$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: JRYacohdJF9gKZqm9Refdr2j77T1zzNBGQbPnZYNJds= Subject key identifier: DE:2B:50:D1:8F:4E:6A:BF:9B:B1:F9:BC:64:C6:00:F2:6F:2B:84:AF Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F4328584D48B2D579F7037500B9136780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A33B4 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: RTWdx6ZrAtHofgdWmd85Rx5HhvUV4dYVul1FqyQVxjg=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: U9w0lfuuk1z9XgLm6SG9REks+ibqmGYpsfYNVx7QvJ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d5:79:f7:03:75:00:b9:13:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=61132ca3-6bb6-4168-920f-7b05976ee0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:d7:87:30:a4:8c:16:01:5c:50:96:c8:b4: 4a:bb:42:09:91:97:22:38:db:5e:16:74:f8:00:e3: 72:c1:e3:99:10:5d:79:4a:f1:dd:f0:46:b7:28:af: 41:50:42:c9:46:83:0e:6e:0c:2b:be:65:78:6e:c9: b4:fd:3f:b3:38:37:64:75:fe:3a:72:c1:88:c5:29: b8:47:7c:72:36:55:8a:85:64:a1:c4:71:f4:b1:0b: 97:17:c8:ee:a3:65:aa:a6:ae:2b:52:3a:60:ba:27: 92:05:b4:27:d0:38:f8:20:41:b6:8f:e6:12:57:a0: a5:1d:cc:cb:13:85:c9:8c:39:d9:16:bd:fb:22:89: e0:7b:42:d7:49:9a:ed:c1:a9:c3:e1:97:f6:ac:77: c9:58:69:d8:a5:97:0c:da:94:10:2e:b1:3b:fc:05: c2:7c:24:0d:29:b8:09:bf:c3:2e:e9:cf:31:1e:8c: 3c:1b:ea:9e:43:b9:ef:92:de:1b:cb:f7:43:23:d0: a9:0a:d3:d7:31:82:d2:26:5b:2e:c3:08:85:e2:e1: dc:cf:4a:ff:ff:55:1f:66:4f:f3:4b:e2:f5:3d:d5: 6b:32:ab:0e:97:42:ad:34:b4:79:a5:ce:8f:a8:f4: 98:d3:3e:3c:4e:02:84:a7:5f:8e:9b:14:b9:da:6f: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2B:50:D1:8F:4E:6A:BF:9B:B1:F9:BC:64:C6:00:F2:6F:2B:84:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:11:a9:d5:dc:a4:9c:22:87:29:42:d8:ce:9d:c7:b2:36:b8: 1f:c1:44:76:64:3d:3a:4c:26:d7:88:9b:8f:ab:fc:5e:03:55: 4f:ee:c0:e8:43:0c:3c:69:17:75:d8:7d:5f:25:60:60:a1:c1: e6:01:3e:3f:8a:55:f9:62:96:a4:67:02:01:00:4e:3a:e2:79: 48:ea:d7:24:71:91:cd:08:89:90:3b:00:a2:9b:a1:9f:e5:2d: 81:86:e9:af:25:fe:9d:1c:8e:06:de:13:32:9a:32:ea:a6:c9: f5:05:82:fc:87:e8:1b:5c:47:6e:3d:e9:6c:ad:15:1a:b6:5d: 17:ef:bd:c4:92:75:e7:7e:07:5b:d6:a2:9d:bc:e1:7e:1b:63: 27:e6:69:87:fb:83:9e:90:10:9a:62:dd:72:93:74:c7:2c:f8: 63:b7:43:ef:6f:51:91:41:b7:9e:32:56:eb:e3:6f:48:41:f3: ea:4f:58:23:48:41:88:54:b4:65:0f:37:8a:ea:33:ef:f4:ad: 4b:44:e3:f0:d0:6e:d6:a5:a8:8d:c5:0a:08:77:a6:b9:02:d1: 98:60:59:b4:e4:e8:e5:a5:01:68:a0:72:96:ed:98:ca:98:92: 3b:33:fd:a5:8c:20:25:5a:00:ec:4a:3e:ee:71:02:15:7e:82: 7e:d6:1b:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstV59wN1ALkTZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk NjExMzJjYTMtNmJiNi00MTY4LTkyMGYtN2IwNTk3NmVlMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4frXhzCkjBYBXFCWyLRKu0IJkZciONteFnT4 AONyweOZEF15SvHd8Ea3KK9BUELJRoMObgwrvmV4bsm0/T+zODdkdf46csGIxSm4 R3xyNlWKhWShxHH0sQuXF8juo2Wqpq4rUjpguieSBbQn0Dj4IEG2j+YSV6ClHczL E4XJjDnZFr37Ionge0LXSZrtwanD4Zf2rHfJWGnYpZcM2pQQLrE7/AXCfCQNKbgJ v8Mu6c8xHow8G+qeQ7nvkt4by/dDI9CpCtPXMYLSJlsuwwiF4uHcz0r//1UfZk/z S+L1PdVrMqsOl0KtNLR5pc6PqPSY0z48TgKEp1+OmxS52m8j5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN4rUNGPTmq/m7H5vGTGAPJvK4SvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuEanV3KScIocpQtjOncey NrgfwUR2ZD06TCbXiJuPq/xeA1VP7sDoQww8aRd12H1fJWBgocHmAT4/ilX5Ypak ZwIBAE464nlI6tckcZHNCImQOwCim6Gf5S2BhumvJf6dHI4G3hMymjLqpsn1BYL8 h+gbXEduPelsrRUatl0X773EknXnfgdb1qKdvOF+G2Mn5mmH+4OekBCaYt1yk3TH LPhjt0Pvb1GRQbeeMlbr429IQfPqT1gjSEGIVLRlDzeK6jPv9K1LROPw0G7WpaiN xQoId6a5AtGYYFm05OjlpQFooHKW7ZjKmJI7M/2ljCAlWgDsSj7ucQIVfoJ+1huW -----END CERTIFICATE-----Generated at Thu Mar 26 05:21:06 2026 by rpki-client