$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft File: 3d1c553d-7b57-40d6-a02c-deff888b678d.mft (raw, json) Hash identifier: Q2oKv4Xgrdd/abGnQKsMGjZ7+E+5VxmD83TqN0Wpe1s= Subject key identifier: D8:0C:13:1E:81:33:DA:DC:D7:78:87:28:AE:3D:C9:DE:7B:83:CA:68 Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D Certificate issuer: /CN=3d1c553d-7b57-40d6-a02c-deff888b678d Certificate serial: 010D0C9F4328584D49FA759F3EA460D4B645665C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft Manifest number: 010D0C9F4328584073A824DF5550C1C1CF240EF6 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 3cad8533-e32e-3054-ba93-3b327624a170.roa (hash: JczjFSjDHRbWZBbKmBwX2aHAcxZBwfbA9KMzMzvfzVA=) 2: 3d1c553d-7b57-40d6-a02c-deff888b678d.crl (hash: cRoQnwdP0ij16SLQgwJFSkyvkfJvmvhGw6p6w7NMOsY=) 3: e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa (hash: ENje6QIQ00amU17u+JUJ/SNu27jqsgTyZpw3WGOs0to=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:75:9f:3e:a4:60:d4:b6:45:66:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=649bfc38-1f07-48f9-b295-d2efa49dae82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:ff:0f:a7:6f:93:8e:22:0b:ff:3f:1f:ac: 71:55:2e:33:9b:db:db:9b:42:f4:2e:ff:2e:26:17: 0d:bd:b5:c4:c5:5d:ac:9e:55:9c:8f:75:ce:22:aa: bc:08:68:bd:06:31:6a:c6:78:3d:00:8b:22:5e:d5: fc:7c:71:4d:7f:71:d3:d1:f0:e1:de:72:3b:ea:75: 2d:ed:2d:c2:1a:bb:8b:4a:2e:99:b0:08:20:7c:17: 63:45:e3:83:4e:e7:83:91:ee:49:53:88:a2:52:84: a4:9f:a6:c5:c3:04:4d:ad:31:f3:c2:4a:5a:84:18: 39:ed:21:7d:81:59:19:58:43:1b:4b:27:a4:01:29: 09:55:4a:37:13:89:b4:b3:30:bd:b7:10:a5:bb:9f: a5:8c:65:12:ec:69:14:51:7d:34:7e:6e:e6:59:f5: 32:0f:ad:d5:e9:50:7e:11:71:40:d3:10:cc:11:1d: 35:b7:ea:6f:5f:0a:f9:4a:bb:0b:c8:bd:41:43:ff: 80:61:ee:ce:8a:59:54:61:9b:25:de:cb:0c:a2:52: e5:a4:54:41:15:a3:e8:de:1e:89:3a:3d:a2:a2:48: ef:31:d3:2d:53:f5:01:41:fc:94:ca:e8:70:af:af: ad:a0:ca:4b:c3:b3:09:10:65:2b:fb:44:f3:66:ac: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0C:13:1E:81:33:DA:DC:D7:78:87:28:AE:3D:C9:DE:7B:83:CA:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl X509v3 Authority Key Identifier: keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:50:14:10:e6:26:e6:6b:d5:a8:ec:87:9a:5a:a0:92:70:e6: 17:66:56:51:4b:9b:34:27:8e:9b:b7:59:58:60:a5:e8:a6:44: e3:c7:b3:93:2f:8d:1b:53:74:9b:51:6b:f5:ac:8d:5d:b0:ce: 77:61:6c:40:51:02:16:38:6a:99:08:a5:87:a2:03:cd:3d:07: a7:0c:1c:30:01:ec:b3:d5:35:98:b7:37:61:a8:19:83:fb:ff: a5:d4:d7:24:e6:0a:74:b5:77:c0:3b:14:66:3c:9f:9d:d0:aa: 57:84:dc:2c:2a:3f:ae:46:24:ec:1c:a8:86:98:57:5e:68:dc: fa:c7:c9:90:02:2c:63:32:36:5d:16:b6:38:41:fd:52:a8:38: 55:ed:d8:ac:48:69:1f:0f:2b:63:59:1f:10:b0:a6:59:29:2d: cf:94:21:31:0b:a0:62:e3:79:95:b9:52:24:85:7d:c3:0a:85: 41:06:f2:1e:19:d3:8d:1f:f9:f4:ca:b0:68:91:d8:f2:b0:a2: 55:7c:dc:7c:0e:93:30:ef:58:47:92:75:f3:c7:38:ff:25:87: ad:e4:65:93:91:99:c9:99:69:05:6c:0a:ed:5d:a5:24:2a:77: 7e:63:20:a3:fd:79:1f:5f:1e:5b:48:b0:5e:28:18:43:e6:4a: 71:11:c4:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nWfPqRg1LZFZlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzU1M2QtN2I1Ny00MGQ2LWEwMmMtZGVmZjg4OGI2 NzhkMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NjQ5YmZjMzgtMWYwNy00OGY5LWIyOTUtZDJlZmE0OWRhZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwX/D6dvk44iC/8/H6xxVS4zm9vbm0L0Lv8u JhcNvbXExV2snlWcj3XOIqq8CGi9BjFqxng9AIsiXtX8fHFNf3HT0fDh3nI76nUt 7S3CGruLSi6ZsAggfBdjReODTueDke5JU4iiUoSkn6bFwwRNrTHzwkpahBg57SF9 gVkZWEMbSyekASkJVUo3E4m0szC9txClu5+ljGUS7GkUUX00fm7mWfUyD63V6VB+ EXFA0xDMER01t+pvXwr5SrsLyL1BQ/+AYe7OillUYZsl3ssMolLlpFRBFaPo3h6J Oj2iokjvMdMtU/UBQfyUyuhwr6+toMpLw7MJEGUr+0TzZqz8+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNgMEx6BM9rc13iHKK49yd57g8poMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFj NTUzZC03YjU3LTQwZDYtYTAyYy1kZWZmODg4YjY3OGQvM2QxYzU1M2QtN2I1Ny00 MGQ2LWEwMmMtZGVmZjg4OGI2NzhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2QxYzU1M2QtN2I1Ny00MGQ2LWEw MmMtZGVmZjg4OGI2NzhkLzNkMWM1NTNkLTdiNTctNDBkNi1hMDJjLWRlZmY4ODhi Njc4ZC5jcmwwHwYDVR0jBBgwFoAUw1AQV1ZhUS/6Ua37rOfpVzzVfZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFjNTUzZC03YjU3LTQwZDYtYTAyYy1kZWZm ODg4YjY3OGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGUBQQ5ibma9Wo7IeaWqCS cOYXZlZRS5s0J46bt1lYYKXopkTjx7OTL40bU3SbUWv1rI1dsM53YWxAUQIWOGqZ CKWHogPNPQenDBwwAeyz1TWYtzdhqBmD+/+l1Nck5gp0tXfAOxRmPJ+d0KpXhNws Kj+uRiTsHKiGmFdeaNz6x8mQAixjMjZdFrY4Qf1SqDhV7disSGkfDytjWR8QsKZZ KS3PlCExC6Bi43mVuVIkhX3DCoVBBvIeGdONH/n0yrBokdjysKJVfNx8DpMw71hH knXzxzj/JYet5GWTkZnJmWkFbArtXaUkKnd+YyCj/XkfXx5bSLBeKBhD5kpxEcQU -----END CERTIFICATE-----Generated at Thu Mar 26 21:04:25 2026 by rpki-client