$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: Dli0qojkc99o/hYC4va1NRBmkFlkwuw+IFhIEHA9Vek= Subject key identifier: FC:01:3C:4B:B7:69:51:44:C7:BD:FD:8A:E2:7E:C5:03:59:CA:FE:EA Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584D089ADF766CE2E00CC02E4480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBB9E Signing time: Mon 02 Mar 2026 10:00:04 +0000 Manifest this update: Mon 02 Mar 2026 10:00:04 +0000 Manifest next update: Wed 04 Mar 2026 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: kNjDGTUBiOlZgeKJCCKrUZqZOIAESAlfKNqi3g6Sx4I=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: yUn4zVz1zU05t6djnWb974+Y8QgBI0lOVdzHvuZZchc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:9a:df:76:6c:e2:e0:0c:c0:2e:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Mar 2 10:00:04 2026 GMT Not After : Mar 4 10:00:00 2026 GMT Subject: CN=b377228f-9e34-4237-bf83-934c7eeb748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:fb:f1:b9:a0:d7:a3:5e:ac:c7:00:21:24: 6b:32:6d:9b:5f:9f:63:61:9f:a8:85:2a:11:20:9a: 42:d8:e4:c6:d2:53:b7:e9:43:38:07:ca:1b:e2:0a: db:64:2e:ec:99:b6:89:57:a5:54:02:51:56:9b:42: 72:52:b2:8b:51:8c:42:bc:0d:81:74:5a:5c:8b:0b: ad:14:50:81:41:ca:cc:7b:47:c1:a4:03:15:3c:bf: a5:34:4b:cb:8e:51:66:38:5f:ff:05:9d:e5:3b:7a: 9d:fb:c9:fd:72:fa:cc:75:6c:0c:35:5c:4d:ce:a4: 57:62:fe:d2:8d:0b:98:72:7c:4a:5a:9f:68:4d:28: 41:7b:a5:24:6b:c0:ad:b5:8e:35:92:1d:0b:63:99: 3a:a9:de:58:03:f9:a6:21:40:05:8c:2f:07:61:f8: eb:97:f9:91:38:b4:70:e1:7b:be:46:ea:5c:44:eb: 5f:9c:4f:98:94:df:04:53:37:fb:8b:50:c2:59:1e: 7e:47:b8:8c:c4:fc:14:74:f9:50:de:27:9a:80:a5: 08:9a:46:63:66:da:77:db:0f:3f:db:86:fa:d7:b2: 8f:e2:9e:5b:a2:87:7b:16:d4:ae:3f:d1:e5:29:05: 69:79:a5:d7:24:f6:a2:bb:da:80:87:1a:f9:14:65: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:01:3C:4B:B7:69:51:44:C7:BD:FD:8A:E2:7E:C5:03:59:CA:FE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3b:b2:4a:91:23:8a:12:c1:9c:5d:5a:ba:c0:19:df:01:2c: cf:67:0e:66:7e:58:fa:7d:48:76:16:ba:d8:6b:62:18:ee:ca: 14:9c:76:a4:04:e5:09:80:bf:ef:7c:fb:df:a0:e0:dd:a7:7e: 51:7f:aa:fb:d3:8f:51:00:78:27:5c:36:a3:87:7a:c7:50:5e: a1:47:a7:c7:01:79:fb:e0:4e:91:53:6e:86:a7:c3:a1:e6:e1: eb:a9:09:a9:91:5e:a5:c3:58:b5:f7:a5:9d:72:bd:e7:2f:19: 39:cc:37:83:67:e0:49:c5:05:3a:1a:d6:08:bc:5e:67:9c:a5: 6d:90:c9:68:96:50:a7:1d:d2:3a:2b:3a:9d:fd:05:54:cb:6c: 78:b5:2c:6b:ed:c8:88:04:23:68:b5:c6:e9:19:c4:5d:24:03: dd:ea:63:1a:3a:b3:3d:2f:34:02:17:c0:28:55:93:7d:a3:95: 74:af:8e:89:3a:be:26:08:4e:3e:4d:b3:2b:fc:94:d1:fd:84: 1b:f7:06:21:f7:2d:b2:5e:e1:0f:fd:1f:b9:95:96:18:ce:f0: c8:f0:af:8a:f3:a5:dd:fa:4a:a8:c8:f5:08:b2:f6:ab:dd:32: 35:8d:c0:81:3d:7c:50:6d:df:7f:49:0e:a8:cf:a2:dc:3b:3b: 69:02:84:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Imt92bOLgDMAuRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI2MDMwMjEwMDAwNFoXDTI2MDMwNDEwMDAwMFowLzEtMCsGA1UEAxMk YjM3NzIyOGYtOWUzNC00MjM3LWJmODMtOTM0YzdlZWI3NDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9378bmg16NerMcAISRrMm2bX59jYZ+ohSoR IJpC2OTG0lO36UM4B8ob4grbZC7smbaJV6VUAlFWm0JyUrKLUYxCvA2BdFpciwut FFCBQcrMe0fBpAMVPL+lNEvLjlFmOF//BZ3lO3qd+8n9cvrMdWwMNVxNzqRXYv7S jQuYcnxKWp9oTShBe6Uka8CttY41kh0LY5k6qd5YA/mmIUAFjC8HYfjrl/mROLRw 4Xu+RupcROtfnE+YlN8EUzf7i1DCWR5+R7iMxPwUdPlQ3ieagKUImkZjZtp32w8/ 24b617KP4p5bood7FtSuP9HlKQVpeaXXJPaiu9qAhxr5FGWAjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPwBPEu3aVFEx739iuJ+xQNZyv7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChO7JKkSOKEsGcXVq6wBnf ASzPZw5mflj6fUh2FrrYa2IY7soUnHakBOUJgL/vfPvfoODdp35Rf6r7049RAHgn XDajh3rHUF6hR6fHAXn74E6RU26Gp8Oh5uHrqQmpkV6lw1i196Wdcr3nLxk5zDeD Z+BJxQU6GtYIvF5nnKVtkMlollCnHdI6Kzqd/QVUy2x4tSxr7ciIBCNotcbpGcRd JAPd6mMaOrM9LzQCF8AoVZN9o5V0r46JOr4mCE4+TbMr/JTR/YQb9wYh9y2yXuEP /R+5lZYYzvDI8K+K86Xd+kqoyPUIsvar3TI1jcCBPXxQbd9/SQ6oz6LcOztpAoQi -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:56 2026 by rpki-client