$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: URzJnLTwzhOfsqPzc9yH+opeuT6B80d7/LOPbnYeQU0= Subject key identifier: 0D:24:4C:DF:21:83:62:C2:4F:D5:74:AA:B5:80:A0:D7:47:52:E5:0E Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584D48B2D4DF71F907F182E4A180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA9734 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: oO0lFzy41eHuKx2jQia6C9OQSCpXbmfpMmeOKIhXlBg=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: eoiWNEbcDzgjoHS0W9j54qjvSZTu0MLz1Yvk/x41tFk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d4:df:71:f9:07:f1:82:e4:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=1f89b542-66f0-44a8-b591-b4fe67674e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:f7:15:08:ca:c9:d0:54:33:e8:7d:9c:1d: 15:fc:32:1e:69:33:21:75:b1:b0:de:b5:cd:c0:f5: d1:70:a7:a9:f1:c8:28:cb:bf:0d:09:68:73:77:5e: 76:fb:62:ac:36:f0:38:d8:4a:88:ae:de:ba:1a:ff: d7:2c:df:7b:b3:98:5d:19:63:79:7c:5e:17:dd:d7: 6c:db:b8:52:a5:98:d4:c9:0c:67:a8:61:ca:2b:f1: be:4a:02:71:e9:2b:8b:b3:11:b9:28:b3:fe:78:79: f4:c9:52:1a:2e:19:3c:a4:aa:9f:dd:ea:c5:17:a6: 26:53:9d:70:ac:65:f6:d3:3b:ae:17:52:6e:e1:eb: 41:54:55:40:2b:34:98:95:fc:5f:51:18:e7:e1:5d: cf:42:7a:e2:8c:57:dc:fe:0f:59:a1:42:ab:c9:67: fa:b1:59:d9:37:c0:5d:cd:9c:df:b2:a2:da:41:85: 25:8f:74:a7:4e:d3:60:1f:26:b4:9d:53:bb:4f:9c: 9d:82:9c:e1:f8:71:14:64:70:f0:2a:42:9a:32:62: 8a:a6:7f:23:de:52:59:79:e9:65:d0:ed:d7:d4:a7: 7d:18:4e:95:89:cf:1b:b6:82:a1:72:5e:49:62:d8: bb:13:1b:84:be:4c:35:ec:6d:20:7f:36:75:d6:da: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:24:4C:DF:21:83:62:C2:4F:D5:74:AA:B5:80:A0:D7:47:52:E5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:47:e1:b9:f3:f1:65:f4:05:d7:1e:bb:f8:ad:82:08:fb:20: 60:9c:41:27:10:8a:3b:99:f1:83:44:21:22:ac:97:1c:31:88: ce:44:3c:54:57:2a:6f:22:09:4e:e9:b5:d0:31:6b:25:6f:22: 55:f5:24:43:c2:86:40:ca:a8:89:da:dc:be:a3:f6:5c:7c:d5: 8e:d3:22:00:e3:bb:d0:38:52:69:99:25:98:85:15:42:2d:1e: 83:f2:ea:59:54:2b:07:3c:5d:b0:d7:82:20:2a:a4:c5:79:1d: d9:0a:12:76:42:53:85:7a:eb:18:6b:7f:51:cc:5c:18:94:f6: 61:14:c3:76:7a:21:28:f9:99:a5:b7:4f:c3:c8:bd:e2:d3:f0: 39:94:ca:4d:84:c6:57:40:53:08:d7:61:5e:06:c5:d3:1c:3b: e6:d2:8d:06:55:2f:d6:2d:87:bd:d8:e2:2b:67:d7:60:45:87: 7c:df:9c:38:cc:7b:e5:11:01:6f:5d:af:f4:aa:04:e8:71:5f: f1:d8:04:2d:86:c9:92:c2:17:81:66:56:45:39:9b:f7:f1:87: 28:7b:24:a3:95:c2:8d:bb:5d:e6:e5:b8:ef:58:29:47:75:9c: da:bf:6f:85:07:68:43:04:8c:92:6b:40:12:f0:ee:6a:8a:fc: e5:ed:2a:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstTfcfkH8YLkoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk MWY4OWI1NDItNjZmMC00NGE4LWI1OTEtYjRmZTY3Njc0ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9f3FQjKydBUM+h9nB0V/DIeaTMhdbGw3rXN wPXRcKep8cgoy78NCWhzd152+2KsNvA42EqIrt66Gv/XLN97s5hdGWN5fF4X3dds 27hSpZjUyQxnqGHKK/G+SgJx6SuLsxG5KLP+eHn0yVIaLhk8pKqf3erFF6YmU51w rGX20zuuF1Ju4etBVFVAKzSYlfxfURjn4V3PQnrijFfc/g9ZoUKryWf6sVnZN8Bd zZzfsqLaQYUlj3SnTtNgHya0nVO7T5ydgpzh+HEUZHDwKkKaMmKKpn8j3lJZeell 0O3X1Kd9GE6Vic8btoKhcl5JYti7ExuEvkw17G0gfzZ11towuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA0kTN8hg2LCT9V0qrWAoNdHUuUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwR+G58/Fl9AXXHrv4rYII +yBgnEEnEIo7mfGDRCEirJccMYjORDxUVypvIglO6bXQMWslbyJV9SRDwoZAyqiJ 2ty+o/ZcfNWO0yIA47vQOFJpmSWYhRVCLR6D8upZVCsHPF2w14IgKqTFeR3ZChJ2 QlOFeusYa39RzFwYlPZhFMN2eiEo+Zmlt0/DyL3i0/A5lMpNhMZXQFMI12FeBsXT HDvm0o0GVS/WLYe92OIrZ9dgRYd835w4zHvlEQFvXa/0qgTocV/x2AQthsmSwheB ZlZFOZv38YcoeySjlcKNu13m5bjvWClHdZzav2+FB2hDBIySa0AS8O5qivzl7SrT -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:34 2026 by rpki-client