$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: 8xV5bxtHNbqetrhn7tp0i7TI1bfyUPcRuPdKgyDvSY8= Subject key identifier: FD:C4:AE:F0:2F:79:AA:C0:AA:40:C2:9D:E0:23:E8:4A:E8:E5:E6:A5 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584D48EE63470923298F06128700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCB27 Signing time: Wed 25 Mar 2026 11:00:04 +0000 Manifest this update: Wed 25 Mar 2026 11:00:04 +0000 Manifest next update: Sat 28 Mar 2026 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: 0+/Hzq+ZVilm5Ij+TprMC03gf1/eLurjqb5boA3olZk=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: /jt5DEvcaWI3EbPpHD8awNgmy8royGEOxqcY+7ipUWE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:ee:63:47:09:23:29:8f:06:12:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Mar 25 11:00:04 2026 GMT Not After : Mar 28 11:00:00 2026 GMT Subject: CN=43ca267d-55bd-420e-bb78-e7c7a60c8c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:34:41:88:87:92:e3:ec:75:60:3f:8e:a5: f6:84:36:b3:72:f3:ed:6d:1e:e6:24:ca:1b:50:ea: 0b:0c:2f:b2:ec:b4:76:2e:10:c1:94:a8:49:97:be: dc:00:a7:09:be:7c:e1:5c:64:43:13:6a:f3:9f:3e: ee:74:6b:ae:b3:9c:b0:b7:23:4e:ea:14:e6:89:d2: 77:b4:1c:ac:b8:ab:2f:f4:f8:e3:59:3d:1f:7f:41: 82:d3:b7:9e:19:46:0f:3e:cf:6c:89:78:dd:c3:e5: 89:49:71:5b:9f:bb:1a:10:e8:12:d9:b2:c8:28:1b: ab:01:97:33:eb:32:ef:ed:6f:8a:5d:4b:5e:5d:38: 4d:66:23:5e:7e:9d:92:99:8e:f2:5e:ba:ff:26:dd: ce:c4:14:f6:75:f8:79:e9:ad:04:60:9f:a5:c1:15: bf:9f:10:15:9c:86:eb:7d:62:75:10:61:1a:3d:0e: 3f:9e:5a:68:ba:70:64:0c:28:2b:1a:b4:99:36:ea: 63:6a:f6:5b:e6:c5:02:9c:f7:6a:ff:c6:81:fe:70: 73:c7:8a:ee:38:ca:32:29:00:44:0e:c4:16:90:5b: bb:71:3b:26:69:f8:4b:33:1d:1b:57:06:33:10:d0: f1:64:0e:11:e0:fa:cb:af:77:7f:b6:4e:63:ce:11: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:AE:F0:2F:79:AA:C0:AA:40:C2:9D:E0:23:E8:4A:E8:E5:E6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d5:3c:c6:19:d4:76:8a:bf:2e:f7:bd:9e:eb:a4:4b:d2:87: 12:09:bf:c7:56:30:a1:da:a5:4a:1e:86:0b:00:96:74:7a:1a: 8e:f3:1c:c5:35:55:d2:d1:fb:ab:91:97:1b:70:55:81:8b:65: 86:61:42:1d:d2:eb:2b:cd:2d:77:08:a1:e3:16:6a:57:69:33: 23:6b:b0:83:ca:c1:a4:5d:25:dc:30:67:a8:70:01:5a:4d:07: e9:27:35:d3:fb:d8:bf:7f:b5:d0:de:1a:6b:56:6d:f2:af:2c: e7:0e:b2:e7:75:aa:e6:1d:50:47:d3:b5:70:21:18:82:eb:46: 7d:41:f2:f8:d1:f7:db:cf:e7:93:30:b5:47:ce:49:1a:5d:c1: 2c:63:b2:62:27:62:35:99:71:e9:ed:c6:d6:5e:0f:eb:75:0d: 19:3e:55:f4:01:ed:76:cd:b9:de:8a:0f:dd:2d:93:dd:45:18: 53:3e:2a:09:f6:32:ca:4a:06:2f:b8:23:df:bc:8d:95:b0:f3: 30:40:8f:70:b9:25:fd:8a:e4:7d:f8:4f:85:05:f4:dc:f3:11: 5d:d0:a1:b0:1d:b5:4d:06:05:69:fc:9a:f0:de:be:d5:80:98: dc:5c:50:5a:6b:a1:92:ed:86:fd:d9:0e:cf:d0:ba:f7:3c:51: 71:85:63:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I7mNHCSMpjwYShwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI2MDMyNTExMDAwNFoXDTI2MDMyODExMDAwMFowLzEtMCsGA1UEAxMk NDNjYTI2N2QtNTViZC00MjBlLWJiNzgtZTdjN2E2MGM4YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkns0QYiHkuPsdWA/jqX2hDazcvPtbR7mJMob UOoLDC+y7LR2LhDBlKhJl77cAKcJvnzhXGRDE2rznz7udGuus5ywtyNO6hTmidJ3 tBysuKsv9PjjWT0ff0GC07eeGUYPPs9siXjdw+WJSXFbn7saEOgS2bLIKBurAZcz 6zLv7W+KXUteXThNZiNefp2SmY7yXrr/Jt3OxBT2dfh56a0EYJ+lwRW/nxAVnIbr fWJ1EGEaPQ4/nlpounBkDCgrGrSZNupjavZb5sUCnPdq/8aB/nBzx4ruOMoyKQBE DsQWkFu7cTsmafhLMx0bVwYzENDxZA4R4PrLr3d/tk5jzhF1UQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP3ErvAvearAqkDCneAj6Ero5ealMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp1TzGGdR2ir8u972e66RL 0ocSCb/HVjCh2qVKHoYLAJZ0ehqO8xzFNVXS0furkZcbcFWBi2WGYUId0usrzS13 CKHjFmpXaTMja7CDysGkXSXcMGeocAFaTQfpJzXT+9i/f7XQ3hprVm3yryznDrLn darmHVBH07VwIRiC60Z9QfL40ffbz+eTMLVHzkkaXcEsY7JiJ2I1mXHp7cbWXg/r dQ0ZPlX0Ae12zbneig/dLZPdRRhTPioJ9jLKSgYvuCPfvI2VsPMwQI9wuSX9iuR9 +E+FBfTc8xFd0KGwHbVNBgVp/Jrw3r7VgJjcXFBaa6GS7Yb92Q7P0Lr3PFFxhWPI -----END CERTIFICATE-----Generated at Thu Mar 26 04:14:49 2026 by rpki-client