$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: 7Yt2BqmR0AoKFR44tuCb30S82LYRIlb+JzhsUHCL+t0= Subject key identifier: 5F:B2:46:CB:48:F0:A5:B4:B9:3A:88:3B:1B:FC:99:68:FA:3F:67:A6 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584D48D09B9644681CAD14AB5870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBBB5 Signing time: Wed 25 Mar 2026 10:00:03 +0000 Manifest this update: Wed 25 Mar 2026 10:00:03 +0000 Manifest next update: Sat 28 Mar 2026 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: gDAvfKKInRWJV2BWkB8mIR6sZjZJ2A5tyZitAMGr5hY=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: yUn4zVz1zU05t6djnWb974+Y8QgBI0lOVdzHvuZZchc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:d0:9b:96:44:68:1c:ad:14:ab:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Mar 25 10:00:03 2026 GMT Not After : Mar 28 10:00:00 2026 GMT Subject: CN=98f8837f-a29c-4995-9a36-7dec004d3120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:da:cc:af:32:20:e2:2e:1f:51:dd:47:21:70: bd:0f:e2:7b:1a:e5:5a:e5:82:63:4d:85:bd:67:0a: 6d:de:c6:4d:b5:e4:ed:98:df:5a:5b:d4:74:e4:95: 60:15:57:77:eb:c7:17:ab:b6:48:d3:04:d9:cc:5e: 23:c1:e0:22:aa:c0:6b:4d:47:3a:23:16:f4:ef:86: 8e:09:ce:7c:d5:74:75:ff:21:69:62:ae:2d:47:07: 68:77:ee:c3:4d:38:b4:1e:4d:9c:51:64:83:c7:a2: bb:3a:89:57:08:fb:64:17:70:0a:76:63:91:4f:81: ba:66:4a:7c:7f:f1:1d:e1:56:57:bb:56:59:04:10: af:bf:48:81:f7:f1:3d:c9:e3:59:94:fb:7e:91:ff: 49:d5:13:9b:c4:fc:44:d9:e8:46:aa:4d:65:bb:45: e6:98:9f:78:62:b1:a7:97:4d:c9:99:41:09:64:41: bd:e4:17:41:c9:f5:8b:ee:f7:d0:d9:50:3f:db:e7: 03:c4:34:d3:77:09:52:1b:1b:58:81:fa:30:a5:93: db:37:f5:11:3f:1d:0a:a2:60:6f:2c:27:0f:9e:3f: 0e:a1:2e:2a:13:4a:b4:f6:83:66:71:44:9d:f6:7b: 7b:18:27:40:65:d3:d9:a3:8a:19:c8:1e:47:90:60: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B2:46:CB:48:F0:A5:B4:B9:3A:88:3B:1B:FC:99:68:FA:3F:67:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2c:d4:f6:ac:bf:d5:51:5c:2e:ab:1a:1c:f1:a0:06:95:84: 3c:ff:f5:41:63:9e:68:0e:73:4b:a7:d7:0d:51:44:68:4d:0a: 05:18:58:9f:0f:38:53:eb:bd:22:9e:c7:a6:d6:bc:7c:9c:9a: b4:7a:bb:67:2b:02:79:6e:af:31:90:0a:21:1e:b8:bc:a0:2d: 84:f9:3f:c2:5a:68:23:dc:ea:f1:fb:c7:04:f3:6b:04:bd:7b: c5:66:4b:51:30:4d:4b:ac:9e:ec:b8:96:0a:1e:01:90:ef:e3: a6:0b:bd:0f:10:c5:ff:2e:f2:30:13:6f:30:81:69:9c:18:55: a4:d2:ea:0a:da:8a:68:19:98:7a:03:df:ad:9c:cd:53:23:48: c9:70:16:17:ad:ff:2c:6a:bc:74:95:c0:be:e7:b7:a4:67:39: 8a:ea:63:50:ee:bc:83:54:1d:d2:9d:a7:c1:59:ae:a4:94:ce: 93:8f:cb:dc:da:cc:4f:8a:8f:e1:19:79:65:a4:62:31:29:a6: 18:55:6d:13:8d:c1:f6:9c:3a:0e:79:ed:c6:65:f9:49:9c:07: 29:89:44:0d:b2:a3:95:4f:28:48:f4:fd:5e:ea:69:8c:86:92: f1:15:3e:e4:10:cd:85:9b:bd:d2:7a:31:ef:7e:a3:85:ee:f4: ab:f1:29:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I0JuWRGgcrRSrWHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI2MDMyNTEwMDAwM1oXDTI2MDMyODEwMDAwMFowLzEtMCsGA1UEAxMk OThmODgzN2YtYTI5Yy00OTk1LTlhMzYtN2RlYzAwNGQzMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NrMrzIg4i4fUd1HIXC9D+J7GuVa5YJjTYW9 Zwpt3sZNteTtmN9aW9R05JVgFVd368cXq7ZI0wTZzF4jweAiqsBrTUc6Ixb074aO Cc581XR1/yFpYq4tRwdod+7DTTi0Hk2cUWSDx6K7OolXCPtkF3AKdmORT4G6Zkp8 f/Ed4VZXu1ZZBBCvv0iB9/E9yeNZlPt+kf9J1RObxPxE2ehGqk1lu0XmmJ94YrGn l03JmUEJZEG95BdByfWL7vfQ2VA/2+cDxDTTdwlSGxtYgfowpZPbN/URPx0KomBv LCcPnj8OoS4qE0q09oNmcUSd9nt7GCdAZdPZo4oZyB5HkGDs1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF+yRstI8KW0uTqIOxv8mWj6P2emMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/LNT2rL/VUVwuqxoc8aAG lYQ8//VBY55oDnNLp9cNUURoTQoFGFifDzhT670insem1rx8nJq0ertnKwJ5bq8x kAohHri8oC2E+T/CWmgj3Orx+8cE82sEvXvFZktRME1LrJ7suJYKHgGQ7+OmC70P EMX/LvIwE28wgWmcGFWk0uoK2opoGZh6A9+tnM1TI0jJcBYXrf8sarx0lcC+57ek ZzmK6mNQ7ryDVB3SnafBWa6klM6Tj8vc2sxPio/hGXllpGIxKaYYVW0TjcH2nDoO ee3GZflJnAcpiUQNsqOVTyhI9P1e6mmMhpLxFT7kEM2Fm73SejHvfqOF7vSr8SmG -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:17 2026 by rpki-client