$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft File: 57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft (raw, json) Hash identifier: cPpSFpkGXzxjBYJ5WeExkYfVMzZcOEFhO2Srdo8bWj4= Subject key identifier: B6:6F:55:9C:70:E7:12:B8:1C:CD:7E:B4:22:EE:8F:C0:DC:4C:41:52 Authority key identifier: D2:F0:D8:9F:F9:A1:DC:91:1B:3D:10:ED:C6:B2:AF:EB:A0:50:48:B8 Certificate issuer: /CN=57284da7-1ff8-4f9e-a90e-7254e01e7f1b Certificate serial: 010D0C9F4328584D4A8F596172FCEFE9741F7580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft Manifest number: 010D0C9F4328584073A833EE31F29A1207E1F225 Signing time: Thu 26 Mar 2026 01:00:09 +0000 Manifest this update: Thu 26 Mar 2026 01:00:09 +0000 Manifest next update: Sat 28 Mar 2026 01:00:00 +0000 Files and hashes: 1: 57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl (hash: 1dozjPZo2xQHAo1L1Bfu/SAjNVAqSnWOfjWwCDss9HI=) 2: a544389d-d4bc-3113-8d31-ca77eef8cf44.roa (hash: t4wGspdWBfM6hHI+KVW98+kFm1l+VLZu93FTHYZEh5g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:59:61:72:fc:ef:e9:74:1f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57284da7-1ff8-4f9e-a90e-7254e01e7f1b Validity Not Before: Mar 26 01:00:09 2026 GMT Not After : Mar 28 01:00:00 2026 GMT Subject: CN=d60c5305-95fc-45cf-b673-836addf78237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:e8:83:f5:57:13:3d:2a:6f:51:71:e8:e4: 9c:1b:4c:2e:01:ae:b2:a4:a9:68:a1:37:17:c6:5d: 9c:47:ab:60:23:07:81:df:d7:2a:ed:da:e8:a8:29: 2f:50:3f:5f:08:b5:e5:9a:28:59:be:0f:0d:01:be: 01:b1:ac:a8:92:c2:bc:54:4f:f2:66:ce:c0:63:aa: 21:c5:d8:02:23:b7:b3:3a:01:80:9b:cc:5e:c7:b1: 01:20:37:d4:14:bb:00:f7:aa:e4:37:b8:4a:28:df: f5:99:e6:be:87:27:ea:d4:96:44:16:39:b5:a6:9d: 3a:a8:46:8c:80:3a:39:f7:8e:24:bd:f2:78:4d:5e: 9f:fa:c5:87:5d:02:9a:02:0d:ca:b5:40:58:fa:46: bb:a9:ab:df:f3:d4:62:4a:69:fe:50:1e:86:da:e8: 60:8c:d5:20:13:25:53:64:31:85:ea:c4:7b:56:0a: 74:a7:74:fb:48:b9:3e:25:4e:bf:ac:25:d6:6f:01: be:55:a0:58:91:16:1c:22:db:b8:89:04:ff:9d:dc: 0a:ff:8e:ff:b1:95:51:40:ef:82:5f:ca:42:f0:9d: 28:02:a3:6d:75:48:b7:29:75:0d:02:3c:5c:9d:7d: 57:10:b6:db:79:53:f3:46:d3:14:01:35:b7:2b:6b: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:55:9C:70:E7:12:B8:1C:CD:7E:B4:22:EE:8F:C0:DC:4C:41:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl X509v3 Authority Key Identifier: keyid:D2:F0:D8:9F:F9:A1:DC:91:1B:3D:10:ED:C6:B2:AF:EB:A0:50:48:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:db:8a:fe:c4:42:0a:b5:a2:63:42:fe:de:44:58:2b:09:25: 4a:57:6a:e8:ef:f6:48:32:d8:ac:af:41:57:f9:81:49:c1:34: 73:c0:02:3c:ac:be:e2:89:89:f3:63:27:1b:42:d9:1a:38:a6: 47:53:f9:19:da:32:0a:a1:fa:01:41:09:91:96:74:61:76:f6: 09:61:5d:26:76:0f:59:bd:90:da:a0:12:21:03:66:ff:a2:db: 01:c4:a4:d0:d2:39:82:9b:df:8e:b1:70:07:61:f2:ca:1c:34: 9d:87:6b:5d:1f:7b:15:ab:41:bd:75:7a:46:f5:15:94:9b:9f: a3:ad:d5:b4:ad:28:7d:a1:17:7c:e1:a6:15:dc:9f:cc:8f:b9: 30:67:83:35:f0:e7:ef:6a:fa:ba:d4:22:68:18:bb:71:25:84: 3d:0c:d5:e7:4c:37:9b:a2:ba:7a:19:f1:a2:23:4d:bd:7c:fd: ef:3d:c1:23:2f:27:64:f4:56:5a:3f:c1:c5:96:12:b4:fe:2d: cd:f8:ac:e1:d4:15:f9:ac:31:75:8e:b7:4d:0a:27:94:8d:b0: 1b:3f:23:43:b7:39:5e:6b:db:b3:87:53:2a:a8:c5:d8:42:dd: d7:63:11:df:67:73:bf:f6:00:b7:9e:74:d7:b8:29:97:be:81: e8:c3:fd:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Kj1lhcvzv6XQfdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcyODRkYTctMWZmOC00ZjllLWE5MGUtNzI1NGUwMWU3 ZjFiMB4XDTI2MDMyNjAxMDAwOVoXDTI2MDMyODAxMDAwMFowLzEtMCsGA1UEAxMk ZDYwYzUzMDUtOTVmYy00NWNmLWI2NzMtODM2YWRkZjc4MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnbog/VXEz0qb1Fx6OScG0wuAa6ypKlooTcX xl2cR6tgIweB39cq7droqCkvUD9fCLXlmihZvg8NAb4BsayoksK8VE/yZs7AY6oh xdgCI7ezOgGAm8xex7EBIDfUFLsA96rkN7hKKN/1mea+hyfq1JZEFjm1pp06qEaM gDo5944kvfJ4TV6f+sWHXQKaAg3KtUBY+ka7qavf89RiSmn+UB6G2uhgjNUgEyVT ZDGF6sR7Vgp0p3T7SLk+JU6/rCXWbwG+VaBYkRYcItu4iQT/ndwK/47/sZVRQO+C X8pC8J0oAqNtdUi3KXUNAjxcnX1XELbbeVPzRtMUATW3K2tnCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLZvVZxw5xK4HM1+tCLuj8DcTEFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzI4 NGRhNy0xZmY4LTRmOWUtYTkwZS03MjU0ZTAxZTdmMWIvNTcyODRkYTctMWZmOC00 ZjllLWE5MGUtNzI1NGUwMWU3ZjFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTcyODRkYTctMWZmOC00ZjllLWE5 MGUtNzI1NGUwMWU3ZjFiLzU3Mjg0ZGE3LTFmZjgtNGY5ZS1hOTBlLTcyNTRlMDFl N2YxYi5jcmwwHwYDVR0jBBgwFoAU0vDYn/mh3JEbPRDtxrKv66BQSLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzI4NGRhNy0xZmY4LTRmOWUtYTkwZS03MjU0 ZTAxZTdmMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCS24r+xEIKtaJjQv7eRFgr CSVKV2ro7/ZIMtisr0FX+YFJwTRzwAI8rL7iiYnzYycbQtkaOKZHU/kZ2jIKofoB QQmRlnRhdvYJYV0mdg9ZvZDaoBIhA2b/otsBxKTQ0jmCm9+OsXAHYfLKHDSdh2td H3sVq0G9dXpG9RWUm5+jrdW0rSh9oRd84aYV3J/Mj7kwZ4M18Ofvavq61CJoGLtx JYQ9DNXnTDeborp6GfGiI029fP3vPcEjLydk9FZaP8HFlhK0/i3N+Kzh1BX5rDF1 jrdNCieUjbAbPyNDtzlea9uzh1MqqMXYQt3XYxHfZ3O/9gC3nnTXuCmXvoHow/0y -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:24 2026 by rpki-client