$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft File: 3e752e0d-0e22-47d1-a147-151d170def2d.mft (raw, json) Hash identifier: tKJBk18n2kIH7VB5Z051G125G75Jb8uha/uhwTI4qCk= Subject key identifier: DC:A7:86:D7:21:3F:AA:4A:AA:F9:43:15:7C:B2:09:53:8E:C2:2C:3A Authority key identifier: 8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 Certificate issuer: /CN=3e752e0d-0e22-47d1-a147-151d170def2d Certificate serial: 010D0C9F4328584D06A0A36C7AD0641475C26D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft Manifest number: 010D0C9F4328584338DCA9666A635BF04CCCE883 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 3e752e0d-0e22-47d1-a147-151d170def2d.crl (hash: 8JpcFOJOWsX0GUmQETEhf+JeFEzvUZlVHYQ91gxUAiI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a3:6c:7a:d0:64:14:75:c2:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e752e0d-0e22-47d1-a147-151d170def2d Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=6fff6bf3-5bca-4d75-93bf-04524049d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:72:c8:9b:1f:81:57:f0:24:5f:57:9e:73: 5a:aa:88:f4:d2:29:d1:b0:9c:e3:6d:d1:61:8b:f1: 61:d8:fe:6d:be:70:58:6a:94:d3:23:d1:92:e2:8c: 74:c2:7d:a3:a6:ae:0a:d2:5b:da:3c:bf:59:7c:82: 5c:37:ec:77:84:e3:12:9d:3f:5f:c6:01:9f:25:7c: 4d:c5:ca:c2:e2:cd:df:93:90:80:a8:d0:dd:05:7e: b3:4e:5a:64:b7:34:70:e4:31:86:85:64:87:32:a1: fc:47:81:50:e9:6a:10:10:6b:4e:fa:c4:a6:24:80: a4:a6:9b:e6:2e:c6:01:d9:67:60:a8:67:3a:bd:8f: b9:fa:35:9c:33:0f:ba:54:8b:1d:00:7d:8e:4f:14: fa:75:25:3f:36:99:32:a8:3f:26:c9:04:65:a7:5e: 68:54:2e:9d:71:a3:48:6e:47:66:33:c6:ef:d2:ae: 56:16:69:ff:72:f4:ca:29:17:e9:f6:6f:62:48:52: 29:28:96:99:36:ee:8f:d0:eb:ce:8f:00:3c:c5:3a: f2:1f:7c:e9:fa:27:17:12:c6:01:56:60:d3:bc:53: 88:de:2f:8b:90:58:f3:3c:9e:f6:af:fa:f6:e2:af: 21:7a:64:fb:3a:74:66:b2:7d:86:bf:7b:61:a2:d8: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A7:86:D7:21:3F:AA:4A:AA:F9:43:15:7C:B2:09:53:8E:C2:2C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl X509v3 Authority Key Identifier: keyid:8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7c:31:36:cc:3c:de:96:21:f4:16:5e:fa:dd:14:61:f6:a5: eb:9e:68:1b:8f:dd:b8:cc:68:be:02:2a:02:d7:c1:1c:3e:bb: 7e:87:6d:a8:a1:93:6c:66:75:a5:5f:fc:ca:05:2e:42:b0:93: c1:5a:aa:0f:ad:e8:8c:56:b6:6f:22:cf:86:47:1b:74:6a:dd: 21:0a:04:33:df:4f:41:18:88:72:71:ad:6b:41:f1:87:d2:70: d5:df:0d:22:e6:9f:8c:be:35:8a:dd:13:b4:75:d4:24:97:2d: 98:1b:3c:d3:30:7c:16:09:7e:24:d4:24:9e:ab:40:0f:16:56: 56:9f:f3:fa:ea:67:24:86:ba:41:97:77:7f:6a:be:2f:1f:59: a3:10:fc:2a:21:d9:2b:18:a8:81:95:d1:cb:ed:0f:44:db:f5: 8d:72:ea:dd:fc:1f:ff:9c:64:8f:6a:9f:ee:c1:74:89:a7:7c: 0c:16:90:1f:c4:c9:fb:0e:11:bc:e6:88:1a:f1:65:ec:5c:12: d0:5e:68:6d:9c:cc:cd:26:4b:46:1b:9e:12:4a:96:70:f5:3b: 8c:e7:49:6b:01:fa:3d:3c:87:28:09:bc:f8:29:e5:50:b6:eb: f3:ea:68:e8:c5:2f:a6:3a:61:83:ce:0b:10:a8:42:21:48:8e: c9:43:6e:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKNsetBkFHXCbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U3NTJlMGQtMGUyMi00N2QxLWExNDctMTUxZDE3MGRl ZjJkMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk NmZmZjZiZjMtNWJjYS00ZDc1LTkzYmYtMDQ1MjQwNDlkN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg01yyJsfgVfwJF9XnnNaqoj00inRsJzjbdFh i/Fh2P5tvnBYapTTI9GS4ox0wn2jpq4K0lvaPL9ZfIJcN+x3hOMSnT9fxgGfJXxN xcrC4s3fk5CAqNDdBX6zTlpktzRw5DGGhWSHMqH8R4FQ6WoQEGtO+sSmJICkppvm LsYB2WdgqGc6vY+5+jWcMw+6VIsdAH2OTxT6dSU/NpkyqD8myQRlp15oVC6dcaNI bkdmM8bv0q5WFmn/cvTKKRfp9m9iSFIpKJaZNu6P0OvOjwA8xTryH3zp+icXEsYB VmDTvFOI3i+LkFjzPJ72r/r24q8hemT7OnRmsn2Gv3thotiZ5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNynhtchP6pKqvlDFXyyCVOOwiw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1 MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFkMTcwZGVmMmQvM2U3NTJlMGQtMGUyMi00 N2QxLWExNDctMTUxZDE3MGRlZjJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2U3NTJlMGQtMGUyMi00N2QxLWEx NDctMTUxZDE3MGRlZjJkLzNlNzUyZTBkLTBlMjItNDdkMS1hMTQ3LTE1MWQxNzBk ZWYyZC5jcmwwHwYDVR0jBBgwFoAUi7RTNvc3QthQ8iPcH0cb2YnNmqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFk MTcwZGVmMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKfDE2zDzeliH0Fl763RRh 9qXrnmgbj924zGi+AioC18EcPrt+h22ooZNsZnWlX/zKBS5CsJPBWqoPreiMVrZv Is+GRxt0at0hCgQz309BGIhyca1rQfGH0nDV3w0i5p+MvjWK3RO0ddQkly2YGzzT MHwWCX4k1CSeq0APFlZWn/P66mckhrpBl3d/ar4vH1mjEPwqIdkrGKiBldHL7Q9E 2/WNcurd/B//nGSPap/uwXSJp3wMFpAfxMn7DhG85oga8WXsXBLQXmhtnMzNJktG G54SSpZw9TuM50lrAfo9PIcoCbz4KeVQtuvz6mjoxS+mOmGDzgsQqEIhSI7JQ26n -----END CERTIFICATE-----Generated at Sun Mar 1 20:26:06 2026 by rpki-client