$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.mft File: 3740a9a2-f496-4926-bd38-439cb899e94a.mft (raw, json) Hash identifier: EgCIaDH4TllqMYWUJhf39MAUeAmc5WlWe+jVnWUCQuU= Subject key identifier: 85:31:BC:5F:79:F1:79:66:40:76:CA:C6:AF:15:44:83:8B:6A:7E:48 Authority key identifier: 54:50:57:8F:36:31:88:88:AA:90:BE:56:02:EC:8E:D7:16:DA:45:DC Certificate issuer: /CN=3740a9a2-f496-4926-bd38-439cb899e94a Certificate serial: 010D0C9F4328584D3E94186CF453F5C68C54B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.mft Manifest number: 010D0C9F43285841FD82239BCAD74F9EE16A01A1 Signing time: Sat 21 Mar 2026 18:00:03 +0000 Manifest this update: Sat 21 Mar 2026 18:00:03 +0000 Manifest next update: Tue 24 Mar 2026 18:00:00 +0000 Files and hashes: 1: 009e0884-619d-33b8-901b-1e0ce3ed9482.roa (hash: 7ePWekl14DOt2kGT/k4l4JyG9v9p7dUQs3b5Sjqpbok=) 2: 3740a9a2-f496-4926-bd38-439cb899e94a.crl (hash: e7KaqdMDQ/T1eXmPB9oRyxsaydB7E+Ll23yqM48bsv0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:94:18:6c:f4:53:f5:c6:8c:54:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3740a9a2-f496-4926-bd38-439cb899e94a Validity Not Before: Mar 21 18:00:03 2026 GMT Not After : Mar 24 18:00:00 2026 GMT Subject: CN=2a4a4bdb-d749-4dbb-a8fd-de7cf43626d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:c2:2d:e6:7e:f6:0e:ec:bd:c4:8f:9d:d9: a7:a7:e4:83:75:f4:77:23:1f:71:66:7e:f1:32:22: 1a:be:93:98:5a:6f:da:98:31:dc:57:db:31:d7:b4: db:c7:09:b1:d4:62:ca:9f:1e:48:ce:e6:48:e2:02: e9:21:bf:06:71:b5:c7:33:29:bb:d0:71:e0:d1:6d: f6:cf:38:bb:c1:da:b8:a1:f1:1e:74:d4:6a:fd:c4: 84:e8:7b:d8:ee:1c:73:df:56:3e:c6:7f:36:f4:8a: 4a:63:74:9a:06:6a:4d:ba:1f:bb:6f:a2:9a:7f:d2: a0:01:50:35:6f:80:73:14:54:c5:ce:ad:88:05:2b: 24:5c:7d:41:59:45:02:94:cd:a0:1c:59:c5:15:da: 0a:35:e5:55:d0:c7:fc:e7:28:b6:94:9b:12:1a:65: 49:fd:93:39:75:29:ac:23:47:f2:27:f3:8c:94:0c: ef:4b:67:1d:fc:b9:12:e8:f7:ee:f8:8d:13:af:fb: f9:ab:05:87:1d:2a:28:c1:31:cf:6e:9b:29:1e:c9: 6a:fe:14:10:78:df:a8:f1:d1:ce:ac:bd:11:7b:4d: 00:4b:ad:9d:8a:00:4e:5d:90:ad:0a:8f:e7:42:87: c5:a6:c4:b8:b9:7c:9a:03:87:6a:31:e8:a2:4c:1d: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:31:BC:5F:79:F1:79:66:40:76:CA:C6:AF:15:44:83:8B:6A:7E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.crl X509v3 Authority Key Identifier: keyid:54:50:57:8F:36:31:88:88:AA:90:BE:56:02:EC:8E:D7:16:DA:45:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b0:c2:10:52:21:f0:46:4c:90:d1:8a:a1:b3:ee:76:f6:42: 56:e2:95:58:31:aa:57:c5:15:07:57:99:8f:72:b3:30:fa:58: 51:c2:04:02:28:3e:c4:13:d3:fd:aa:e2:e1:cc:77:b4:f6:7f: 97:bb:a4:86:1b:b8:c2:b0:0d:0b:7c:9f:1f:b5:04:11:1f:33: 91:64:74:00:ed:2c:f1:77:b6:4e:6c:61:14:86:89:6b:42:47: a8:4b:0d:20:03:13:e6:50:53:48:8b:cf:f1:d3:64:75:84:56: 04:ce:5d:cb:df:ac:9b:96:66:6a:d0:de:b1:c4:16:fb:d0:45: cf:00:85:83:de:36:a0:5f:5f:0f:a7:fc:e3:06:29:56:6e:2f: e2:b3:39:60:75:ad:68:7b:a7:ac:9d:04:62:1d:2e:a1:b8:62: d8:54:e4:8f:14:2f:74:4b:68:b2:cd:81:2f:6c:6d:e1:30:b2: 04:50:83:13:e8:c7:b5:cb:f9:61:46:56:48:ca:e1:28:7d:f7: 2f:79:67:38:09:57:66:dc:64:8b:b8:00:0f:79:84:40:40:c3: 55:1c:25:06:27:8f:cb:d7:4c:35:5e:7c:2a:0e:b7:66:31:fa: 19:b3:1a:62:9b:79:bc:91:36:74:d0:d9:cf:ab:16:94:51:90: cc:fb:d3:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+lBhs9FP1xoxUt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc0MGE5YTItZjQ5Ni00OTI2LWJkMzgtNDM5Y2I4OTll OTRhMB4XDTI2MDMyMTE4MDAwM1oXDTI2MDMyNDE4MDAwMFowLzEtMCsGA1UEAxMk MmE0YTRiZGItZDc0OS00ZGJiLWE4ZmQtZGU3Y2Y0MzYyNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnzCLeZ+9g7svcSPndmnp+SDdfR3Ix9xZn7x MiIavpOYWm/amDHcV9sx17Tbxwmx1GLKnx5IzuZI4gLpIb8GcbXHMym70HHg0W32 zzi7wdq4ofEedNRq/cSE6HvY7hxz31Y+xn829IpKY3SaBmpNuh+7b6Kaf9KgAVA1 b4BzFFTFzq2IBSskXH1BWUUClM2gHFnFFdoKNeVV0Mf85yi2lJsSGmVJ/ZM5dSms I0fyJ/OMlAzvS2cd/LkS6Pfu+I0Tr/v5qwWHHSoowTHPbpspHslq/hQQeN+o8dHO rL0Re00AS62digBOXZCtCo/nQofFpsS4uXyaA4dqMeiiTB2cUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIUxvF958XlmQHbKxq8VRIOLan5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzQw YTlhMi1mNDk2LTQ5MjYtYmQzOC00MzljYjg5OWU5NGEvMzc0MGE5YTItZjQ5Ni00 OTI2LWJkMzgtNDM5Y2I4OTllOTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc0MGE5YTItZjQ5Ni00OTI2LWJk MzgtNDM5Y2I4OTllOTRhLzM3NDBhOWEyLWY0OTYtNDkyNi1iZDM4LTQzOWNiODk5 ZTk0YS5jcmwwHwYDVR0jBBgwFoAUVFBXjzYxiIiqkL5WAuyO1xbaRdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzQwYTlhMi1mNDk2LTQ5MjYtYmQzOC00Mzlj Yjg5OWU5NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJsMIQUiHwRkyQ0Yqhs+52 9kJW4pVYMapXxRUHV5mPcrMw+lhRwgQCKD7EE9P9quLhzHe09n+Xu6SGG7jCsA0L fJ8ftQQRHzORZHQA7Szxd7ZObGEUholrQkeoSw0gAxPmUFNIi8/x02R1hFYEzl3L 36yblmZq0N6xxBb70EXPAIWD3jagX18Pp/zjBilWbi/iszlgda1oe6esnQRiHS6h uGLYVOSPFC90S2iyzYEvbG3hMLIEUIMT6Me1y/lhRlZIyuEoffcveWc4CVdm3GSL uAAPeYRAQMNVHCUGJ4/L10w1XnwqDrdmMfoZsxpim3m8kTZ00NnPqxaUUZDM+9MH -----END CERTIFICATE-----Generated at Sun Mar 22 08:34:39 2026 by rpki-client