$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: 98auGVvolR446NRtM4NrBOT05pb33RLc4OOUr8lTUn0= Subject key identifier: C5:66:31:5F:AE:C7:34:C6:7F:45:6B:04:34:F6:89:32:EF:41:43:DA Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584D87A0FFE9F64BC3F2FCE7DFF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6D0C0 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sat 18 Apr 2026 22:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: KVoB6356mxAX8HvlPX6S+JyFvFOM0LIJlaGU5IUEZ4U=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: +o+nTKyGSWHtboUrxwp3oQ6W+s6bAlGAK45E3kg/LeY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a0:ff:e9:f6:4b:c3:f2:fc:e7:df:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 18 22:00:00 2026 GMT Subject: CN=1a64d6a3-edb8-497c-b52e-ebc59c9ae0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:ea:e4:e4:2f:f7:e5:ea:ff:d5:2d:e6:7f: 01:41:54:a8:6b:87:00:98:f1:fb:4e:1d:a7:ea:47: 81:3a:ba:60:32:41:4b:de:d4:e9:b1:c5:34:3f:76: d9:1f:f2:42:69:97:80:7b:77:7e:8e:20:76:a2:78: 30:ec:d6:53:7f:ae:97:d0:4f:35:25:ad:04:7f:a9: 3d:ee:f0:21:85:61:cf:1c:a4:a3:55:2d:84:7f:63: 33:ad:5f:c7:62:c2:4f:8d:16:02:3e:4e:af:3c:03: 18:90:8d:0c:17:fe:ec:05:25:8b:21:99:e2:48:38: 83:bb:3b:bf:d5:f1:0a:87:b7:07:34:0c:85:91:27: 35:71:a0:49:a7:07:ef:eb:de:b4:78:2c:15:68:a2: 74:5f:67:68:e7:27:ac:c1:46:2b:84:99:80:4e:11: d5:c6:da:99:67:b6:3f:84:80:28:e3:bf:47:d3:af: 02:79:71:d0:2d:82:e1:34:9f:1a:5f:d9:cf:06:3e: b8:94:f4:78:a4:90:ff:e8:f5:ce:ee:ea:7f:24:a5: 1c:57:83:7e:b1:18:19:f1:c3:10:c5:b2:36:9a:7b: e2:14:94:fa:33:da:df:89:36:c7:e1:a2:58:99:ab: c3:72:4c:75:4c:6e:d8:d6:ac:73:e2:86:52:4c:dd: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:66:31:5F:AE:C7:34:C6:7F:45:6B:04:34:F6:89:32:EF:41:43:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:27:0b:f5:10:55:da:76:82:bd:31:20:ba:ea:e9:aa:b4:d4: da:aa:6d:4d:86:62:c6:b8:2a:0c:dd:33:54:f5:70:dc:73:c9: e7:7c:c0:3a:b4:0c:52:ac:68:10:da:30:a8:26:a0:81:91:ca: 04:b7:6f:4f:7c:50:8e:de:80:1a:ee:a5:58:46:70:44:22:ab: c1:e8:96:9a:66:fb:7a:13:de:71:8e:20:0e:20:4a:cc:b9:70: 0f:de:94:c0:b1:8b:dd:a3:62:b6:d7:df:55:f9:48:54:f9:7c: ce:a8:c6:38:9e:c2:2c:38:db:db:5d:40:33:81:63:ea:86:f5: 82:eb:40:b6:75:b6:06:b0:27:46:9a:4f:ae:4e:92:d1:de:a1: ee:3a:00:58:66:b8:26:fa:ee:a9:7c:26:f8:21:12:b0:7e:ee: 37:4c:df:c4:2b:17:4c:c6:fc:30:ca:a9:c4:a3:db:03:20:35: 72:4e:33:27:b8:26:0b:62:fb:14:14:b0:96:a1:51:3b:51:4f: dd:4b:64:9d:e0:26:a2:8c:65:75:dc:92:a5:a4:00:c7:03:49: 12:2e:24:94:ff:0c:be:66:9c:95:0e:a6:ad:e8:ac:eb:96:f2: c4:b2:02:d3:45:92:3f:fb:40:2c:f0:50:2f:ca:fa:e0:e1:17: 8a:a3:64:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoP/p9kvD8vzn3/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxODIyMDAwMFowLzEtMCsGA1UEAxMk MWE2NGQ2YTMtZWRiOC00OTdjLWI1MmUtZWJjNTljOWFlMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufTq5OQv9+Xq/9Ut5n8BQVSoa4cAmPH7Th2n 6keBOrpgMkFL3tTpscU0P3bZH/JCaZeAe3d+jiB2ongw7NZTf66X0E81Ja0Ef6k9 7vAhhWHPHKSjVS2Ef2MzrV/HYsJPjRYCPk6vPAMYkI0MF/7sBSWLIZniSDiDuzu/ 1fEKh7cHNAyFkSc1caBJpwfv6960eCwVaKJ0X2do5yeswUYrhJmAThHVxtqZZ7Y/ hIAo479H068CeXHQLYLhNJ8aX9nPBj64lPR4pJD/6PXO7up/JKUcV4N+sRgZ8cMQ xbI2mnviFJT6M9rfiTbH4aJYmavDckx1TG7Y1qxz4oZSTN1iyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMVmMV+uxzTGf0VrBDT2iTLvQUPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhJwv1EFXadoK9MSC66umq tNTaqm1NhmLGuCoM3TNU9XDcc8nnfMA6tAxSrGgQ2jCoJqCBkcoEt29PfFCO3oAa 7qVYRnBEIqvB6JaaZvt6E95xjiAOIErMuXAP3pTAsYvdo2K2199V+UhU+XzOqMY4 nsIsONvbXUAzgWPqhvWC60C2dbYGsCdGmk+uTpLR3qHuOgBYZrgm+u6pfCb4IRKw fu43TN/EKxdMxvwwyqnEo9sDIDVyTjMnuCYLYvsUFLCWoVE7UU/dS2Sd4CaijGV1 3JKlpADHA0kSLiSU/wy+ZpyVDqat6KzrlvLEsgLTRZI/+0As8FAvyvrg4ReKo2Te -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:29 2026 by rpki-client