$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: nokfrbczLjmzELTKwPnBhtpULPJzYBVv06A55ydeXgY= Subject key identifier: A2:F3:DE:E0:AE:FE:A1:AC:B6:AA:95:BB:15:B9:E3:DD:59:8F:38:F1 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584D2B27196061E36D59D5D7C060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F7152 Signing time: Sat 14 Mar 2026 19:00:04 +0000 Manifest this update: Sat 14 Mar 2026 19:00:04 +0000 Manifest next update: Tue 17 Mar 2026 19:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: /fMz3pLfMvvqnC7zEcE+CswsuUNkDaGAOZThXXbHTcg=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: 8HQK09Rwbw8WpUkBf2XpQJAvzw/Gu5V0zuG1fO2b/A8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:27:19:60:61:e3:6d:59:d5:d7:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Mar 14 19:00:04 2026 GMT Not After : Mar 17 19:00:00 2026 GMT Subject: CN=f8938def-3f2d-4b08-9bf9-b66c944dd8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:07:4e:e3:e2:32:0f:f6:2b:a9:6f:08:a8: da:67:d4:32:84:b9:70:2e:11:41:73:7e:cb:94:0e: 21:13:49:71:cd:5c:96:49:62:47:06:66:11:18:d4: 12:5d:c1:3b:4c:c3:1d:de:d8:37:b5:53:6c:ec:53: 47:66:8f:92:73:4a:ed:79:d0:fa:02:86:bb:81:1a: 87:70:1f:d0:b0:a6:ee:3c:0e:cc:3f:d1:74:a6:d6: 89:25:4c:b8:a5:40:88:f9:c7:df:22:40:75:10:c8: 5d:e6:7b:cc:ad:e9:de:93:77:0c:39:1c:c3:d0:3f: 08:b1:a1:ad:64:5d:08:d3:88:75:77:3d:64:1c:34: 12:69:a2:a1:e3:b0:03:3f:e6:6c:99:a4:c6:ce:f0: 03:5d:0a:e3:ab:f4:43:5e:a7:9e:a8:f9:93:48:4a: 5e:b7:1c:59:80:02:8d:44:1b:a3:0a:a0:c4:30:65: 8a:3d:28:78:af:a3:25:d0:cc:0a:a4:75:5f:b3:b3: 9e:54:67:e6:30:e6:bd:dc:e8:3f:e1:47:d0:da:0f: 35:ac:b1:7d:fc:ef:36:0b:a8:5d:20:14:06:d5:ab: c3:09:34:cd:14:a8:94:d3:b6:9a:aa:0b:ae:af:d3: 37:e0:40:65:dd:ad:24:e2:8b:f1:8b:67:a5:08:f4: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F3:DE:E0:AE:FE:A1:AC:B6:AA:95:BB:15:B9:E3:DD:59:8F:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:aa:ae:b8:53:66:20:65:ac:64:6e:0a:18:94:37:e0:b4:8d: 0a:b7:aa:1b:61:1d:e6:77:25:f7:b9:25:e1:28:0f:b7:8d:6e: b5:8a:16:95:09:bd:20:8e:1a:9b:19:a5:ba:d4:57:f2:2d:03: be:05:f5:a9:8d:fe:bb:d9:bd:83:2f:53:65:0d:a8:01:b2:b9: 2d:94:0d:55:99:91:4c:60:38:7e:6e:2c:6f:1e:a3:3d:de:2b: 98:ac:30:81:53:fe:54:f5:64:c2:f6:e5:62:99:95:a8:b3:f2: d1:68:20:e3:6b:d4:d5:53:93:87:05:81:5c:11:4d:58:d8:b1: fe:d5:59:74:fb:52:e2:c2:c6:a9:8e:b5:70:a0:0d:91:8b:8c: ba:a3:05:92:8e:df:a9:e0:77:76:82:5a:98:15:db:8f:d6:dd: f9:3d:61:f4:57:20:29:25:e7:93:67:1f:55:00:1f:dd:4b:54: 18:53:8e:e9:41:9a:16:05:d4:70:1e:9f:6d:8d:bb:b6:86:ed: 5b:fe:db:50:81:ff:51:d8:70:15:68:0c:52:dc:68:6e:d4:99: d7:47:36:f7:20:2a:92:f8:d6:93:a4:3f:49:3f:8c:41:5b:d9: e8:c6:ab:42:55:a7:de:05:ac:09:bd:71:b4:56:dd:4f:2b:34: 8c:d1:f8:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0rJxlgYeNtWdXXwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI2MDMxNDE5MDAwNFoXDTI2MDMxNzE5MDAwMFowLzEtMCsGA1UEAxMk Zjg5MzhkZWYtM2YyZC00YjA4LTliZjktYjY2Yzk0NGRkOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiwHTuPiMg/2K6lvCKjaZ9QyhLlwLhFBc37L lA4hE0lxzVyWSWJHBmYRGNQSXcE7TMMd3tg3tVNs7FNHZo+Sc0rtedD6Aoa7gRqH cB/QsKbuPA7MP9F0ptaJJUy4pUCI+cffIkB1EMhd5nvMrenek3cMORzD0D8IsaGt ZF0I04h1dz1kHDQSaaKh47ADP+ZsmaTGzvADXQrjq/RDXqeeqPmTSEpetxxZgAKN RBujCqDEMGWKPSh4r6Ml0MwKpHVfs7OeVGfmMOa93Og/4UfQ2g81rLF9/O82C6hd IBQG1avDCTTNFKiU07aaqguur9M34EBl3a0k4ovxi2elCPQo/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKLz3uCu/qGstqqVuxW5491ZjzjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqqq64U2YgZaxkbgoYlDfg tI0Kt6obYR3mdyX3uSXhKA+3jW61ihaVCb0gjhqbGaW61FfyLQO+BfWpjf672b2D L1NlDagBsrktlA1VmZFMYDh+bixvHqM93iuYrDCBU/5U9WTC9uVimZWos/LRaCDj a9TVU5OHBYFcEU1Y2LH+1Vl0+1LiwsapjrVwoA2Ri4y6owWSjt+p4Hd2glqYFduP 1t35PWH0VyApJeeTZx9VAB/dS1QYU47pQZoWBdRwHp9tjbu2hu1b/ttQgf9R2HAV aAxS3Ghu1JnXRzb3ICqS+NaTpD9JP4xBW9noxqtCVafeBawJvXG0Vt1PKzSM0fh4 -----END CERTIFICATE-----Generated at Sun Mar 15 04:41:56 2026 by rpki-client