$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json) Hash identifier: qOrPgo2VKxxDkL68e+oyIGbkPsmJxlIXqdydSAbZkYo= Subject key identifier: 09:46:49:A1:1F:62:3D:DD:A9:ED:7C:68:B1:04:D0:27:B5:0A:BF:99 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584D49DC9E0E6C5F5EEE4DDACC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE360 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: d7peY0kRQbyjSfnZb8jA4ArxII88AUB+qsi2jT8fLLI=) 2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: xB2+uCo7ev+JpilsUU/PwftY3a+MSRIAyFFjzNJWoqY=) 3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: 9hIt9xtsSusmvOr2vU8r+HFD09SraiRd1RM9jzsn+eM=) 4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: X73sgv0YGT55yoPW+GIUam1GIj9DY18uQWhXdKyrguQ=) 5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: rkJ7MuZnNyUEnw2eBRCTaT+HRSMCbN4IFKYG5hg8GTQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9e:0e:6c:5f:5e:ee:4d:da:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=365dcbf3-ebd1-49f5-a2d2-ff5a3652d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:f6:13:7c:d9:94:d7:ce:2c:83:78:07:75: dd:a8:e1:d0:7d:c4:42:7f:0a:00:9a:09:96:e3:7c: 16:54:ac:a1:e1:8e:cd:2f:3a:6d:d8:c0:58:15:da: 54:58:58:73:d0:e4:a8:eb:c8:27:ee:55:d2:58:81: 87:b9:36:49:cc:d4:87:44:ec:23:6f:7b:f0:21:05: 9b:02:10:7f:e0:a6:fb:cd:39:fc:ca:c7:05:5f:7e: 26:8d:c5:4c:3c:e4:75:8e:5a:34:c0:35:06:44:64: 25:4d:3a:53:79:be:ee:32:87:fa:70:97:3b:45:a3: d0:61:75:30:01:48:25:26:04:9f:45:bd:39:5e:6c: 12:5a:41:ee:80:a7:52:22:66:c6:f1:d7:ad:30:23: 0c:ee:b8:1d:02:1d:5b:21:78:0f:d9:f3:12:99:3a: 53:c0:5d:d9:4e:dc:f9:af:dc:65:6a:dc:eb:a3:c9: 87:52:7d:3b:51:db:23:0a:83:25:76:6c:a0:26:26: 10:bc:1a:07:ac:a3:3a:aa:84:ad:ce:05:27:7b:ff: 44:35:c7:b7:b7:71:f8:0b:99:8a:2f:ee:69:f8:7d: 21:eb:7b:66:34:5f:ae:15:a1:88:49:3b:be:be:7d: 4c:f0:12:93:03:5e:8a:25:15:a0:bb:3a:10:37:4c: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:49:A1:1F:62:3D:DD:A9:ED:7C:68:B1:04:D0:27:B5:0A:BF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8d:c7:34:a1:4b:6a:9d:dd:68:a4:d0:8d:06:4d:97:53:fc: 60:93:f4:02:40:46:ea:c2:59:df:ad:2e:42:4e:89:89:da:86: 2b:82:7a:1b:78:35:6a:88:5d:5a:ba:41:41:35:7b:67:17:da: c7:f9:bd:1f:17:98:46:c5:cf:97:ec:3a:fe:19:02:27:85:15: 69:6c:6f:f9:42:03:3e:3f:1a:16:a3:62:03:c3:17:a2:14:27: 83:c8:3c:bc:3e:66:fc:ac:37:23:79:16:e8:84:03:cf:2d:e3: ef:d5:63:6c:79:de:f6:ec:cb:1d:47:97:d3:3a:ad:b2:f8:48: 83:00:9a:3e:0f:46:4e:a4:2a:2d:62:25:e6:51:7a:72:8b:9b: 8e:5e:00:be:f9:4c:07:e1:a3:23:63:ca:d0:73:30:e6:7e:b2: 4f:87:57:dc:38:78:74:11:57:fb:0e:81:b4:30:cb:a4:d5:76: 3d:01:3a:46:8c:1e:90:93:00:fa:52:6b:51:7a:5a:42:40:f3: 61:32:6a:f4:9a:39:c2:1f:46:72:c7:f2:96:82:0b:1b:db:a8: 83:b8:75:a6:c7:e7:47:2b:24:b5:df:ac:b4:b2:24:ab:35:c9: b2:5b:e5:81:5b:d5:a5:a3:0f:90:82:68:b3:94:be:37:73:a9: 28:39:f7:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J4ObF9e7k3azIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk MzY1ZGNiZjMtZWJkMS00OWY1LWEyZDItZmY1YTM2NTJkMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiH2E3zZlNfOLIN4B3XdqOHQfcRCfwoAmgmW 43wWVKyh4Y7NLzpt2MBYFdpUWFhz0OSo68gn7lXSWIGHuTZJzNSHROwjb3vwIQWb AhB/4Kb7zTn8yscFX34mjcVMPOR1jlo0wDUGRGQlTTpTeb7uMof6cJc7RaPQYXUw AUglJgSfRb05XmwSWkHugKdSImbG8detMCMM7rgdAh1bIXgP2fMSmTpTwF3ZTtz5 r9xlatzro8mHUn07UdsjCoMldmygJiYQvBoHrKM6qoStzgUne/9ENce3t3H4C5mK L+5p+H0h63tmNF+uFaGISTu+vn1M8BKTA16KJRWguzoQN0zulwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAlGSaEfYj3dqe18aLEE0Ce1Cr+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00 MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXjcc0oUtqnd1opNCNBk2X U/xgk/QCQEbqwlnfrS5CTomJ2oYrgnobeDVqiF1aukFBNXtnF9rH+b0fF5hGxc+X 7Dr+GQInhRVpbG/5QgM+PxoWo2IDwxeiFCeDyDy8Pmb8rDcjeRbohAPPLePv1WNs ed727MsdR5fTOq2y+EiDAJo+D0ZOpCotYiXmUXpyi5uOXgC++UwH4aMjY8rQczDm frJPh1fcOHh0EVf7DoG0MMuk1XY9ATpGjB6QkwD6UmtRelpCQPNhMmr0mjnCH0Zy x/KWggsb26iDuHWmx+dHKyS136y0siSrNcmyW+WBW9Wlow+QgmizlL43c6koOfdG -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:59 2026 by rpki-client