$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft File: 685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft (raw, json) Hash identifier: dx9grvtgIB+Lm6Vo/8gtak54T5OYQZQGFzh2jY/ajDo= Subject key identifier: A0:BF:76:09:89:F0:96:FA:61:EC:EF:DA:C5:3D:EE:B3:FB:16:1D:6F Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D Certificate issuer: /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Certificate serial: 010D0C9F4328584D47E26168E3A6C9D93C377800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft Manifest number: 010D0C9F432858453619FCACDB1F8697F3D6BD3C Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa (hash: b1QVUHh8c76nmJDkQAepFMrMhaBrGcy57UZCuMd/vkY=) 2: 685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl (hash: bIY2ACS6vSuh/KypWYRk9utrAeG069uKhU8wynSkgjs=) 3: 9ff35021-1a5a-37a7-8f79-b9c773e21707.roa (hash: SXbDknc1PUUGtvLB8f0ClRTjJWVPfAPPgXG7UrsFquI=) 4: d05ecd53-1b3b-395a-974f-fa27910a42aa.roa (hash: SG7drR0dhMmLyKzz5YTGtM6JwtK+nzLZNT4WsWPgUVU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:61:68:e3:a6:c9:d9:3c:37:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=dc4346bc-5942-49cd-89c5-92f9bb505508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b7:22:ac:f5:27:6e:cf:dd:8c:c4:bd:a4:81: 51:06:39:f8:57:26:b7:c6:57:71:42:08:23:94:71: 6b:45:d3:15:20:c2:1c:cc:f2:c3:77:28:14:77:c3: c1:1e:ba:a7:77:4a:7e:b6:85:48:17:10:53:b3:3e: 78:f7:d0:b1:2b:52:fc:35:1b:63:18:19:30:a1:84: 69:cb:23:6d:cd:49:f3:dc:a0:0b:67:41:e7:e1:7b: 64:ac:2c:56:ef:d8:cd:ce:05:b6:4a:53:be:a0:df: db:58:04:18:62:02:a0:84:f4:43:fa:40:a8:3a:27: 09:3f:42:28:bb:bc:c6:df:44:11:08:32:77:f8:09: 04:14:97:a9:11:ba:fd:16:40:2b:ce:a3:6d:3b:a6: 9c:fe:f9:f3:19:d1:df:13:5c:36:2e:d0:45:71:e8: c9:7b:fa:d9:4f:1d:b0:bd:5c:cf:79:90:6b:6b:3e: ad:63:19:3f:4f:f4:f4:76:49:e1:6f:61:da:8e:b2: 77:a2:1f:b3:0c:fc:0f:4f:39:dd:e6:87:76:9f:20: e8:e5:73:bc:79:11:48:cd:0a:6e:5d:a9:21:eb:a7: ee:f1:fd:bd:6a:19:01:d3:2f:4d:8c:fc:eb:8d:a7: ed:34:6b:73:dc:a0:84:dc:0b:6e:89:8e:4e:0d:2e: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:76:09:89:F0:96:FA:61:EC:EF:DA:C5:3D:EE:B3:FB:16:1D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl X509v3 Authority Key Identifier: keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8e:23:d1:2b:e0:76:28:06:cc:93:35:ff:ff:e5:63:ad:45: e8:47:ad:0a:44:1c:d2:22:de:57:ea:50:01:be:a1:d3:a1:01: 23:44:7d:46:bb:e2:83:66:0c:74:bd:3d:1c:0c:27:a8:1a:7f: 9a:36:be:73:c0:48:9a:58:b7:be:0e:ae:5d:5c:7a:a6:85:01: c8:a2:53:63:32:3d:11:ce:5d:4b:73:0e:a1:b1:1f:e1:4e:f8: 29:89:be:29:54:ce:2e:61:2b:1e:fc:df:fe:da:2c:45:bf:29: 43:26:78:37:2d:6c:78:75:08:96:78:6c:9d:38:71:8b:5b:d1: ec:88:00:1b:57:f0:5e:c4:f1:14:ba:d2:bc:f9:2a:25:76:6c: 1b:c9:1e:fb:bb:85:14:31:27:b8:c1:5e:b1:92:26:ca:9a:a9: 60:43:3f:19:13:17:05:91:6d:97:f6:2f:b0:49:80:ab:08:83: ac:49:38:62:57:59:b0:6e:b8:c4:b8:d2:45:5b:98:e2:4e:cb: c8:3b:9b:b7:e4:9c:3b:31:6d:f0:bc:37:0f:f7:3d:31:4d:a9: 8e:34:ac:ee:60:9d:e2:34:63:8d:ab:35:05:d2:9f:04:bc:54: 04:9a:28:90:7d:b1:94:8b:e7:a1:37:4e:2f:d9:31:1d:f0:46: 4b:3f:a0:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4mFo46bJ2Tw3eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MTAwZjktM2IyOC00ZWY0LWIyYzItY2YzMjdkOTgz OWQ2MB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk ZGM0MzQ2YmMtNTk0Mi00OWNkLTg5YzUtOTJmOWJiNTA1NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibcirPUnbs/djMS9pIFRBjn4Vya3xldxQggj lHFrRdMVIMIczPLDdygUd8PBHrqnd0p+toVIFxBTsz5499CxK1L8NRtjGBkwoYRp yyNtzUnz3KALZ0Hn4XtkrCxW79jNzgW2SlO+oN/bWAQYYgKghPRD+kCoOicJP0Io u7zG30QRCDJ3+AkEFJepEbr9FkArzqNtO6ac/vnzGdHfE1w2LtBFcejJe/rZTx2w vVzPeZBraz6tYxk/T/T0dknhb2HajrJ3oh+zDPwPTznd5od2nyDo5XO8eRFIzQpu Xakh66fu8f29ahkB0y9NjPzrjaftNGtz3KCE3AtuiY5ODS6MNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKC/dgmJ8Jb6Yezv2sU97rP7Fh1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ODUx MDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMyN2Q5ODM5ZDYvNjg1MTAwZjktM2IyOC00 ZWY0LWIyYzItY2YzMjdkOTgzOWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjg1MTAwZjktM2IyOC00ZWY0LWIy YzItY2YzMjdkOTgzOWQ2LzY4NTEwMGY5LTNiMjgtNGVmNC1iMmMyLWNmMzI3ZDk4 MzlkNi5jcmwwHwYDVR0jBBgwFoAUixKCgpxJcnhlLMRCbyeEoVgGCw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ODUxMDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMy N2Q5ODM5ZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMjiPRK+B2KAbMkzX//+Vj rUXoR60KRBzSIt5X6lABvqHToQEjRH1Gu+KDZgx0vT0cDCeoGn+aNr5zwEiaWLe+ Dq5dXHqmhQHIolNjMj0Rzl1Lcw6hsR/hTvgpib4pVM4uYSse/N/+2ixFvylDJng3 LWx4dQiWeGydOHGLW9HsiAAbV/BexPEUutK8+SoldmwbyR77u4UUMSe4wV6xkibK mqlgQz8ZExcFkW2X9i+wSYCrCIOsSThiV1mwbrjEuNJFW5jiTsvIO5u35Jw7MW3w vDcP9z0xTamONKzuYJ3iNGONqzUF0p8EvFQEmiiQfbGUi+ehN04v2TEd8EZLP6Cp -----END CERTIFICATE-----Generated at Thu Mar 26 00:13:00 2026 by rpki-client