$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft File: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft (raw, json) Hash identifier: ZugBHioNoNXzjuQaiw1ivZvGC66KoD+5dthDYZujjCg= Subject key identifier: F1:0E:F0:6A:D5:78:85:97:C2:CB:E4:FA:46:BE:7C:49:B1:70:81:53 Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584D06BE6DA47F655C63CF7A1C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft Manifest number: 010D0C9F4328584C48E9F1D11FEB13CE220B0945 Signing time: Sun 01 Mar 2026 18:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:00:04 +0000 Manifest next update: Wed 04 Mar 2026 18:00:00 +0000 Files and hashes: 1: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl (hash: Z45LgDnutuXYKIG+BMwJ58csSUsdJcAv+FiiICd+Zaw=) 2: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (hash: RSupp9avS048pdAtQwXnUGRnRZfbM/iNDu4mLJ7dgaU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:be:6d:a4:7f:65:5c:63:cf:7a:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Mar 1 18:00:04 2026 GMT Not After : Mar 4 18:00:00 2026 GMT Subject: CN=028e17dc-429d-4c7f-9f4e-364ee38d413b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:b6:4d:91:30:e0:5a:df:ad:22:1c:a6:f1: e8:25:59:d1:58:02:7b:a0:6f:a4:54:58:0e:02:af: db:cd:31:94:4a:2f:f3:70:29:5c:09:1b:98:54:f7: 20:63:e3:30:ad:f8:cf:c2:35:c4:5d:15:d0:3f:f9: 93:52:3c:d3:7c:d1:c0:38:bc:66:af:b5:4d:fe:34: ae:34:f8:e9:a3:86:a1:a8:85:3d:b5:a6:0e:38:5a: 46:06:22:75:8f:f9:60:ca:ad:13:12:77:8c:4b:24: 6f:7d:d4:de:67:a2:69:77:4c:b5:10:d7:77:61:b9: fd:85:d9:75:9a:e0:5b:d2:09:51:66:85:ab:88:38: 00:cd:c9:ec:e3:ee:f0:2f:8c:c4:ed:c8:50:e2:77: ef:d9:c8:a4:af:31:5c:b1:c4:21:3a:7e:cf:7b:40: f3:b5:38:f8:0a:10:4a:89:ee:c2:80:bc:c6:8d:6c: 2d:1d:45:0b:47:e5:6f:89:0b:08:4d:9c:06:94:8f: 38:14:3e:d7:be:d8:70:50:e9:51:17:9a:23:1a:5c: 60:c9:8b:d0:74:73:3f:d4:9f:63:ff:b3:e7:1b:3a: 2c:34:e2:ef:ab:53:18:77:f9:d7:0f:6c:c5:cf:09: c9:a7:13:cc:85:9b:59:eb:00:bf:09:af:26:13:cb: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:F0:6A:D5:78:85:97:C2:CB:E4:FA:46:BE:7C:49:B1:70:81:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b6:12:83:a6:99:6c:d5:f3:eb:cf:4b:95:73:3c:ce:e5:91: 45:c9:24:04:a2:c3:cf:72:1e:2b:21:87:99:4a:a6:b2:df:96: 9a:ad:ee:12:11:8a:24:14:53:e6:af:24:fd:ba:75:a4:78:c6: 5f:c2:d9:d5:5d:65:79:0c:84:b5:c0:03:aa:2f:21:6a:92:a6: 24:29:60:8d:02:80:d0:78:d6:d5:74:a2:a3:15:5b:0f:8e:3a: 57:57:79:3f:cc:cf:a1:ec:35:ca:6b:22:dd:2d:d4:9d:d9:c4: 81:10:9c:5a:71:14:5e:81:cc:78:83:20:ab:84:76:a3:b1:6d: 38:0c:e1:78:65:fb:8e:a4:2f:c3:35:4f:08:99:df:20:e2:0e: 63:54:49:5e:2d:24:b5:96:91:00:4f:9f:a5:96:7f:e2:e9:7c: 0e:35:ac:99:d0:c4:4b:8b:b9:8d:ce:2f:2a:d9:09:94:bc:4f: fa:c0:ec:e3:5d:dd:90:28:6b:08:91:bb:68:c2:55:3d:17:74: fc:06:3d:de:32:de:49:df:10:9d:3d:76:a3:ca:24:47:8f:2d: bf:21:88:43:f0:d2:d9:ac:92:f3:bb:b5:07:7c:3f:97:63:7d: c6:d1:66:33:f3:04:f8:06:9f:a6:e9:49:1b:7a:c3:a6:f0:ea: 8f:71:88:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gvm2kf2VcY896HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDMwMTE4MDAwNFoXDTI2MDMwNDE4MDAwMFowLzEtMCsGA1UEAxMk MDI4ZTE3ZGMtNDI5ZC00YzdmLTlmNGUtMzY0ZWUzOGQ0MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAC2TZEw4FrfrSIcpvHoJVnRWAJ7oG+kVFgO Aq/bzTGUSi/zcClcCRuYVPcgY+MwrfjPwjXEXRXQP/mTUjzTfNHAOLxmr7VN/jSu NPjpo4ahqIU9taYOOFpGBiJ1j/lgyq0TEneMSyRvfdTeZ6Jpd0y1ENd3Ybn9hdl1 muBb0glRZoWriDgAzcns4+7wL4zE7chQ4nfv2cikrzFcscQhOn7Pe0DztTj4ChBK ie7CgLzGjWwtHUULR+VviQsITZwGlI84FD7XvthwUOlRF5ojGlxgyYvQdHM/1J9j /7PnGzosNOLvq1MYd/nXD2zFzwnJpxPMhZtZ6wC/Ca8mE8uX8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPEO8GrVeIWXwsvk+ka+fEmxcIFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvM2E1YTJiMWMtOWFkMy00 NDk2LWJjZmMtMzIyOTc0YWNjZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/thKDppls1fPrz0uVczzO 5ZFFySQEosPPch4rIYeZSqay35aare4SEYokFFPmryT9unWkeMZfwtnVXWV5DIS1 wAOqLyFqkqYkKWCNAoDQeNbVdKKjFVsPjjpXV3k/zM+h7DXKayLdLdSd2cSBEJxa cRRegcx4gyCrhHajsW04DOF4ZfuOpC/DNU8Imd8g4g5jVEleLSS1lpEAT5+lln/i 6XwONayZ0MRLi7mNzi8q2QmUvE/6wOzjXd2QKGsIkbtowlU9F3T8Bj3eMt5J3xCd PXajyiRHjy2/IYhD8NLZrJLzu7UHfD+XY33G0WYz8wT4Bp+m6UkbesOm8OqPcYg8 -----END CERTIFICATE-----Generated at Sun Mar 1 23:18:54 2026 by rpki-client