$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: hlI6TdDSGOYWrk9LufOxdRVEyP0mbFMtqKcRXvZoJsQ= Subject key identifier: B5:33:0A:32:C4:C6:55:33:CB:94:7B:9A:A7:F8:7B:5F:EB:0E:78:6F Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584DD019014B25B4E3534F570F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F718E Signing time: Tue 12 May 2026 21:00:03 +0000 Manifest this update: Tue 12 May 2026 21:00:03 +0000 Manifest next update: Thu 14 May 2026 21:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: UaVlt+uakBfmDt6n0TBfZm2UCZMiHj4NgzpOXUy2zTQ=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: 8HQK09Rwbw8WpUkBf2XpQJAvzw/Gu5V0zuG1fO2b/A8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:19:01:4b:25:b4:e3:53:4f:57:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: May 12 21:00:03 2026 GMT Not After : May 14 21:00:00 2026 GMT Subject: CN=f4b2a2b5-ce3f-4474-98ff-a3fefc296a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:22:be:fd:97:0b:0d:c1:f7:c9:37:83:ca: a9:ee:f5:75:37:46:a1:97:cb:b7:33:ab:c5:71:f9: ce:1e:73:d5:50:d8:3c:9b:a3:f8:17:68:15:dd:4a: 34:b3:0d:d1:01:3c:bc:69:8c:71:98:14:bd:f5:82: 18:04:3c:66:96:64:96:4a:f1:f3:5c:84:c5:bf:c6: 12:e6:79:4b:35:7d:59:c1:f0:dc:66:4a:cb:05:af: 6e:6e:45:2c:9e:fd:aa:e3:66:cd:26:80:69:66:f9: 2c:2b:5e:a9:bb:ed:8c:a2:e3:0f:5f:88:ed:41:14: a7:f1:d3:26:8f:c3:8c:3b:f3:87:6b:f0:b4:ba:10: 01:54:12:87:d9:13:56:1a:87:81:78:7f:09:5b:f1: a2:db:8d:fa:0f:62:4d:85:6c:b6:e9:02:59:8c:9d: 4a:80:f8:b2:7d:a3:90:32:fd:72:4c:95:53:d4:bb: 9c:80:53:f2:06:fe:84:c0:16:d4:8b:8a:89:be:f7: 81:48:12:18:3d:57:47:a2:f6:b1:7a:4d:f2:bf:bb: 0f:eb:5e:67:11:4b:7d:fc:2c:81:65:0d:1d:8b:37: 3e:ca:33:80:27:d6:3b:4a:b3:e4:41:89:61:df:0f: e3:af:f9:95:56:79:a9:20:d1:1a:32:37:b0:9f:b0: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:33:0A:32:C4:C6:55:33:CB:94:7B:9A:A7:F8:7B:5F:EB:0E:78:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:61:53:6d:42:a9:86:da:74:11:82:fa:6a:a3:dd:12:c9:cb: a8:c5:70:1a:57:f4:46:4f:99:76:74:e0:9d:2b:7b:90:fb:74: 72:a3:ed:5e:9e:af:39:fa:bc:c7:97:49:3d:3a:44:ce:1f:19: e8:34:dc:01:98:ca:48:69:09:f0:f6:63:0c:38:34:46:27:bb: c0:1a:8c:21:17:68:7b:b3:90:5a:55:48:27:e6:5d:78:e1:7a: fa:69:ab:8a:5c:c9:c6:23:f5:3e:3c:9f:21:f6:4d:7a:ca:a2: 9c:32:ab:7f:9a:7a:ef:84:05:3d:f7:ad:19:c3:c2:8f:f2:5a: b3:8a:c4:77:cc:1c:31:b9:19:d9:44:16:a5:4f:bd:dc:df:6c: 3e:13:32:a4:58:b2:20:ee:5f:75:b7:b5:c0:26:83:8c:6d:36: 96:16:bf:24:cf:4b:c5:1b:71:a0:d3:30:4e:bc:03:ba:8c:d4: 97:a9:a7:ff:f9:72:c8:80:9e:ef:4b:ef:90:fe:ee:76:9c:a9: 12:a2:4e:b7:07:b5:21:f1:0c:c4:58:2e:b5:9f:3d:ee:a7:7c: be:b6:f5:bc:c3:4f:55:24:e4:30:d6:19:74:70:31:21:9d:d6: e0:4e:a3:67:ae:01:19:d7:3e:be:12:be:b4:8f:e0:8c:ed:5a: 17:f6:0b:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QGQFLJbTjU09XDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI2MDUxMjIxMDAwM1oXDTI2MDUxNDIxMDAwMFowLzEtMCsGA1UEAxMk ZjRiMmEyYjUtY2UzZi00NDc0LTk4ZmYtYTNmZWZjMjk2YTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrkivv2XCw3B98k3g8qp7vV1N0ahl8u3M6vF cfnOHnPVUNg8m6P4F2gV3Uo0sw3RATy8aYxxmBS99YIYBDxmlmSWSvHzXITFv8YS 5nlLNX1ZwfDcZkrLBa9ubkUsnv2q42bNJoBpZvksK16pu+2MouMPX4jtQRSn8dMm j8OMO/OHa/C0uhABVBKH2RNWGoeBeH8JW/Gi2436D2JNhWy26QJZjJ1KgPiyfaOQ Mv1yTJVT1LucgFPyBv6EwBbUi4qJvveBSBIYPVdHovaxek3yv7sP615nEUt9/CyB ZQ0dizc+yjOAJ9Y7SrPkQYlh3w/jr/mVVnmpINEaMjewn7DVRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLUzCjLExlUzy5R7mqf4e1/rDnhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANYVNtQqmG2nQRgvpqo90S ycuoxXAaV/RGT5l2dOCdK3uQ+3Ryo+1enq85+rzHl0k9OkTOHxnoNNwBmMpIaQnw 9mMMODRGJ7vAGowhF2h7s5BaVUgn5l144Xr6aauKXMnGI/U+PJ8h9k16yqKcMqt/ mnrvhAU9960Zw8KP8lqzisR3zBwxuRnZRBalT73c32w+EzKkWLIg7l91t7XAJoOM bTaWFr8kz0vFG3Gg0zBOvAO6jNSXqaf/+XLIgJ7vS++Q/u52nKkSok63B7Uh8QzE WC61nz3up3y+tvW8w09VJOQw1hl0cDEhndbgTqNnrgEZ1z6+Er60j+CM7VoX9gtO -----END CERTIFICATE-----Generated at Wed May 13 12:29:29 2026 by rpki-client