$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft File: 3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft (raw, json) Hash identifier: Zo0KI5h4OBjdfll+/KBj5v6pI5CPv3r4SlLsVN6XcLU= Subject key identifier: B1:7F:1E:5D:3F:3F:AB:00:11:00:32:0F:16:EC:AF:8F:EB:BA:77:D5 Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Certificate serial: 010D0C9F4328584D88E891DF3C148E099E784F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft Manifest number: 010D0C9F4328584B120BDF6A0EF65D42B2E15C6E Signing time: Fri 17 Apr 2026 09:00:04 +0000 Manifest this update: Fri 17 Apr 2026 09:00:04 +0000 Manifest next update: Mon 20 Apr 2026 09:00:00 +0000 Files and hashes: 1: 3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl (hash: ElZxbjcXks/itLKqxiElr61zmatyW8L40cJn9ns+lnE=) 2: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (hash: bgwIh1k3GlaJ3WNufEoFyFPGAg7YF5q9JmE7RxRdqg8=) 3: 99f33a63-94ff-3938-870c-e85542261111.roa (hash: 0kYF3ZJFr48s0mUGJ4f1DheYZT5KQaRaWW2VCZ+JxQE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:e8:91:df:3c:14:8e:09:9e:78:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Validity Not Before: Apr 17 09:00:04 2026 GMT Not After : Apr 20 09:00:00 2026 GMT Subject: CN=d9ed4c1f-7501-4312-ab6d-35a1491e0c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:42:c1:ca:f0:ec:05:17:c2:eb:1c:e3:30: 9b:8d:c8:5a:19:14:36:6c:c3:32:71:c3:ef:c5:aa: 7d:7a:1f:39:00:b6:a2:cd:16:b8:9b:b0:96:4e:e1: 2a:11:6c:26:4c:ba:18:e8:a2:d2:dd:74:ef:de:26: 17:06:72:c1:f3:bb:4b:64:a1:e1:ab:43:84:aa:b4: 7b:37:34:3e:a2:13:a6:62:52:0e:d7:08:7d:5e:ac: e1:35:d3:22:f2:3a:04:46:93:4e:fe:77:42:8c:c5: 59:e8:2f:46:0e:b6:21:51:2b:c9:14:3b:ea:8d:97: 11:18:93:23:f8:9b:9b:f9:c2:98:cf:29:e3:3b:b9: 8b:e9:73:7f:ca:40:67:99:dd:dc:9d:66:fe:c4:ab: 2d:71:d3:85:f1:77:84:f3:ff:dd:e1:aa:47:35:88: a6:10:00:79:d5:c2:d1:22:5e:91:01:b1:6c:13:33: fe:e2:2e:ab:17:ef:e4:b7:01:87:77:04:ba:ab:61: 14:9b:92:09:55:a5:2e:1e:d9:17:b3:0e:d9:9f:e6: 91:0b:eb:cf:e3:66:d8:88:40:55:5f:28:fe:41:fb: 9a:a4:de:fa:32:6b:ba:c4:f9:f3:4d:cb:02:33:a1: 0a:0e:67:94:c3:dc:6b:e9:3c:85:12:00:a2:61:0c: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:1E:5D:3F:3F:AB:00:11:00:32:0F:16:EC:AF:8F:EB:BA:77:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl X509v3 Authority Key Identifier: keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:13:aa:d8:24:dd:22:11:89:d5:cc:d0:32:38:77:2f:f8:e0: f4:3a:8b:8d:79:83:bb:ef:5f:1f:d0:f7:5f:15:c2:3a:d7:7f: 18:db:b5:6d:a5:3b:88:72:fe:ad:7a:41:67:e0:2c:34:df:0e: b7:8e:c9:d4:89:33:6b:b9:46:3a:82:69:39:bc:ea:0b:ec:da: 6b:3f:ef:68:44:9d:38:ce:54:01:56:a8:11:ef:fd:0c:be:4c: 71:e7:7b:0c:3f:24:a2:8d:98:ee:0e:37:8f:82:91:bb:98:7d: 19:2a:23:62:02:74:65:f2:ff:f7:fd:f0:70:b6:7d:42:41:b5: d2:15:a2:0a:8e:ad:80:14:a7:64:b8:75:9a:8f:41:bf:6c:6d: af:65:dc:7e:5f:e6:37:3d:61:d5:2b:f8:0c:a7:2a:dd:31:3a: 16:f0:65:d7:06:4b:6b:5d:21:33:fd:06:5e:24:f3:c0:dd:bf: c5:c1:6e:f6:e0:f2:7d:b5:e1:ec:61:25:29:41:be:76:a7:c5: fe:9e:3a:56:51:ce:ac:53:6b:f3:19:a2:d5:f5:fc:05:51:41: 60:cf:0c:01:3d:af:18:61:ff:48:92:84:bf:e1:c0:93:45:bf: fd:06:0a:47:bd:05:c6:c1:de:85:74:8b:68:59:6b:a8:41:b4: 36:04:14:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2I6JHfPBSOCZ54TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEy MmM4MB4XDTI2MDQxNzA5MDAwNFoXDTI2MDQyMDA5MDAwMFowLzEtMCsGA1UEAxMk ZDllZDRjMWYtNzUwMS00MzEyLWFiNmQtMzVhMTQ5MWUwYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTJCwcrw7AUXwusc4zCbjchaGRQ2bMMyccPv xap9eh85ALaizRa4m7CWTuEqEWwmTLoY6KLS3XTv3iYXBnLB87tLZKHhq0OEqrR7 NzQ+ohOmYlIO1wh9XqzhNdMi8joERpNO/ndCjMVZ6C9GDrYhUSvJFDvqjZcRGJMj +Jub+cKYzynjO7mL6XN/ykBnmd3cnWb+xKstcdOF8XeE8//d4apHNYimEAB51cLR Il6RAbFsEzP+4i6rF+/ktwGHdwS6q2EUm5IJVaUuHtkXsw7Zn+aRC+vP42bYiEBV Xyj+QfuapN76Mmu6xPnzTcsCM6EKDmeUw9xr6TyFEgCiYQw7AQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLF/Hl0/P6sAEQAyDxbsr4/runfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEw NWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvM2FhMDViMzEtM2MxZi00 MGMxLWEwN2QtZTZhYTdmZjEyMmM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FhMDViMzEtM2MxZi00MGMxLWEw N2QtZTZhYTdmZjEyMmM4LzNhYTA1YjMxLTNjMWYtNDBjMS1hMDdkLWU2YWE3ZmYx MjJjOC5jcmwwHwYDVR0jBBgwFoAUqwz+o4zFnhsASJ8S1S9XLnoWEkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFh N2ZmMTIyYzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWE6rYJN0iEYnVzNAyOHcv +OD0OouNeYO7718f0PdfFcI6138Y27VtpTuIcv6tekFn4Cw03w63jsnUiTNruUY6 gmk5vOoL7NprP+9oRJ04zlQBVqgR7/0Mvkxx53sMPySijZjuDjePgpG7mH0ZKiNi AnRl8v/3/fBwtn1CQbXSFaIKjq2AFKdkuHWaj0G/bG2vZdx+X+Y3PWHVK/gMpyrd MToW8GXXBktrXSEz/QZeJPPA3b/FwW724PJ9teHsYSUpQb52p8X+njpWUc6sU2vz GaLV9fwFUUFgzwwBPa8YYf9IkoS/4cCTRb/9BgpHvQXGwd6FdItoWWuoQbQ2BBTh -----END CERTIFICATE-----Generated at Fri Apr 17 15:12:24 2026 by rpki-client