$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft File: 4bfec383-87a2-4429-93ae-a407c690a4e0.mft (raw, json) Hash identifier: VMK6eLoshjk36uZi8i6y4oul3wRl2X/SITnS3R69BCM= Subject key identifier: C0:B2:19:42:7B:AB:5C:57:E8:FD:3E:0A:7A:B7:E7:2E:40:00:97:6F Authority key identifier: 9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 Certificate issuer: /CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Certificate serial: 010D0C9F4328584D4ACAD82DBB27612BE8BCB700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft Manifest number: 010D0C9F4328584073A83875C8D861E24EA2672F Signing time: Thu 26 Mar 2026 03:00:04 +0000 Manifest this update: Thu 26 Mar 2026 03:00:04 +0000 Manifest next update: Sat 28 Mar 2026 03:00:00 +0000 Files and hashes: 1: 4bfec383-87a2-4429-93ae-a407c690a4e0.crl (hash: fIUBTB0fYDddqDMZROxdRdv6PolSgWpRHS+i5PYLJc4=) 2: a820aa84-3b7e-3422-a459-12296d3fef75.roa (hash: wjpKkqIw3p28d6JeBx5XpkrhDf4s7SsSFCgQ4gmSf1Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ca:d8:2d:bb:27:61:2b:e8:bc:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Validity Not Before: Mar 26 03:00:04 2026 GMT Not After : Mar 28 03:00:00 2026 GMT Subject: CN=03627ac7-3d32-44d0-9109-2ff227f0f5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ef:cd:79:a4:07:6d:7e:30:91:7e:9e:35:d2: 64:a0:0d:13:70:ff:26:d3:26:13:95:ff:3d:3d:2a: ca:f8:ea:e5:82:22:1b:24:54:1d:e3:09:0a:46:4b: df:da:d2:3b:45:ec:03:67:1d:9c:e7:fc:74:49:aa: 88:65:b1:35:88:78:5b:21:3c:80:c9:f9:e7:e0:9b: 8a:37:36:e8:e9:dd:8a:d5:8f:1d:85:b5:22:2f:a8: 2b:05:d1:10:01:cf:4b:fe:c4:ce:16:47:f1:d5:70: ab:5a:96:bf:6d:82:1e:19:ec:6b:67:a4:70:7b:d6: 8e:f6:6a:7b:8a:2a:6c:8b:51:a4:e1:a3:c5:eb:c3: 11:de:88:4a:ce:73:8f:d6:5d:cf:73:19:5a:7c:1c: 74:a0:c7:54:c6:35:8c:eb:31:cc:e9:dc:9d:08:55: 10:38:93:e2:16:8a:7c:3f:5a:53:a8:e5:77:c4:fd: 1c:5f:94:1a:a0:87:5e:b6:b4:73:d8:37:25:35:b7: 4e:cc:53:30:74:83:51:7b:2c:da:8d:06:bf:8f:76: d9:a1:f5:0f:64:32:e3:44:8f:17:6e:7f:82:8f:ff: 89:49:92:7e:d6:cb:7b:fc:71:a7:6d:e7:7f:14:75: 9f:9e:af:bb:1f:d8:b5:b0:78:cf:a8:e6:91:e7:8f: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B2:19:42:7B:AB:5C:57:E8:FD:3E:0A:7A:B7:E7:2E:40:00:97:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl X509v3 Authority Key Identifier: keyid:9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ee:70:d0:09:f5:15:bd:7b:3e:06:1b:5c:61:82:62:fa:90: ce:2e:04:0c:e2:d5:5c:14:9a:ec:9d:67:72:bc:de:fa:e7:66: 18:db:19:56:62:8d:1b:be:93:c6:f2:e5:98:9c:41:c4:5f:eb: bd:fa:d5:4c:e4:3e:0f:12:8e:10:e6:60:a4:49:bd:9b:fb:e0: 2a:04:f0:6e:69:e1:81:65:d5:6a:4e:c0:a5:cd:ab:dc:e4:cf: 3e:71:6a:ad:ba:e0:4e:48:28:2c:f2:33:f8:7f:7b:65:b1:7d: b9:6e:e5:b9:4d:67:03:e1:e4:68:69:46:29:2d:f2:1f:08:28: 7c:e0:0b:ca:2c:b8:2a:65:3d:e9:ea:ce:c1:26:da:80:5e:19: 1d:35:a7:cf:07:0c:54:8d:9c:f8:a8:20:54:c4:85:d4:0d:77: 55:e2:00:dd:05:97:0d:42:b8:35:7c:c7:d0:d6:a6:d7:75:5a: 54:37:63:fb:a2:d1:03:ae:05:28:46:cb:43:12:b3:70:65:20: e3:f1:d4:28:b9:66:c6:6a:d0:29:b0:58:09:65:cf:7a:11:88: db:d7:54:b3:a4:85:50:78:95:c1:64:dc:af:aa:96:d3:fd:43: 16:58:95:18:9c:cf:9c:86:85:e8:41:41:07:e9:b8:6a:68:9e: ab:87:2e:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KytgtuydhK+i8twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmZWMzODMtODdhMi00NDI5LTkzYWUtYTQwN2M2OTBh NGUwMB4XDTI2MDMyNjAzMDAwNFoXDTI2MDMyODAzMDAwMFowLzEtMCsGA1UEAxMk MDM2MjdhYzctM2QzMi00NGQwLTkxMDktMmZmMjI3ZjBmNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO/NeaQHbX4wkX6eNdJkoA0TcP8m0yYTlf89 PSrK+OrlgiIbJFQd4wkKRkvf2tI7RewDZx2c5/x0SaqIZbE1iHhbITyAyfnn4JuK Nzbo6d2K1Y8dhbUiL6grBdEQAc9L/sTOFkfx1XCrWpa/bYIeGexrZ6Rwe9aO9mp7 iipsi1Gk4aPF68MR3ohKznOP1l3PcxlafBx0oMdUxjWM6zHM6dydCFUQOJPiFop8 P1pTqOV3xP0cX5QaoIdetrRz2DclNbdOzFMwdINReyzajQa/j3bZofUPZDLjRI8X bn+Cj/+JSZJ+1st7/HGnbed/FHWfnq+7H9i1sHjPqOaR548iwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMCyGUJ7q1xX6P0+Cnq35y5AAJdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmZl YzM4My04N2EyLTQ0MjktOTNhZS1hNDA3YzY5MGE0ZTAvNGJmZWMzODMtODdhMi00 NDI5LTkzYWUtYTQwN2M2OTBhNGUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJmZWMzODMtODdhMi00NDI5LTkz YWUtYTQwN2M2OTBhNGUwLzRiZmVjMzgzLTg3YTItNDQyOS05M2FlLWE0MDdjNjkw YTRlMC5jcmwwHwYDVR0jBBgwFoAUnzi76BLH2dRniIyhM513fN0fICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmZlYzM4My04N2EyLTQ0MjktOTNhZS1hNDA3 YzY5MGE0ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR7nDQCfUVvXs+BhtcYYJi +pDOLgQM4tVcFJrsnWdyvN7652YY2xlWYo0bvpPG8uWYnEHEX+u9+tVM5D4PEo4Q 5mCkSb2b++AqBPBuaeGBZdVqTsClzavc5M8+cWqtuuBOSCgs8jP4f3tlsX25buW5 TWcD4eRoaUYpLfIfCCh84AvKLLgqZT3p6s7BJtqAXhkdNafPBwxUjZz4qCBUxIXU DXdV4gDdBZcNQrg1fMfQ1qbXdVpUN2P7otEDrgUoRstDErNwZSDj8dQouWbGatAp sFgJZc96EYjb11SzpIVQeJXBZNyvqpbT/UMWWJUYnM+choXoQUEH6bhqaJ6rhy6F -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:33 2026 by rpki-client