$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: ZLSCDLXLeot4BfnCPWJVPWXEF3vzGGDTAHYLH5qy3Fk= Subject key identifier: D2:EB:0F:5A:6E:26:AA:31:7C:C7:A9:44:EF:EB:DD:2F:5A:28:B1:1A Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584D49DC9E4FFB33F6893C9FF9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FB1D Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: FFegKsEfoL20HGFKplZGcYAkuckX9WgZMW++A3ShsFk=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: HDwTyEJbSycjj8AKAXUGk1xC30Evc8P2X4xS9ro57cs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9e:4f:fb:33:f6:89:3c:9f:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=c07e868a-e1f6-41fd-8178-b11d4a837865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:ad:3e:c3:76:07:52:9e:24:20:c1:7f:81: 84:e5:2f:06:6a:d6:c1:54:49:d7:20:37:ca:84:fb: 2c:35:4b:d2:b7:ab:84:1c:79:e5:c3:18:a9:1e:a6: 88:32:b1:80:ea:c2:e8:1b:42:34:fd:e8:c4:05:67: 17:2b:9b:e7:ed:f6:bc:95:7b:96:34:7b:9f:e7:ea: 2d:24:be:38:27:7c:a6:79:d2:4b:e5:a1:01:2a:1f: 9f:66:d3:3d:25:4f:fd:02:cd:9d:c5:51:38:a2:00: 38:08:3c:f1:d8:cf:de:ac:19:b4:71:9e:d6:89:46: 32:58:e6:7b:62:86:7a:a9:fb:73:cf:be:da:14:18: 8c:57:86:d6:a2:61:25:9e:1b:94:ad:45:65:0c:de: 95:aa:f1:a4:d0:e0:02:ee:3b:62:d1:cf:bb:57:05: 55:53:88:02:a9:48:3e:50:63:c8:ca:82:d6:26:d9: 51:77:bd:44:05:91:4f:b8:4f:cd:b1:f6:db:78:6e: 63:0b:21:8e:a3:2c:24:a9:5f:d9:a4:94:e6:27:2b: fa:98:dd:f5:78:f4:c2:59:5d:73:72:0d:f1:7b:e5: 4c:52:c1:0e:37:f6:f6:47:25:d5:bd:3d:5c:05:36: eb:cf:60:ba:10:b4:e6:62:f2:9f:e3:47:9a:d7:4e: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:0F:5A:6E:26:AA:31:7C:C7:A9:44:EF:EB:DD:2F:5A:28:B1:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:19:86:e2:02:40:e0:22:20:2f:41:d9:30:5a:a6:3f:ad:68: 44:be:66:44:95:70:66:70:12:87:f5:fc:a7:05:a6:5e:b1:e9: 6f:de:75:d2:27:ad:db:87:05:c6:8e:5b:51:12:9e:e5:23:fa: b4:84:0c:9a:fe:cf:38:ef:97:48:ee:93:00:1e:72:d2:e9:a9: aa:c9:a4:f6:45:50:87:0a:e6:a5:fe:5e:ba:0a:df:9d:06:99: 9e:b6:b4:46:e1:56:8a:88:3d:ed:c6:ef:7b:85:0e:30:db:1a: f2:5c:03:59:39:b2:34:30:5c:32:b5:99:c0:fa:8c:3f:82:88: eb:07:ca:c1:5d:5f:85:7f:a5:60:bd:d9:9e:8c:b6:24:c5:cf: 42:6f:35:73:06:13:1a:92:f2:12:c7:d5:87:d3:bd:f0:c2:52: 5f:64:a7:45:b2:b5:3d:50:11:bf:53:44:b1:df:5b:73:25:5c: 82:56:f7:c5:a6:a9:41:c1:8b:7f:1f:e3:ba:bc:35:9b:3b:ec: 50:0c:81:1a:70:b6:9c:d5:b0:a4:e2:07:0b:2d:30:41:3e:a7: 1d:de:cd:04:6f:39:21:a6:0b:27:e4:d3:f8:42:a9:08:8b:d6: c7:9f:99:fe:27:a8:6a:e1:36:92:a6:7d:49:09:96:40:cc:ea: 67:e4:e8:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J5P+zP2iTyf+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk YzA3ZTg2OGEtZTFmNi00MWZkLTgxNzgtYjExZDRhODM3ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkatPsN2B1KeJCDBf4GE5S8GatbBVEnXIDfK hPssNUvSt6uEHHnlwxipHqaIMrGA6sLoG0I0/ejEBWcXK5vn7fa8lXuWNHuf5+ot JL44J3ymedJL5aEBKh+fZtM9JU/9As2dxVE4ogA4CDzx2M/erBm0cZ7WiUYyWOZ7 YoZ6qftzz77aFBiMV4bWomElnhuUrUVlDN6VqvGk0OAC7jti0c+7VwVVU4gCqUg+ UGPIyoLWJtlRd71EBZFPuE/NsfbbeG5jCyGOoywkqV/ZpJTmJyv6mN31ePTCWV1z cg3xe+VMUsEON/b2RyXVvT1cBTbrz2C6ELTmYvKf40ea104LMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLrD1puJqoxfMepRO/r3S9aKLEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfGYbiAkDgIiAvQdkwWqY/ rWhEvmZElXBmcBKH9fynBaZeselv3nXSJ63bhwXGjltREp7lI/q0hAya/s8475dI 7pMAHnLS6amqyaT2RVCHCual/l66Ct+dBpmetrRG4VaKiD3txu97hQ4w2xryXANZ ObI0MFwytZnA+ow/gojrB8rBXV+Ff6VgvdmejLYkxc9CbzVzBhMakvISx9WH073w wlJfZKdFsrU9UBG/U0Sx31tzJVyCVvfFpqlBwYt/H+O6vDWbO+xQDIEacLac1bCk 4gcLLTBBPqcd3s0Ebzkhpgsn5NP4QqkIi9bHn5n+J6hq4TaSpn1JCZZAzOpn5OgY -----END CERTIFICATE-----Generated at Thu Mar 26 09:51:53 2026 by rpki-client