$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft File: 3c372d7c-197a-4caa-82d9-dc676d91ea22.mft (raw, json) Hash identifier: qxRl0Gil7EWu4a1L00wKIkn4Trs4fyzjhhBbT/Nq8Xk= Subject key identifier: CD:12:A5:EE:AA:3F:BF:E6:82:97:72:8C:AA:AB:53:58:BB:71:80:05 Authority key identifier: 28:63:7F:9B:FC:0B:AE:A9:AE:A4:D6:3A:F0:FE:88:8F:CA:C6:06:23 Certificate issuer: /CN=3c372d7c-197a-4caa-82d9-dc676d91ea22 Certificate serial: 010D0C9F4328584D06A0A45FE4008BA39C91B280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft Manifest number: 010D0C9F4328584A604D569E8D9BF38993930239 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 3c372d7c-197a-4caa-82d9-dc676d91ea22.crl (hash: r0Qrb7uBIDE6eY4R4DzSX/bVFrxablabRmFOoHDQ3Jo=) 2: e2b3aed4-c831-3bd9-836f-207af6434ee3.roa (hash: OmlYDvyxCQyZcUS1ORidPZxviM+tVRZCg/rBANYYWcE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a4:5f:e4:00:8b:a3:9c:91:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c372d7c-197a-4caa-82d9-dc676d91ea22 Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=0291c201-865a-4a22-a7f4-1f412fd4dfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f8:3e:3a:c7:1b:53:93:89:38:e0:39:41:d5: 47:3f:c0:b3:42:6e:7e:bb:52:45:23:69:e9:c4:72: 32:b9:f6:0e:e3:14:7f:51:ed:72:f9:3d:48:17:69: a2:e2:ef:7c:3e:5d:a0:cb:d2:26:58:fd:85:71:3b: 09:9a:90:bb:e6:99:20:aa:65:70:e1:0a:ef:97:31: 26:4c:05:95:42:eb:76:19:38:bd:6d:9b:69:26:5f: 87:93:77:0b:bc:08:de:d6:2d:d3:e4:17:61:3d:fc: 5d:db:23:1a:58:01:c6:ae:b3:3e:f4:ab:27:82:1b: 9b:c1:aa:ac:a0:9c:20:02:ee:8e:8f:32:26:cb:40: df:6b:03:b7:88:c5:af:ed:51:8a:01:09:6f:ab:c6: 73:46:a3:bd:d5:b9:7b:dd:2f:ec:ee:44:d8:55:84: 6b:72:f4:fd:c0:2f:a9:b4:ac:cb:13:e4:93:b7:be: c1:56:5c:95:31:79:e0:8e:01:1f:2e:ab:b1:34:d1: 47:c8:d2:5d:0e:b0:45:1c:06:b7:c3:55:2e:a0:45: ae:cc:60:69:df:ac:9e:c0:93:a2:a3:82:c3:a8:eb: cd:e4:53:ea:41:7d:14:77:00:f7:77:6e:67:8f:ef: d9:95:4f:fc:d8:7a:41:b9:70:a9:5a:22:83:7f:23: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:12:A5:EE:AA:3F:BF:E6:82:97:72:8C:AA:AB:53:58:BB:71:80:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.crl X509v3 Authority Key Identifier: keyid:28:63:7F:9B:FC:0B:AE:A9:AE:A4:D6:3A:F0:FE:88:8F:CA:C6:06:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7d:e3:96:18:04:2f:58:2a:8e:9e:8f:dc:b7:39:0e:ce:5a: cd:0b:bb:93:32:6e:20:43:68:a5:14:6b:57:13:02:1a:1a:50: 76:87:4f:ec:7b:89:47:ce:15:be:1b:54:5c:66:18:b7:65:ca: d1:f2:03:12:ab:73:10:e6:56:6f:33:cf:14:4d:bd:aa:35:83: 3d:f9:60:d2:37:97:88:dd:20:fa:c1:37:03:2f:ee:73:91:7d: c2:35:7f:4f:e3:0b:26:60:02:50:37:5c:31:9b:69:38:15:fc: 04:49:d4:05:80:68:39:c9:d6:59:64:43:dc:07:5e:5b:be:ad: 89:ff:56:d6:bd:93:a3:1a:9a:41:8f:7c:43:00:8a:d9:9d:fc: bb:0f:93:8c:2c:89:a0:14:a5:10:00:6b:34:0a:e7:0a:6c:bd: d4:b7:cd:6a:e9:7d:82:2a:e8:8f:06:ac:a4:f9:a0:28:4f:12: 14:fb:c6:f0:19:ba:24:64:bb:13:c1:7a:c4:48:79:07:65:33: 87:46:b5:f5:bb:47:26:50:7e:57:79:6a:db:eb:2f:a6:c4:6d: 57:ed:a3:34:29:1f:35:06:a7:69:b3:10:f6:8e:9a:92:4c:fb: cd:44:93:dd:fb:a0:a4:9a:7b:db:13:83:b7:88:de:29:94:f8: b9:7f:dd:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKRf5ACLo5yRsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MzNzJkN2MtMTk3YS00Y2FhLTgyZDktZGM2NzZkOTFl YTIyMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk MDI5MWMyMDEtODY1YS00YTIyLWE3ZjQtMWY0MTJmZDRkZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/g+OscbU5OJOOA5QdVHP8CzQm5+u1JFI2np xHIyufYO4xR/Ue1y+T1IF2mi4u98Pl2gy9ImWP2FcTsJmpC75pkgqmVw4QrvlzEm TAWVQut2GTi9bZtpJl+Hk3cLvAje1i3T5BdhPfxd2yMaWAHGrrM+9Ksnghubwaqs oJwgAu6OjzImy0DfawO3iMWv7VGKAQlvq8ZzRqO91bl73S/s7kTYVYRrcvT9wC+p tKzLE+STt77BVlyVMXngjgEfLquxNNFHyNJdDrBFHAa3w1UuoEWuzGBp36yewJOi o4LDqOvN5FPqQX0UdwD3d25nj+/ZlU/82HpBuXCpWiKDfyPgwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM0Spe6qP7/mgpdyjKqrU1i7cYAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzM3 MmQ3Yy0xOTdhLTRjYWEtODJkOS1kYzY3NmQ5MWVhMjIvM2MzNzJkN2MtMTk3YS00 Y2FhLTgyZDktZGM2NzZkOTFlYTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2MzNzJkN2MtMTk3YS00Y2FhLTgy ZDktZGM2NzZkOTFlYTIyLzNjMzcyZDdjLTE5N2EtNGNhYS04MmQ5LWRjNjc2ZDkx ZWEyMi5jcmwwHwYDVR0jBBgwFoAUKGN/m/wLrqmupNY68P6Ij8rGBiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzM3MmQ3Yy0xOTdhLTRjYWEtODJkOS1kYzY3 NmQ5MWVhMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOfeOWGAQvWCqOno/ctzkO zlrNC7uTMm4gQ2ilFGtXEwIaGlB2h0/se4lHzhW+G1RcZhi3ZcrR8gMSq3MQ5lZv M88UTb2qNYM9+WDSN5eI3SD6wTcDL+5zkX3CNX9P4wsmYAJQN1wxm2k4FfwESdQF gGg5ydZZZEPcB15bvq2J/1bWvZOjGppBj3xDAIrZnfy7D5OMLImgFKUQAGs0CucK bL3Ut81q6X2CKuiPBqyk+aAoTxIU+8bwGbokZLsTwXrESHkHZTOHRrX1u0cmUH5X eWrb6y+mxG1X7aM0KR81BqdpsxD2jpqSTPvNRJPd+6CkmnvbE4O3iN4plPi5f91x -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:14 2026 by rpki-client