$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: lhyDHPxh3Z6dInfg8ThibbItO3cFr2adcKYf4jORUqQ= Subject key identifier: 58:E5:9C:57:92:EE:CA:A0:B3:05:0A:AF:CA:6D:5F:75:EE:2C:8A:2C Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584D08D66DBCEB4F48424E765700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B60F1 Signing time: Mon 02 Mar 2026 12:00:03 +0000 Manifest this update: Mon 02 Mar 2026 12:00:03 +0000 Manifest next update: Wed 04 Mar 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: gTKDn4Cnm+0RA9jbXjioYe/DpECOsFuRL13aWkdfzOA=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: BYVpe6y0H26PAedkBJCnw3oJ7MZuBrfs2zh4/ACGI+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:d6:6d:bc:eb:4f:48:42:4e:76:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Mar 2 12:00:03 2026 GMT Not After : Mar 4 12:00:00 2026 GMT Subject: CN=d8448fc5-264f-4b0d-917f-9a3e1c305928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:66:ea:d7:0f:c8:5b:bb:a4:20:38:be:72: 4d:e7:e7:f2:6e:32:86:48:4a:ee:61:a2:7a:44:8a: ce:5a:c1:70:8a:ac:7b:4f:24:b4:f3:ef:76:0e:9c: ac:ba:59:11:ab:f3:da:b3:d9:4b:e0:bc:ba:fa:75: 33:ed:19:92:a8:d4:70:b7:94:07:ba:b8:7d:7f:d6: 17:2f:a2:b2:e3:e6:86:6b:bb:a9:81:c6:87:b4:f6: f2:da:15:96:59:a5:14:87:ec:27:48:45:2b:99:6e: 91:f6:e7:24:6c:69:ea:87:d4:69:35:66:18:e7:ec: 2e:d2:e8:0f:4d:95:3f:db:6b:1e:6b:f4:85:d6:87: ec:03:ea:ff:5a:ae:b0:a6:fd:c1:69:7f:0a:0e:ac: 7d:06:02:e8:b0:3b:80:a9:26:9a:9c:c0:bd:9d:29: 50:12:2e:6e:fe:c4:a3:0f:60:81:a5:d9:0a:5a:63: 7e:1f:00:38:b6:c1:14:ae:89:3f:b7:9f:f9:6a:40: cc:24:27:c3:e0:5f:73:03:97:22:c2:56:37:53:5a: 04:e2:59:f9:7e:e5:85:9a:c0:fb:24:62:1a:f1:4f: c4:9f:15:df:e0:9d:d6:94:c4:c3:ca:7a:66:8c:9f: 1b:01:a0:ce:b3:82:0f:b6:b2:3a:a6:62:f7:60:13: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:9C:57:92:EE:CA:A0:B3:05:0A:AF:CA:6D:5F:75:EE:2C:8A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:49:ec:fe:49:f1:93:49:34:0d:e6:f1:e0:41:99:dc:9e:72: 0c:0d:ff:32:28:4d:2f:fc:f0:44:4b:f0:a1:1f:9b:60:ac:ac: 86:3e:93:ff:f4:6f:0e:a4:a5:1a:2e:c4:aa:6f:ec:50:f4:d3: cf:06:c5:10:38:82:b4:75:fa:58:4f:38:2c:e0:5c:a7:fb:55: ab:fc:73:c0:26:98:b8:2c:f6:4a:5c:5c:dd:11:07:ab:f4:e6: 08:cd:26:ef:0b:1e:79:d6:8a:14:22:39:2a:71:56:7d:aa:77: 66:2b:32:0c:79:45:a7:97:c7:87:32:5a:06:40:6c:3a:4d:20: dd:e5:9f:40:86:eb:45:85:d3:0a:1f:67:fe:44:6a:91:05:6a: 63:da:28:05:39:73:38:69:39:ef:0e:d1:9d:b4:7c:ec:4d:60: e2:2f:a8:1e:70:f3:95:4d:9d:07:4f:87:cf:6d:a4:65:69:ab: d3:d0:33:03:35:b1:8e:e0:f1:ce:4d:37:e1:e7:42:61:2f:cf: 80:b0:bb:51:b6:c7:21:0a:c1:d9:e8:b8:88:68:0a:93:6a:e2: 96:45:33:42:89:1b:f9:fc:ed:2d:fe:47:d7:be:cf:05:a7:34: d5:14:0f:d2:69:06:6b:65:ae:8c:d2:ba:44:f8:b0:5b:8a:9b: bf:6a:59:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0I1m28609IQk52VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDMwMjEyMDAwM1oXDTI2MDMwNDEyMDAwMFowLzEtMCsGA1UEAxMk ZDg0NDhmYzUtMjY0Zi00YjBkLTkxN2YtOWEzZTFjMzA1OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlpm6tcPyFu7pCA4vnJN5+fybjKGSEruYaJ6 RIrOWsFwiqx7TyS08+92DpysulkRq/Pas9lL4Ly6+nUz7RmSqNRwt5QHurh9f9YX L6Ky4+aGa7upgcaHtPby2hWWWaUUh+wnSEUrmW6R9uckbGnqh9RpNWYY5+wu0ugP TZU/22sea/SF1ofsA+r/Wq6wpv3BaX8KDqx9BgLosDuAqSaanMC9nSlQEi5u/sSj D2CBpdkKWmN+HwA4tsEUrok/t5/5akDMJCfD4F9zA5ciwlY3U1oE4ln5fuWFmsD7 JGIa8U/EnxXf4J3WlMTDynpmjJ8bAaDOs4IPtrI6pmL3YBP8QQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFjlnFeS7sqgswUKr8ptX3XuLIosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDKSez+SfGTSTQN5vHgQZnc nnIMDf8yKE0v/PBES/ChH5tgrKyGPpP/9G8OpKUaLsSqb+xQ9NPPBsUQOIK0dfpY Tzgs4Fyn+1Wr/HPAJpi4LPZKXFzdEQer9OYIzSbvCx551ooUIjkqcVZ9qndmKzIM eUWnl8eHMloGQGw6TSDd5Z9AhutFhdMKH2f+RGqRBWpj2igFOXM4aTnvDtGdtHzs TWDiL6gecPOVTZ0HT4fPbaRlaavT0DMDNbGO4PHOTTfh50JhL8+AsLtRtschCsHZ 6LiIaAqTauKWRTNCiRv5/O0t/kfXvs8FpzTVFA/SaQZrZa6M0rpE+LBbipu/alm9 -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:50 2026 by rpki-client