$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json) Hash identifier: 2BC3jex4gnahuYWfXqXen+fGEFwto/WAu+9kcuqj7jA= Subject key identifier: 08:38:CA:4B:A4:96:16:C6:79:39:CA:C5:E9:F9:12:A6:2B:6D:2B:25 Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584D89B9081F38681D25AE0FAA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A560454 Signing time: Fri 17 Apr 2026 16:00:03 +0000 Manifest this update: Fri 17 Apr 2026 16:00:03 +0000 Manifest next update: Sun 19 Apr 2026 16:00:00 +0000 Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: Kfg4nlxdjDVe5LIK/NEV5yYyaCKPRlIjw+UWuzvdlZA=) 2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: 6TtDxov2dHe2kqS0Ri1lHbu6VUiHzaph8pPG5KVKcxg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:b9:08:1f:38:68:1d:25:ae:0f:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Apr 17 16:00:03 2026 GMT Not After : Apr 19 16:00:00 2026 GMT Subject: CN=e9bbc204-a8c0-4a48-9117-d147f35f14da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:02:cf:f4:94:41:27:71:a4:70:23:ea:57: c8:20:af:d2:ee:a3:62:33:23:77:ce:d6:2f:58:8f: a1:5b:a5:d9:53:6c:c4:e4:cf:fa:1c:97:de:a7:dc: 1e:a7:7c:7e:b7:29:d3:f3:fc:8c:36:4c:ce:08:43: a2:5f:6c:da:e8:0e:67:6e:7e:9e:c9:cd:17:73:76: 27:af:66:c1:c8:20:e6:2d:fb:13:87:55:1b:fa:2e: 9d:69:1f:a5:12:c7:0d:a9:78:dc:62:15:65:3b:4a: 1b:47:47:65:40:fa:3c:5f:da:fa:cb:d4:02:f1:30: 80:57:4f:25:ea:ae:d0:30:32:a0:b7:22:31:cb:0a: 67:97:6a:b9:cc:d8:1c:8d:99:1d:c2:be:47:48:f5: a7:fa:ab:f7:cf:65:d7:ed:29:c0:bc:24:33:32:a5: a4:fc:2d:c0:d8:1d:a9:a1:f6:52:b5:bf:e0:9a:c6: 33:4e:69:10:f2:e0:a4:d2:fd:40:2f:5a:65:6d:08: 9e:27:70:ea:c9:71:ec:f4:c5:77:e4:a9:a5:28:af: b8:03:b8:b9:03:6e:6c:8a:1d:a8:af:86:ea:a3:57: ea:45:00:de:83:81:19:97:37:50:f5:74:65:38:b7: 96:b6:24:ec:84:f4:83:e4:22:3b:66:71:75:b3:a7: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:CA:4B:A4:96:16:C6:79:39:CA:C5:E9:F9:12:A6:2B:6D:2B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4e:6a:ad:db:1b:44:47:69:5b:e7:cf:5e:91:1e:4b:bd:ce: 19:dc:2f:ec:4e:79:6a:39:91:81:d8:49:ee:b8:91:72:77:a5: 3e:1e:e1:2f:1c:1b:27:c9:87:88:84:c1:8f:12:03:29:4d:4f: cb:de:f3:bd:12:dc:f6:d1:f9:f6:15:f2:01:0b:a1:e2:ed:20: 49:e6:1d:1c:fd:f8:33:83:08:1c:d9:f8:49:2d:1b:b4:61:99: ab:8e:f1:35:a8:7c:22:2f:92:88:b2:93:07:cc:fb:53:6d:42: 23:57:79:f8:76:5b:76:d5:c8:2d:b8:18:63:74:18:3f:3f:5f: 96:22:b5:ed:f3:54:e9:99:68:47:67:62:fe:b6:3e:40:20:91: a4:f9:03:26:cf:35:22:92:e2:6b:cf:04:df:bc:59:0f:2c:d1: a7:fa:e8:9a:00:86:8a:36:8e:f4:2b:c4:9a:f0:50:78:0b:f8: a1:0c:58:ab:04:b2:78:a7:2f:ff:d4:1f:b5:04:fb:77:c8:b9: 95:9c:73:fc:96:ef:4e:ea:22:3e:20:47:b1:4a:5d:67:29:2d: af:bb:89:2c:fc:9d:33:6f:26:c7:a4:a4:f9:49:57:0b:8b:1c: d2:03:f0:54:85:f2:cb:f3:40:44:0b:56:d0:d8:f4:83:3c:e8: e5:d1:ff:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JuQgfOGgdJa4PqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI2MDQxNzE2MDAwM1oXDTI2MDQxOTE2MDAwMFowLzEtMCsGA1UEAxMk ZTliYmMyMDQtYThjMC00YTQ4LTkxMTctZDE0N2YzNWYxNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb0Cz/SUQSdxpHAj6lfIIK/S7qNiMyN3ztYv WI+hW6XZU2zE5M/6HJfep9wep3x+tynT8/yMNkzOCEOiX2za6A5nbn6eyc0Xc3Yn r2bByCDmLfsTh1Ub+i6daR+lEscNqXjcYhVlO0obR0dlQPo8X9r6y9QC8TCAV08l 6q7QMDKgtyIxywpnl2q5zNgcjZkdwr5HSPWn+qv3z2XX7SnAvCQzMqWk/C3A2B2p ofZStb/gmsYzTmkQ8uCk0v1AL1plbQieJ3DqyXHs9MV35KmlKK+4A7i5A25sih2o r4bqo1fqRQDeg4EZlzdQ9XRlOLeWtiTshPSD5CI7ZnF1s6fSZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAg4ykuklhbGeTnKxen5EqYrbSslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00 ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOTmqt2xtER2lb589ekR5L vc4Z3C/sTnlqOZGB2EnuuJFyd6U+HuEvHBsnyYeIhMGPEgMpTU/L3vO9Etz20fn2 FfIBC6Hi7SBJ5h0c/fgzgwgc2fhJLRu0YZmrjvE1qHwiL5KIspMHzPtTbUIjV3n4 dlt21cgtuBhjdBg/P1+WIrXt81TpmWhHZ2L+tj5AIJGk+QMmzzUikuJrzwTfvFkP LNGn+uiaAIaKNo70K8Sa8FB4C/ihDFirBLJ4py//1B+1BPt3yLmVnHP8lu9O6iI+ IEexSl1nKS2vu4ks/J0zbybHpKT5SVcLixzSA/BUhfLL80BEC1bQ2PSDPOjl0f/g -----END CERTIFICATE-----Generated at Sat Apr 18 03:05:11 2026 by rpki-client