$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft File: 3990f0e4-fc13-467e-a765-98d98d252d56.mft (raw, json) Hash identifier: NTMwGywSAs8ksbqvnzmVtvq6k/TNtB/L7rNG2ZP+OPk= Subject key identifier: 52:6B:7E:EA:99:01:77:02:AB:1F:57:C2:19:A7:51:18:AE:9D:BB:0C Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584D4C8995219C3F6D2DBF4AE118 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft Manifest number: 010D0C9F43285849ADAE6A28B57A43A6EC954FF6 Signing time: Thu 26 Mar 2026 18:00:09 +0000 Manifest this update: Thu 26 Mar 2026 18:00:09 +0000 Manifest next update: Sun 29 Mar 2026 18:00:00 +0000 Files and hashes: 1: 129ca3ea-c39a-39d8-a16a-0337acba9185.roa (hash: wQnwTZIFLDylYedBuJdBdnhIsd9OUL1fqmr1ETkFWlo=) 2: 3990f0e4-fc13-467e-a765-98d98d252d56.crl (hash: W+POw16SrcIFRdgxS9wb7+/kMIyAorDxAKWvRJmZvEQ=) 3: 72d68341-406f-3575-a1d8-62ee6b9302b3.roa (hash: 5HWei0I1t4J1NkPeLypTlp7vDc0KAe8fWBFi9IOmAhY=) 4: b68f39be-2699-3e0e-a76d-a98cf991241a.roa (hash: 00J0DZIvSyIN+ZO8GShhacnX4osWwVJmz2Yn/2PDKMk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:89:95:21:9c:3f:6d:2d:bf:4a:e1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Mar 26 18:00:09 2026 GMT Not After : Mar 29 18:00:00 2026 GMT Subject: CN=cd7a0ece-a7a5-48f5-96f5-b660ee312f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:f1:39:7a:12:8e:61:73:a4:ee:36:ce:ff: d8:5d:50:ea:72:e5:15:4b:3e:7a:a2:42:71:a5:b0: 17:31:38:24:96:7d:06:d4:78:30:25:86:8d:6b:73: ea:ac:b2:1e:6a:ba:10:f5:a0:12:d1:bc:43:2d:6e: 01:82:6f:d8:f1:0c:fe:c1:ff:b6:8b:27:2c:9e:76: 37:1b:2b:79:f3:22:4d:84:f9:06:27:14:4a:e8:91: 5b:ce:9c:3a:b5:37:a4:05:f1:29:78:90:7b:b2:4f: de:d0:cd:7d:e2:b1:85:14:03:23:e2:00:f1:41:a5: 24:aa:fc:94:67:25:37:80:3e:36:43:a9:a3:07:ff: 73:d2:24:25:8e:04:2c:35:d9:fa:21:ba:e8:74:4a: f1:e3:85:3d:74:ce:c7:7b:22:91:86:34:6a:54:c1: 42:43:9e:44:43:29:b2:8c:df:62:63:fc:3c:9c:04: 58:77:3c:70:bf:d9:5a:2b:d6:42:2e:33:a0:7b:59: 22:72:42:a3:f4:ee:8b:d8:06:1b:58:73:7b:98:8d: c9:ad:71:2c:a2:59:53:36:3f:e5:ac:8f:8d:46:50: d1:68:5a:05:c0:74:e9:3a:03:15:5c:66:2b:9c:e3: 0d:75:2f:26:1a:f9:9d:10:ab:f8:0d:f8:b2:83:e6: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:7E:EA:99:01:77:02:AB:1F:57:C2:19:A7:51:18:AE:9D:BB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9a:fa:62:ac:46:6f:7c:42:14:fc:44:ce:b0:d7:86:9e:67: 89:97:d6:57:16:e2:f3:ea:30:2e:2f:2b:94:f0:b2:f4:96:2b: 26:9a:ca:7b:82:f9:5c:0b:94:9d:f2:cd:36:f0:08:87:99:3a: 2c:d0:03:9e:31:0b:a3:86:a6:42:f6:43:cf:56:37:cb:50:23: 57:e1:97:39:c3:0b:7c:d3:fc:5b:7f:d5:66:2f:0e:0c:46:ee: d3:99:f4:7a:01:af:9c:0b:f0:51:1f:3b:78:ed:7b:ab:b1:bc: 75:b6:b3:9d:6a:72:c4:16:84:ae:0e:6d:0e:aa:f2:48:4a:d5: cb:f2:42:63:d6:38:ad:2a:34:8d:29:cf:9a:67:9a:dc:59:b2: e1:46:d7:f2:07:d2:48:a9:ef:f2:9f:80:bf:6f:07:73:1a:82: e9:29:04:91:4f:17:26:b8:9f:26:8e:f6:9a:ef:30:0c:b1:6b: 81:93:b8:cc:38:fd:ac:b1:3b:9f:09:55:15:c5:ef:1b:7b:b3: 52:c3:8f:33:53:29:58:d6:79:89:2c:13:88:22:be:9c:21:70: e3:9f:1a:73:7e:60:3f:c0:e5:02:a5:e9:a3:e4:8c:40:c2:54: 24:39:c8:46:d8:a7:38:72:72:70:4f:06:d9:75:1e:d5:f6:b9: 80:36:ef:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MiZUhnD9tLb9K4RgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI2MDMyNjE4MDAwOVoXDTI2MDMyOTE4MDAwMFowLzEtMCsGA1UEAxMk Y2Q3YTBlY2UtYTdhNS00OGY1LTk2ZjUtYjY2MGVlMzEyZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBzxOXoSjmFzpO42zv/YXVDqcuUVSz56okJx pbAXMTgkln0G1HgwJYaNa3PqrLIearoQ9aAS0bxDLW4Bgm/Y8Qz+wf+2iycsnnY3 Gyt58yJNhPkGJxRK6JFbzpw6tTekBfEpeJB7sk/e0M194rGFFAMj4gDxQaUkqvyU ZyU3gD42Q6mjB/9z0iQljgQsNdn6IbrodErx44U9dM7HeyKRhjRqVMFCQ55EQymy jN9iY/w8nARYdzxwv9laK9ZCLjOge1kickKj9O6L2AYbWHN7mI3JrXEsollTNj/l rI+NRlDRaFoFwHTpOgMVXGYrnOMNdS8mGvmdEKv4Dfiyg+bKGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFJrfuqZAXcCqx9XwhmnURiunbsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMzk5MGYwZTQtZmMxMy00 NjdlLWE3NjUtOThkOThkMjUyZDU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADmvpirEZvfEIU/ETOsNeG nmeJl9ZXFuLz6jAuLyuU8LL0lismmsp7gvlcC5Sd8s028AiHmTos0AOeMQujhqZC 9kPPVjfLUCNX4Zc5wwt80/xbf9VmLw4MRu7TmfR6Aa+cC/BRHzt47Xursbx1trOd anLEFoSuDm0OqvJIStXL8kJj1jitKjSNKc+aZ5rcWbLhRtfyB9JIqe/yn4C/bwdz GoLpKQSRTxcmuJ8mjvaa7zAMsWuBk7jMOP2ssTufCVUVxe8be7NSw48zUylY1nmJ LBOIIr6cIXDjnxpzfmA/wOUCpemj5IxAwlQkOchG2Kc4cnJwTwbZdR7V9rmANu+y -----END CERTIFICATE-----Generated at Thu Mar 26 21:22:24 2026 by rpki-client