$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft File: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft (raw, json) Hash identifier: yjjGrGUxojbYmA/DOnR32BAlFh2yUXSbouonNnnX9u4= Subject key identifier: 9A:55:21:37:F4:35:95:65:A1:EF:30:7C:F6:96:6D:C8:7C:69:C3:60 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584D4123393E56B480DC155C1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft Manifest number: 010D0C9F43285848DEA6AA7962B2F4D6BC028CAF Signing time: Sun 22 Mar 2026 16:00:04 +0000 Manifest this update: Sun 22 Mar 2026 16:00:04 +0000 Manifest next update: Wed 25 Mar 2026 16:00:00 +0000 Files and hashes: 1: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (hash: EvIYrDGoKmBFkWBEdz2M9RlMa0JLchjJo3ueU6y1ffs=) 2: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl (hash: ZDmCX+rjsisBo4PrHwJYLob+vZNtwMy7EURM7bVefh0=) 3: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (hash: bEJw9DA8UJJ1Km+mt3yBoc3z/n7u8BMdciYKaUkam7k=) 4: 904b080a-8e57-3918-95ab-750f6766dc80.roa (hash: kXcwiNI+puaPO65LmQtl3ElsbErC/ZQyCKHVyJRkDbg=) 5: a98d5494-4572-385b-afc9-1ffafc221b11.roa (hash: bfV38YOktF+pYc7BBBpoWIjalu74+uK2vhKqUHJQ9rY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:41:23:39:3e:56:b4:80:dc:15:5c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Mar 22 16:00:04 2026 GMT Not After : Mar 25 16:00:00 2026 GMT Subject: CN=a934cc2b-b0f5-42de-bb11-518f070e7e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:07:19:04:a1:d4:d4:1b:81:25:6e:f1:66: 50:41:31:92:7b:7c:41:91:bd:90:d9:15:60:02:3d: 91:22:0e:4a:2c:86:62:bc:b8:c2:e0:a7:2c:58:08: da:38:70:a8:12:5b:6f:b8:56:f4:17:56:17:23:87: 60:34:74:4a:be:87:a5:d3:58:b9:38:15:ea:00:af: 8b:0e:29:de:b2:45:89:9e:75:f5:d2:e3:44:07:8f: 60:a4:54:66:ef:5e:79:54:2b:75:61:01:f9:03:70: 20:7a:59:9f:b5:19:58:ea:d3:bd:ff:e3:ac:87:f2: 29:f2:63:4e:6b:ea:04:10:dc:5a:02:83:fe:21:22: ab:16:b7:e7:1f:70:52:f5:15:04:98:23:9c:16:1d: 24:fb:dc:13:ba:78:9a:89:c4:ac:78:f0:6e:4f:4a: 31:21:2a:7d:4f:2a:a5:9f:df:43:c2:4a:69:84:2d: bf:eb:b0:b3:3f:7d:ad:b0:b5:da:3e:c8:4c:3b:cc: 9f:7f:7f:bd:4e:b9:6e:03:4b:25:72:16:39:9c:d1: d4:d6:48:dd:bb:00:29:78:a9:e0:11:7a:23:cc:4a: 80:a4:eb:a1:62:a7:b2:fb:44:e6:94:01:ae:f2:2b: da:78:50:65:bb:73:f5:46:ad:f8:ea:ea:56:0e:28: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:21:37:F4:35:95:65:A1:EF:30:7C:F6:96:6D:C8:7C:69:C3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7a:4b:c3:eb:69:34:d1:5e:66:59:54:66:97:d6:68:51:46: 78:40:ff:a9:ce:8b:60:a1:18:5b:b7:bc:43:17:c9:a5:fd:76: f5:2a:85:15:bc:6e:b9:8c:9e:7a:dc:4c:98:39:78:4d:57:11: 0f:12:4d:43:26:a7:c5:1b:78:d4:dd:28:6d:d1:5e:02:74:97: cc:85:89:96:b6:d4:7e:bc:d4:09:e0:14:ea:d3:d0:68:e5:7c: 9c:78:c8:93:b2:4c:a7:70:6f:03:34:9b:be:40:17:9c:93:36: 7f:d5:85:d5:a8:57:0e:03:23:ab:dd:57:20:40:12:ab:7f:1e: bc:00:4f:d9:89:9b:88:32:58:2e:12:14:2d:82:4f:9a:e3:df: 58:6a:04:53:1a:40:a3:3e:58:cc:ea:ee:7f:1f:b0:fc:47:d5: f2:a3:8e:56:bb:83:9b:5d:e6:1f:2e:3a:fb:1c:46:b9:02:50: fd:7e:f0:2e:0e:3b:0d:8d:57:51:29:53:a2:c9:ee:07:59:55: 85:1b:fd:7c:ea:9a:74:41:6e:bb:c5:66:66:c7:cd:c4:e8:ae: c4:86:10:7c:55:48:50:ba:ca:46:29:b1:b4:99:3a:9a:41:4b: 21:80:48:53:e4:92:d7:9a:12:b6:3d:ba:33:42:0a:76:cd:8f: 8d:bb:90:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1BIzk+VrSA3BVcE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDMyMjE2MDAwNFoXDTI2MDMyNTE2MDAwMFowLzEtMCsGA1UEAxMk YTkzNGNjMmItYjBmNS00MmRlLWJiMTEtNTE4ZjA3MGU3ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke4HGQSh1NQbgSVu8WZQQTGSe3xBkb2Q2RVg Aj2RIg5KLIZivLjC4KcsWAjaOHCoEltvuFb0F1YXI4dgNHRKvoel01i5OBXqAK+L DineskWJnnX10uNEB49gpFRm7155VCt1YQH5A3AgelmftRlY6tO9/+Osh/Ip8mNO a+oEENxaAoP+ISKrFrfnH3BS9RUEmCOcFh0k+9wTuniaicSsePBuT0oxISp9Tyql n99DwkpphC2/67CzP32tsLXaPshMO8yff3+9TrluA0slchY5nNHU1kjduwApeKng EXojzEqApOuhYqey+0TmlAGu8ivaeFBlu3P1Rq346upWDihGCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJpVITf0NZVloe8wfPaWbch8acNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMzY4OWI5Y2UtMDg5ZC00 MTM3LWIxNGQtN2U0Y2QxNWU1M2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNekvD62k00V5mWVRml9Zo UUZ4QP+pzotgoRhbt7xDF8ml/Xb1KoUVvG65jJ563EyYOXhNVxEPEk1DJqfFG3jU 3Sht0V4CdJfMhYmWttR+vNQJ4BTq09Bo5XyceMiTskyncG8DNJu+QBeckzZ/1YXV qFcOAyOr3VcgQBKrfx68AE/ZiZuIMlguEhQtgk+a499YagRTGkCjPljM6u5/H7D8 R9Xyo45Wu4ObXeYfLjr7HEa5AlD9fvAuDjsNjVdRKVOiye4HWVWFG/186pp0QW67 xWZmx83E6K7EhhB8VUhQuspGKbG0mTqaQUshgEhT5JLXmhK2PbozQgp2zY+Nu5DH -----END CERTIFICATE-----Generated at Mon Mar 23 15:50:05 2026 by rpki-client