$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft File: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft (raw, json) Hash identifier: tl9cC1Vbl6ID2T8gw3E1pZeETO4eu/4tfArIIW5+I9Y= Subject key identifier: AB:C3:4D:2F:ED:05:9F:87:47:7F:38:3F:F9:AA:C5:54:4B:84:B4:2C Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584DCFBFB0CE4A4D4721E2B6EC20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft Manifest number: 010D0C9F4328584C48E9F1D11FEB13CE220B098F Signing time: Tue 12 May 2026 18:00:03 +0000 Manifest this update: Tue 12 May 2026 18:00:03 +0000 Manifest next update: Fri 15 May 2026 18:00:00 +0000 Files and hashes: 1: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl (hash: kNKqO1KzX8q0QnXI1uqNb7CZeNUq0lXcOAyXArfYoWU=) 2: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (hash: 5dcBtcaxrSSIKnc6iMw7zxBtXc1F2FBezogUlWOQJpQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:bf:b0:ce:4a:4d:47:21:e2:b6:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: May 12 18:00:03 2026 GMT Not After : May 15 18:00:00 2026 GMT Subject: CN=e75e7b51-4690-4ca7-9a13-13c12e0fc224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:45:47:ab:a7:33:8b:89:5c:d3:0c:b2:7c: 47:e9:a2:ba:66:63:70:a1:ea:5b:d2:ea:95:a9:62: 3f:1c:3a:d4:4b:af:d7:74:c7:2d:19:3d:a0:c0:1b: 45:94:0f:7e:d2:16:72:ae:9c:47:7c:aa:93:02:d6: 8f:e3:d4:8c:1f:90:f7:5b:bd:d8:0e:b7:bf:2f:a3: 07:4a:c4:5e:47:35:8a:e5:54:93:c9:e5:23:2b:e2: b8:d1:cd:ae:62:01:83:2e:2e:24:82:b1:e4:78:be: ab:83:06:29:f5:99:ff:62:5c:c5:f7:74:f2:1e:bf: 34:20:7f:1b:19:bc:39:75:16:09:55:be:87:93:0d: 6d:3a:ef:fd:3c:6d:f1:88:28:7d:69:52:89:b4:ec: d9:04:a6:c8:1a:63:30:24:9a:b2:18:4f:8d:d3:08: c2:52:e0:5b:9a:23:1a:fa:9b:8d:6d:a1:be:a6:ff: 08:27:86:52:d1:9b:78:02:ac:13:b8:dd:95:2e:ba: 46:65:f3:93:b2:2e:0a:17:6e:38:8a:38:1b:8f:84: 00:23:1d:c1:13:e2:32:a2:5c:0a:ca:fe:80:2b:d9: 95:9e:90:fb:80:0b:92:3c:fc:b4:df:10:ef:54:9e: 33:82:8b:a6:48:07:7a:1a:94:3e:03:ed:40:59:0a: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C3:4D:2F:ED:05:9F:87:47:7F:38:3F:F9:AA:C5:54:4B:84:B4:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bf:a7:bb:0a:e3:40:0c:e9:c6:f5:76:d0:fe:69:d6:bb:18: d4:b3:73:1f:5d:d4:74:40:0a:6c:e2:11:dd:52:50:64:e2:ec: 3a:19:fe:df:76:40:40:db:e0:e4:81:76:3c:b0:43:fa:88:32: a1:7c:8d:e6:02:5f:78:bd:5d:6f:dd:dc:83:72:68:b6:2e:0b: 8f:53:bb:fe:17:df:12:b4:f3:9a:18:13:31:cb:99:2f:5a:84: b8:87:08:d7:58:6b:18:1b:ae:25:b9:a3:3c:70:45:0c:79:1d: 18:d0:79:fa:83:70:58:f0:ce:94:e2:be:1a:7c:fd:e2:32:fb: 3d:f2:e1:fa:a5:c3:b7:4d:a2:b9:1a:d7:d1:58:22:5c:ad:68: 60:41:00:d0:34:52:8d:48:33:ce:c3:c0:0d:c1:24:81:87:24: 3e:9b:60:50:06:3d:5d:c9:ee:45:f8:a2:9f:32:90:a6:4a:ac: 7a:ee:7b:f4:8a:ac:86:ef:83:36:7a:7b:2a:c7:d6:c4:8e:d6: 79:aa:e3:e7:eb:25:f4:52:93:f7:a4:c9:d2:45:d8:38:0b:fd: 7a:cb:8a:01:74:79:d6:61:80:9e:de:e7:52:54:d0:63:c3:7f: 07:b2:b8:23:7d:ad:c5:03:08:85:d4:8c:99:c3:4f:e3:3f:fe: e8:f6:a4:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Pv7DOSk1HIeK27CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDUxMjE4MDAwM1oXDTI2MDUxNTE4MDAwMFowLzEtMCsGA1UEAxMk ZTc1ZTdiNTEtNDY5MC00Y2E3LTlhMTMtMTNjMTJlMGZjMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKVFR6unM4uJXNMMsnxH6aK6ZmNwoepb0uqV qWI/HDrUS6/XdMctGT2gwBtFlA9+0hZyrpxHfKqTAtaP49SMH5D3W73YDre/L6MH SsReRzWK5VSTyeUjK+K40c2uYgGDLi4kgrHkeL6rgwYp9Zn/YlzF93TyHr80IH8b Gbw5dRYJVb6Hkw1tOu/9PG3xiCh9aVKJtOzZBKbIGmMwJJqyGE+N0wjCUuBbmiMa +puNbaG+pv8IJ4ZS0Zt4AqwTuN2VLrpGZfOTsi4KF244ijgbj4QAIx3BE+IyolwK yv6AK9mVnpD7gAuSPPy03xDvVJ4zgoumSAd6GpQ+A+1AWQosGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKvDTS/tBZ+HR384P/mqxVRLhLQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvM2E1YTJiMWMtOWFkMy00 NDk2LWJjZmMtMzIyOTc0YWNjZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+v6e7CuNADOnG9XbQ/mnW uxjUs3MfXdR0QAps4hHdUlBk4uw6Gf7fdkBA2+DkgXY8sEP6iDKhfI3mAl94vV1v 3dyDcmi2LguPU7v+F98StPOaGBMxy5kvWoS4hwjXWGsYG64luaM8cEUMeR0Y0Hn6 g3BY8M6U4r4afP3iMvs98uH6pcO3TaK5GtfRWCJcrWhgQQDQNFKNSDPOw8ANwSSB hyQ+m2BQBj1dye5F+KKfMpCmSqx67nv0iqyG74M2ensqx9bEjtZ5quPn6yX0UpP3 pMnSRdg4C/16y4oBdHnWYYCe3udSVNBjw38Hsrgjfa3FAwiF1IyZw0/jP/7o9qRW -----END CERTIFICATE-----Generated at Wed May 13 11:17:29 2026 by rpki-client