$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft File: 3f21d6d0-2d09-4711-b420-9646c9d81c01.mft (raw, json) Hash identifier: wBhT2InG79fQ83l0Z50s/JtAFcdZVPIC91ugxqHDq6c= Subject key identifier: 20:B3:6B:00:B8:05:77:E8:A4:1A:84:81:FC:AE:91:97:BD:5C:78:5C Authority key identifier: C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2 Certificate issuer: /CN=3f21d6d0-2d09-4711-b420-9646c9d81c01 Certificate serial: 010D0C9F4328584D04FFCA68EB5800877A930740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft Manifest number: 010D0C9F4328584CAE77839E43A455BD66972AA1 Signing time: Sun 01 Mar 2026 03:00:08 +0000 Manifest this update: Sun 01 Mar 2026 03:00:08 +0000 Manifest next update: Tue 03 Mar 2026 03:00:00 +0000 Files and hashes: 1: 3f21d6d0-2d09-4711-b420-9646c9d81c01.crl (hash: CidUf5wAnoH6wEpjGyDRW5QOMzr9Ymx9Qdjo6Q4e0lI=) 2: 58bd39cc-2d7d-31ec-92cd-db743957baae.roa (hash: sikSjYO/l91abRXNAV5OfymNbv4Amo0k4EvyQ3SCYi0=) 3: d9ccc8f3-3cea-39a0-8fba-a5988e6942dc.roa (hash: YBXriu6OOFdLXGVos2NltVr5TuZ/68CG7Zh0MxMGqZU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:ff:ca:68:eb:58:00:87:7a:93:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f21d6d0-2d09-4711-b420-9646c9d81c01 Validity Not Before: Mar 1 03:00:08 2026 GMT Not After : Mar 3 03:00:00 2026 GMT Subject: CN=29d800c6-c43e-4b0a-b9cc-0ac29a9f3543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:79:0c:a8:4e:20:25:b3:58:94:fb:f7:96: fa:78:95:81:e7:59:93:cb:74:b4:e9:f5:aa:a8:bb: fc:fb:89:98:e7:94:d5:13:07:72:31:4d:5e:cd:43: f2:1f:93:d0:34:21:7f:f7:9c:83:88:c9:5f:85:be: 7d:8b:94:87:89:43:02:44:6f:2e:8b:1e:17:7d:9b: da:5f:9f:22:eb:34:55:5c:7f:95:59:d7:e0:cc:45: 44:39:2c:12:b1:c4:14:7b:00:f1:65:87:eb:2d:1d: 3a:3b:81:5a:79:72:9e:8f:f5:3a:b9:9d:86:48:da: f3:df:50:ff:5f:26:36:b5:b7:68:0e:b4:3d:5a:83: 20:3f:75:ab:72:ca:28:3b:6e:62:db:be:07:86:69: f6:f1:7a:61:c4:7b:ec:2c:7f:09:19:6a:d0:29:a4: 34:f9:6a:91:e0:95:cd:55:67:e1:4d:8d:bf:8a:d3: 88:54:a6:3f:a1:e6:a8:d6:ec:12:72:d8:41:bb:e2: 21:be:b0:84:e8:6b:3c:cb:ea:a5:4f:34:8e:fc:27: e8:66:34:5a:1f:da:69:a4:9a:22:a3:d2:ea:cc:e2: ad:82:5e:7a:69:b9:6b:8d:09:76:ec:11:f1:0d:ab: bd:e4:0f:01:cc:71:e8:84:69:11:03:54:18:14:e2: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B3:6B:00:B8:05:77:E8:A4:1A:84:81:FC:AE:91:97:BD:5C:78:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl X509v3 Authority Key Identifier: keyid:C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:90:22:55:3f:c9:b9:13:39:4a:88:ae:29:9c:4d:4f:fa:55: 5c:f4:87:e0:b2:66:79:e0:9c:72:46:f2:78:65:04:14:26:d1: d1:d5:70:49:0e:2c:70:d9:68:a1:7f:33:3a:c0:b9:67:95:11: 9c:96:1a:c4:54:59:c9:38:17:4f:18:d9:48:bd:68:14:c1:31: 70:12:dc:6d:f9:a6:14:f7:78:ee:d9:71:5c:7f:20:b2:0b:c9: 1b:f7:b8:f2:f1:5f:ca:6a:9c:6a:91:7b:9b:4c:69:4e:a5:53: 23:1f:c3:1c:27:25:f0:49:bd:1a:89:4f:68:3d:92:61:b7:d1: 41:94:10:cb:88:8f:99:23:14:0c:b1:cb:10:a4:7d:04:cf:ba: fa:36:8e:27:ea:79:98:cf:a7:c2:fa:c9:cb:6c:b3:05:ff:30: 17:d8:c1:15:db:59:fe:b3:e4:2b:5f:b6:b8:a0:96:ca:f5:6d: c9:4c:f8:e5:47:47:ca:58:c2:fe:49:ab:3d:9d:fd:4c:c9:14: e9:02:7d:38:64:14:70:7f:14:50:07:c4:d7:3c:55:d7:39:83: 3d:ff:07:41:23:71:4e:20:2f:06:e6:0b:aa:f8:eb:06:6c:ac: f2:49:29:bc:37:f8:8d:06:fe:f8:3e:31:a6:ee:c9:25:47:34: fe:ac:a8:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0E/8po61gAh3qTB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyMWQ2ZDAtMmQwOS00NzExLWI0MjAtOTY0NmM5ZDgx YzAxMB4XDTI2MDMwMTAzMDAwOFoXDTI2MDMwMzAzMDAwMFowLzEtMCsGA1UEAxMk MjlkODAwYzYtYzQzZS00YjBhLWI5Y2MtMGFjMjlhOWYzNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlud5DKhOICWzWJT795b6eJWB51mTy3S06fWq qLv8+4mY55TVEwdyMU1ezUPyH5PQNCF/95yDiMlfhb59i5SHiUMCRG8uix4XfZva X58i6zRVXH+VWdfgzEVEOSwSscQUewDxZYfrLR06O4FaeXKej/U6uZ2GSNrz31D/ XyY2tbdoDrQ9WoMgP3WrcsooO25i274Hhmn28XphxHvsLH8JGWrQKaQ0+WqR4JXN VWfhTY2/itOIVKY/oeao1uwScthBu+IhvrCE6Gs8y+qlTzSO/CfoZjRaH9pppJoi o9LqzOKtgl56ablrjQl27BHxDau95A8BzHHohGkRA1QYFOKCGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCCzawC4BXfopBqEgfyukZe9XHhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZjIx ZDZkMC0yZDA5LTQ3MTEtYjQyMC05NjQ2YzlkODFjMDEvM2YyMWQ2ZDAtMmQwOS00 NzExLWI0MjAtOTY0NmM5ZDgxYzAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2YyMWQ2ZDAtMmQwOS00NzExLWI0 MjAtOTY0NmM5ZDgxYzAxLzNmMjFkNmQwLTJkMDktNDcxMS1iNDIwLTk2NDZjOWQ4 MWMwMS5jcmwwHwYDVR0jBBgwFoAUwsyyp0EmOiStbgQpBztm5SyMk7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZjIxZDZkMC0yZDA5LTQ3MTEtYjQyMC05NjQ2 YzlkODFjMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUkCJVP8m5EzlKiK4pnE1P +lVc9IfgsmZ54JxyRvJ4ZQQUJtHR1XBJDixw2WihfzM6wLlnlRGclhrEVFnJOBdP GNlIvWgUwTFwEtxt+aYU93ju2XFcfyCyC8kb97jy8V/KapxqkXubTGlOpVMjH8Mc JyXwSb0aiU9oPZJht9FBlBDLiI+ZIxQMscsQpH0Ez7r6No4n6nmYz6fC+snLbLMF /zAX2MEV21n+s+QrX7a4oJbK9W3JTPjlR0fKWML+Sas9nf1MyRTpAn04ZBRwfxRQ B8TXPFXXOYM9/wdBI3FOIC8G5guq+OsGbKzySSm8N/iNBv74PjGm7sklRzT+rKjA -----END CERTIFICATE-----Generated at Sun Mar 1 20:08:42 2026 by rpki-client