$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: 50YZ2TIhx2/aooq7/P8Moiw4ud3lp+YXZWlSftrD2YA= Subject key identifier: 30:2F:9A:95:A1:30:EC:4F:B8:D8:A7:2F:57:05:BD:97:C5:E0:39:70 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584D48950C4CAD2D2439B5BCFB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D884 Signing time: Wed 25 Mar 2026 08:00:04 +0000 Manifest this update: Wed 25 Mar 2026 08:00:04 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: jJzyIYgzkAauoM2IUG86Rczhfqoxhu/iMtcMSq7RtX4=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: apbmw0WYlT9K0P/qmD/mRTTbPKzt5lEGytUUnSSo/K4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:95:0c:4c:ad:2d:24:39:b5:bc:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Mar 25 08:00:04 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=a05c20a1-cf67-468a-b9b0-c8694bcbf396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:22:6f:42:66:af:6d:8a:d9:8f:03:0a:8a: db:03:6a:f5:76:dd:eb:f1:eb:d0:69:74:87:ad:3e: ef:b6:6d:ff:6f:50:ee:a5:aa:b0:39:3f:8d:72:b0: 20:4c:70:84:dc:98:83:f4:f1:bb:3b:18:91:d2:93: d4:01:6b:bd:c1:f2:9c:06:47:4d:25:4b:16:18:d5: f6:0b:a3:d4:b4:4c:f7:9d:01:b5:5e:8c:64:5f:5a: 98:67:bf:e5:87:0d:f3:1e:62:85:9e:09:53:a9:87: 0d:fe:fe:43:aa:99:98:aa:30:0e:2a:e0:bf:3a:e4: f1:a0:0d:87:3f:22:69:41:53:96:67:7f:53:20:89: 01:0d:ae:4b:dc:5c:1e:54:5e:76:1e:22:e6:60:df: 85:14:bd:c7:f3:c1:d9:b2:a1:75:fa:fe:d9:86:2b: b2:ef:f8:1e:fb:b4:32:61:f5:e6:9e:03:ee:a5:ca: ce:4c:26:79:a7:72:a2:58:3a:10:07:c2:63:10:a1: d5:b6:5f:fa:e7:fb:69:48:59:33:d7:b4:03:b3:19: 25:97:60:df:b8:0f:70:20:ab:72:e3:06:17:5b:86: f3:57:a2:a6:b8:96:d8:e7:dd:0f:4a:2a:93:1a:10: c8:46:d2:70:1c:d3:80:e5:12:f1:0c:c6:e8:27:bc: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2F:9A:95:A1:30:EC:4F:B8:D8:A7:2F:57:05:BD:97:C5:E0:39:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1c:30:76:88:0f:ff:23:00:12:8d:22:f2:8b:4b:62:8d:36: 9e:61:3c:ad:75:e7:90:4d:44:22:3f:02:3b:25:1f:2e:b0:5e: 75:a1:08:34:f7:cf:ad:7c:5b:91:a4:a4:c7:de:7b:44:17:31: 8c:e6:d5:c0:39:cd:79:fc:bf:d6:1d:ed:c2:8b:b2:c8:ad:12: ec:29:d7:11:52:f9:df:25:a0:29:3f:b9:22:b1:46:cb:6c:5a: 8f:98:87:9a:5f:f8:52:2d:17:22:e7:56:c2:7c:a1:dd:61:d3: 69:69:ca:3e:c3:f1:b8:8a:f7:fe:87:a8:59:89:0d:63:4b:3e: 5c:a3:04:b9:9d:27:a9:26:2f:54:a4:cf:ff:0a:4f:e1:6f:c2: 04:67:71:48:98:40:35:92:89:a7:05:35:ec:1b:0f:16:81:5a: 62:0e:b3:3f:ca:86:78:93:38:55:15:be:16:7b:ed:25:13:9e: 15:f3:4e:1e:43:99:61:c5:5e:a7:ae:b0:d4:97:3c:f8:95:36: a8:5a:ad:c2:36:c2:e4:b2:0f:cc:a7:b6:88:0d:3d:bf:6a:4f: 5f:9e:9c:0f:31:97:18:ba:66:ef:fc:25:13:68:8a:15:04:cd: ff:55:d3:e3:32:c1:ae:0d:8a:0d:32:90:7f:7c:4d:de:24:09: 42:c0:4e:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IlQxMrS0kObW8+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI2MDMyNTA4MDAwNFoXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk YTA1YzIwYTEtY2Y2Ny00NjhhLWI5YjAtYzg2OTRiY2JmMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsocib0Jmr22K2Y8DCorbA2r1dt3r8evQaXSH rT7vtm3/b1DupaqwOT+NcrAgTHCE3JiD9PG7OxiR0pPUAWu9wfKcBkdNJUsWGNX2 C6PUtEz3nQG1XoxkX1qYZ7/lhw3zHmKFnglTqYcN/v5DqpmYqjAOKuC/OuTxoA2H PyJpQVOWZ39TIIkBDa5L3FweVF52HiLmYN+FFL3H88HZsqF1+v7Zhiuy7/ge+7Qy YfXmngPupcrOTCZ5p3KiWDoQB8JjEKHVtl/65/tpSFkz17QDsxkll2DfuA9wIKty 4wYXW4bzV6KmuJbY590PSiqTGhDIRtJwHNOA5RLxDMboJ7xphwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDAvmpWhMOxPuNinL1cFvZfF4DlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeHDB2iA//IwASjSLyi0ti jTaeYTytdeeQTUQiPwI7JR8usF51oQg098+tfFuRpKTH3ntEFzGM5tXAOc15/L/W He3Ci7LIrRLsKdcRUvnfJaApP7kisUbLbFqPmIeaX/hSLRci51bCfKHdYdNpaco+ w/G4ivf+h6hZiQ1jSz5cowS5nSepJi9UpM//Ck/hb8IEZ3FImEA1komnBTXsGw8W gVpiDrM/yoZ4kzhVFb4We+0lE54V804eQ5lhxV6nrrDUlzz4lTaoWq3CNsLksg/M p7aIDT2/ak9fnpwPMZcYumbv/CUTaIoVBM3/VdPjMsGuDYoNMpB/fE3eJAlCwE7m -----END CERTIFICATE-----Generated at Thu Mar 26 05:06:56 2026 by rpki-client