$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: xcvzA0xjtS49zeTpncImTlQ/ndXfvTBvzO5/zjBEL8M= Subject key identifier: D3:62:6D:3A:98:15:A2:F4:4D:47:0B:E0:30:67:29:F5:30:20:39:CC Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584D4A1839CD2FE977F4568C4850 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6D0AA Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: PZSu+nzlrZdU1ffKTq+C4cfSb1DZ6r01+levGc5KrBc=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: +o+nTKyGSWHtboUrxwp3oQ6W+s6bAlGAK45E3kg/LeY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:39:cd:2f:e9:77:f4:56:8c:48:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=f28b6f32-c98a-4732-bd9d-f9e080030845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0d:9a:c5:e2:a4:b2:e8:00:d2:14:e0:d1:08: 91:31:21:14:0a:a6:3d:14:1c:bf:93:3b:13:53:f2: 97:8e:8e:83:71:34:5c:51:72:bd:5e:af:7a:b6:b0: 53:2b:6f:db:5d:3c:5b:8d:c1:d9:70:2a:cb:e6:68: 3b:67:d1:9d:7a:fa:e3:cc:d3:87:cb:ff:32:74:65: 0c:e9:83:34:d9:b7:c8:32:58:b1:05:c6:81:74:6d: 09:5f:9e:0a:69:59:06:dc:f2:87:bf:b2:e4:87:81: 59:a3:9e:48:f7:87:fd:ee:e9:ff:db:7a:f3:c7:15: aa:bc:17:72:d7:7f:04:12:c8:fd:8f:b0:61:02:1a: 12:8e:0f:69:0a:37:b6:15:46:2d:77:4c:f1:a2:33: d7:98:52:26:eb:1d:e0:99:44:d1:56:9a:e5:5f:c6: 89:4b:0f:b7:bd:63:5c:c0:a0:1b:9b:7b:1b:44:72: 19:ce:80:b1:39:62:61:d9:f7:82:bc:be:f2:1f:a6: 56:8f:b8:6e:b3:51:bd:f8:5f:e5:dd:8c:b8:72:7c: 9d:31:7f:d8:85:9e:2c:e9:64:3a:f1:6b:79:7c:2e: a9:09:4b:45:b0:a6:4b:1c:be:bd:54:a7:9a:22:58: 96:7b:d3:d6:81:26:e1:89:e8:76:40:14:b7:b3:f8: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:6D:3A:98:15:A2:F4:4D:47:0B:E0:30:67:29:F5:30:20:39:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f3:05:bf:4b:49:f2:a5:19:db:4e:ae:16:07:c5:e8:4d:42: 86:a1:b0:76:a4:d4:54:fe:08:03:30:35:42:7d:ef:bc:be:07: 2e:c0:fa:fc:05:30:d7:b0:de:34:dd:60:2b:c8:a0:82:1e:5d: 80:4c:27:8a:d8:30:4b:67:c7:3b:81:83:72:4d:76:f5:d8:59: 64:41:75:35:43:21:66:0c:3a:b2:48:35:b6:48:41:3c:6a:8e: 78:bc:79:ba:97:7c:d0:76:7d:0f:74:17:7b:74:9c:ba:41:8e: 8f:3d:4e:fc:78:ba:60:c9:7a:87:ad:26:03:e6:d9:43:79:a9: 48:c4:11:96:8a:e9:94:e3:98:3c:40:f9:dd:86:11:1d:ba:d0: 44:f5:15:88:d0:73:1a:bc:91:83:b2:91:c2:34:1a:7d:5a:dd: dc:7f:c3:e9:1e:a9:ad:a9:83:56:3f:06:51:6b:a3:25:75:3c: a1:95:3b:45:9c:65:55:86:17:58:8c:72:6c:d5:75:fa:53:02: 81:5e:c2:15:55:5e:5e:19:9e:b2:e2:06:32:79:eb:bd:c9:06: 80:4c:cf:d3:fe:d5:44:a2:35:9c:0d:12:4f:eb:f0:d3:eb:13: c0:84:c8:79:2b:31:71:26:0e:27:7b:d3:21:a6:33:59:de:c7: 7f:84:a6:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDnNL+l39FaMSFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk ZjI4YjZmMzItYzk4YS00NzMyLWJkOWQtZjllMDgwMDMwODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw2axeKksugA0hTg0QiRMSEUCqY9FBy/kzsT U/KXjo6DcTRcUXK9Xq96trBTK2/bXTxbjcHZcCrL5mg7Z9GdevrjzNOHy/8ydGUM 6YM02bfIMlixBcaBdG0JX54KaVkG3PKHv7Lkh4FZo55I94f97un/23rzxxWqvBdy 138EEsj9j7BhAhoSjg9pCje2FUYtd0zxojPXmFIm6x3gmUTRVprlX8aJSw+3vWNc wKAbm3sbRHIZzoCxOWJh2feCvL7yH6ZWj7hus1G9+F/l3Yy4cnydMX/YhZ4s6WQ6 8Wt5fC6pCUtFsKZLHL69VKeaIliWe9PWgSbhieh2QBS3s/gFHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNNibTqYFaL0TUcL4DBnKfUwIDnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA68wW/S0nypRnbTq4WB8Xo TUKGobB2pNRU/ggDMDVCfe+8vgcuwPr8BTDXsN403WAryKCCHl2ATCeK2DBLZ8c7 gYNyTXb12FlkQXU1QyFmDDqySDW2SEE8ao54vHm6l3zQdn0PdBd7dJy6QY6PPU78 eLpgyXqHrSYD5tlDealIxBGWiumU45g8QPndhhEdutBE9RWI0HMavJGDspHCNBp9 Wt3cf8PpHqmtqYNWPwZRa6MldTyhlTtFnGVVhhdYjHJs1XX6UwKBXsIVVV5eGZ6y 4gYyeeu9yQaATM/T/tVEojWcDRJP6/DT6xPAhMh5KzFxJg4ne9MhpjNZ3sd/hKY6 -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:34 2026 by rpki-client