$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: 63yqhc8jQNGPVrIMKVhAeIpKpaGaJUSS993nLXhzPmY= Subject key identifier: 43:43:EF:2B:3B:0C:24:C5:D8:E5:F3:FE:13:38:50:59:D3:45:8F:2B Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584D3E7662643C3395DDFDF23100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D216 Signing time: Sat 21 Mar 2026 17:00:09 +0000 Manifest this update: Sat 21 Mar 2026 17:00:09 +0000 Manifest next update: Tue 24 Mar 2026 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: wKCV6U+Ht9ahbviT14ziIi8OrHhHCzsVVCzKjU6JJw0=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: 0QtZusXtQRLtkWgksctpWmrJQ534ABK8awunEa3WClo=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: NjRqp/AbBgxZDpX2XLB4UWLmxZm2uwbDnNlMCFjoZOk=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: /J7dPEiSQ240t/58C6NloUJqtIOiO4cqLJqZvSaiKcM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:76:62:64:3c:33:95:dd:fd:f2:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Mar 21 17:00:09 2026 GMT Not After : Mar 24 17:00:00 2026 GMT Subject: CN=03aeed49-4d37-43fd-a43e-26d1f8b9f160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:f9:57:d1:73:89:65:f0:86:bb:3b:19:23: 55:74:c7:89:35:0a:2f:2e:fe:d0:ce:3d:49:30:34: 0c:16:ca:ee:c1:a1:f3:4c:22:ab:23:8c:8e:a7:d8: a1:a5:ad:17:3b:01:a9:a0:2c:45:8a:1e:bb:3f:be: 3f:46:78:08:b6:89:8e:48:04:5d:71:f1:56:77:21: 56:5b:43:1f:7b:03:a9:f7:28:55:c8:b7:69:5f:82: 5b:2e:55:e4:76:eb:12:22:16:06:6b:0e:14:58:31: a0:4b:48:3c:75:d7:41:05:20:f2:9b:cb:c9:65:d7: 83:29:36:71:53:39:56:8e:6e:62:53:0c:17:f4:c6: 98:90:38:1c:64:e0:c4:14:58:ac:5a:41:4a:54:a0: b7:45:81:45:24:17:18:2a:87:a6:8b:fc:58:62:6b: 0f:c6:3d:50:1b:a9:6d:9e:a2:33:ee:19:71:50:a6: 58:b4:70:4f:7d:5c:6c:c7:95:26:9e:fa:70:0c:25: 6a:4b:e1:ab:42:ae:02:a3:bb:b3:3e:b5:ec:58:28: 81:b9:ee:88:9b:4f:b9:f9:1d:a6:86:99:9b:2c:72: a7:d4:d9:01:29:c5:6f:12:49:ce:b2:36:dc:76:f1: fa:6a:37:db:c7:ad:5d:9f:fb:4e:0b:89:bc:af:8c: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:43:EF:2B:3B:0C:24:C5:D8:E5:F3:FE:13:38:50:59:D3:45:8F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:44:b7:ab:11:20:25:af:ed:3d:c0:94:91:2f:c2:62:d1:d0: 9a:be:3f:75:c1:69:04:1a:d1:49:05:e0:a7:de:1b:19:f5:23: b9:b8:c0:8b:f2:4e:46:94:f9:d0:09:10:d2:b0:41:84:dd:d0: da:a2:7a:78:6b:0e:36:e5:82:31:09:ea:6d:e0:83:32:92:7e: 5e:ba:d2:5d:4e:a9:2f:0b:27:29:d5:02:1f:9e:1b:c6:fd:67: 7d:50:b1:9e:34:93:51:64:57:32:95:b3:73:cc:78:01:91:0d: b1:51:ba:c1:dd:6f:15:ec:fc:c4:85:09:e3:38:2a:39:4f:91: 37:a5:8e:7f:33:fb:47:35:c8:dc:fc:b5:93:c8:76:b6:04:5d: 4f:ac:39:40:96:b5:23:76:ae:c3:31:46:fa:5c:cc:85:cc:b4: 9e:32:64:28:50:ff:d5:0e:d6:1e:b4:ee:6b:bd:48:79:f3:30: e3:d7:48:f1:69:d5:df:b1:e6:a5:ed:7e:93:b5:60:95:2d:62: 6c:72:fc:fd:64:77:95:06:4d:eb:dd:e4:54:b7:a2:33:33:eb: 02:e7:17:8d:e2:1e:d1:97:92:79:5c:76:e6:af:d1:b7:b3:05: 2e:46:36:ed:14:1e:50:96:1b:39:36:21:24:87:57:4e:7d:c8: 84:11:4e:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+dmJkPDOV3f3yMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI2MDMyMTE3MDAwOVoXDTI2MDMyNDE3MDAwMFowLzEtMCsGA1UEAxMk MDNhZWVkNDktNGQzNy00M2ZkLWE0M2UtMjZkMWY4YjlmMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5v5V9FziWXwhrs7GSNVdMeJNQovLv7Qzj1J MDQMFsruwaHzTCKrI4yOp9ihpa0XOwGpoCxFih67P74/RngItomOSARdcfFWdyFW W0MfewOp9yhVyLdpX4JbLlXkdusSIhYGaw4UWDGgS0g8dddBBSDym8vJZdeDKTZx UzlWjm5iUwwX9MaYkDgcZODEFFisWkFKVKC3RYFFJBcYKoemi/xYYmsPxj1QG6lt nqIz7hlxUKZYtHBPfVxsx5UmnvpwDCVqS+GrQq4Co7uzPrXsWCiBue6Im0+5+R2m hpmbLHKn1NkBKcVvEknOsjbcdvH6ajfbx61dn/tOC4m8r4zYzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEND7ys7DCTF2OXz/hM4UFnTRY8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASRLerESAlr+09wJSRL8Ji 0dCavj91wWkEGtFJBeCn3hsZ9SO5uMCL8k5GlPnQCRDSsEGE3dDaonp4aw425YIx Cept4IMykn5eutJdTqkvCycp1QIfnhvG/Wd9ULGeNJNRZFcylbNzzHgBkQ2xUbrB 3W8V7PzEhQnjOCo5T5E3pY5/M/tHNcjc/LWTyHa2BF1PrDlAlrUjdq7DMUb6XMyF zLSeMmQoUP/VDtYetO5rvUh58zDj10jxadXfseal7X6TtWCVLWJscvz9ZHeVBk3r 3eRUt6IzM+sC5xeN4h7Rl5J5XHbmr9G3swUuRjbtFB5Qlhs5NiEkh1dOfciEEU6p -----END CERTIFICATE-----Generated at Sun Mar 22 08:22:17 2026 by rpki-client