$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: IRbKiJN/qcIUT5Gc9pZL1lxP8s4R1W1Ps+ttBuhnOPM= Subject key identifier: AA:A9:E3:2F:21:03:D5:EF:6E:47:D8:8A:0C:27:52:50:9E:CF:9A:3E Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584D8BD1063308D15994AFDF3100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026D4E Signing time: Sat 18 Apr 2026 10:00:03 +0000 Manifest this update: Sat 18 Apr 2026 10:00:03 +0000 Manifest next update: Tue 21 Apr 2026 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: pL09Rojl/vz932MuumuvXUjKxbENpPEPYJgiGtz48jc=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: Dw0TiamoItrH8rTiKC33kKh/rGUZ2/z+6e+6fGUZSWU=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: 1CM9G2S5EXom/rpqwZWxe2hrY7oUQQJoP838ZN5Ssgo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8b:d1:06:33:08:d1:59:94:af:df:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Apr 18 10:00:03 2026 GMT Not After : Apr 21 10:00:00 2026 GMT Subject: CN=ad2cd70a-4559-4da9-bc7b-a9b9451b9011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:b0:36:8e:aa:62:16:2d:ab:c0:26:26:23: 62:03:25:a2:db:f0:74:c6:14:73:91:15:b2:af:94: 79:bf:f9:2c:c9:9c:21:9c:24:14:d9:4c:6d:9f:52: 87:73:ce:6e:7b:e7:74:78:90:91:ec:20:fe:05:34: 5f:1e:ae:a9:d4:28:13:a4:5f:d5:78:58:42:22:76: 85:cd:d7:7b:7f:52:c3:1b:a8:8e:fd:23:08:7e:cd: ea:6f:e6:66:e1:72:47:23:90:7f:bd:60:96:90:a9: 74:20:4f:94:e0:be:09:bf:ef:63:68:66:77:0a:ac: dd:17:ee:a6:65:1f:c4:f8:c9:36:e7:6c:10:19:a5: ce:e6:50:03:9a:91:eb:7f:d7:95:68:0d:9b:13:8f: aa:05:59:b7:04:3e:7f:24:25:a1:2d:49:23:73:d6: 2e:ef:51:be:e5:68:df:a1:0e:ec:a7:9a:c8:28:59: d8:ca:53:b7:3c:2b:68:bf:01:cd:ad:58:58:d8:d8: 11:49:75:6d:51:9c:f6:6e:fb:a9:35:89:f1:8e:eb: 26:ca:4c:82:90:64:51:8d:95:a4:07:26:fb:df:4e: 28:9a:a6:3c:09:83:95:1e:75:1a:84:7e:97:88:02: ac:81:b8:4a:07:ba:fe:be:95:63:2b:81:87:49:45: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A9:E3:2F:21:03:D5:EF:6E:47:D8:8A:0C:27:52:50:9E:CF:9A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:8c:6a:8e:2a:19:cf:90:11:e6:75:38:f8:fe:50:86:11:c1: b1:12:07:c6:95:f3:d2:f7:db:a0:7a:89:2c:f2:d8:0d:8a:24: f8:0a:d5:c2:cf:14:d5:9d:63:4a:44:6b:e7:c4:07:22:5c:b6: 1a:ce:ee:ed:b9:69:f6:0c:6c:ea:da:62:c5:ff:ff:8d:6a:92: ca:97:02:08:90:08:0c:f1:63:c2:aa:21:26:d0:14:e4:e5:e0: 62:3f:f9:6b:72:eb:90:1e:5f:5b:bb:fe:ec:c5:eb:f9:ed:94: 2d:a1:6d:8e:c0:08:3e:8a:e7:e5:02:b2:60:67:d7:9a:7f:ee: 48:34:cf:1b:e2:cd:2d:b9:6c:ff:04:14:69:79:f7:48:0f:44: dd:4d:49:06:c8:c2:83:4c:c7:7f:16:43:60:af:fc:84:e9:b4: 87:3a:d5:32:ab:5e:f9:31:2b:86:9e:62:24:03:9b:55:19:4f: dd:23:9d:21:37:14:6c:7c:b0:84:66:2c:7b:1a:48:b7:9a:27: 25:82:cb:ef:b2:76:c9:68:f5:32:60:d1:ec:dd:71:5b:69:ed: 03:25:38:74:ed:bd:72:ff:8f:82:5a:8f:de:25:b6:59:31:2e: fb:95:1c:65:02:74:9c:03:fb:0f:59:c2:4b:33:40:41:2d:b9: ec:2c:47:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2L0QYzCNFZlK/fMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDQxODEwMDAwM1oXDTI2MDQyMTEwMDAwMFowLzEtMCsGA1UEAxMk YWQyY2Q3MGEtNDU1OS00ZGE5LWJjN2ItYTliOTQ1MWI5MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiduwNo6qYhYtq8AmJiNiAyWi2/B0xhRzkRWy r5R5v/ksyZwhnCQU2Uxtn1KHc85ue+d0eJCR7CD+BTRfHq6p1CgTpF/VeFhCInaF zdd7f1LDG6iO/SMIfs3qb+Zm4XJHI5B/vWCWkKl0IE+U4L4Jv+9jaGZ3CqzdF+6m ZR/E+Mk252wQGaXO5lADmpHrf9eVaA2bE4+qBVm3BD5/JCWhLUkjc9Yu71G+5Wjf oQ7sp5rIKFnYylO3PCtovwHNrVhY2NgRSXVtUZz2bvupNYnxjusmykyCkGRRjZWk Byb7304omqY8CYOVHnUahH6XiAKsgbhKB7r+vpVjK4GHSUXa3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKqp4y8hA9XvbkfYigwnUlCez5o+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4jGqOKhnPkBHmdTj4/lCG EcGxEgfGlfPS99ugeoks8tgNiiT4CtXCzxTVnWNKRGvnxAciXLYazu7tuWn2DGzq 2mLF//+NapLKlwIIkAgM8WPCqiEm0BTk5eBiP/lrcuuQHl9bu/7sxev57ZQtoW2O wAg+iuflArJgZ9eaf+5INM8b4s0tuWz/BBRpefdID0TdTUkGyMKDTMd/FkNgr/yE 6bSHOtUyq175MSuGnmIkA5tVGU/dI50hNxRsfLCEZix7Gki3miclgsvvsnbJaPUy YNHs3XFbae0DJTh07b1y/4+CWo/eJbZZMS77lRxlAnScA/sPWcJLM0BBLbnsLEc3 -----END CERTIFICATE-----Generated at Sun Apr 19 10:04:03 2026 by rpki-client