$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: HOsloWEtgmkSMgPq3ACaSMLGX41Yo2KZW8I59SDNRTs= Subject key identifier: F8:32:03:3E:BB:E7:85:BE:7B:94:69:3B:B1:FF:30:16:D0:14:E3:AD Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584DD19C22CD3F95F2C67B33FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBBE8 Signing time: Wed 13 May 2026 10:00:04 +0000 Manifest this update: Wed 13 May 2026 10:00:04 +0000 Manifest next update: Fri 15 May 2026 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: AD66kly9TIeHjTbrmgkKHWsQ7LMUUM70s1nN7g5ipME=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: L1VnssxXL//FmUA775xDvpYldc/EJA09SbI7mAIYt0Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:9c:22:cd:3f:95:f2:c6:7b:33:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: May 13 10:00:04 2026 GMT Not After : May 15 10:00:00 2026 GMT Subject: CN=59abe40d-6ca3-41e3-ad50-bdc749bd23a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:59:e1:02:bf:8a:78:10:aa:ec:de:d5:6a: 51:01:ed:91:5c:a2:a6:1c:b9:e7:92:c2:f4:7e:2d: 46:b7:b8:56:f8:5a:7e:51:a2:df:41:e7:9e:dc:05: b2:8b:d4:28:fc:f4:4a:91:83:8b:09:85:0e:d8:13: c2:f0:ef:1d:a0:c4:b6:de:7b:26:dc:81:95:d2:d0: 88:c2:84:8c:f9:05:33:6d:f3:94:3c:29:e6:9d:9e: 43:ba:73:3c:07:cb:31:b9:63:1a:37:f2:58:a2:00: 5d:9c:3d:f0:22:c9:7f:dc:a0:bc:8c:f6:59:f7:02: af:cc:b8:4d:9b:2c:3d:8a:2b:95:0e:b4:5d:a5:37: 2b:65:8a:b5:11:0e:37:ba:ca:7c:5b:96:68:76:2e: 3b:9d:2d:d6:6c:d4:fd:ac:b4:bc:85:d8:47:5f:46: 67:31:7b:66:da:3f:28:1c:f2:f4:a8:55:ad:3b:07: 0f:44:f7:3e:e9:25:17:0b:3d:7c:cc:23:5d:cd:64: 08:6b:c7:07:c3:fb:d7:8c:8d:a9:3f:86:33:57:54: 23:9d:8e:48:27:68:67:3b:0f:26:43:da:ab:43:ee: e0:0a:f7:03:c6:c8:c1:4b:fd:bc:3e:40:a5:2e:bb: cc:03:98:90:99:da:4b:36:f2:8c:02:b5:3c:e8:79: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:32:03:3E:BB:E7:85:BE:7B:94:69:3B:B1:FF:30:16:D0:14:E3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:83:97:9b:89:25:93:ef:af:56:d0:f5:33:9e:51:a1:37:ae: 46:4f:56:99:6c:8e:41:af:c2:ef:8e:74:ab:71:c1:d6:98:2b: cd:50:be:3f:86:92:ab:b3:d1:e7:a4:24:47:45:68:13:a7:55: 43:91:ae:5a:19:03:f9:e1:a2:69:c6:d4:60:9f:dd:e7:84:e3: 00:9b:73:9d:45:b0:3c:4a:52:0b:f3:d5:3d:a3:03:61:c9:7f: 80:73:2e:ef:6e:7e:f1:0c:38:30:82:35:de:98:ac:2a:54:55: aa:25:d8:bf:0c:92:5b:6c:b5:27:a8:00:dd:99:77:02:3d:f5: cd:bb:f2:b3:6a:f4:c2:7a:dd:0a:82:ea:73:67:67:91:2e:e4: 2d:bd:9c:d1:01:76:35:6b:51:31:b8:81:46:61:5e:de:27:2c: 86:02:9c:b4:ee:38:40:46:cd:76:e7:01:3c:ae:57:47:34:3a: 23:65:38:15:20:3d:33:74:f1:c6:17:14:00:cf:60:58:c3:02: 4f:b5:0e:6b:7b:2d:3c:19:72:48:34:97:bc:a0:99:2a:34:e1: 16:d3:de:9c:26:ed:eb:fb:08:b6:cd:68:32:c3:22:27:9d:89: 3b:f8:29:ad:e1:52:7d:d8:26:88:46:dc:7a:9a:20:e4:c3:64: b2:06:42:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3RnCLNP5Xyxnsz/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI2MDUxMzEwMDAwNFoXDTI2MDUxNTEwMDAwMFowLzEtMCsGA1UEAxMk NTlhYmU0MGQtNmNhMy00MWUzLWFkNTAtYmRjNzQ5YmQyM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRZ4QK/ingQquze1WpRAe2RXKKmHLnnksL0 fi1Gt7hW+Fp+UaLfQeee3AWyi9Qo/PRKkYOLCYUO2BPC8O8doMS23nsm3IGV0tCI woSM+QUzbfOUPCnmnZ5DunM8B8sxuWMaN/JYogBdnD3wIsl/3KC8jPZZ9wKvzLhN myw9iiuVDrRdpTcrZYq1EQ43usp8W5Zodi47nS3WbNT9rLS8hdhHX0ZnMXtm2j8o HPL0qFWtOwcPRPc+6SUXCz18zCNdzWQIa8cHw/vXjI2pP4YzV1QjnY5IJ2hnOw8m Q9qrQ+7gCvcDxsjBS/28PkClLrvMA5iQmdpLNvKMArU86HlSJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPgyAz6754W+e5RpO7H/MBbQFOOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXg5ebiSWT769W0PUznlGh N65GT1aZbI5Br8LvjnSrccHWmCvNUL4/hpKrs9HnpCRHRWgTp1VDka5aGQP54aJp xtRgn93nhOMAm3OdRbA8SlIL89U9owNhyX+Acy7vbn7xDDgwgjXemKwqVFWqJdi/ DJJbbLUnqADdmXcCPfXNu/KzavTCet0KgupzZ2eRLuQtvZzRAXY1a1ExuIFGYV7e JyyGApy07jhARs125wE8rldHNDojZTgVID0zdPHGFxQAz2BYwwJPtQ5rey08GXJI NJe8oJkqNOEW096cJu3r+wi2zWgywyInnYk7+Cmt4VJ92CaIRtx6miDkw2SyBkJt -----END CERTIFICATE-----Generated at Wed May 13 15:31:22 2026 by rpki-client