$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: TVnULxOu2WRzC4VpN9j0GMGzLHMVZv+stkjWsa+jADo= Subject key identifier: 2C:59:96:A3:26:23:75:9B:FA:F6:9A:4D:A6:02:A6:4A:3F:C2:08:A5 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584D49658158BBC7C1E267667680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C6F0 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: T5bE2jdoXq+Ag+DvvWh0qdrIgjObbWOU8T1nsQt7/hw=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: 7nepRk7aSVu2mmP7j4iNHYLOvrSnqfXQrEjeDgUblXI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:81:58:bb:c7:c1:e2:67:66:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=32992447-36e1-4ab4-93d7-5eb2a81b32b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:75:52:8e:c4:51:7b:88:86:a5:4b:6b:de: 2b:51:94:9a:82:46:86:ab:0d:4e:28:ee:06:2a:0b: 50:ea:9a:f7:fc:05:1e:a3:f2:21:8d:55:80:66:61: 0e:1f:80:1b:26:0e:e1:d3:b5:fa:9b:de:6a:03:d0: 81:52:05:63:15:51:54:c7:ec:aa:68:94:e5:86:bb: ee:66:cc:a1:8b:52:99:e2:a6:a2:11:bb:b9:ca:a3: 50:37:de:fe:47:75:6f:95:d7:bc:aa:e9:39:8b:d4: ab:97:12:77:a8:d7:62:61:72:8c:5a:ce:d8:41:bd: 3a:d3:3f:93:a7:2a:4e:8c:2a:35:c4:1b:bd:60:8d: 72:9f:71:f7:7f:a1:ec:84:0c:cb:5a:74:60:23:c6: 6e:16:06:7c:d8:3d:c5:5b:8a:16:d4:ec:7e:47:6a: 03:e5:93:51:99:b8:ef:f2:aa:a7:50:ee:13:7c:b5: 3f:3f:49:a5:8e:c1:b0:89:b1:f1:b9:bc:a9:c3:25: 5c:63:7e:72:91:3b:e5:14:f9:88:c7:03:9f:74:d7: 66:d5:e5:25:07:ff:91:3e:09:95:5f:a7:8d:e4:64: ab:e8:1c:8c:1e:5c:e0:03:d7:22:d8:8c:fe:a5:4e: b7:42:ce:3e:c3:a0:71:eb:64:93:98:75:5b:91:ef: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:59:96:A3:26:23:75:9B:FA:F6:9A:4D:A6:02:A6:4A:3F:C2:08:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:92:20:62:1b:89:8a:89:2c:49:81:50:29:72:95:8b:b2:c4: 57:82:00:18:5f:0f:b8:c5:41:af:8a:43:9b:00:52:0e:4e:fd: 64:06:34:9e:85:ef:c7:42:c1:b9:05:36:56:b5:4b:77:dc:d0: 4b:aa:93:74:dd:5c:6b:1e:3c:2d:82:39:f8:34:df:cd:57:7a: 30:20:de:2c:e2:f7:1e:96:12:47:24:49:b3:83:cb:7b:c2:62: c4:1d:9d:17:2d:f3:85:22:95:28:09:20:0b:73:da:d1:da:6a: 30:44:5c:68:9a:b5:bd:1d:1c:46:9a:83:a1:70:c8:92:92:c2: 51:72:53:5c:9d:37:e4:03:52:e7:19:93:b2:4a:88:ee:d0:46: c5:8c:f3:e1:fd:54:74:59:b5:62:7e:cb:6c:13:ea:f3:fd:5e: 61:82:e9:8e:f7:ee:1f:db:2b:d5:79:fa:36:62:2d:01:ef:e2: c2:8c:2d:d1:7f:e6:6a:6e:3c:85:64:eb:1f:72:c3:ec:17:6f: 97:7f:96:fa:27:5b:75:eb:ca:4f:38:15:4a:ad:2e:a6:33:b8: cb:f5:04:12:35:79:84:00:09:9f:b0:a8:c4:0d:e8:5b:dd:0a: fa:7c:60:4c:fa:9a:95:11:e0:79:26:3c:19:48:08:68:fa:01: 2f:d0:2d:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYFYu8fB4mdmdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk MzI5OTI0NDctMzZlMS00YWI0LTkzZDctNWViMmE4MWIzMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kx1Uo7EUXuIhqVLa94rUZSagkaGqw1OKO4G KgtQ6pr3/AUeo/IhjVWAZmEOH4AbJg7h07X6m95qA9CBUgVjFVFUx+yqaJTlhrvu Zsyhi1KZ4qaiEbu5yqNQN97+R3Vvlde8quk5i9SrlxJ3qNdiYXKMWs7YQb060z+T pypOjCo1xBu9YI1yn3H3f6HshAzLWnRgI8ZuFgZ82D3FW4oW1Ox+R2oD5ZNRmbjv 8qqnUO4TfLU/P0mljsGwibHxubypwyVcY35ykTvlFPmIxwOfdNdm1eUlB/+RPgmV X6eN5GSr6ByMHlzgA9ci2Iz+pU63Qs4+w6Bx62STmHVbke89rQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxZlqMmI3Wb+vaaTaYCpko/wgilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUkiBiG4mKiSxJgVApcpWL ssRXggAYXw+4xUGvikObAFIOTv1kBjSehe/HQsG5BTZWtUt33NBLqpN03VxrHjwt gjn4NN/NV3owIN4s4vcelhJHJEmzg8t7wmLEHZ0XLfOFIpUoCSALc9rR2mowRFxo mrW9HRxGmoOhcMiSksJRclNcnTfkA1LnGZOySoju0EbFjPPh/VR0WbVifstsE+rz /V5hgumO9+4f2yvVefo2Yi0B7+LCjC3Rf+ZqbjyFZOsfcsPsF2+Xf5b6J1t168pP OBVKrS6mM7jL9QQSNXmEAAmfsKjEDehb3Qr6fGBM+pqVEeB5JjwZSAho+gEv0C1C -----END CERTIFICATE-----Generated at Thu Mar 26 00:34:58 2026 by rpki-client