$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft File: f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft (raw, json) Hash identifier: JvsOWsWd7+wrlbFwAsS/0u/NGrkL8pPffxBXtFTvytw= Subject key identifier: B1:E8:55:8E:C5:20:B5:A3:48:D6:E9:08:EE:A8:2A:91:54:3B:3D:55 Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Certificate serial: 010D0C9F4328584D5130A9A8283828BAC532DAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft Manifest number: 010D0C9F4328584073A84E5D49A8205CC2EDE774 Signing time: Sat 28 Mar 2026 10:00:04 +0000 Manifest this update: Sat 28 Mar 2026 10:00:04 +0000 Manifest next update: Mon 30 Mar 2026 10:00:00 +0000 Files and hashes: 1: 8bb27de8-d92f-38da-bbe9-1e44562b5d0a.roa (hash: cR9bWbWXxEVF9Dh3nPB7zaKR59kJfQAuREPj8JbMHKM=) 2: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (hash: K5RROBxLqwWYCfxtXQhbOLwsrBduoC5WknFqWF0PPy4=) 3: b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa (hash: LtZgM1VnLcjUtAah2PZDNG+93deGAht/+QNMXU0woEA=) 4: f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl (hash: RqjkyULMSlMrJlU7jD1KTKyracXAH4aI2ChQV+84WpY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:51:30:a9:a8:28:38:28:ba:c5:32:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Validity Not Before: Mar 28 10:00:04 2026 GMT Not After : Mar 30 10:00:00 2026 GMT Subject: CN=97e70de2-139e-4672-bc21-723f9f879ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:29:f3:f2:d1:ef:8b:8f:b7:da:d3:28:b0: ca:40:32:01:55:c6:05:37:e0:f2:13:12:7a:2e:3d: 3d:94:86:9a:38:6a:c5:78:5a:75:f6:b6:70:31:b8: 35:9e:fb:8d:ae:17:4a:33:68:ab:c8:f1:ae:af:27: 72:ae:b9:cd:eb:30:2c:65:8e:46:8a:9d:d0:df:63: b9:89:70:2e:1b:d2:b9:46:bf:f1:59:b0:33:4b:c1: 8f:ef:e2:e1:f0:a7:3f:a3:e4:ed:47:ce:c9:f8:f3: 0e:e4:4f:34:a4:36:47:b0:91:4b:15:41:a1:78:4f: 6a:81:a9:39:30:06:52:10:5d:ac:27:a9:d0:c0:17: a9:59:a5:7e:a6:87:0b:56:1d:c3:91:3d:32:5d:27: c4:73:00:d5:60:da:50:ed:8f:54:83:be:98:36:a8: 6f:ec:94:a1:0a:ec:6d:66:d8:24:99:f8:54:66:ae: 16:52:0d:97:83:85:11:20:5d:d1:a9:0d:ae:f2:c8: aa:ee:fd:cc:e5:16:6b:f5:8c:53:05:dc:33:7f:a3: 36:0d:45:9a:05:ff:67:2b:6a:69:c5:d3:2d:7e:ee: a9:ab:81:36:62:73:de:39:93:55:58:29:1c:8a:bf: 59:c1:28:1f:cf:96:6d:ea:8a:05:70:44:d1:4e:34: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E8:55:8E:C5:20:B5:A3:48:D6:E9:08:EE:A8:2A:91:54:3B:3D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl X509v3 Authority Key Identifier: keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:be:c5:3a:7c:1f:5e:00:ee:a2:3c:8f:e2:58:c4:6a:7a:63: 8b:80:3c:40:95:04:8a:a2:6d:02:fb:af:9c:5e:c7:31:e2:8d: d2:9f:62:ee:b4:af:15:17:9c:16:80:61:4e:4b:3d:a7:b8:dc: 3f:f7:ac:6b:75:55:0a:fb:f3:57:59:46:40:c9:21:bc:18:f4: 31:c3:e5:cf:cd:d3:1b:5b:2c:67:27:82:9d:c9:f1:2d:9a:da: 72:ed:18:7b:cd:d4:e4:b4:cb:66:60:f0:ac:f0:84:19:87:c8: 7c:c6:2c:b7:57:1c:55:f6:24:bc:c2:27:fa:96:0d:b5:d8:5b: 00:9b:28:7c:92:5d:cf:cd:88:93:4b:d2:a5:fc:31:5f:a6:86: cd:d7:53:3b:72:20:5b:52:75:f1:35:88:f5:52:ad:65:46:e7: f4:69:29:41:77:e8:9e:a8:d5:55:f8:c6:74:1a:b1:51:30:7e: 76:66:55:2c:47:31:b1:70:73:72:40:ff:58:13:cc:be:a8:82: 6d:47:98:55:98:e9:c1:78:31:29:e1:cb:1a:3a:39:b9:2a:e7: a0:67:6c:37:ad:19:03:77:4f:3c:3a:fd:04:7f:94:e6:8a:c3: 50:e6:dd:c7:5e:54:33:16:21:3c:0b:e5:34:25:dc:6b:65:ae: cc:2c:d9:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1RMKmoKDgousUy2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy NjZmMB4XDTI2MDMyODEwMDAwNFoXDTI2MDMzMDEwMDAwMFowLzEtMCsGA1UEAxMk OTdlNzBkZTItMTM5ZS00NjcyLWJjMjEtNzIzZjlmODc5ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL0p8/LR74uPt9rTKLDKQDIBVcYFN+DyExJ6 Lj09lIaaOGrFeFp19rZwMbg1nvuNrhdKM2iryPGurydyrrnN6zAsZY5Gip3Q32O5 iXAuG9K5Rr/xWbAzS8GP7+Lh8Kc/o+TtR87J+PMO5E80pDZHsJFLFUGheE9qgak5 MAZSEF2sJ6nQwBepWaV+pocLVh3DkT0yXSfEcwDVYNpQ7Y9Ug76YNqhv7JShCuxt ZtgkmfhUZq4WUg2Xg4URIF3RqQ2u8siq7v3M5RZr9YxTBdwzf6M2DUWaBf9nK2pp xdMtfu6pq4E2YnPeOZNVWCkcir9ZwSgfz5Zt6ooFcETRTjRAtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHoVY7FILWjSNbpCO6oKpFUOz1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvZjNiZjZhYTItN2I3Zi00 NmI0LWJkZjItZGQ0ZDA3NWUyNjZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk MDc1ZTI2NmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMvsU6fB9eAO6iPI/iWMRq emOLgDxAlQSKom0C+6+cXscx4o3Sn2LutK8VF5wWgGFOSz2nuNw/96xrdVUK+/NX WUZAySG8GPQxw+XPzdMbWyxnJ4KdyfEtmtpy7Rh7zdTktMtmYPCs8IQZh8h8xiy3 VxxV9iS8wif6lg212FsAmyh8kl3PzYiTS9Kl/DFfpobN11M7ciBbUnXxNYj1Uq1l Ruf0aSlBd+ieqNVV+MZ0GrFRMH52ZlUsRzGxcHNyQP9YE8y+qIJtR5hVmOnBeDEp 4csaOjm5KuegZ2w3rRkDd088Ov0Ef5TmisNQ5t3HXlQzFiE8C+U0JdxrZa7MLNmM -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:13 2026 by rpki-client