$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.mft File: 3df10a54-f467-4553-b08a-03574eb5cce7.mft (raw, json) Hash identifier: 5m6llRJidp+Fu/PPCPMXBtAa1cFI5wfH4+qOd5Y/l8w= Subject key identifier: 3C:E0:0E:CD:9A:57:DA:A0:66:F5:8C:7D:51:78:D7:17:9C:0F:27:8B Authority key identifier: 4C:25:9A:B4:92:F2:B1:D4:98:60:A7:2C:9B:DD:CE:04:1A:2C:59:33 Certificate issuer: /CN=3df10a54-f467-4553-b08a-03574eb5cce7 Certificate serial: 010D0C9F4328584DCF841FCFBBFE4A9C2351B0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.mft Manifest number: 010D0C9F4328584AD2A490916700759285407617 Signing time: Tue 12 May 2026 16:00:03 +0000 Manifest this update: Tue 12 May 2026 16:00:03 +0000 Manifest next update: Fri 15 May 2026 16:00:00 +0000 Files and hashes: 1: 3df10a54-f467-4553-b08a-03574eb5cce7.crl (hash: brr10HfS88WyRm9ec0vcldOCr03J24gZGAk7Zcmg754=) 2: f97ec8ba-5a01-3322-a955-9fd5feeda135.roa (hash: Y63+aC01RWnjVQG2q27kPVdX8dfQDi3qZ0VX894ZCUw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:84:1f:cf:bb:fe:4a:9c:23:51:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df10a54-f467-4553-b08a-03574eb5cce7 Validity Not Before: May 12 16:00:03 2026 GMT Not After : May 15 16:00:00 2026 GMT Subject: CN=a1cd123b-5fb7-46ce-9682-a6f5288ffb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:2d:0b:2a:10:d1:5a:c0:0a:f2:d2:1d:a7: cd:74:e5:35:bc:a1:fc:9d:62:c5:6b:93:b2:bf:8a: 3c:36:84:9b:d1:65:db:74:25:e0:6f:c9:c3:42:3d: 34:82:6a:f0:a3:02:67:37:6d:cf:da:d3:cb:9b:a3: 6a:58:10:40:20:f9:d4:21:9c:9f:8e:70:5c:ce:1a: b3:cb:df:c3:33:a9:6f:c4:56:63:29:7e:7c:fb:83: 39:7d:b1:f5:a5:17:53:14:67:a8:4c:87:1a:8f:58: 14:d3:c5:14:dd:0d:fc:5e:79:26:58:8e:61:91:93: 17:26:7d:e7:5c:8e:5f:e1:63:27:37:4f:5e:30:0f: 50:bf:a5:af:fd:a1:fd:22:d6:48:ab:ea:d7:18:7d: 02:6b:2b:7c:49:c5:f7:96:3b:28:40:07:c6:71:25: 17:ed:27:82:01:54:c7:16:d3:3a:67:30:dd:f4:a8: df:e4:0b:d4:03:a9:d7:67:ce:05:b6:8f:21:28:9d: 79:0c:6e:64:0a:b4:68:29:52:d4:41:9d:4e:20:a2: 87:0e:f0:12:89:b3:99:28:7f:f7:a6:3e:63:03:5d: 6b:61:98:06:f8:e9:3f:51:97:80:20:ec:7c:b5:13: ee:b9:13:1f:ec:e7:93:6a:9f:27:d8:70:c0:9c:5c: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E0:0E:CD:9A:57:DA:A0:66:F5:8C:7D:51:78:D7:17:9C:0F:27:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.crl X509v3 Authority Key Identifier: keyid:4C:25:9A:B4:92:F2:B1:D4:98:60:A7:2C:9B:DD:CE:04:1A:2C:59:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c5:3e:cf:84:b8:92:11:48:a2:77:16:d2:02:60:4f:b4:b5: 79:54:b3:22:31:6b:24:cb:95:f3:af:bd:3a:29:0d:8b:99:8b: ea:51:2b:22:c9:87:59:6c:3f:a2:f3:09:8e:ff:5f:e1:a1:4c: 1a:18:d5:27:c6:9f:18:7f:2f:e0:68:0b:1f:54:5f:a0:99:86: 18:05:ed:dc:96:c1:90:9a:65:dc:6e:44:9c:39:d4:69:b4:9b: d8:e5:ca:bc:ef:85:7d:73:66:f4:b8:fb:07:b4:32:24:c2:4a: a9:d1:05:d3:b1:6c:6f:f6:d5:f2:5f:73:13:88:d8:a8:b5:47: b7:03:e3:9b:ed:77:67:49:ca:19:b0:83:aa:51:7f:33:ce:89: db:89:fc:51:f0:0a:9e:87:d1:ea:50:63:83:5c:d1:39:d4:1c: d3:d0:98:8b:79:77:07:72:03:6a:7b:2d:8f:09:03:a0:91:1e: cc:c4:a5:fa:05:17:21:cb:1c:f9:b4:cd:cb:a0:02:04:fd:71: 89:77:e4:e4:c6:ff:c2:01:7a:57:92:50:ae:1f:7b:20:72:e6: e1:e0:6e:1b:cd:99:08:39:6b:18:0f:3e:b7:97:57:02:42:db: 87:c8:c1:00:8c:43:f6:b5:35:bd:03:ec:ea:28:05:8e:e5:25: 3a:b4:a4:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PhB/Pu/5KnCNRsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RmMTBhNTQtZjQ2Ny00NTUzLWIwOGEtMDM1NzRlYjVj Y2U3MB4XDTI2MDUxMjE2MDAwM1oXDTI2MDUxNTE2MDAwMFowLzEtMCsGA1UEAxMk YTFjZDEyM2ItNWZiNy00NmNlLTk2ODItYTZmNTI4OGZmYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMYtCyoQ0VrACvLSHafNdOU1vKH8nWLFa5Oy v4o8NoSb0WXbdCXgb8nDQj00gmrwowJnN23P2tPLm6NqWBBAIPnUIZyfjnBczhqz y9/DM6lvxFZjKX58+4M5fbH1pRdTFGeoTIcaj1gU08UU3Q38XnkmWI5hkZMXJn3n XI5f4WMnN09eMA9Qv6Wv/aH9ItZIq+rXGH0Cayt8ScX3ljsoQAfGcSUX7SeCAVTH FtM6ZzDd9Kjf5AvUA6nXZ84Fto8hKJ15DG5kCrRoKVLUQZ1OIKKHDvASibOZKH/3 pj5jA11rYZgG+Ok/UZeAIOx8tRPuuRMf7OeTap8n2HDAnFw3VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDzgDs2aV9qgZvWMfVF41xecDyeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGYx MGE1NC1mNDY3LTQ1NTMtYjA4YS0wMzU3NGViNWNjZTcvM2RmMTBhNTQtZjQ2Ny00 NTUzLWIwOGEtMDM1NzRlYjVjY2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2RmMTBhNTQtZjQ2Ny00NTUzLWIw OGEtMDM1NzRlYjVjY2U3LzNkZjEwYTU0LWY0NjctNDU1My1iMDhhLTAzNTc0ZWI1 Y2NlNy5jcmwwHwYDVR0jBBgwFoAUTCWatJLysdSYYKcsm93OBBosWTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZGYxMGE1NC1mNDY3LTQ1NTMtYjA4YS0wMzU3 NGViNWNjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3xT7PhLiSEUiidxbSAmBP tLV5VLMiMWsky5Xzr706KQ2LmYvqUSsiyYdZbD+i8wmO/1/hoUwaGNUnxp8Yfy/g aAsfVF+gmYYYBe3clsGQmmXcbkScOdRptJvY5cq874V9c2b0uPsHtDIkwkqp0QXT sWxv9tXyX3MTiNiotUe3A+Ob7XdnScoZsIOqUX8zzonbifxR8Aqeh9HqUGODXNE5 1BzT0JiLeXcHcgNqey2PCQOgkR7MxKX6BRchyxz5tM3LoAIE/XGJd+Tkxv/CAXpX klCuH3sgcubh4G4bzZkIOWsYDz63l1cCQtuHyMEAjEP2tTW9A+zqKAWO5SU6tKTS -----END CERTIFICATE-----Generated at Wed May 13 15:45:52 2026 by rpki-client