$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft File: 3e511aed-c666-436d-b4a4-947790e6c9e5.mft (raw, json) Hash identifier: okjV6qwGSMi5iTDC62/4k2oCyyItq21t8C7/ZSJcm3Q= Subject key identifier: 37:9A:C9:2E:C9:DD:58:A0:0C:46:04:DE:16:91:35:C0:4B:5D:DA:CC Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584D4ACAD7534553464FFAD62780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft Manifest number: 010D0C9F432858442FB69E4685B850D03895F658 Signing time: Thu 26 Mar 2026 03:00:04 +0000 Manifest this update: Thu 26 Mar 2026 03:00:04 +0000 Manifest next update: Sat 28 Mar 2026 03:00:00 +0000 Files and hashes: 1: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (hash: Hw+5zdRVHM5Nl1ALYhu570we/9eZPPakPOEcDX3USG0=) 2: 3e511aed-c666-436d-b4a4-947790e6c9e5.crl (hash: zh5FzcqPzphuCTi8/nsCfkK19bfKwqJIQ6b3fTKwFz4=) 3: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (hash: GsJeyJp0PU/ngZeNqNOUGkm5LY8R5vd7CSk6U3LjXLA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ca:d7:53:45:53:46:4f:fa:d6:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Mar 26 03:00:04 2026 GMT Not After : Mar 28 03:00:00 2026 GMT Subject: CN=f8122106-23f0-488e-87fe-488615119c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:dc:34:94:d5:55:f1:36:9d:f2:6e:f5:83: 6f:73:71:d2:35:a9:f0:2e:31:05:c1:fd:0b:2f:ea: cb:cf:fa:f9:dc:42:57:d1:81:53:0c:5c:7c:21:d8: bd:8a:16:87:3e:fa:59:e8:7a:61:d7:8d:5c:e0:ab: 1c:15:8a:9b:ac:f3:08:d8:22:d1:96:57:e9:c7:a2: f5:e5:67:95:2d:b4:05:94:52:54:dc:2a:36:65:47: 00:6d:4d:84:f5:32:fe:cb:51:a1:a7:45:c2:ea:c4: 3f:2f:45:7a:a8:0f:5f:14:f4:25:3f:eb:c0:97:91: af:92:87:51:d4:7a:14:ce:c3:e8:aa:b3:7c:75:7e: 83:a3:b5:7a:65:50:4b:b0:0d:47:12:1d:aa:e2:86: 9d:dc:ab:4f:f6:fc:8c:0e:78:cf:af:a5:15:24:1b: 35:5d:6a:64:6b:3e:50:a5:6e:64:83:1d:0f:4a:76: 5e:0b:53:f8:69:91:a9:15:60:4a:ac:d5:d0:75:7f: 5b:4c:60:c2:b3:d7:44:f4:a6:e9:1a:e8:e7:96:fa: 5f:de:a5:17:b5:7d:90:30:4f:2b:bd:8f:84:18:d3: 56:e9:d5:2b:ac:45:2a:17:3f:e5:73:a5:78:53:67: f1:d2:38:cc:f8:cd:64:ea:e3:73:83:b8:08:e9:91: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9A:C9:2E:C9:DD:58:A0:0C:46:04:DE:16:91:35:C0:4B:5D:DA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:37:f2:76:3d:3e:4d:6b:ff:0b:eb:a0:d4:e7:6a:69:a3:f1: 41:69:c3:ee:2a:1d:5a:43:ae:22:4d:81:f9:ef:d5:5c:80:c5: b9:4d:a7:45:85:23:50:b5:a6:38:8d:55:81:63:53:ef:8f:fe: b5:04:a3:07:a9:c6:57:e4:92:5d:91:3b:45:e6:7e:60:7c:f9: c9:a9:9b:92:bd:45:37:da:dc:49:0c:6c:6a:dd:74:e1:9e:1e: 54:51:1e:20:99:77:00:87:a5:52:c1:00:25:c9:fe:dd:c0:87: 99:8e:8f:2a:90:70:23:0a:9e:09:83:ce:d6:f5:39:a4:23:88: 2c:b8:50:9f:67:ff:da:82:1e:45:ab:a9:ed:95:b8:23:e6:7e: a3:62:c3:ff:6b:9a:0c:71:28:9f:5a:23:77:75:8d:98:67:2a: c2:fa:1b:50:3f:2d:40:51:06:49:41:9f:bc:fb:16:32:b7:03: 2c:c3:9a:45:70:42:a3:c0:8d:f8:e1:cc:ac:0e:66:85:e2:4b: 7e:2f:5c:81:56:f3:76:aa:6d:43:5c:b7:1a:14:d1:74:e5:b3: 9b:d4:c6:93:bc:fc:4d:87:7f:c0:da:1d:71:35:85:b3:a9:04: 0e:7c:a4:d1:2f:67:75:e0:8d:ad:ea:09:d4:b2:ed:cf:b2:2f: fb:70:6c:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KytdTRVNGT/rWJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI2MDMyNjAzMDAwNFoXDTI2MDMyODAzMDAwMFowLzEtMCsGA1UEAxMk ZjgxMjIxMDYtMjNmMC00ODhlLTg3ZmUtNDg4NjE1MTE5YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoncNJTVVfE2nfJu9YNvc3HSNanwLjEFwf0L L+rLz/r53EJX0YFTDFx8Idi9ihaHPvpZ6Hph141c4KscFYqbrPMI2CLRllfpx6L1 5WeVLbQFlFJU3Co2ZUcAbU2E9TL+y1Ghp0XC6sQ/L0V6qA9fFPQlP+vAl5GvkodR 1HoUzsPoqrN8dX6Do7V6ZVBLsA1HEh2q4oad3KtP9vyMDnjPr6UVJBs1XWpkaz5Q pW5kgx0PSnZeC1P4aZGpFWBKrNXQdX9bTGDCs9dE9KbpGujnlvpf3qUXtX2QME8r vY+EGNNW6dUrrEUqFz/lc6V4U2fx0jjM+M1k6uNzg7gI6ZHtvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDeayS7J3VigDEYE3haRNcBLXdrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvM2U1MTFhZWQtYzY2Ni00 MzZkLWI0YTQtOTQ3NzkwZTZjOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJN/J2PT5Na/8L66DU52pp o/FBacPuKh1aQ64iTYH579VcgMW5TadFhSNQtaY4jVWBY1Pvj/61BKMHqcZX5JJd kTtF5n5gfPnJqZuSvUU32txJDGxq3XThnh5UUR4gmXcAh6VSwQAlyf7dwIeZjo8q kHAjCp4Jg87W9TmkI4gsuFCfZ//agh5Fq6ntlbgj5n6jYsP/a5oMcSifWiN3dY2Y ZyrC+htQPy1AUQZJQZ+8+xYytwMsw5pFcEKjwI344cysDmaF4kt+L1yBVvN2qm1D XLcaFNF05bOb1MaTvPxNh3/A2h1xNYWzqQQOfKTRL2d14I2t6gnUsu3Psi/7cGzA -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:07 2026 by rpki-client