$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft File: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft (raw, json) Hash identifier: bI+B3Hq1om8n/RFolF+4v0MUPDYnBuU1b1PZYEPHdgQ= Subject key identifier: B9:04:90:4C:63:53:F2:FF:92:04:A2:B0:56:08:46:EB:6D:8A:B5:80 Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F4328584D4A35F43FAA38354B99655680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft Manifest number: 010D0C9F4328584073A82B47310678490807DB37 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl (hash: +Oaz1XChv+j/UQp0DcyglYj4NpmIFwz+Z6unWAu2+rU=) 2: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (hash: A2eetDbdg6IcpKqV1Hi5cHtHTIjeXYv7QsVEXdHu+G0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f4:3f:aa:38:35:4b:99:65:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=6f479c5d-935a-45f8-94e3-c09182dca9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e4:cd:4c:e0:f7:0d:b8:ac:14:c1:20:9a:46: a3:c0:4c:83:80:72:13:10:82:c4:b7:36:5d:b1:fe: 8b:a7:f6:03:a2:4c:47:99:68:e4:46:a4:f5:7e:f6: bd:a8:0d:a7:7a:e8:93:78:7a:79:5d:5b:00:81:92: 48:3e:6e:e7:04:f3:35:e1:9e:75:5b:d0:d6:f9:1e: 56:4d:81:db:0e:c6:7d:28:34:7a:5b:0d:02:01:f1: 95:28:57:8e:7c:df:e8:bf:49:9e:a8:6b:12:ee:6d: 4b:22:78:ad:f2:e7:5e:a9:47:8f:8e:74:bc:ea:a5: 98:27:7d:22:bc:0f:05:95:1a:b6:af:63:e8:c1:3d: f1:05:b5:3d:53:f1:fc:42:4a:6f:04:a9:aa:cc:c9: b8:6c:d1:60:1f:63:2d:72:16:69:38:4a:b2:5f:ca: 1e:71:69:a7:ad:be:5c:be:c2:f6:fb:f0:df:ac:65: 7d:bb:d9:f0:b0:ca:f3:1c:a8:f1:43:75:da:bb:58: 45:9c:f1:8b:4c:4d:7d:50:50:0c:45:25:80:d0:18: 8f:0f:04:80:d8:01:36:6a:8f:86:97:1f:a3:97:94: a5:7e:00:25:44:c7:97:68:b1:ef:ad:f8:6a:f6:76: d5:bb:9e:75:2f:c9:b9:0d:55:38:1e:5e:19:c3:b3: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:90:4C:63:53:F2:FF:92:04:A2:B0:56:08:46:EB:6D:8A:B5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:62:b6:24:5d:d3:68:6a:ca:29:35:95:e3:fa:90:13:a6:ea: 27:5a:5d:ca:90:de:b1:47:cd:c4:cc:54:5f:b7:af:31:93:f2: 82:97:d4:96:ff:03:cc:28:38:9b:f8:32:b1:57:c9:bc:17:d8: c1:4b:b0:7d:e5:c7:b9:db:60:c1:e6:ce:d6:58:49:43:e3:c2: 89:a2:3d:ef:60:e3:12:85:f0:3b:75:bd:69:a9:16:01:30:35: d7:88:ab:2a:fd:00:3f:78:cf:e8:84:85:df:9b:df:81:3f:dd: 3f:b0:0c:f7:5d:96:68:8b:63:a6:ef:64:01:35:35:0d:ae:3d: 47:3e:da:2d:38:71:34:65:0b:22:94:43:a3:ea:26:66:47:40: d5:70:00:51:e0:33:b1:71:18:46:c1:1a:07:f2:8a:f2:4b:f2: 62:a2:15:08:df:ae:89:9c:16:4c:6e:f1:0d:1b:de:fb:e2:d4: 76:9d:f6:2a:88:2a:d6:5a:47:00:6f:bc:43:5c:6c:c3:a7:d0: 72:36:05:43:6c:9e:e9:de:10:af:d9:93:78:66:e9:d2:e1:13: 74:96:a5:9a:ca:d2:a9:ed:11:bd:c9:ea:50:90:68:c8:3e:f8: d9:f2:20:16:6e:1b:7b:3e:b3:96:bd:c7:c0:84:b0:3c:e7:61: 3c:64:33:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfQ/qjg1S5llVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk NmY0NzljNWQtOTM1YS00NWY4LTk0ZTMtYzA5MTgyZGNhOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OTNTOD3DbisFMEgmkajwEyDgHITEILEtzZd sf6Lp/YDokxHmWjkRqT1fva9qA2neuiTeHp5XVsAgZJIPm7nBPM14Z51W9DW+R5W TYHbDsZ9KDR6Ww0CAfGVKFeOfN/ov0meqGsS7m1LInit8udeqUePjnS86qWYJ30i vA8FlRq2r2PowT3xBbU9U/H8QkpvBKmqzMm4bNFgH2MtchZpOEqyX8oecWmnrb5c vsL2+/DfrGV9u9nwsMrzHKjxQ3Xau1hFnPGLTE19UFAMRSWA0BiPDwSA2AE2ao+G lx+jl5SlfgAlRMeXaLHvrfhq9nbVu551L8m5DVU4Hl4Zw7MinwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLkEkExjU/L/kgSisFYIRuttirWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvM2ExMWE4NWYtOGYzNy00 YjU0LThmYTItZDZiYzA5NjczNzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkYrYkXdNoasopNZXj+pAT puonWl3KkN6xR83EzFRft68xk/KCl9SW/wPMKDib+DKxV8m8F9jBS7B95ce522DB 5s7WWElD48KJoj3vYOMShfA7db1pqRYBMDXXiKsq/QA/eM/ohIXfm9+BP90/sAz3 XZZoi2Om72QBNTUNrj1HPtotOHE0ZQsilEOj6iZmR0DVcABR4DOxcRhGwRoH8ory S/JiohUI366JnBZMbvENG9774tR2nfYqiCrWWkcAb7xDXGzDp9ByNgVDbJ7p3hCv 2ZN4ZunS4RN0lqWaytKp7RG9yepQkGjIPvjZ8iAWbht7PrOWvcfAhLA852E8ZDPD -----END CERTIFICATE-----Generated at Thu Mar 26 06:00:48 2026 by rpki-client