$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json) Hash identifier: ZzXNNj/YAwFnlbNXYgR8A08KnOkWyG/Zt/UMgqCBaXg= Subject key identifier: 13:5B:00:E1:91:E8:00:A0:EC:17:AD:31:D3:FD:A8:A3:8A:D4:F8:85 Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584D0682EB0751CF2557D0E3C8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A560423 Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Wed 04 Mar 2026 16:00:00 +0000 Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: WA1pFXU8vUSfYfv6r4ExGntd1bv6Jf3ufjKRga2hsjw=) 2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: CMIpBbcBTn+JEtp5ggGG+28nA4gvAqTd5dTWpOZb1Jo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:eb:07:51:cf:25:57:d0:e3:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 4 16:00:00 2026 GMT Subject: CN=ca97867c-9618-4eeb-b857-3ac10139281a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3e:b8:74:2b:01:86:5b:e3:50:68:f9:d7:52: db:de:e4:0d:03:cf:1e:17:38:9b:1f:79:2d:0a:4c: 2a:86:65:74:34:c9:e7:9a:ff:17:32:15:60:79:54: 2a:af:8c:6f:09:7d:12:cd:b9:f1:81:87:6d:7b:09: 1e:fe:a5:f1:61:4f:c0:84:68:b2:e5:1a:00:fd:d6: 5d:b2:b3:c4:5d:f2:6d:7e:7a:eb:e8:15:bf:5d:72: bf:69:66:e7:1c:81:e3:55:36:c8:f5:df:8f:f1:2a: 5b:63:ec:50:b4:6d:aa:42:8a:23:1f:c7:30:69:a9: 4d:da:80:6a:6f:77:e1:ce:04:5c:e4:41:49:04:15: 69:87:fc:c5:9d:f6:a3:6c:29:3e:41:11:8a:76:be: 0f:ff:95:0a:12:d1:c8:42:ba:3a:5f:f3:42:4f:dd: 43:1b:05:33:8e:5b:5b:3d:c9:e5:b3:77:3e:7a:f2: 9d:fc:40:fb:77:7d:39:32:89:58:08:31:fd:df:f4: 87:c2:58:87:07:b0:45:ac:b6:2a:1e:a5:a3:d7:b4: 3b:9f:3b:1f:b2:b0:a9:c4:e0:73:53:9e:52:2e:45: ee:20:ab:73:2d:ea:5c:bd:40:d0:d2:98:13:0a:0c: 74:a5:6a:ac:84:b1:6f:f9:2c:2a:a1:0b:9b:e3:08: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5B:00:E1:91:E8:00:A0:EC:17:AD:31:D3:FD:A8:A3:8A:D4:F8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0b:90:56:8c:91:31:96:b6:e9:9c:cd:ed:19:f5:7e:19:ce: f6:92:7f:c0:91:39:ea:ee:68:cc:37:ba:f1:fc:ed:40:16:74: 98:51:79:6e:a3:7f:c1:e9:8a:9d:2d:1c:2d:06:fb:cb:71:9b: b6:6d:7b:fc:6b:27:87:da:f5:20:2f:48:d3:0a:21:64:46:3a: af:01:d5:6f:64:74:e5:06:9b:0f:64:94:27:1a:72:2e:b8:ba: 7d:f7:d5:e7:fe:c8:41:1c:4c:59:a1:cf:ee:06:9b:66:df:84: a5:5d:41:31:33:a7:12:e7:e9:42:6b:c0:68:32:f1:1a:1f:cb: 77:7a:52:a9:5a:6a:ff:01:50:16:77:6d:c9:43:76:06:e6:04: 4d:35:92:e8:8c:ca:63:fa:d9:c8:f2:34:7f:d8:0e:6a:97:1d: 1a:f8:39:44:e4:74:8d:15:69:06:35:cf:d8:98:c4:41:24:e9: f8:38:14:00:db:5d:23:91:30:9e:b5:07:97:78:ff:8c:76:2a: 4e:f2:45:95:d9:14:74:90:83:f2:bd:fd:9b:09:6f:e0:2a:75: ec:d7:6d:82:10:4c:bf:00:7f:43:8f:3d:73:f6:b0:99:d6:76: 11:47:84:83:cc:c6:fb:24:d1:fd:29:70:7d:47:e5:88:0d:91: 07:b2:5a:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GgusHUc8lV9DjyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwNDE2MDAwMFowLzEtMCsGA1UEAxMk Y2E5Nzg2N2MtOTYxOC00ZWViLWI4NTctM2FjMTAxMzkyODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+T64dCsBhlvjUGj511Lb3uQNA88eFzibH3kt CkwqhmV0NMnnmv8XMhVgeVQqr4xvCX0SzbnxgYdtewke/qXxYU/AhGiy5RoA/dZd srPEXfJtfnrr6BW/XXK/aWbnHIHjVTbI9d+P8SpbY+xQtG2qQoojH8cwaalN2oBq b3fhzgRc5EFJBBVph/zFnfajbCk+QRGKdr4P/5UKEtHIQro6X/NCT91DGwUzjltb Pcnls3c+evKd/ED7d305MolYCDH93/SHwliHB7BFrLYqHqWj17Q7nzsfsrCpxOBz U55SLkXuIKtzLepcvUDQ0pgTCgx0pWqshLFv+SwqoQub4winuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBNbAOGR6ACg7BetMdP9qKOK1PiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00 ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcC5BWjJExlrbpnM3tGfV+ Gc72kn/AkTnq7mjMN7rx/O1AFnSYUXluo3/B6YqdLRwtBvvLcZu2bXv8ayeH2vUg L0jTCiFkRjqvAdVvZHTlBpsPZJQnGnIuuLp999Xn/shBHExZoc/uBptm34SlXUEx M6cS5+lCa8BoMvEaH8t3elKpWmr/AVAWd23JQ3YG5gRNNZLojMpj+tnI8jR/2A5q lx0a+DlE5HSNFWkGNc/YmMRBJOn4OBQA210jkTCetQeXeP+MdipO8kWV2RR0kIPy vf2bCW/gKnXs122CEEy/AH9Djz1z9rCZ1nYRR4SDzMb7JNH9KXB9R+WIDZEHslpt -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:18 2026 by rpki-client