$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft File: 2d723287-d624-4178-939e-a7d8be3facc5.mft (raw, json) Hash identifier: n8dr/1nSBfaLiXF0Hj2pfgclvZIQ3emRxUNDxxAXNZA= Subject key identifier: DB:01:35:A5:27:E7:4C:E3:E3:5A:C5:E4:F1:FC:AA:0D:DC:8E:C3:A8 Authority key identifier: 60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5 Certificate issuer: /CN=2d723287-d624-4178-939e-a7d8be3facc5 Certificate serial: 010D0C9F4328584D49A11180128D4D225AC1A6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft Manifest number: 010D0C9F4328584073A81E1FAD6217E20A6FEF35 Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 2d723287-d624-4178-939e-a7d8be3facc5.crl (hash: M55H8ZSYBu6cUUOPSsK1CejvvNxS7NS3+xdkgcKE26o=) 2: d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa (hash: nSIywCT2vSvfmRdPaXX55/HOHSIZmRlfGkM3RS5jN8s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:11:80:12:8d:4d:22:5a:c1:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d723287-d624-4178-939e-a7d8be3facc5 Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=0fc86b1e-df70-4f67-b4b4-60cce41f2bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:8c:79:bd:14:64:97:4e:b0:7e:72:23:65: 28:0a:8a:ce:ab:ad:43:ab:8b:28:a9:f1:aa:04:47: bb:aa:a8:64:8b:e9:9f:4e:eb:9a:44:56:af:ae:af: 56:62:e7:84:4b:d2:5e:d0:cc:a0:b1:e9:9a:b5:bb: e5:a6:de:64:c9:5e:f8:c3:fd:0e:28:df:d9:16:b6: 89:8b:76:22:10:a2:33:0e:a4:c9:6c:38:29:bc:ee: 31:33:18:65:f2:02:bb:f2:3d:72:61:04:98:6c:b7: 6a:05:32:3a:31:ee:27:75:2d:17:f7:0a:26:5f:0a: 8a:7a:41:3f:05:9f:c3:77:76:a8:f2:a9:3e:5f:10: 76:98:50:62:cc:39:f0:bb:07:0b:b1:5f:b2:4e:03: 47:46:c1:15:41:28:70:5b:41:36:e9:f8:99:c3:8f: 51:5c:d8:84:ca:98:40:06:e0:3f:bc:eb:eb:66:c3: 32:23:d9:4b:ae:21:b4:b1:ef:f1:ba:4e:66:8c:df: e8:81:d1:c1:49:7e:36:72:c2:76:e5:30:99:aa:e9: 67:02:17:2a:6e:0b:23:bc:03:93:34:7c:99:f0:a3: bf:e5:7f:94:e7:7a:b1:e7:43:d5:e4:dc:3f:5f:95: ee:b7:86:a2:92:75:63:49:fc:a6:d8:14:b8:2b:6b: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:35:A5:27:E7:4C:E3:E3:5A:C5:E4:F1:FC:AA:0D:DC:8E:C3:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl X509v3 Authority Key Identifier: keyid:60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fb:c2:81:66:0b:92:21:49:e6:45:56:38:f2:c8:06:92:e0: 20:a6:ea:52:76:61:f5:63:b3:34:64:ff:0e:01:25:67:3d:e2: 07:74:fd:cd:93:32:05:ce:49:3f:6d:47:50:45:45:87:d9:8a: fa:c7:93:23:7d:3f:06:ab:f7:fc:3b:9c:e0:49:21:30:36:77: 40:2e:83:01:90:79:4c:e8:49:d6:4f:64:99:97:7f:65:61:28: 89:79:0d:cb:ea:65:9f:3a:d8:34:c4:73:85:10:00:c2:b5:69: 71:13:8d:be:2b:64:69:a5:be:84:02:0b:19:fd:4d:5b:05:01: cb:d3:c3:ab:fc:0f:79:a5:f9:fd:57:1d:b1:b7:a2:51:0a:e1: 33:84:89:6c:47:f6:6e:bc:f7:2a:28:41:be:f5:35:f7:b1:ce: 27:07:64:24:83:59:4f:3d:a7:be:c5:f8:72:23:7c:89:38:98: 03:05:12:84:87:59:9b:fe:25:b2:ec:ca:0d:77:3b:3b:60:46: d7:a5:76:5a:61:cf:21:11:28:b1:3d:0f:a2:b3:1b:01:f0:12: a7:a7:5e:fa:d3:4d:73:01:07:e1:c5:59:32:17:ea:1e:fa:2d: 8a:24:a8:20:d1:bb:0b:ab:e5:16:75:51:1a:08:f0:ab:f1:d7: e7:16:70:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoRGAEo1NIlrBpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ3MjMyODctZDYyNC00MTc4LTkzOWUtYTdkOGJlM2Zh Y2M1MB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk MGZjODZiMWUtZGY3MC00ZjY3LWI0YjQtNjBjY2U0MWYyYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNqMeb0UZJdOsH5yI2UoCorOq61Dq4soqfGq BEe7qqhki+mfTuuaRFavrq9WYueES9Je0Mygsematbvlpt5kyV74w/0OKN/ZFraJ i3YiEKIzDqTJbDgpvO4xMxhl8gK78j1yYQSYbLdqBTI6Me4ndS0X9womXwqKekE/ BZ/Dd3ao8qk+XxB2mFBizDnwuwcLsV+yTgNHRsEVQShwW0E26fiZw49RXNiEyphA BuA/vOvrZsMyI9lLriG0se/xuk5mjN/ogdHBSX42csJ25TCZqulnAhcqbgsjvAOT NHyZ8KO/5X+U53qx50PV5Nw/X5Xut4aiknVjSfym2BS4K2viYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNsBNaUn50zj41rF5PH8qg3cjsOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDcy MzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4YmUzZmFjYzUvMmQ3MjMyODctZDYyNC00 MTc4LTkzOWUtYTdkOGJlM2ZhY2M1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ3MjMyODctZDYyNC00MTc4LTkz OWUtYTdkOGJlM2ZhY2M1LzJkNzIzMjg3LWQ2MjQtNDE3OC05MzllLWE3ZDhiZTNm YWNjNS5jcmwwHwYDVR0jBBgwFoAUYP5Vqphf36l3O/uBP1OeYAqlpdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDcyMzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4 YmUzZmFjYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE+8KBZguSIUnmRVY48sgG kuAgpupSdmH1Y7M0ZP8OASVnPeIHdP3NkzIFzkk/bUdQRUWH2Yr6x5MjfT8Gq/f8 O5zgSSEwNndALoMBkHlM6EnWT2SZl39lYSiJeQ3L6mWfOtg0xHOFEADCtWlxE42+ K2Rppb6EAgsZ/U1bBQHL08Or/A95pfn9Vx2xt6JRCuEzhIlsR/ZuvPcqKEG+9TX3 sc4nB2Qkg1lPPae+xfhyI3yJOJgDBRKEh1mb/iWy7MoNdzs7YEbXpXZaYc8hESix PQ+isxsB8BKnp176001zAQfhxVkyF+oe+i2KJKgg0bsLq+UWdVEaCPCr8dfnFnD2 -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:53 2026 by rpki-client