$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft File: bc3aa731-9547-4b21-8f65-60f3717ca369.mft (raw, json) Hash identifier: 8adfLLiu4lwg7rPyxFm4n2St/8vEpxiIR0Maz1zKDXw= Subject key identifier: 78:D4:DD:2E:6A:B3:5C:44:C3:65:8E:94:C7:7D:02:D8:53:46:8A:AF Authority key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Certificate issuer: /CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Certificate serial: 010D0C9F4328584D3CF33484D02A07CE740860E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft Manifest number: 010D0C9F432858496EAE60AF4A8023AB42775726 Signing time: Sat 21 Mar 2026 04:00:04 +0000 Manifest this update: Sat 21 Mar 2026 04:00:04 +0000 Manifest next update: Mon 23 Mar 2026 04:00:00 +0000 Files and hashes: 1: a2fefabd-2f02-3245-a2c8-36de47abeaf7.roa (hash: kskeEChhtizpqxT3WCdoAYjm4RMBOoWHHWb8XVhpmlo=) 2: bc3aa731-9547-4b21-8f65-60f3717ca369.crl (hash: J492EbPs4XwEO38VUgwoERu/6XHxyxkpAlvZYapk4yk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:f3:34:84:d0:2a:07:ce:74:08:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Validity Not Before: Mar 21 04:00:04 2026 GMT Not After : Mar 23 04:00:00 2026 GMT Subject: CN=4431dc41-bf56-4b1c-9f3c-139f39356408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:93:e9:0f:be:d9:f4:ed:88:b0:dd:21:71: 4b:4a:75:f8:7f:64:d2:60:0a:05:a6:aa:ba:2a:f8: da:0b:4b:e5:f3:a1:64:2a:e5:ef:c5:e2:6a:e1:fd: 3f:ab:76:e1:e4:ef:4e:d3:35:b1:5b:c4:ef:99:50: 5c:a6:59:80:28:e1:39:ac:0c:23:11:76:d8:4d:3e: f3:59:7d:04:09:d1:5a:a1:3a:95:67:00:cc:68:db: 55:3b:65:3f:5d:43:25:f7:ec:1d:26:f8:27:e5:27: c7:15:79:b9:aa:cd:1c:d4:34:4f:34:0f:84:78:e8: 2a:f5:8a:1a:b0:8e:f9:1c:e1:be:df:62:4b:1d:f1: 32:4b:1c:44:91:3e:02:0e:af:47:16:6a:bf:72:7d: e3:4a:f9:fb:a9:3b:a9:04:50:36:65:23:66:0e:7a: d5:c4:a9:50:3d:2d:0b:61:1a:1c:55:bf:42:38:0a: 08:d3:17:f4:15:05:02:6f:a8:d0:9c:e5:bc:d0:79: 10:e2:34:78:d7:3b:1b:23:e0:dd:12:3d:b1:4a:0e: f5:36:8a:40:d0:80:cb:40:d4:ee:cc:e7:18:81:fb: 24:cb:80:ba:1d:88:df:27:78:fc:05:18:f5:e8:c6: 53:73:00:9e:3f:ab:2c:f5:d4:00:b1:cf:05:6d:7e: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:DD:2E:6A:B3:5C:44:C3:65:8E:94:C7:7D:02:D8:53:46:8A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl X509v3 Authority Key Identifier: keyid:51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3e:d4:7e:e6:0f:f5:38:d8:80:22:d1:34:1b:a4:8c:4e:a9: 90:ef:a9:ae:6c:0b:3a:3b:cc:3c:bb:fb:fc:0b:08:c2:b0:29: 4e:04:38:97:13:57:33:20:4b:53:1a:71:82:2d:45:25:cb:46: ba:9e:e6:c1:c1:c9:87:42:1a:ca:fc:b6:b1:ee:7d:0e:0c:22: 06:26:09:98:f2:42:3a:03:73:15:3a:ae:35:fb:26:4b:5a:b4: 76:5d:82:43:fc:7b:02:6f:94:b9:ee:22:81:0d:a3:74:e8:3e: 55:a5:1f:17:ef:03:2b:e2:51:ac:8b:96:b5:e1:28:af:de:0c: d3:e0:cc:c5:91:9a:fc:e7:e1:06:34:97:41:15:8d:23:27:ed: 51:a2:ed:a5:1c:53:b8:3f:78:e2:42:bf:2c:c4:b3:3a:9b:30: de:68:25:fc:ff:ea:20:85:29:a6:b4:72:79:40:bd:74:2c:72: 2c:c9:2e:b1:9d:55:5a:b9:b3:3e:4c:0b:af:2f:bf:a1:22:20: 98:4c:35:aa:b1:04:96:07:fa:44:0d:71:f0:a5:71:d9:c8:31: 6c:e4:28:f9:e9:f6:9a:c0:e7:fb:2e:37:41:d4:d0:95:a9:4b: bc:d7:1d:5e:f5:01:ad:53:f4:8e:e0:ac:1d:4e:58:a0:79:1a: 12:aa:64:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE088zSE0CoHznQIYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYWE3MzEtOTU0Ny00YjIxLThmNjUtNjBmMzcxN2Nh MzY5MB4XDTI2MDMyMTA0MDAwNFoXDTI2MDMyMzA0MDAwMFowLzEtMCsGA1UEAxMk NDQzMWRjNDEtYmY1Ni00YjFjLTlmM2MtMTM5ZjM5MzU2NDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mmT6Q++2fTtiLDdIXFLSnX4f2TSYAoFpqq6 KvjaC0vl86FkKuXvxeJq4f0/q3bh5O9O0zWxW8TvmVBcplmAKOE5rAwjEXbYTT7z WX0ECdFaoTqVZwDMaNtVO2U/XUMl9+wdJvgn5SfHFXm5qs0c1DRPNA+EeOgq9Yoa sI75HOG+32JLHfEySxxEkT4CDq9HFmq/cn3jSvn7qTupBFA2ZSNmDnrVxKlQPS0L YRocVb9COAoI0xf0FQUCb6jQnOW80HkQ4jR41zsbI+DdEj2xSg71NopA0IDLQNTu zOcYgfsky4C6HYjfJ3j8BRj16MZTcwCeP6ss9dQAsc8FbX7LOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHjU3S5qs1xEw2WOlMd9AthTRoqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNh YTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3Y2EzNjkvYmMzYWE3MzEtOTU0Ny00 YjIxLThmNjUtNjBmMzcxN2NhMzY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMzYWE3MzEtOTU0Ny00YjIxLThm NjUtNjBmMzcxN2NhMzY5L2JjM2FhNzMxLTk1NDctNGIyMS04ZjY1LTYwZjM3MTdj YTM2OS5jcmwwHwYDVR0jBBgwFoAUUUF2tYyUtnaL2FowVWJGF+X/J/kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYz NzE3Y2EzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWPtR+5g/1ONiAItE0G6SM TqmQ76mubAs6O8w8u/v8CwjCsClOBDiXE1czIEtTGnGCLUUly0a6nubBwcmHQhrK /Lax7n0ODCIGJgmY8kI6A3MVOq41+yZLWrR2XYJD/HsCb5S57iKBDaN06D5VpR8X 7wMr4lGsi5a14Siv3gzT4MzFkZr85+EGNJdBFY0jJ+1Rou2lHFO4P3jiQr8sxLM6 mzDeaCX8/+oghSmmtHJ5QL10LHIsyS6xnVVaubM+TAuvL7+hIiCYTDWqsQSWB/pE DXHwpXHZyDFs5Cj56faawOf7LjdB1NCVqUu81x1e9QGtU/SO4KwdTligeRoSqmTx -----END CERTIFICATE-----Generated at Sun Mar 22 05:37:02 2026 by rpki-client