$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft File: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft (raw, json) Hash identifier: Qpo/IpQmzbVnUDST8AaHSUUsvwuJg6jmRIQPCJr//+4= Subject key identifier: 61:5E:29:38:AD:B2:A6:BE:D4:70:CA:4C:2D:AA:97:EB:E0:8A:85:E5 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584D4F18A736826CCB803B9FF6AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft Manifest number: 010D0C9F43285848DEA6AA7962B2F4D6BC028CB4 Signing time: Fri 27 Mar 2026 16:00:03 +0000 Manifest this update: Fri 27 Mar 2026 16:00:03 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (hash: EvIYrDGoKmBFkWBEdz2M9RlMa0JLchjJo3ueU6y1ffs=) 2: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl (hash: dScN+fFTJl3G5979SzV6DZxbUpEtnDYdqWE286ka5sY=) 3: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (hash: bEJw9DA8UJJ1Km+mt3yBoc3z/n7u8BMdciYKaUkam7k=) 4: 904b080a-8e57-3918-95ab-750f6766dc80.roa (hash: kXcwiNI+puaPO65LmQtl3ElsbErC/ZQyCKHVyJRkDbg=) 5: a98d5494-4572-385b-afc9-1ffafc221b11.roa (hash: bfV38YOktF+pYc7BBBpoWIjalu74+uK2vhKqUHJQ9rY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:18:a7:36:82:6c:cb:80:3b:9f:f6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Mar 27 16:00:03 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=4bb4c612-4ff2-47fe-b802-d07abc010816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:39:7a:97:0b:72:fa:67:9d:63:94:1f:25:9a: 31:40:84:67:dc:97:44:45:c1:1a:13:da:13:83:7f: 5d:bc:e9:f2:c0:19:cf:da:7e:e2:09:b1:54:48:48: 23:0b:1a:cb:5c:ff:cc:1e:b5:44:c8:e6:1a:72:e1: 7e:2d:34:9f:e7:61:09:9c:e5:28:03:6e:4d:c9:96: 9f:5c:b2:31:35:37:78:bb:40:db:54:d7:f1:59:5f: 24:34:65:d0:3b:3e:9a:7e:d7:5a:a5:1e:86:b0:36: 84:b8:b6:4a:79:02:6b:4e:ae:ee:14:76:85:c2:10: db:73:42:55:b6:1f:ee:f6:d7:5b:10:5f:95:90:ad: f1:a4:3d:62:e7:3a:ef:c4:f9:25:c9:c5:a0:78:78: e1:c9:21:8a:1c:71:24:d6:e3:e3:45:cc:36:ee:c1: 31:4c:df:4a:a7:b9:cf:30:85:2c:1a:6c:fd:ea:14: c4:67:d4:ea:18:d4:2c:be:42:2f:e3:6c:f4:2e:bf: b8:83:19:fb:73:37:45:23:60:b7:34:60:56:e1:dd: 81:dd:b7:f7:0e:02:9b:11:88:29:54:04:40:10:e2: d2:ae:4f:ed:5c:db:e4:b0:11:ad:6e:a8:39:2b:09: 2a:26:3d:fa:95:dc:bd:a5:9c:7a:8d:7b:05:41:aa: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:29:38:AD:B2:A6:BE:D4:70:CA:4C:2D:AA:97:EB:E0:8A:85:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:23:cd:e8:52:fd:47:94:27:2b:f9:df:75:a5:7c:c8:32:e1: 5e:87:01:56:b2:8f:04:a6:3d:a1:ec:5a:d1:cd:f6:dc:08:92: 37:a1:8f:30:50:44:ae:b2:a5:c2:e6:47:7b:19:08:1d:96:f4: 2a:9c:96:b2:3d:a1:a5:88:ff:83:9d:2d:ee:79:79:76:2d:8a: d0:a3:bb:0b:61:c6:3f:a6:c8:a5:95:0b:0d:a4:01:f0:eb:f8: 51:35:4d:24:72:45:d9:4a:b1:ff:ab:d5:96:61:62:d7:b2:d7: d5:3e:b0:e1:de:33:e6:b9:ce:14:7b:d6:f2:3c:5c:72:d2:9f: d2:d7:af:19:b9:37:d0:ac:80:ce:d9:d7:cc:c0:02:5c:dc:8d: 95:eb:e7:8d:21:5a:4f:5f:c6:6d:00:dd:47:f8:5f:fb:07:d5: 9c:5f:4a:96:4c:68:bd:13:3f:05:28:43:34:66:c3:6d:68:f2: 14:3d:7e:4c:d5:41:90:3b:32:f9:c9:ba:57:c6:49:56:23:8b: c7:e9:b3:95:fc:fb:95:2e:5e:59:9e:7a:fd:3b:3a:31:df:ff: 51:8b:08:0b:80:ff:d0:1c:30:9f:8d:fa:70:b3:07:e2:e0:a8: d2:88:b9:d5:dc:5d:02:d7:87:93:cb:f3:75:95:02:84:76:d9: 14:fc:6e:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PGKc2gmzLgDuf9qwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDMyNzE2MDAwM1oXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk NGJiNGM2MTItNGZmMi00N2ZlLWI4MDItZDA3YWJjMDEwODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzl6lwty+medY5QfJZoxQIRn3JdERcEaE9oT g39dvOnywBnP2n7iCbFUSEgjCxrLXP/MHrVEyOYacuF+LTSf52EJnOUoA25NyZaf XLIxNTd4u0DbVNfxWV8kNGXQOz6aftdapR6GsDaEuLZKeQJrTq7uFHaFwhDbc0JV th/u9tdbEF+VkK3xpD1i5zrvxPklycWgeHjhySGKHHEk1uPjRcw27sExTN9Kp7nP MIUsGmz96hTEZ9TqGNQsvkIv42z0Lr+4gxn7czdFI2C3NGBW4d2B3bf3DgKbEYgp VARAEOLSrk/tXNvksBGtbqg5KwkqJj36ldy9pZx6jXsFQaq5SQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGFeKTitsqa+1HDKTC2ql+vgioXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMzY4OWI5Y2UtMDg5ZC00 MTM3LWIxNGQtN2U0Y2QxNWU1M2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJI83oUv1HlCcr+d91pXzI MuFehwFWso8Epj2h7FrRzfbcCJI3oY8wUESusqXC5kd7GQgdlvQqnJayPaGliP+D nS3ueXl2LYrQo7sLYcY/psillQsNpAHw6/hRNU0kckXZSrH/q9WWYWLXstfVPrDh 3jPmuc4Ue9byPFxy0p/S168ZuTfQrIDO2dfMwAJc3I2V6+eNIVpPX8ZtAN1H+F/7 B9WcX0qWTGi9Ez8FKEM0ZsNtaPIUPX5M1UGQOzL5ybpXxklWI4vH6bOV/PuVLl5Z nnr9Ozox3/9RiwgLgP/QHDCfjfpwswfi4KjSiLnV3F0C14eTy/N1lQKEdtkU/G6V -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:20 2026 by rpki-client