$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: ff/g5anZp00Z0Y4IJ/T51b0x+qBHBOWlxhb0CjDVCTE= Subject key identifier: 53:62:2B:D2:B1:D9:1D:C7:AF:85:20:95:F5:53:EE:28:30:A2:AE:30 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584D878337CA20CAA5E809530500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D16A Signing time: Thu 16 Apr 2026 21:00:03 +0000 Manifest this update: Thu 16 Apr 2026 21:00:03 +0000 Manifest next update: Sat 18 Apr 2026 21:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: PSHd1PoRSSJuO3i488CzAMxi1CGTKTeKF0C5B9hKJ7Q=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: q97qMnKhu78JdvZJpAFXQlRyzogb/VzdvJhQZlzKaCU=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: /IPOs5glExjSUfrcI/9VH5cLCSGR7Z7+/0OWiluCSBE=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: SxYoSdmC+2zriX6hY8bZgtwK1roKlUvKHYQ0Oz4iz60=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:83:37:ca:20:ca:a5:e8:09:53:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Apr 16 21:00:03 2026 GMT Not After : Apr 18 21:00:00 2026 GMT Subject: CN=7b3b9d49-689a-40af-b24d-99dc0d7a69c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:59:51:7b:f8:62:3c:03:dc:d2:79:e0:52: cf:e5:98:70:b7:ed:4d:2a:99:72:6a:3e:29:04:81: 40:34:d4:d8:61:30:f5:93:87:b4:fd:d0:03:13:8d: f5:fe:63:79:e0:67:e9:d9:19:89:b0:53:15:65:91: 6a:6e:5d:9a:a1:04:85:4d:d7:72:9c:4f:59:26:0a: 68:2f:ec:af:d6:e1:07:89:b1:5b:6f:a4:78:d8:c2: 1c:c3:a3:2b:28:49:d3:71:49:1c:06:f7:60:a1:d9: 84:8f:71:a6:97:32:0a:eb:77:31:26:e3:c8:b2:f8: a3:d1:7c:fe:a0:40:6f:ae:d4:82:76:7c:cb:79:eb: a3:47:cd:d2:9a:d8:ff:83:05:d3:83:32:63:ca:1c: 33:ce:f7:a4:27:e7:5d:0f:40:0e:45:5e:4a:e7:9c: db:c9:3b:41:91:59:56:5d:a3:3f:5b:29:0a:75:b9: 96:b2:b9:7c:95:18:fa:4a:e3:6d:88:e4:1c:5f:ac: 92:4d:50:67:06:36:bb:08:7e:31:4f:68:80:35:f9: 0e:b7:c6:12:6d:b7:d0:76:e9:df:80:eb:45:45:e8: 17:69:d5:50:c0:96:f6:f2:fc:42:fb:59:b9:29:9c: bf:a2:70:39:6e:5e:6d:a8:d9:29:d8:0b:7f:e6:82: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:62:2B:D2:B1:D9:1D:C7:AF:85:20:95:F5:53:EE:28:30:A2:AE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9e:74:57:84:4a:61:6c:31:2c:41:60:15:33:bb:ae:4c:c7: 14:d4:1a:a6:22:fe:dc:0d:8f:fc:5e:03:7f:ff:19:c8:5d:53: c0:36:1d:40:72:f1:15:f0:c9:35:4f:cf:4d:1f:ff:75:f5:5e: 49:bd:a6:cd:03:1c:52:4e:1c:da:fb:e9:2a:8a:a7:80:ca:58: 8a:86:22:23:69:36:d8:ce:f3:51:70:74:92:d7:29:87:87:6f: 5b:e6:d4:25:d1:cd:d7:06:1a:10:66:05:da:ea:b2:55:d4:06: 73:b2:8f:40:a6:26:f2:3d:44:b2:1a:23:48:ee:3d:70:0b:c8: e6:a7:61:29:fc:7d:62:23:fc:95:9e:c5:8e:38:4d:4f:d1:39: 02:19:24:82:96:ef:f0:44:16:65:e9:fa:d5:81:aa:7c:6d:41: 70:8b:2f:9f:2c:a4:4c:a7:7a:8d:6f:63:47:ba:3c:f4:41:9b: f7:b0:e9:a2:dc:a4:08:da:43:3e:7c:86:ef:18:bb:15:d6:41: 54:89:c5:f6:2c:2c:74:91:25:5f:df:40:2b:9b:8a:96:59:19: 22:fb:3b:02:b9:6c:52:9e:b5:c4:4b:db:60:29:21:4a:7f:a4: 8c:6e:62:dc:14:78:03:0d:67:8d:8f:c4:96:c5:62:ea:97:c4: b1:67:a6:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HgzfKIMql6AlTBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDQxNjIxMDAwM1oXDTI2MDQxODIxMDAwMFowLzEtMCsGA1UEAxMk N2IzYjlkNDktNjg5YS00MGFmLWIyNGQtOTlkYzBkN2E2OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdBZUXv4YjwD3NJ54FLP5Zhwt+1NKplyaj4p BIFANNTYYTD1k4e0/dADE431/mN54Gfp2RmJsFMVZZFqbl2aoQSFTddynE9ZJgpo L+yv1uEHibFbb6R42MIcw6MrKEnTcUkcBvdgodmEj3GmlzIK63cxJuPIsvij0Xz+ oEBvrtSCdnzLeeujR83Smtj/gwXTgzJjyhwzzvekJ+ddD0AORV5K55zbyTtBkVlW XaM/WykKdbmWsrl8lRj6SuNtiOQcX6ySTVBnBja7CH4xT2iANfkOt8YSbbfQdunf gOtFRegXadVQwJb28vxC+1m5KZy/onA5bl5tqNkp2At/5oLBJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFNiK9Kx2R3Hr4UglfVT7igwoq4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATnnRXhEphbDEsQWAVM7uu TMcU1BqmIv7cDY/8XgN//xnIXVPANh1AcvEV8Mk1T89NH/919V5JvabNAxxSThza ++kqiqeAyliKhiIjaTbYzvNRcHSS1ymHh29b5tQl0c3XBhoQZgXa6rJV1AZzso9A pibyPUSyGiNI7j1wC8jmp2Ep/H1iI/yVnsWOOE1P0TkCGSSClu/wRBZl6frVgap8 bUFwiy+fLKRMp3qNb2NHujz0QZv3sOmi3KQI2kM+fIbvGLsV1kFUicX2LCx0kSVf 30Arm4qWWRki+zsCuWxSnrXES9tgKSFKf6SMbmLcFHgDDWeNj8SWxWLql8SxZ6aA -----END CERTIFICATE-----Generated at Fri Apr 17 04:10:28 2026 by rpki-client