$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: 6AJlqDqBhYI6SAu77z/AT9Gv1K6KAvCNaBa6aRF45pg= Subject key identifier: 6E:B2:57:C0:B7:65:A3:9E:A0:84:2C:C8:EE:BB:17:BD:97:0D:CA:64 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584D06DC3168BA7E612B84D73B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FB05 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: xdFzZF928LSVoWY/6g7zf3DakxjLuAj23TX+pEwGGes=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: HDwTyEJbSycjj8AKAXUGk1xC30Evc8P2X4xS9ro57cs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:31:68:ba:7e:61:2b:84:d7:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=b697e0ce-c6c3-47b7-8fe2-fd069c71d861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:c9:1e:aa:8f:a5:8c:a8:24:85:e5:41:ab: 69:43:35:95:88:de:cf:09:b8:54:2c:6c:b4:8c:ab: 9d:74:c1:d6:f8:76:23:0c:7a:f3:8c:c3:bc:30:ef: 82:54:9d:99:a9:10:44:18:ff:da:2f:60:70:c1:31: d3:4b:91:28:df:56:d6:c5:10:a2:29:0d:40:81:f2: 14:b1:d1:32:0e:16:d2:b1:44:62:45:0e:e5:be:98: e8:fa:22:fa:98:6e:67:7b:43:ff:ef:db:8b:71:65: 46:ce:a5:6a:b3:2b:53:1f:3a:a5:0a:fe:89:a0:40: 91:65:56:04:cb:e1:95:f5:9a:d9:a4:45:12:86:5b: a3:cc:10:84:88:69:1e:cb:3f:81:55:25:e2:59:8a: a7:44:26:99:73:d7:85:52:98:df:5a:66:cf:e7:67: 54:2c:6a:48:b0:ff:4d:62:be:8a:ce:06:39:f0:0a: 14:53:79:42:5a:93:b5:20:e8:32:e0:ec:00:7a:27: b3:99:89:a3:75:ee:99:38:f3:00:a1:5f:20:2a:34: 3c:b8:e3:1c:ca:b2:9b:72:19:20:58:4d:03:10:d0: 9f:77:f2:a3:4f:6b:e9:b8:54:cf:ab:aa:28:58:7c: 31:c2:e3:8a:f7:3a:75:fd:ac:1f:c4:31:1a:cb:2e: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B2:57:C0:B7:65:A3:9E:A0:84:2C:C8:EE:BB:17:BD:97:0D:CA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b2:3c:cf:fb:89:91:65:72:12:b0:ea:b9:af:ec:62:82:c6: 00:bf:34:1b:8f:16:81:bc:17:d4:96:fa:97:d8:c8:de:e9:93: 4e:d6:05:98:e6:a7:96:17:2a:42:48:07:5a:e2:f2:05:ea:91: ea:48:03:ed:64:d0:fd:fc:3d:10:48:03:9d:8d:c8:9a:59:25: b4:3e:5c:7e:0a:6c:ad:63:fe:35:57:30:ab:22:63:85:ef:c7: a5:0a:22:f4:a5:f8:8e:21:fb:7a:62:70:b0:9a:0a:29:95:2e: 1c:b8:e0:5b:b2:70:da:31:13:25:91:0b:33:78:da:c1:54:ff: 7e:d2:34:91:ad:be:f3:e7:59:62:4b:be:69:4a:5e:cc:09:a0: 92:c9:66:b1:81:cb:e4:62:1d:e6:4b:b3:32:c5:d4:57:8f:f6: df:5f:c1:de:bc:60:f9:bb:f9:10:3f:5d:25:1b:06:da:92:ee: fd:7d:da:ba:01:3c:35:9d:08:ee:2c:aa:20:f3:b6:a2:92:29: 96:8a:2b:a3:3b:b4:b6:7c:9e:2e:15:4d:f1:7e:d8:0e:62:7c: fc:c6:75:8b:6f:52:a5:75:3b:40:fb:d3:8c:c4:2f:ff:d2:7e: 04:50:81:85:a4:c9:a1:ea:05:be:57:3d:16:52:77:f9:9d:92: a4:1a:06:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DFoun5hK4TXO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk YjY5N2UwY2UtYzZjMy00N2I3LThmZTItZmQwNjljNzFkODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmzJHqqPpYyoJIXlQatpQzWViN7PCbhULGy0 jKuddMHW+HYjDHrzjMO8MO+CVJ2ZqRBEGP/aL2BwwTHTS5Eo31bWxRCiKQ1AgfIU sdEyDhbSsURiRQ7lvpjo+iL6mG5ne0P/79uLcWVGzqVqsytTHzqlCv6JoECRZVYE y+GV9ZrZpEUShlujzBCEiGkeyz+BVSXiWYqnRCaZc9eFUpjfWmbP52dULGpIsP9N Yr6KzgY58AoUU3lCWpO1IOgy4OwAeiezmYmjde6ZOPMAoV8gKjQ8uOMcyrKbchkg WE0DENCfd/KjT2vpuFTPq6ooWHwxwuOK9zp1/awfxDEayy6pHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG6yV8C3ZaOeoIQsyO67F72XDcpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9sjzP+4mRZXISsOq5r+xi gsYAvzQbjxaBvBfUlvqX2Mje6ZNO1gWY5qeWFypCSAda4vIF6pHqSAPtZND9/D0Q SAOdjciaWSW0Plx+CmytY/41VzCrImOF78elCiL0pfiOIft6YnCwmgoplS4cuOBb snDaMRMlkQszeNrBVP9+0jSRrb7z51liS75pSl7MCaCSyWaxgcvkYh3mS7MyxdRX j/bfX8HevGD5u/kQP10lGwbaku79fdq6ATw1nQjuLKog87aikimWiiujO7S2fJ4u FU3xftgOYnz8xnWLb1KldTtA+9OMxC//0n4EUIGFpMmh6gW+Vz0WUnf5nZKkGgYP -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:02 2026 by rpki-client