$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: sVFuDEPK20RQaRw0WnMmPh9neqxD3ZVb/GNxJOxmtVE= Subject key identifier: E0:14:A3:A5:9F:3F:AC:7C:8D:E1:14:4C:5C:6B:81:7A:25:4C:1A:D8 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584D2ACDC0F2AC7952B216E0FD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C802 Signing time: Sat 14 Mar 2026 16:00:04 +0000 Manifest this update: Sat 14 Mar 2026 16:00:04 +0000 Manifest next update: Tue 17 Mar 2026 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: ZgOMByglaTpIYZvhG3hkWT3Uxy3xofxuOkGj5z9GkC0=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: xfoJXsQDb/zCEV/uvnOTOlF05QIZ1IGWi2WWEML8KII=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: s2Z/J9C7puw2I+eIuyWbUKqHnqDFRxxiGx0cSoQyTZ4=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: RLqzb4fxxBb9VJOIYNU2pY0vO4md+2UAzXg3R18tmio=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:cd:c0:f2:ac:79:52:b2:16:e0:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Mar 14 16:00:04 2026 GMT Not After : Mar 17 16:00:00 2026 GMT Subject: CN=4a073f2b-c076-4e06-9766-87c5d98568e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:33:90:b1:19:5d:f0:ab:27:7f:90:4d:85: b5:30:7a:ca:2d:f1:3a:56:ba:51:1d:07:8c:92:69: 71:fc:c3:17:7a:f2:9b:a1:a2:a6:66:b3:9d:2b:1f: 12:a5:14:30:a8:7d:db:59:b7:94:40:0b:84:fe:c1: 91:66:b5:d4:ba:4f:12:57:9d:f1:ee:1c:f0:15:19: a8:95:91:2c:c9:f3:0c:f6:e9:b1:8c:95:62:9d:c3: aa:a1:4c:12:60:d8:e4:a1:8a:d3:42:44:6a:2c:ff: 1d:09:82:bd:8f:4e:fd:b4:9a:b8:99:16:7a:63:13: 35:26:21:3c:06:f3:b4:69:f8:47:45:cd:72:4a:dd: 85:91:be:d6:68:b3:51:b2:86:32:46:b3:73:12:23: 4b:10:ed:e3:18:8c:e5:d2:9a:75:69:bb:9d:de:af: ad:67:d9:60:ea:67:9b:4e:b5:74:42:91:81:52:c9: c3:3a:84:24:18:f4:da:f3:3b:c4:a0:52:f9:03:6c: 9d:e1:04:bd:27:64:92:07:43:8e:25:54:3c:a3:8a: 43:94:cb:56:8d:d5:60:28:68:9d:24:08:74:c3:e9: af:b8:02:13:5d:10:8b:39:d9:a9:db:81:71:98:2c: ab:fc:67:fe:a8:c5:9f:fc:bb:06:69:6b:c2:bd:f7: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:14:A3:A5:9F:3F:AC:7C:8D:E1:14:4C:5C:6B:81:7A:25:4C:1A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:0d:3a:8b:4a:a5:78:eb:17:fa:24:cd:ef:62:bc:88:ea:f6: f9:22:f9:a1:53:2c:9a:a2:b2:f2:73:8f:07:13:c3:f8:aa:41: c4:25:b6:67:62:52:46:04:61:95:f5:72:31:4e:52:8a:4e:c0: 59:ec:58:cd:e0:c4:13:e8:eb:0e:9c:76:cd:76:21:7c:0a:ba: 9a:23:8d:0c:c8:7e:98:c1:5b:ea:78:d6:df:ce:f4:17:2b:6b: 24:cc:c9:57:58:61:77:14:6b:6d:43:a8:32:2b:0b:f6:84:f7: 41:2a:1a:5b:55:6d:f1:1b:3a:04:bd:c7:3c:f1:06:97:db:42: 1d:40:9e:ef:c6:c4:72:26:be:1a:32:01:4e:40:e8:8d:9f:81: c3:c6:bf:9e:84:e4:c1:27:84:52:51:6f:c4:7c:ef:6b:68:60: 07:0b:89:0f:be:5b:52:6c:bf:7e:18:06:15:ec:c8:0b:62:ff: c7:71:dc:f9:87:b9:e3:4d:ef:f7:69:c6:20:d5:2d:60:1f:83: ea:95:df:af:bc:77:61:56:3d:b7:de:53:8d:f6:c6:80:c8:0d: 45:66:e7:f2:47:ff:9d:f2:e5:45:be:56:bc:7e:00:8b:21:9c: 73:37:2a:eb:4f:fd:15:49:9d:c2:2c:32:91:65:08:e1:06:fb: 5c:cd:e8:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0qzcDyrHlSshbg/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI2MDMxNDE2MDAwNFoXDTI2MDMxNzE2MDAwMFowLzEtMCsGA1UEAxMk NGEwNzNmMmItYzA3Ni00ZTA2LTk3NjYtODdjNWQ5ODU2OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz50zkLEZXfCrJ3+QTYW1MHrKLfE6VrpRHQeM kmlx/MMXevKboaKmZrOdKx8SpRQwqH3bWbeUQAuE/sGRZrXUuk8SV53x7hzwFRmo lZEsyfMM9umxjJVincOqoUwSYNjkoYrTQkRqLP8dCYK9j079tJq4mRZ6YxM1JiE8 BvO0afhHRc1ySt2Fkb7WaLNRsoYyRrNzEiNLEO3jGIzl0pp1abud3q+tZ9lg6meb TrV0QpGBUsnDOoQkGPTa8zvEoFL5A2yd4QS9J2SSB0OOJVQ8o4pDlMtWjdVgKGid JAh0w+mvuAITXRCLOdmp24FxmCyr/Gf+qMWf/LsGaWvCvfeXqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOAUo6WfP6x8jeEUTFxrgXolTBrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCrDTqLSqV46xf6JM3vYryI 6vb5IvmhUyyaorLyc48HE8P4qkHEJbZnYlJGBGGV9XIxTlKKTsBZ7FjN4MQT6OsO nHbNdiF8CrqaI40MyH6YwVvqeNbfzvQXK2skzMlXWGF3FGttQ6gyKwv2hPdBKhpb VW3xGzoEvcc88QaX20IdQJ7vxsRyJr4aMgFOQOiNn4HDxr+ehOTBJ4RSUW/EfO9r aGAHC4kPvltSbL9+GAYV7MgLYv/Hcdz5h7njTe/3acYg1S1gH4Pqld+vvHdhVj23 3lON9saAyA1FZufyR/+d8uVFvla8fgCLIZxzNyrrT/0VSZ3CLDKRZQjhBvtczeh8 -----END CERTIFICATE-----Generated at Sun Mar 15 07:53:10 2026 by rpki-client