$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft File: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft (raw, json) Hash identifier: H4Jv+2wvIeP7fIIl28h9u6+8L5hy3CNM2/dIVArZ+hA= Subject key identifier: C4:42:C4:63:9A:94:D8:25:19:3E:8B:58:F7:0D:C7:C4:0F:D2:A4:FD Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584D2573F3F3E56CBA66EC998940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft Manifest number: 010D0C9F4328584C48E9F1D11FEB13CE220B0950 Signing time: Thu 12 Mar 2026 18:00:04 +0000 Manifest this update: Thu 12 Mar 2026 18:00:04 +0000 Manifest next update: Sat 14 Mar 2026 18:00:00 +0000 Files and hashes: 1: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl (hash: VhW0MmURN53fNvmly+8JosiU+doYV8nwXTDtwK3q0Ck=) 2: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (hash: RSupp9avS048pdAtQwXnUGRnRZfbM/iNDu4mLJ7dgaU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:73:f3:f3:e5:6c:ba:66:ec:99:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Mar 12 18:00:04 2026 GMT Not After : Mar 14 18:00:00 2026 GMT Subject: CN=cbbaa005-249e-4ae5-8a9d-032106f20fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:8c:19:21:5c:46:37:55:ef:84:38:6a:49: 29:ce:18:63:28:0e:76:4a:1f:b7:c3:48:7c:66:7c: 34:a8:c3:c2:b9:cd:5b:b7:50:62:d7:ba:a1:d5:6b: bc:f9:7d:96:dd:49:48:20:48:4e:7a:5e:79:79:fb: 80:1d:30:cf:9d:8e:f5:d0:92:3e:f1:09:a4:77:06: bb:4c:27:16:71:a6:35:09:f3:67:aa:b6:50:30:c5: c4:00:aa:0c:b7:a0:a3:d2:a1:da:cf:98:c8:8e:9d: 0c:b9:8b:58:86:9b:f3:26:57:b6:00:94:6b:5a:c4: c9:fd:45:a1:de:3b:32:ae:a7:3b:7c:09:e7:7d:69: cb:99:ab:b6:39:58:a9:57:c8:bf:5c:73:30:db:43: 5e:b3:d8:70:3a:0d:d8:31:92:f1:bd:1d:57:46:46: 9a:27:b8:a6:13:03:3e:dd:f9:2e:ba:dc:c1:1c:c1: ae:25:ed:37:42:f0:48:a6:2a:e9:ba:c4:c4:39:e7: 74:57:9a:4e:4b:57:b6:20:e3:e3:7b:86:9d:4e:6a: f3:1f:2a:38:49:80:e3:fe:24:72:58:75:ff:3d:85: be:9b:b2:41:0a:86:c1:a4:fa:e8:84:dd:50:03:4d: 7f:0d:92:3e:25:15:2f:80:2b:e8:fe:b9:09:2a:b6: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:42:C4:63:9A:94:D8:25:19:3E:8B:58:F7:0D:C7:C4:0F:D2:A4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1a:e9:b9:4b:de:3b:60:54:ce:bf:16:5b:0a:bf:ce:5b:f1: e4:3a:68:e5:00:54:d8:87:ca:ae:99:be:32:e1:1c:35:fe:26: 06:ea:f8:88:57:3b:cc:da:9a:d8:6f:e9:ba:8d:78:cb:0b:7b: 10:65:5f:31:27:1f:71:58:ec:5f:bc:e2:7a:2d:6a:6e:89:5b: 69:a8:e3:3c:45:d6:07:21:f9:79:91:19:93:4f:25:98:8e:ab: 93:aa:0a:f3:2d:09:e7:05:06:a4:bc:52:73:7e:05:3d:53:00: 07:07:59:07:0f:76:b4:50:d8:4a:59:2c:2e:4f:67:bc:aa:4a: 63:16:a9:80:5f:f7:8b:ab:03:ac:d4:63:38:d3:63:1c:97:12: 96:41:9b:df:ed:15:58:48:ae:4e:bf:66:8d:91:e2:d1:29:f6: 4b:f3:49:66:8f:0b:77:50:c7:43:17:92:1e:b4:34:6d:7b:5e: 9f:a0:e1:d4:12:39:b7:d5:56:0c:43:77:ba:3e:c6:74:3f:95: 68:20:7e:c9:10:c6:e8:c0:58:2e:a0:63:63:7c:8c:19:29:2e: d0:6a:33:88:76:52:52:af:15:c3:44:b7:1f:f2:d8:74:fd:73: cc:e9:00:0f:24:03:39:ba:96:fb:ea:fb:d0:78:0f:e9:79:7f: e8:71:f7:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0lc/Pz5Wy6ZuyZiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDMxMjE4MDAwNFoXDTI2MDMxNDE4MDAwMFowLzEtMCsGA1UEAxMk Y2JiYWEwMDUtMjQ5ZS00YWU1LThhOWQtMDMyMTA2ZjIwZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXGMGSFcRjdV74Q4akkpzhhjKA52Sh+3w0h8 Znw0qMPCuc1bt1Bi17qh1Wu8+X2W3UlIIEhOel55efuAHTDPnY710JI+8Qmkdwa7 TCcWcaY1CfNnqrZQMMXEAKoMt6Cj0qHaz5jIjp0MuYtYhpvzJle2AJRrWsTJ/UWh 3jsyrqc7fAnnfWnLmau2OVipV8i/XHMw20Nes9hwOg3YMZLxvR1XRkaaJ7imEwM+ 3fkuutzBHMGuJe03QvBIpirpusTEOed0V5pOS1e2IOPje4adTmrzHyo4SYDj/iRy WHX/PYW+m7JBCobBpProhN1QA01/DZI+JRUvgCvo/rkJKraO1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMRCxGOalNglGT6LWPcNx8QP0qT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvM2E1YTJiMWMtOWFkMy00 NDk2LWJjZmMtMzIyOTc0YWNjZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhGum5S947YFTOvxZbCr/O W/HkOmjlAFTYh8qumb4y4Rw1/iYG6viIVzvM2prYb+m6jXjLC3sQZV8xJx9xWOxf vOJ6LWpuiVtpqOM8RdYHIfl5kRmTTyWYjquTqgrzLQnnBQakvFJzfgU9UwAHB1kH D3a0UNhKWSwuT2e8qkpjFqmAX/eLqwOs1GM402MclxKWQZvf7RVYSK5Ov2aNkeLR KfZL80lmjwt3UMdDF5IetDRte16foOHUEjm31VYMQ3e6PsZ0P5VoIH7JEMbowFgu oGNjfIwZKS7QajOIdlJSrxXDRLcf8th0/XPM6QAPJAM5upb76vvQeA/peX/ocfeM -----END CERTIFICATE-----Generated at Fri Mar 13 08:40:36 2026 by rpki-client