$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: 8WgOo/YN5kA6FXW8O8Y1vypc6d/f74lVvIfquzKEXE8= Subject key identifier: D8:F4:B1:C2:61:1C:62:49:D2:81:13:6C:EF:9C:5A:1F:BE:67:C4:F6 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584D48EE63892F422F7858C43900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6F969 Signing time: Wed 25 Mar 2026 11:00:04 +0000 Manifest this update: Wed 25 Mar 2026 11:00:04 +0000 Manifest next update: Sat 28 Mar 2026 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: qgy75euQno1NI/5Ulyc2dimn6wWVinmqLjJm/pSu9fU=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: OWMv4CDeRy2CqSZdpvj+cq/31g6dMHkfH7UfqBx54As=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:ee:63:89:2f:42:2f:78:58:c4:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Mar 25 11:00:04 2026 GMT Not After : Mar 28 11:00:00 2026 GMT Subject: CN=de37b360-066b-4118-b166-dbe79eb09a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a7:c5:d9:77:48:e4:50:53:3b:1c:96:82:d5: 65:17:0e:70:12:2a:85:ff:28:0a:62:b6:bd:d8:eb: f5:e6:bf:40:31:bb:1a:e0:82:4c:00:af:5e:62:17: e3:cd:48:16:ce:6a:20:89:23:e0:f4:56:6f:29:39: 37:a8:e7:0d:55:35:fa:81:15:5d:bc:1b:68:27:42: 3f:6c:ad:03:5f:97:8f:75:cf:e9:04:af:d1:55:c8: ee:b7:4f:09:8b:de:a0:42:5d:5f:73:95:bb:a2:7b: d7:ac:60:24:dd:32:a4:fb:0f:26:1d:4f:c7:90:0a: 60:86:78:31:3e:29:3b:c1:8c:cf:37:26:c4:ac:49: eb:d3:bc:40:be:6e:cd:9c:51:50:ed:e7:93:84:e5: d9:02:b0:1d:40:9f:8a:d5:cc:3e:12:be:40:cb:76: 61:c5:2d:9c:e7:e0:c5:a3:24:74:4b:82:f8:9d:b4: c4:52:ab:06:db:f6:ce:03:14:1b:80:8b:ec:d9:f6: 33:09:b1:c1:96:21:46:57:72:16:8a:cb:bf:b7:e4: 32:6e:5b:77:62:dd:0c:bc:d2:2d:c8:0a:6c:df:6b: 61:2d:cd:22:ca:f5:1a:5c:53:13:58:60:a4:fe:43: da:03:d9:21:94:03:9c:18:63:22:ec:fd:12:4e:bf: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:B1:C2:61:1C:62:49:D2:81:13:6C:EF:9C:5A:1F:BE:67:C4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:56:c5:55:5b:f7:b7:18:b2:96:08:4e:f1:54:39:bf:66:0a: 1d:80:30:b2:d1:bb:12:6c:1e:31:c9:9e:56:ff:72:78:0c:b1: c1:59:01:ba:d4:f5:87:1c:01:e8:07:da:c2:42:fc:72:6e:20: 8e:f8:36:f6:65:1c:3f:21:d2:b6:b3:dc:8e:32:07:54:21:1c: 70:d5:b8:02:22:72:1d:27:6b:97:a2:1a:34:d7:98:2e:32:8a: 70:5f:4a:6a:67:e9:20:db:b0:f8:48:eb:c2:4b:a3:01:c1:69: 20:bf:77:8e:31:f6:bb:d2:c1:38:52:a3:71:b3:08:79:5c:28: af:de:ce:75:30:2c:50:3b:27:b5:9b:07:0a:78:f0:03:74:3e: 7a:33:28:cf:93:ab:38:9b:80:a9:ba:03:32:76:0b:95:1a:f6: a5:0d:01:86:10:6a:7d:98:a5:d9:bb:7a:ca:1d:41:c6:9b:6f: e5:9a:ab:77:b7:92:6e:03:c5:fe:d7:11:73:99:66:09:c9:d8: 9e:24:43:9b:f0:d8:9e:91:9c:0c:02:b7:86:09:b1:dc:a6:9b: f4:74:b3:75:ac:b0:31:f0:94:27:cf:4a:5c:46:73:61:bf:f1: 4e:9d:17:d2:a9:48:99:99:6e:4c:4d:0e:b1:0c:e1:bc:fd:08: 3d:d8:26:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I7mOJL0IveFjEOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI2MDMyNTExMDAwNFoXDTI2MDMyODExMDAwMFowLzEtMCsGA1UEAxMk ZGUzN2IzNjAtMDY2Yi00MTE4LWIxNjYtZGJlNzllYjA5YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKfF2XdI5FBTOxyWgtVlFw5wEiqF/ygKYra9 2Ov15r9AMbsa4IJMAK9eYhfjzUgWzmogiSPg9FZvKTk3qOcNVTX6gRVdvBtoJ0I/ bK0DX5ePdc/pBK/RVcjut08Ji96gQl1fc5W7onvXrGAk3TKk+w8mHU/HkApghngx Pik7wYzPNybErEnr07xAvm7NnFFQ7eeThOXZArAdQJ+K1cw+Er5Ay3ZhxS2c5+DF oyR0S4L4nbTEUqsG2/bOAxQbgIvs2fYzCbHBliFGV3IWisu/t+Qyblt3Yt0MvNIt yAps32thLc0iyvUaXFMTWGCk/kPaA9khlAOcGGMi7P0STr/kpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNj0scJhHGJJ0oETbO+cWh++Z8T2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDZVsVVW/e3GLKWCE7xVDm/ ZgodgDCy0bsSbB4xyZ5W/3J4DLHBWQG61PWHHAHoB9rCQvxybiCO+Db2ZRw/IdK2 s9yOMgdUIRxw1bgCInIdJ2uXoho015guMopwX0pqZ+kg27D4SOvCS6MBwWkgv3eO Mfa70sE4UqNxswh5XCiv3s51MCxQOye1mwcKePADdD56MyjPk6s4m4CpugMydguV GvalDQGGEGp9mKXZu3rKHUHGm2/lmqt3t5JuA8X+1xFzmWYJydieJEOb8NiekZwM AreGCbHcppv0dLN1rLAx8JQnz0pcRnNhv/FOnRfSqUiZmW5MTQ6xDOG8/Qg92CZe -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:14 2026 by rpki-client