$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: al5m+pEAeKHQWTSm/OvfvTnyBKgQjC7xe7d3FlzZfx8= Subject key identifier: 3A:48:D0:03:BE:A9:16:6D:A9:2A:3C:52:87:26:FF:7D:3D:C7:DF:B1 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584DD0190282490E0E10E80010A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D184 Signing time: Tue 12 May 2026 21:00:03 +0000 Manifest this update: Tue 12 May 2026 21:00:03 +0000 Manifest next update: Thu 14 May 2026 21:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: PSHd1PoRSSJuO3i488CzAMxi1CGTKTeKF0C5B9hKJ7Q=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: q97qMnKhu78JdvZJpAFXQlRyzogb/VzdvJhQZlzKaCU=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: wFL1iLretds25/xOzAddGSH9AoUjlXEDi6ZUcOKQ1Ko=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: SxYoSdmC+2zriX6hY8bZgtwK1roKlUvKHYQ0Oz4iz60=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:19:02:82:49:0e:0e:10:e8:00:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: May 12 21:00:03 2026 GMT Not After : May 14 21:00:00 2026 GMT Subject: CN=561f6002-adf6-464b-8bf8-2ca84373fde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:5f:91:b1:46:b2:79:76:05:88:bd:c3:35: e8:c3:91:92:3b:fb:c5:23:f4:c7:69:5e:20:40:86: d0:b9:83:e3:59:95:c7:66:50:99:33:a9:7d:9a:fa: e5:b8:6b:b5:b9:e8:11:b0:f9:94:08:cd:71:f2:a7: aa:16:d7:22:35:4d:19:5f:a2:57:2d:7a:3f:12:a7: a4:9e:ab:db:04:25:fb:3c:23:5a:d9:18:84:aa:57: 1c:0b:b3:bf:31:2d:3a:4e:eb:85:f6:12:d3:d7:1c: cd:ae:a2:a4:7b:7f:7b:c7:cb:ec:7d:11:2a:ed:51: d1:88:96:d9:c3:ab:60:fc:b7:4b:70:3b:bd:0c:f7: 8a:90:5c:f0:74:4b:0e:68:b3:50:c0:56:3e:6b:25: 5c:3a:1b:1c:07:8a:fa:cf:9b:03:e0:4a:44:f0:d7: 50:e1:99:e5:ef:fa:df:17:6f:b9:95:d5:89:80:7b: c1:f1:56:c4:58:73:a7:75:f8:c9:3b:9c:7f:40:75: 79:0e:69:9d:3a:f6:79:5a:e0:f0:ac:1d:f4:64:3e: 32:86:7c:6b:86:12:b7:96:fb:fb:55:26:a5:13:b0: 49:a2:b2:79:ac:e3:b1:38:d9:17:31:bd:71:54:3f: 4b:a5:88:a3:3e:be:59:0c:66:ff:11:4c:84:63:b1: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:D0:03:BE:A9:16:6D:A9:2A:3C:52:87:26:FF:7D:3D:C7:DF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:97:3b:5f:e4:8c:f2:39:f2:bb:b2:46:70:72:17:4a:9d:ca: c9:19:18:83:fc:9f:5c:74:2d:37:9f:14:01:7f:cc:35:eb:78: 09:31:72:0a:b6:98:bb:9f:4f:c0:7b:36:19:9f:b1:d7:3b:58: 6c:cc:e0:39:96:5c:cc:2f:89:1f:47:8d:81:14:e7:1e:7b:0c: 21:22:89:19:fa:66:3b:dd:64:f5:54:0a:75:88:de:22:a7:0e: 6e:e5:58:c9:54:94:c1:0f:47:fd:fe:8b:8f:e1:c7:4d:dc:a1: 9b:47:7e:13:54:79:bb:42:29:e0:6d:0f:8e:58:99:c6:9e:56: 2c:b4:54:24:e1:07:ea:00:73:99:7c:39:3d:6f:d1:f3:9a:40: 10:01:6d:8a:2d:2c:71:5d:d9:6f:64:1e:34:57:ff:81:eb:01: ad:de:0f:a7:d0:5e:ed:8e:9a:05:c0:78:75:aa:6a:19:04:b3: b6:5e:e0:35:70:fd:34:a7:3a:9a:6e:ee:8b:8e:ca:6c:1c:08: d4:68:de:55:7b:64:ba:12:2d:e3:e4:2c:dc:3f:0a:4b:47:bc: b8:b4:a8:d7:04:9f:3b:98:db:52:7c:d3:be:78:e8:ec:67:dd: 81:2f:6e:16:72:d4:3a:8c:73:f4:54:fe:ed:81:82:6c:62:86: 3c:62:79:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QGQKCSQ4OEOgAEKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDUxMjIxMDAwM1oXDTI2MDUxNDIxMDAwMFowLzEtMCsGA1UEAxMk NTYxZjYwMDItYWRmNi00NjRiLThiZjgtMmNhODQzNzNmZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXVfkbFGsnl2BYi9wzXow5GSO/vFI/THaV4g QIbQuYPjWZXHZlCZM6l9mvrluGu1uegRsPmUCM1x8qeqFtciNU0ZX6JXLXo/Eqek nqvbBCX7PCNa2RiEqlccC7O/MS06TuuF9hLT1xzNrqKke397x8vsfREq7VHRiJbZ w6tg/LdLcDu9DPeKkFzwdEsOaLNQwFY+ayVcOhscB4r6z5sD4EpE8NdQ4Znl7/rf F2+5ldWJgHvB8VbEWHOndfjJO5x/QHV5DmmdOvZ5WuDwrB30ZD4yhnxrhhK3lvv7 VSalE7BJorJ5rOOxONkXMb1xVD9LpYijPr5ZDGb/EUyEY7FJkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDpI0AO+qRZtqSo8Uocm/309x9+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdlztf5IzyOfK7skZwchdK ncrJGRiD/J9cdC03nxQBf8w163gJMXIKtpi7n0/AezYZn7HXO1hszOA5llzML4kf R42BFOceewwhIokZ+mY73WT1VAp1iN4ipw5u5VjJVJTBD0f9/ouP4cdN3KGbR34T VHm7QingbQ+OWJnGnlYstFQk4QfqAHOZfDk9b9HzmkAQAW2KLSxxXdlvZB40V/+B 6wGt3g+n0F7tjpoFwHh1qmoZBLO2XuA1cP00pzqabu6LjspsHAjUaN5Ve2S6Ei3j 5CzcPwpLR7y4tKjXBJ87mNtSfNO+eOjsZ92BL24WctQ6jHP0VP7tgYJsYoY8YnnT -----END CERTIFICATE-----Generated at Wed May 13 00:53:43 2026 by rpki-client