$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft File: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft (raw, json) Hash identifier: xHCyi71tS45zO/brF/Nfvk5WHJAaEzZ2L7R6NQejCSE= Subject key identifier: 1F:A2:9D:F3:5E:64:D9:1D:01:77:15:5D:01:25:07:0F:5B:52:0C:8C Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584D481DF0424513AEB685478700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft Manifest number: 010D0C9F43285843DEDD8F5A3F647017C5C8D2F8 Signing time: Wed 25 Mar 2026 04:00:04 +0000 Manifest this update: Wed 25 Mar 2026 04:00:04 +0000 Manifest next update: Fri 27 Mar 2026 04:00:00 +0000 Files and hashes: 1: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl (hash: Yp+V43LQ12y00KVJBwlZdbrTSKilpJEYhg02sZDo2Jg=) 2: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (hash: qRYNsNeKKka9o69Knq5ULADscLL7yJ664/ZuLWU0T48=) 3: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (hash: 32ezI1/UiJfQCDklZNdSBmYH2r70c011rYJvNFE3tR4=) 4: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (hash: a+bFSX6pmZ4AKPkbLyQXdhjKlOzrvLY7rST2OF2OyN0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:1d:f0:42:45:13:ae:b6:85:47:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Mar 25 04:00:04 2026 GMT Not After : Mar 27 04:00:00 2026 GMT Subject: CN=bf9b24a9-e0cb-4cf9-af55-40e236e228c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:1d:14:f2:f2:f5:1d:66:ac:45:51:80:33: f6:1b:5b:a4:07:f6:f0:83:d7:8c:2c:75:6f:19:ef: 01:00:95:8a:6e:8f:3d:cb:cb:e2:0a:ca:db:b6:56: d4:d9:59:87:0b:b0:2b:52:f8:ee:9c:6f:bb:22:de: 27:79:6f:45:50:09:f7:7b:8b:79:26:9a:b8:06:7f: 9a:52:90:8d:68:31:33:4e:3a:99:3d:6d:7b:23:c8: 8f:88:d0:60:c7:a4:29:1c:2c:12:27:48:f6:95:92: 88:fb:33:3c:0a:8c:59:4a:20:54:4e:76:ae:06:61: 9e:55:95:25:6b:bc:62:d3:04:73:a0:cd:86:f0:d4: 59:1a:3e:15:2d:1a:cd:fa:e8:3f:eb:ea:49:0d:eb: 64:d0:60:96:86:b3:30:57:f8:2c:89:f2:4c:3e:69: 25:3d:3d:c6:95:cb:44:5a:d1:7d:60:31:8f:e6:ea: b1:14:4d:ed:4a:ea:23:74:a8:15:fa:9c:c9:0d:b6: 42:b6:6f:e3:2a:77:79:dc:6f:74:5b:11:3f:c4:da: 3d:50:d2:f9:84:8f:f6:52:3e:8d:50:75:42:cd:9c: 91:32:0c:b9:d7:17:9d:37:c0:33:66:4f:b7:76:7c: d9:1f:f7:1d:35:96:66:da:e9:72:d9:d5:2a:8a:ae: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A2:9D:F3:5E:64:D9:1D:01:77:15:5D:01:25:07:0F:5B:52:0C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e1:27:ef:e6:16:69:80:88:28:09:3d:a1:b5:44:6e:a4:b1: 5e:6f:6f:09:9e:22:a5:e7:51:03:56:84:44:36:2d:78:b4:c0: 03:0f:62:7f:9e:5c:03:15:8d:a9:6f:b7:d2:05:f9:c3:e5:5f: 67:14:dd:cb:b6:0c:0c:6c:48:8d:23:50:3d:d4:38:49:ac:cf: 9e:58:60:8f:59:07:6a:87:b6:cb:1a:58:b9:99:d2:3c:d7:34: dd:48:22:e6:7a:a7:6b:86:15:21:4f:27:b9:78:90:42:c6:f2: a8:99:92:2d:28:d2:bf:15:1f:d8:9d:62:2e:ad:5e:a3:69:80: 09:16:80:48:c9:3e:e1:c3:a4:12:84:01:cf:96:33:1b:85:0f: bd:eb:27:77:27:39:9b:93:d1:67:f6:b9:5f:a7:94:0c:22:2a: 24:17:95:b5:21:18:1e:c9:b1:2c:d9:66:6a:69:ae:c1:9c:47: 28:57:33:ee:05:04:aa:99:0c:8e:4b:d1:9f:42:db:38:0e:fc: d8:2c:f2:e2:c0:f6:e7:14:7a:f9:dc:91:da:e4:e6:23:26:f5: 06:a9:29:4d:22:ba:c9:65:24:93:65:09:a9:56:ae:89:64:ec: 34:2a:c4:69:af:3e:ec:db:17:80:30:95:d3:a8:07:63:46:a6: 9d:33:9c:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IHfBCRROutoVHhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDMyNTA0MDAwNFoXDTI2MDMyNzA0MDAwMFowLzEtMCsGA1UEAxMk YmY5YjI0YTktZTBjYi00Y2Y5LWFmNTUtNDBlMjM2ZTIyOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKodFPLy9R1mrEVRgDP2G1ukB/bwg9eMLHVv Ge8BAJWKbo89y8viCsrbtlbU2VmHC7ArUvjunG+7It4neW9FUAn3e4t5Jpq4Bn+a UpCNaDEzTjqZPW17I8iPiNBgx6QpHCwSJ0j2lZKI+zM8CoxZSiBUTnauBmGeVZUl a7xi0wRzoM2G8NRZGj4VLRrN+ug/6+pJDetk0GCWhrMwV/gsifJMPmklPT3GlctE WtF9YDGP5uqxFE3tSuojdKgV+pzJDbZCtm/jKnd53G90WxE/xNo9UNL5hI/2Uj6N UHVCzZyRMgy51xedN8AzZk+3dnzZH/cdNZZm2uly2dUqiq4CRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB+infNeZNkdAXcVXQElBw9bUgyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvM2M2NTVhYWYtNzZmNC00 YmFiLWI0ZjctOGZiMjNjM2Q0MDExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB54Sfv5hZpgIgoCT2htURu pLFeb28JniKl51EDVoRENi14tMADD2J/nlwDFY2pb7fSBfnD5V9nFN3LtgwMbEiN I1A91DhJrM+eWGCPWQdqh7bLGli5mdI81zTdSCLmeqdrhhUhTye5eJBCxvKomZIt KNK/FR/YnWIurV6jaYAJFoBIyT7hw6QShAHPljMbhQ+96yd3Jzmbk9Fn9rlfp5QM IiokF5W1IRgeybEs2WZqaa7BnEcoVzPuBQSqmQyOS9GfQts4DvzYLPLiwPbnFHr5 3JHa5OYjJvUGqSlNIrrJZSSTZQmpVq6JZOw0KsRprz7s2xeAMJXTqAdjRqadM5xl -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:25 2026 by rpki-client