$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft File: a3398dc1-de03-4844-957b-e882d7878ae2.mft (raw, json) Hash identifier: YMdk+sK3sbSEHnqRkiftaYuGSipzLWr3CJgwxXkmWYA= Subject key identifier: 32:82:DB:3B:A5:1F:70:00:79:7B:70:AB:26:5D:CD:21:65:EA:CF:0E Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584D48950CF3A1DD2F06C738DC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft Manifest number: 010D0C9F4328584073A8471614A6B3775D4E4634 Signing time: Wed 25 Mar 2026 08:00:04 +0000 Manifest this update: Wed 25 Mar 2026 08:00:04 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (hash: TIaLt2hlJK41cX30AWEO61F+3C87rovhm62oXrWmA4Y=) 2: a3398dc1-de03-4844-957b-e882d7878ae2.crl (hash: O5g+QbgVycRtiFEIYxl1dp12fzqm7lnfMsy9k0JETnQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:95:0c:f3:a1:dd:2f:06:c7:38:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Mar 25 08:00:04 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=2dbb5cc1-29d7-4723-9df4-b3b71e4eb181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:d5:40:78:94:c5:6d:8a:d9:9a:6c:21:6a: 6d:1a:7c:76:bf:f4:71:c5:05:d9:57:be:ed:53:c3: f4:eb:63:76:0a:8b:50:49:ec:2c:80:45:97:b3:b5: 70:0e:12:ef:80:ef:2b:75:82:56:63:bb:bd:7f:8d: 27:42:aa:f4:7f:4a:1f:0a:b4:92:7d:00:2c:f8:7d: e2:53:8a:55:36:cf:49:5c:3e:d6:69:f7:5f:0a:6b: 0c:cc:1a:74:eb:e8:e4:51:ad:7d:36:a3:6f:c1:46: 15:cb:64:15:7b:9e:7a:0c:46:70:2a:67:c1:95:d7: 45:f6:65:65:e4:ee:3a:1a:b6:81:16:f7:5a:09:c7: 71:35:ec:4a:ea:ec:e1:4a:4f:97:20:b8:16:6c:b9: ef:3b:c9:30:df:50:bc:47:e2:ec:20:02:51:8d:8e: 99:37:31:2a:75:46:b3:b1:ee:3a:b9:0b:d0:75:27: 9e:11:f2:a7:ee:83:04:35:8c:e3:1e:2e:60:c3:12: 28:9a:7b:a7:48:fa:b2:e8:ed:fc:85:49:db:f8:42: b7:d3:55:93:2f:7e:51:45:61:42:ed:00:64:d8:a4: 46:f4:4b:cb:c7:18:fc:3b:7f:e6:cd:d9:94:5e:79: c1:c8:a9:20:93:a0:ed:75:18:df:b2:20:c6:66:14: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:82:DB:3B:A5:1F:70:00:79:7B:70:AB:26:5D:CD:21:65:EA:CF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:58:5b:80:e9:57:d5:93:f5:07:fa:8f:c3:5a:dc:0b:d3:0e: 7c:94:cb:4c:ef:f3:b7:22:65:cf:47:f1:be:49:94:32:48:a3: 14:f9:9e:97:75:68:ed:f6:25:9d:42:4c:9c:b0:fe:97:82:c8: 30:30:9e:8c:8f:b2:1d:62:1d:81:2c:02:03:5e:57:44:56:fd: 84:56:b5:70:55:f7:58:cf:e1:4b:53:d7:0f:21:85:04:b1:bf: 8a:50:0e:2b:1d:f9:a0:65:5b:af:a9:fe:2e:49:c1:25:99:11: 2b:f5:9d:34:ed:78:c0:93:dd:4d:fa:f5:4d:e2:32:d8:15:d2: 7a:95:de:6c:4e:5d:dc:ba:b9:dd:65:f1:6f:33:da:9a:2b:48: 64:cc:47:af:0b:64:a2:d8:29:85:08:36:e3:25:1d:b7:7d:24: 68:e0:88:43:90:f1:bc:28:f5:82:b6:11:ea:12:9e:b7:82:1b: 83:4c:4e:0d:df:4a:27:ba:d7:65:b5:d1:e3:96:69:0f:28:38: 0c:08:bc:08:46:2a:32:0d:f0:92:95:07:ce:8f:22:2a:ed:33: 73:a7:1c:e5:91:1d:83:14:c0:63:f3:c6:6e:40:db:e0:ee:94: 98:73:32:a2:75:1d:be:1a:3f:29:0e:16:7f:5e:b0:66:1a:8e: 3c:9f:52:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IlQzzod0vBsc43IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI2MDMyNTA4MDAwNFoXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk MmRiYjVjYzEtMjlkNy00NzIzLTlkZjQtYjNiNzFlNGViMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CbVQHiUxW2K2ZpsIWptGnx2v/RxxQXZV77t U8P062N2CotQSewsgEWXs7VwDhLvgO8rdYJWY7u9f40nQqr0f0ofCrSSfQAs+H3i U4pVNs9JXD7WafdfCmsMzBp06+jkUa19NqNvwUYVy2QVe556DEZwKmfBlddF9mVl 5O46GraBFvdaCcdxNexK6uzhSk+XILgWbLnvO8kw31C8R+LsIAJRjY6ZNzEqdUaz se46uQvQdSeeEfKn7oMENYzjHi5gwxIomnunSPqy6O38hUnb+EK301WTL35RRWFC 7QBk2KRG9EvLxxj8O3/mzdmUXnnByKkgk6DtdRjfsiDGZhT5bwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKC2zulH3AAeXtwqyZdzSFl6s8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvYTMzOThkYzEtZGUwMy00 ODQ0LTk1N2ItZTg4MmQ3ODc4YWUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4WFuA6VfVk/UH+o/DWtwL 0w58lMtM7/O3ImXPR/G+SZQySKMU+Z6XdWjt9iWdQkycsP6XgsgwMJ6Mj7IdYh2B LAIDXldEVv2EVrVwVfdYz+FLU9cPIYUEsb+KUA4rHfmgZVuvqf4uScElmREr9Z00 7XjAk91N+vVN4jLYFdJ6ld5sTl3curndZfFvM9qaK0hkzEevC2Si2CmFCDbjJR23 fSRo4IhDkPG8KPWCthHqEp63ghuDTE4N30onutdltdHjlmkPKDgMCLwIRioyDfCS lQfOjyIq7TNzpxzlkR2DFMBj88ZuQNvg7pSYczKidR2+Gj8pDhZ/XrBmGo48n1Lt -----END CERTIFICATE-----Generated at Thu Mar 26 05:05:21 2026 by rpki-client