$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: wTP0faz1NuFdap/bUBph8ftUrsrFNX/5h69NHJ8HvbU= Subject key identifier: C2:F4:64:A6:AF:E6:AD:11:AF:BF:33:9A:E3:BB:77:C8:37:50:62:F4 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584D8747AEAFFAE78831CF9FA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A8AD Signing time: Thu 16 Apr 2026 19:00:03 +0000 Manifest this update: Thu 16 Apr 2026 19:00:03 +0000 Manifest next update: Sun 19 Apr 2026 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: QVUQrxHSPTbWojYG+aeHpI8ns30LIjkmVr9Cx3SupCI=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: bVARugnPu/NQh6SZLsYZSCFZFMl8tLNTIb/R/eGn+EM=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: u7C3imds6wSENZSO6Ugdvto5e2g0yKgRLmrjaB/ZKa0=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: Ht+nmjyKyhPz8JXCEahwh/5awWsbMR2ZQGWKk8WL+ps=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:47:ae:af:fa:e7:88:31:cf:9f:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Apr 16 19:00:03 2026 GMT Not After : Apr 19 19:00:00 2026 GMT Subject: CN=d61b3861-85a2-4a84-964e-ffb252cb17f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:20:9a:26:e0:e5:cb:00:0b:b7:5f:74:23: cc:55:2c:6d:48:0a:b8:75:d2:d6:43:47:75:2c:65: 74:ee:d5:c8:05:81:9f:da:9a:78:1c:51:1b:47:ea: bf:c6:aa:df:97:3e:da:cc:ff:7a:6a:75:09:c2:97: ea:d6:d1:98:b3:a4:f4:f5:f7:2c:1c:bb:7b:06:d9: b1:bc:e2:6a:e6:30:4c:7c:af:d8:1b:47:b5:f0:c1: a3:7f:99:ad:2f:68:83:18:53:7d:ad:50:2c:96:4f: 86:ea:0c:96:1d:2c:df:6c:14:34:98:46:b4:25:f5: 72:7d:36:ab:fd:b8:59:99:13:85:c9:18:28:ec:35: e4:5b:2c:88:e5:c0:47:71:4c:fe:47:62:b9:b3:23: d8:1b:df:3a:9d:51:17:ad:65:37:71:74:f1:f1:49: ec:7e:0e:14:6a:e7:e3:08:75:97:97:b1:79:ef:46: 92:7f:1b:87:66:f9:75:0f:79:1b:cb:86:35:36:18: 0a:dc:04:af:c9:6f:2d:8f:07:a0:a8:a5:29:df:3c: 50:36:65:4c:d0:3d:8d:82:52:1b:02:49:01:1d:46: 3f:50:98:a1:9a:2c:3c:ba:02:8b:ac:35:7a:24:1a: ce:68:29:96:71:78:8d:e8:51:64:4c:96:27:f2:fe: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:64:A6:AF:E6:AD:11:AF:BF:33:9A:E3:BB:77:C8:37:50:62:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1a:24:32:bb:92:8e:15:d9:c5:4f:d1:64:1a:b9:c8:b3:a1: 68:39:be:4d:d2:23:2a:63:86:73:9d:a1:82:e9:5e:03:fa:23: f7:72:a4:f0:36:3d:ad:81:85:a6:7c:65:38:d9:2d:87:de:8f: a0:c6:78:d3:0f:f8:ea:ef:5f:56:ed:4f:b8:af:57:0b:f5:2f: 86:2d:69:d3:ef:87:f8:e6:6f:ae:b4:63:ac:c8:d4:b5:1a:3e: f4:58:bc:3c:08:59:9c:a2:44:cb:f4:3a:81:92:9a:0d:61:20: 8d:3c:3b:12:35:8a:03:3b:02:61:75:a1:d5:05:3b:7a:15:67: d4:05:43:d6:12:cc:99:93:72:4f:d0:01:63:66:50:af:1a:1d: 23:64:a5:ff:17:95:a6:89:79:06:e6:81:c2:98:3a:48:07:9e: 6e:10:56:e3:c4:1f:66:c3:42:21:46:bc:91:46:c4:f8:41:67: c7:9e:f4:de:4b:70:98:cf:db:4a:9e:aa:8f:d3:de:69:9d:f4: 36:8d:78:af:a9:aa:78:ba:c3:1b:84:c6:ee:7d:c7:7b:9d:7e: 36:79:d3:dc:86:9a:08:20:8b:4d:9e:12:c3:eb:b5:ed:6a:ed: d9:3b:66:3f:8a:fd:ba:eb:75:8f:d2:e2:91:43:a4:f3:73:64: 15:02:52:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HR66v+ueIMc+fooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI2MDQxNjE5MDAwM1oXDTI2MDQxOTE5MDAwMFowLzEtMCsGA1UEAxMk ZDYxYjM4NjEtODVhMi00YTg0LTk2NGUtZmZiMjUyY2IxN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Agmibg5csAC7dfdCPMVSxtSAq4ddLWQ0d1 LGV07tXIBYGf2pp4HFEbR+q/xqrflz7azP96anUJwpfq1tGYs6T09fcsHLt7Btmx vOJq5jBMfK/YG0e18MGjf5mtL2iDGFN9rVAslk+G6gyWHSzfbBQ0mEa0JfVyfTar /bhZmROFyRgo7DXkWyyI5cBHcUz+R2K5syPYG986nVEXrWU3cXTx8Unsfg4Uaufj CHWXl7F570aSfxuHZvl1D3kby4Y1NhgK3ASvyW8tjwegqKUp3zxQNmVM0D2NglIb AkkBHUY/UJihmiw8ugKLrDV6JBrOaCmWcXiN6FFkTJYn8v5o/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFML0ZKav5q0Rr78zmuO7d8g3UGL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWGiQyu5KOFdnFT9FkGrnI s6FoOb5N0iMqY4ZznaGC6V4D+iP3cqTwNj2tgYWmfGU42S2H3o+gxnjTD/jq719W 7U+4r1cL9S+GLWnT74f45m+utGOsyNS1Gj70WLw8CFmcokTL9DqBkpoNYSCNPDsS NYoDOwJhdaHVBTt6FWfUBUPWEsyZk3JP0AFjZlCvGh0jZKX/F5WmiXkG5oHCmDpI B55uEFbjxB9mw0IhRryRRsT4QWfHnvTeS3CYz9tKnqqP095pnfQ2jXivqap4usMb hMbufcd7nX42edPchpoIIItNnhLD67Xtau3ZO2Y/iv2663WP0uKRQ6Tzc2QVAlJY -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:19 2026 by rpki-client