$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft File: a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft (raw, json) Hash identifier: fmanaY5mmO+e1taABp78PVtAiTrQvVzCoxwn7O8M224= Subject key identifier: 05:67:A5:FA:F4:9F:62:F4:BB:FF:12:D4:BB:C1:91:B5:94:FE:8D:AC Authority key identifier: 12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26 Certificate issuer: /CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6 Certificate serial: 010D0C9F4328584D4A718E69806AF08AAC64D840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft Manifest number: 010D0C9F4328584073A832615F8ACBF3D0910C4A Signing time: Thu 26 Mar 2026 00:00:09 +0000 Manifest this update: Thu 26 Mar 2026 00:00:09 +0000 Manifest next update: Sat 28 Mar 2026 00:00:00 +0000 Files and hashes: 1: a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl (hash: WquPrZHXvXNFzXfLavfS3UNtNy0wU2Js4KfGsHpanP0=) 2: a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa (hash: hY6sfp7R2mAsy1gquPuUB/A4rzCFWuao41thux5pTBw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:71:8e:69:80:6a:f0:8a:ac:64:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6 Validity Not Before: Mar 26 00:00:09 2026 GMT Not After : Mar 28 00:00:00 2026 GMT Subject: CN=3898e154-1d75-4ffb-bb39-177ffd2a2fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:d9:12:2d:45:60:d9:72:c0:74:b0:37:3b: a5:24:f5:1b:a3:da:c6:69:50:c1:f7:b7:f1:3f:84: 61:3c:1d:19:2e:86:e4:9b:a8:7f:8e:a6:2a:92:3c: 43:07:d6:99:79:f8:c3:08:9b:34:49:d8:52:0d:f1: e0:a1:2c:bb:9b:fc:0f:14:74:21:7d:2c:63:c5:a8: 31:ef:44:69:8e:b3:2b:80:58:18:4c:27:9c:c7:24: 8d:ff:d6:10:e2:6a:9a:ac:45:e2:9e:bf:8f:09:6f: d6:72:3e:56:37:3e:7b:54:c3:9b:f1:58:19:c9:27: 00:30:52:8c:3e:2f:2d:25:93:b5:63:26:e3:b5:f4: 32:92:da:d3:7e:06:48:da:0a:41:6c:90:74:bc:1a: 12:cd:a3:1e:68:9e:f4:c6:ef:e9:2b:ea:fd:15:95: b3:aa:6c:ea:0f:a0:6f:e7:b6:57:87:cf:eb:0d:41: 0b:d6:e5:9b:dd:5c:e2:a6:3b:45:ac:09:c1:7c:e0: 35:97:e7:45:b1:17:a6:ad:1c:65:0d:77:08:3c:ff: 28:3c:99:38:65:11:d3:a2:d9:09:a5:60:c7:6e:cb: cb:77:89:d4:e0:28:33:f4:06:43:4a:35:df:50:0c: 1f:b1:4d:79:49:5f:0a:2c:b1:c0:52:92:bf:7f:f4: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:67:A5:FA:F4:9F:62:F4:BB:FF:12:D4:BB:C1:91:B5:94:FE:8D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl X509v3 Authority Key Identifier: keyid:12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:4e:fd:a3:78:4c:15:d8:90:e3:ba:74:9a:c2:ee:df:43:22: d7:2b:a1:e9:8f:ac:9a:1d:e4:70:cc:e9:c1:de:f7:72:7f:19: c3:a7:f5:6f:38:29:d4:94:cf:9b:c6:48:1e:15:79:a8:06:45: 41:89:0d:95:5e:2a:57:b4:6a:6a:b6:4a:fd:f5:4e:12:1d:25: 8b:21:f7:7b:a1:10:c7:50:e3:e4:23:1f:23:c1:de:65:10:0c: 00:56:12:47:fc:45:3c:17:95:63:2c:d0:19:49:a7:e7:20:27: af:26:6a:cc:eb:bf:c3:25:f7:30:f9:96:3a:43:86:bd:76:36: d5:2d:7f:bb:0f:03:a5:45:3f:0a:ef:eb:1f:21:97:79:a5:06: 96:6a:d5:73:e7:d8:84:72:4b:3c:99:74:02:54:bc:18:69:0e: f5:e0:42:32:e2:e7:c3:5a:10:96:51:69:89:fb:6a:1b:3f:1a: f6:0d:28:2e:15:78:8e:a1:66:7c:2f:f7:7e:5d:e5:20:e0:ee: c3:25:0d:24:e1:3b:b7:43:ee:da:5b:ef:3f:f7:8b:95:b1:7f: bb:bb:20:9f:e6:55:dc:6f:60:ba:da:b6:51:b1:7d:ae:ba:4e: 85:cc:d3:4c:eb:23:76:02:6d:38:3b:4d:1f:a0:b0:8b:94:38: 9a:fa:88:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KcY5pgGrwiqxk2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVkMjAyNDAtYTNkZC00ZWI3LWEzNzEtZWRlZjg3ZTc5 YmE2MB4XDTI2MDMyNjAwMDAwOVoXDTI2MDMyODAwMDAwMFowLzEtMCsGA1UEAxMk Mzg5OGUxNTQtMWQ3NS00ZmZiLWJiMzktMTc3ZmZkMmEyZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3/ZEi1FYNlywHSwNzulJPUbo9rGaVDB97fx P4RhPB0ZLobkm6h/jqYqkjxDB9aZefjDCJs0SdhSDfHgoSy7m/wPFHQhfSxjxagx 70RpjrMrgFgYTCecxySN/9YQ4mqarEXinr+PCW/Wcj5WNz57VMOb8VgZyScAMFKM Pi8tJZO1YybjtfQyktrTfgZI2gpBbJB0vBoSzaMeaJ70xu/pK+r9FZWzqmzqD6Bv 57ZXh8/rDUEL1uWb3VzipjtFrAnBfOA1l+dFsRemrRxlDXcIPP8oPJk4ZRHTotkJ pWDHbsvLd4nU4Cgz9AZDSjXfUAwfsU15SV8KLLHAUpK/f/RggQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAVnpfr0n2L0u/8S1LvBkbWU/o2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQy MDI0MC1hM2RkLTRlYjctYTM3MS1lZGVmODdlNzliYTYvYTVkMjAyNDAtYTNkZC00 ZWI3LWEzNzEtZWRlZjg3ZTc5YmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVkMjAyNDAtYTNkZC00ZWI3LWEz NzEtZWRlZjg3ZTc5YmE2L2E1ZDIwMjQwLWEzZGQtNGViNy1hMzcxLWVkZWY4N2U3 OWJhNi5jcmwwHwYDVR0jBBgwFoAUElcRMo3/G9vmXrOAbUw8Ybv1USYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQyMDI0MC1hM2RkLTRlYjctYTM3MS1lZGVm ODdlNzliYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDXTv2jeEwV2JDjunSawu7f QyLXK6Hpj6yaHeRwzOnB3vdyfxnDp/VvOCnUlM+bxkgeFXmoBkVBiQ2VXipXtGpq tkr99U4SHSWLIfd7oRDHUOPkIx8jwd5lEAwAVhJH/EU8F5VjLNAZSafnICevJmrM 67/DJfcw+ZY6Q4a9djbVLX+7DwOlRT8K7+sfIZd5pQaWatVz59iEcks8mXQCVLwY aQ714EIy4ufDWhCWUWmJ+2obPxr2DSguFXiOoWZ8L/d+XeUg4O7DJQ0k4Tu3Q+7a W+8/94uVsX+7uyCf5lXcb2C62rZRsX2uuk6FzNNM6yN2Am04O00foLCLlDia+og6 -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:32 2026 by rpki-client