$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: gpWqvTLH5jf0lTrAw4Yj4+YZtZaJvjAyLk8EZnV4Ln4= Subject key identifier: 4B:10:82:AA:77:63:A4:A5:E0:CC:F0:EF:04:3D:6E:D8:76:33:C5:39 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584D06FA073BF2F25B0B64927A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D136 Signing time: Sun 01 Mar 2026 20:00:09 +0000 Manifest this update: Sun 01 Mar 2026 20:00:09 +0000 Manifest next update: Tue 03 Mar 2026 20:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: jqGhjNn3RL3sv1MDLlkH1o6rKnpPlNkLZTDNhCZBN4c=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: zuLRe4+4TXjFTWv1agXXXtIaTm/QX/AECQovOOmwGOA=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: uZPOv7aX2Fp6ORxaOYIDFWFTtsWINrxVs2M+O3RctYo=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: M7O6N4Zp9oNT/1TuRQOQFiCCsD45vJMPWeTJRHmnMrg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:fa:07:3b:f2:f2:5b:0b:64:92:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Mar 1 20:00:09 2026 GMT Not After : Mar 3 20:00:00 2026 GMT Subject: CN=3e80f6ad-da81-4547-9c90-b5ee019358a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:5e:8c:36:17:f9:36:c3:7a:ed:d2:c3:d2: 67:2e:bd:cc:e9:34:5b:90:16:f0:44:d2:fd:85:69: da:8d:b8:90:78:b2:c6:17:e8:0b:b7:19:c3:4a:c0: 21:09:f8:ac:a3:5f:39:c7:2d:13:b6:e0:07:f1:8e: a2:62:4b:b4:ea:05:60:05:3a:6a:fe:7f:84:50:15: 3e:4b:80:5f:3d:64:69:66:15:75:a3:a4:b3:26:33: d9:b7:43:d8:75:56:93:83:61:f7:a9:57:45:8f:dc: e2:78:c9:59:7c:93:f6:0d:53:79:a0:46:09:69:17: 21:15:a9:88:f4:cc:70:ac:06:50:ca:53:c9:b8:77: ec:81:5e:09:4a:d7:47:bf:20:3d:be:ef:29:1c:31: 5a:a2:f5:f5:af:bc:ab:6c:2e:39:46:b1:4d:bd:8e: 91:ba:da:d1:4e:a8:99:63:63:77:a0:7e:3e:4a:01: 5d:cd:93:fd:6d:20:2e:90:3b:c2:15:12:86:82:7b: af:69:87:c5:90:4f:9d:05:9d:d0:6e:1d:99:e3:78: 76:e5:ce:e3:3f:4e:7b:b3:31:1e:73:d5:d5:c8:b5: ea:44:6b:6b:a2:a9:18:d9:13:83:16:f5:d1:56:91: 99:55:c1:92:d0:30:25:84:b1:cc:34:cd:0b:0f:89: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:10:82:AA:77:63:A4:A5:E0:CC:F0:EF:04:3D:6E:D8:76:33:C5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cc:d5:f7:74:f8:38:11:48:fd:a8:13:3e:9d:19:ee:56:f7: 4a:88:3a:cf:89:6c:0e:df:a6:b4:fe:8f:82:6f:e1:07:14:73: 60:d3:c3:81:e0:d9:c3:de:18:00:1c:71:a8:b5:18:84:7a:fc: 66:0e:6b:fb:1f:fe:f4:21:0f:72:42:c2:08:5d:58:af:fd:96: df:ec:c1:1b:54:62:a9:63:87:1d:c5:cc:4e:e8:4b:4a:3c:c2: da:b3:dd:39:11:b7:c1:b8:aa:22:75:df:89:02:6a:aa:0e:98: 9b:b0:02:01:de:91:1d:1c:d3:6f:7c:6b:f7:18:54:88:1a:0a: ff:77:62:93:81:85:84:ac:d7:14:35:11:ef:19:5b:b1:bc:78: 70:79:7d:a6:67:c2:ca:ca:e0:aa:ce:f3:91:2a:6a:07:5d:5e: 93:8e:67:65:61:ac:5b:51:a6:3e:dd:d3:99:b9:55:3d:b4:81: 26:2f:44:b6:94:8b:41:82:ea:01:a6:ba:83:10:cd:73:7b:5d: c6:0a:42:f0:67:5b:a5:ec:2b:b5:0e:be:f7:7b:79:4b:84:90: fe:0a:6e:f9:c8:b8:69:09:cf:b6:37:3b:67:7c:85:8c:fa:84: 36:ca:33:91:5f:9a:3b:0a:43:40:ff:e1:0f:6b:5d:60:79:e2: 5b:ca:ab:7f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G+gc78vJbC2SSekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDMwMTIwMDAwOVoXDTI2MDMwMzIwMDAwMFowLzEtMCsGA1UEAxMk M2U4MGY2YWQtZGE4MS00NTQ3LTljOTAtYjVlZTAxOTM1OGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWVejDYX+TbDeu3Sw9JnLr3M6TRbkBbwRNL9 hWnajbiQeLLGF+gLtxnDSsAhCfiso185xy0TtuAH8Y6iYku06gVgBTpq/n+EUBU+ S4BfPWRpZhV1o6SzJjPZt0PYdVaTg2H3qVdFj9zieMlZfJP2DVN5oEYJaRchFamI 9MxwrAZQylPJuHfsgV4JStdHvyA9vu8pHDFaovX1r7yrbC45RrFNvY6RutrRTqiZ Y2N3oH4+SgFdzZP9bSAukDvCFRKGgnuvaYfFkE+dBZ3Qbh2Z43h25c7jP057szEe c9XVyLXqRGtroqkY2RODFvXRVpGZVcGS0DAlhLHMNM0LD4nLyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEsQgqp3Y6Sl4Mzw7wQ9bth2M8U5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFzNX3dPg4EUj9qBM+nRnu VvdKiDrPiWwO36a0/o+Cb+EHFHNg08OB4NnD3hgAHHGotRiEevxmDmv7H/70IQ9y QsIIXViv/Zbf7MEbVGKpY4cdxcxO6EtKPMLas905EbfBuKoidd+JAmqqDpibsAIB 3pEdHNNvfGv3GFSIGgr/d2KTgYWErNcUNRHvGVuxvHhweX2mZ8LKyuCqzvORKmoH XV6TjmdlYaxbUaY+3dOZuVU9tIEmL0S2lItBguoBprqDEM1ze13GCkLwZ1ul7Cu1 Dr73e3lLhJD+Cm75yLhpCc+2NztnfIWM+oQ2yjORX5o7CkNA/+EPa11geeJbyqt/ -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:07 2026 by rpki-client