$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft File: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft (raw, json) Hash identifier: pCC4gRN60D11fd3OJhHrP+KwulKK0/k2Y5qr7LZtXRI= Subject key identifier: 42:2E:9E:B0:BB:C4:A3:D2:0B:6A:D2:6F:7E:22:FE:68:A6:38:FB:98 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584D8853ABCE27AA1ED34A0F3674 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft Manifest number: 010D0C9F43285843DEDD8F5A3F647017C5C8D310 Signing time: Fri 17 Apr 2026 04:00:03 +0000 Manifest this update: Fri 17 Apr 2026 04:00:03 +0000 Manifest next update: Mon 20 Apr 2026 04:00:00 +0000 Files and hashes: 1: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl (hash: +XUyKHev8/z4I+j3MQ4mwgs/Ss8+dOBomyL9T8COebY=) 2: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (hash: 7NhpULGEsaVqipM9J8DzAoaAskIYAvWxMh/2GgdyVmo=) 3: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (hash: +MXiO3TR+k29/HsDTPF0HOtGWJ9tc/PLACRsUuL9rqU=) 4: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (hash: r45uMf61rUWsIfzKw4MaZAwHtZVkqsW1eVPVmitn+Jg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:53:ab:ce:27:aa:1e:d3:4a:0f:36:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Apr 17 04:00:03 2026 GMT Not After : Apr 20 04:00:00 2026 GMT Subject: CN=96d485cf-be9f-4276-be39-2914374f5775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:93:8b:91:21:64:85:0e:95:d4:2e:de:1d: 05:9d:7b:ba:63:05:a7:0b:5e:29:52:3f:5e:b6:d0: 61:c2:e9:30:17:a5:09:bc:91:37:82:52:22:99:44: 73:4f:3c:2a:d6:8e:5c:30:99:ce:c4:80:36:e3:ea: e8:19:07:7b:18:2b:2a:36:e0:f8:80:3f:ac:bf:54: 7e:3f:e9:30:bc:e8:a0:47:0f:f0:58:8b:40:50:0a: ea:8d:94:11:a5:ba:60:25:65:64:d8:2d:05:71:8a: a4:fe:2c:46:c1:91:df:cd:92:ed:e8:ce:ac:46:f1: f4:e7:80:03:28:c2:8e:2e:f0:69:d7:fc:15:8f:51: 19:3f:5e:8a:31:f7:07:02:32:a5:cd:eb:5e:c2:7a: 92:ff:ef:aa:75:a0:5a:4e:f0:63:87:9d:b6:a4:57: 6b:31:74:d4:85:60:08:ce:da:55:3f:ce:c8:08:d6: d0:24:7e:45:44:be:0c:13:ae:11:d1:48:3a:9a:8b: 15:e5:21:3d:4a:68:f7:8f:fe:d6:33:12:35:34:97: 25:e9:cd:b2:b4:23:11:24:49:3c:6e:23:d6:de:74: 58:fd:2d:a2:d7:fe:ab:8d:b6:9d:01:82:5a:dc:3a: 8b:99:50:c6:80:47:37:be:26:fa:b6:dd:fb:f0:96: d1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:9E:B0:BB:C4:A3:D2:0B:6A:D2:6F:7E:22:FE:68:A6:38:FB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:27:8a:93:56:e6:51:41:ad:b3:10:2f:53:ee:87:d5:1b:17: c3:bb:f2:4e:8a:7f:81:b9:f2:99:a9:13:79:56:75:d1:f0:e3: f0:02:59:84:31:c5:ff:66:33:d8:06:a1:d8:ff:99:fc:46:db: 0d:f3:de:26:d8:74:25:e4:76:89:d1:7c:03:9b:97:74:5b:be: 03:5a:ca:78:d0:a4:0b:4b:df:50:a7:f3:4c:8c:c2:5a:88:2c: 3e:9d:c0:93:6e:6d:f7:ea:3d:34:f2:39:75:d9:3f:c1:3c:b9: 1d:0f:40:8c:1e:66:41:ac:78:a5:af:f7:2b:2a:da:83:5d:d2: 1e:4f:6f:4b:1c:dc:37:17:8a:c0:f6:30:3c:16:f7:cc:ac:fa: f8:50:bd:f1:eb:b6:e6:87:c9:76:b2:35:f2:da:3f:47:41:22: 2d:5d:fc:26:9b:07:91:77:00:fa:bb:2b:2f:b6:92:90:78:aa: 9f:52:4a:cd:12:d1:91:3a:4a:da:b6:fd:70:30:cb:aa:be:d6: fc:a2:a5:a4:83:4d:0a:bf:4b:73:e9:cb:9f:f8:38:52:28:51: b9:ab:65:d5:70:18:56:12:5b:f0:fc:34:ab:4d:b1:22:87:f4: 54:89:1d:3c:b6:f3:d4:8f:82:5c:12:02:6b:ee:e8:33:5d:f4: 02:bc:90:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IU6vOJ6oe00oPNnQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDQxNzA0MDAwM1oXDTI2MDQyMDA0MDAwMFowLzEtMCsGA1UEAxMk OTZkNDg1Y2YtYmU5Zi00Mjc2LWJlMzktMjkxNDM3NGY1Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXWTi5EhZIUOldQu3h0FnXu6YwWnC14pUj9e ttBhwukwF6UJvJE3glIimURzTzwq1o5cMJnOxIA24+roGQd7GCsqNuD4gD+sv1R+ P+kwvOigRw/wWItAUArqjZQRpbpgJWVk2C0FcYqk/ixGwZHfzZLt6M6sRvH054AD KMKOLvBp1/wVj1EZP16KMfcHAjKlzetewnqS/++qdaBaTvBjh522pFdrMXTUhWAI ztpVP87ICNbQJH5FRL4ME64R0Ug6mosV5SE9Smj3j/7WMxI1NJcl6c2ytCMRJEk8 biPW3nRY/S2i1/6rjbadAYJa3DqLmVDGgEc3vib6tt378JbRkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEIunrC7xKPSC2rSb34i/mimOPuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvM2M2NTVhYWYtNzZmNC00 YmFiLWI0ZjctOGZiMjNjM2Q0MDExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOJ4qTVuZRQa2zEC9T7ofV GxfDu/JOin+BufKZqRN5VnXR8OPwAlmEMcX/ZjPYBqHY/5n8RtsN894m2HQl5HaJ 0XwDm5d0W74DWsp40KQLS99Qp/NMjMJaiCw+ncCTbm336j008jl12T/BPLkdD0CM HmZBrHilr/crKtqDXdIeT29LHNw3F4rA9jA8FvfMrPr4UL3x67bmh8l2sjXy2j9H QSItXfwmmweRdwD6uysvtpKQeKqfUkrNEtGROkratv1wMMuqvtb8oqWkg00Kv0tz 6cuf+DhSKFG5q2XVcBhWElvw/DSrTbEih/RUiR08tvPUj4JcEgJr7ugzXfQCvJDW -----END CERTIFICATE-----Generated at Fri Apr 17 12:24:25 2026 by rpki-client