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:16:ef:d7:20:c2:13:78:7e:04:1a:a3:7b:b6:d7:6f:1e:34: eb:36:81:30:9d:00:e4:1d:7f:3d:a8:da:6f:7b:5f:73:d6:cf: a7:3d:8a:e0:a8:9a:22:5e:6a:2a:5c:b4:be:f4:9b:11:17:3f: 82:68:dd:15:5c:0a:a0:80:ae:26:88:a2:d3:40:cd:12:43:02: 5a:e8:0b:e4:43:a1:d7:c3:97:e9:44:55:9a:79:62:4b:fa:0a: 0c:7d:71:38:7e:8f:80:9b:92:4d:01:f4:ae:9a:3b:63:41:61: b6:5c:01:fe:93:e5:f3:f2:6d:2b:af:0c:ea:10:4f:cb:bb:7e: f5:d7:05:25:5b:02:07:04:b5:71:e3:36:36:ef:e7:9d:95:be: 1e:ab:96:75:b4:e5:aa:51:cc:74:8e:77:ee:1d:d9:4a:b9:d2: 7d:4d:55:16:fb:7d:be:b1:4e:d3:15:fd:ce:19:aa:7b:c8:69: 3c:9e:88:c0:1e:84:21:1a:b8:52:e3:9e:88:5b:0d:27:a4:1b: 95:3f:5b:45:9a:0b:a1:22:b4:53:2f:fa:75:2c:61:5c:0c:af: 7e:fe:34:e2:69:8f:7c:97:85:6b:3b:9c:87:d7:ec:0e:e5:b2: 1d:1c:76:5d:e3:19:40:bf:50:93:a1:53:0b:d4:dc:c0:82:18: 0b:3b:16:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HKeQo0pj0x2fp6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDQxNjE4MDAwM1oXDTI2MDQxOTE4MDAwMFowLzEtMCsGA1UEAxMk NTdlNGM2MTUtMmY5Zi00N2QxLWJkY2YtNTE4MzM4ZmIwOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1kN24PNV4v++gXx96ZNgfDlP7dMJiefsYTr B4oWB5ts2/hh+N3NLiuryIjUEIMIWJRdQSULcgudYEPJeYPLcKoIQr34k7gHGimp icww3D+qJbGK1/MvYR8ndcDyDR/9UgBUxaDJK7IirAC8nqu3NhgQQpvIWBMt73Dc c9o/T35GkkONl3wApqHwMYTMcPs54o0rtnhFymrZGJ3y3USvp6uu6Ssk3fDz7Ecd 4NtOoogWaExj29NyGD+STwC2y5HpFOZV6Nc0G40sXs3BWNdZUjFowsZhEkgFShuo 66SKtN5Yg+lFizFnZZByPSphtgg9f7bWyl0+AUWSV9MJjNMK3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPt58d3hd+ozoWs2itLL4ZAGOjCfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvM2E1YTJiMWMtOWFkMy00 NDk2LWJjZmMtMzIyOTc0YWNjZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhFu/XIMITeH4EGqN7ttdv HjTrNoEwnQDkHX89qNpve19z1s+nPYrgqJoiXmoqXLS+9JsRFz+CaN0VXAqggK4m iKLTQM0SQwJa6AvkQ6HXw5fpRFWaeWJL+goMfXE4fo+Am5JNAfSumjtjQWG2XAH+ k+Xz8m0rrwzqEE/Lu3711wUlWwIHBLVx4zY27+edlb4eq5Z1tOWqUcx0jnfuHdlK udJ9TVUW+32+sU7TFf3OGap7yGk8nojAHoQhGrhS456IWw0npBuVP1tFmguhIrRT L/p1LGFcDK9+/jTiaY98l4VrO5yH1+wO5bIdHHZd4xlAv1CToVML1NzAghgLOxbR -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:59 2026 by rpki-client