$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: mB1Q1XaDWd8hlMz7u6IYTdX87Grjd0cfLlQvHsFqRIw= Subject key identifier: 86:EB:49:1D:2B:92:93:88:50:E9:ED:6D:57:8F:7D:1E:81:81:5D:2C Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584D52783B28D22AE1610B452C50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6D0AD Signing time: Sat 28 Mar 2026 21:00:03 +0000 Manifest this update: Sat 28 Mar 2026 21:00:03 +0000 Manifest next update: Tue 31 Mar 2026 21:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: 30UBSOxL83bCqui2JXzYa/SZX1kB1Y8sT1eNCRoxkzA=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: +o+nTKyGSWHtboUrxwp3oQ6W+s6bAlGAK45E3kg/LeY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:78:3b:28:d2:2a:e1:61:0b:45:2c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Mar 28 21:00:03 2026 GMT Not After : Mar 31 21:00:00 2026 GMT Subject: CN=3acfcd16-da3d-4c44-8445-98aa8ef9af5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:ba:7d:28:ca:4e:a0:d1:d1:f5:e1:e2:36: cd:4c:2c:df:e9:a0:cd:2c:a3:df:24:ef:83:36:dd: 4a:c6:eb:5d:48:22:c5:29:e7:ab:58:5f:53:a3:91: a7:e1:04:da:96:2a:a5:ce:89:af:f4:60:d7:d6:71: 09:27:b9:bc:23:4a:05:2f:65:68:ba:89:db:7f:6d: b2:c7:c9:f5:fc:fb:d8:e7:3a:87:bd:0b:17:e4:fb: a7:cc:03:d2:13:4e:06:10:14:c7:f3:75:ee:d5:89: a5:44:d0:50:19:c6:56:eb:f1:b1:fa:fa:ed:8d:f9: 24:5d:03:54:3a:8b:56:a4:99:1c:3d:4b:19:25:f3: de:c0:fe:3b:85:1c:69:13:3e:20:7a:98:c4:65:06: 0b:1f:2b:c6:05:2d:b0:21:74:b2:54:67:17:85:ae: 37:3b:16:52:8c:5c:07:f0:5e:1d:97:24:5e:90:64: 18:f8:cb:05:61:c0:97:a1:46:3a:fc:9b:8e:37:b8: 33:fd:64:2b:f6:ec:ad:ad:d3:b4:07:b5:b6:b4:74: 30:8e:ce:f0:b3:68:04:21:40:06:1a:2b:71:72:ce: de:b1:1b:1b:11:53:fe:d3:58:7f:03:41:99:2e:2c: 82:f6:91:d4:f9:69:cf:b4:a2:00:a3:2f:3b:5d:b5: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EB:49:1D:2B:92:93:88:50:E9:ED:6D:57:8F:7D:1E:81:81:5D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:73:b8:1c:23:68:34:c5:6a:30:52:a9:29:c7:b9:24:3d:e0: 59:fa:41:8d:66:2a:41:4f:e9:9a:f9:a3:d0:4c:96:65:4f:32: 9e:94:35:59:cb:d8:a6:39:da:38:1f:a8:9b:f3:b2:70:be:0d: 29:27:a2:4c:e7:0c:51:c4:96:0e:1f:df:ce:e8:f6:91:7f:30: a0:55:07:3d:07:8c:8b:4c:78:4f:0b:69:09:e6:c2:29:17:d6: aa:7b:b9:c3:da:bd:e4:bf:80:8c:31:03:4d:b4:74:bd:ca:d4: 19:2c:77:90:e5:b6:cd:4f:d5:c0:d0:a6:ac:cc:86:0d:ab:7c: 27:82:7f:c8:ee:5c:a3:0d:23:63:50:92:d5:7e:9a:f6:da:13: 68:a8:45:31:01:ea:e8:17:ef:fc:f8:d0:5e:5c:22:70:df:fc: 83:cf:0b:4d:c9:f2:a2:70:b1:3b:a0:c4:00:ea:e6:c0:95:25: 79:43:b4:ca:94:93:49:92:d3:72:3c:3d:e5:53:70:da:aa:ec: 8b:71:e0:93:81:c9:fc:0d:d7:5d:2d:0c:6a:e8:9f:cc:78:b0: 83:e7:04:da:6b:ee:e6:c9:af:f5:f8:05:22:59:b0:5a:0a:1f: ee:aa:57:c7:e8:77:3b:e6:11:91:2a:b5:0b:c9:91:86:09:4d: f1:30:75:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1SeDso0irhYQtFLFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI2MDMyODIxMDAwM1oXDTI2MDMzMTIxMDAwMFowLzEtMCsGA1UEAxMk M2FjZmNkMTYtZGEzZC00YzQ0LTg0NDUtOThhYThlZjlhZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3O6fSjKTqDR0fXh4jbNTCzf6aDNLKPfJO+D Nt1KxutdSCLFKeerWF9To5Gn4QTaliqlzomv9GDX1nEJJ7m8I0oFL2Vouonbf22y x8n1/PvY5zqHvQsX5PunzAPSE04GEBTH83Xu1YmlRNBQGcZW6/Gx+vrtjfkkXQNU OotWpJkcPUsZJfPewP47hRxpEz4gepjEZQYLHyvGBS2wIXSyVGcXha43OxZSjFwH 8F4dlyRekGQY+MsFYcCXoUY6/JuON7gz/WQr9uytrdO0B7W2tHQwjs7ws2gEIUAG Gitxcs7esRsbEVP+01h/A0GZLiyC9pHU+WnPtKIAoy87XbXoPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIbrSR0rkpOIUOntbVePfR6BgV0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPc7gcI2g0xWowUqkpx7kk PeBZ+kGNZipBT+ma+aPQTJZlTzKelDVZy9imOdo4H6ib87Jwvg0pJ6JM5wxRxJYO H9/O6PaRfzCgVQc9B4yLTHhPC2kJ5sIpF9aqe7nD2r3kv4CMMQNNtHS9ytQZLHeQ 5bbNT9XA0KaszIYNq3wngn/I7lyjDSNjUJLVfpr22hNoqEUxAeroF+/8+NBeXCJw 3/yDzwtNyfKicLE7oMQA6ubAlSV5Q7TKlJNJktNyPD3lU3DaquyLceCTgcn8Dddd LQxq6J/MeLCD5wTaa+7mya/1+AUiWbBaCh/uqlfH6Hc75hGRKrULyZGGCU3xMHW4 -----END CERTIFICATE-----Generated at Sun Mar 29 21:29:29 2026 by rpki-client