$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft File: d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft (raw, json) Hash identifier: vkthlaBdsTSvfR29GEBJscmr2hn0PEo73jxF9tBqaHQ= Subject key identifier: 76:2F:6E:90:27:90:75:88:21:90:15:8D:F5:35:D1:83:DA:3E:CA:3C Authority key identifier: 55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D Certificate issuer: /CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Certificate serial: 010D0C9F4328584D498349685D16A554F8B73380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft Manifest number: 010D0C9F4328584CD190BBC30317F60A7738ABDF Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 603b2d56-e402-3dc9-929d-35820f05f117.roa (hash: XkjPdK9Hs9seIqMToM7sOqCXLLaxoB28FRbfARk5OhM=) 2: 97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa (hash: buZkX3V2HVWwnyxFJtpwuYN5+MhZZbrZAgOLvBxRjXI=) 3: d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl (hash: MSLxp75avXdRW0jRRQq2omi27EeY9TX6AgDWm1ia5FM=) 4: ee735e45-69ad-35c3-bd95-4827b45d73bf.asa (hash: dFtNP8QPUv9ExaRY95mnVWMoyVtDjp8PI4ft0c0unl8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:49:68:5d:16:a5:54:f8:b7:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=95c9c6f6-bfab-41ec-8aef-27cb252662fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:a6:9b:53:5f:11:6c:d8:2f:71:85:59:11: ad:d9:6a:84:ad:86:21:ca:c1:dd:70:db:88:dc:36: ae:9f:49:01:ad:1e:e7:07:23:e8:6a:d6:e6:88:59: 89:de:43:0d:8f:f4:0a:13:ab:21:a0:d9:8f:1a:43: d2:6d:11:89:07:bf:54:e5:54:9c:82:70:34:5d:a0: 0f:10:29:bc:a1:93:fe:b8:e6:0d:bb:34:70:bd:ad: 5a:c7:d2:e9:37:8f:f5:8e:75:48:62:c8:d2:58:db: 31:4f:f4:f0:41:c0:6d:1f:65:94:5a:ab:8d:96:3b: 08:97:dd:62:5c:84:28:eb:1f:12:2d:2e:31:82:78: dd:35:f4:c5:e7:9d:d1:41:fc:58:18:f8:d8:8b:bb: cb:7e:b6:c9:44:d0:be:86:d7:11:7e:8d:55:8a:4b: fc:94:b1:6f:10:40:98:61:7f:f5:63:51:c6:72:10: 30:ec:0a:a5:06:ed:74:cb:6e:4a:99:d5:6d:19:c4: 2d:2a:3c:94:4f:2f:fa:d3:16:70:e3:03:74:b1:8e: cb:1b:31:4b:3c:17:8c:04:be:44:b4:f1:74:a7:53: a7:cc:77:bb:15:2f:82:63:14:7f:41:c4:06:a0:4c: 58:0b:ad:b2:02:d1:d4:dd:d5:27:93:78:ed:3c:61: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2F:6E:90:27:90:75:88:21:90:15:8D:F5:35:D1:83:DA:3E:CA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl X509v3 Authority Key Identifier: keyid:55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:47:87:a5:63:b1:2b:c2:cb:32:ba:ad:90:04:7b:c4:92:ef: 46:d8:83:15:2a:ac:77:95:7e:75:a8:f5:b0:d5:7a:8a:db:32: 41:8c:14:33:15:d0:73:f0:6f:11:5b:62:30:68:a6:15:3c:8b: 6b:ce:10:fd:82:dd:4e:8a:a3:46:9f:21:e3:37:75:bf:1a:cd: ad:60:b4:bd:7e:7e:94:fc:fb:50:52:6f:64:a3:3f:32:bb:32: 9d:73:3f:17:1f:ae:20:22:a0:17:33:4e:1e:29:37:97:46:63: 17:61:24:af:52:21:d5:3b:8e:cf:7e:d5:d6:b4:82:bc:af:89: ef:e3:bf:75:30:97:fe:de:fb:e6:a3:13:e1:5c:a9:9f:b8:59: 79:c6:2b:23:7a:bc:0d:e7:7e:cf:35:fa:6a:78:48:29:cb:5d: dd:73:dc:e4:c0:d4:05:90:d6:2a:33:63:18:d1:d3:38:b7:5d: 75:65:e3:c7:9f:5f:0f:26:c6:22:8f:2b:00:b6:0f:de:29:7f: 64:9a:66:40:24:91:8b:77:1c:02:9f:9f:ba:01:1f:b4:76:b9: f8:52:0c:07:55:c1:b6:76:17:78:b1:3a:1d:28:8f:60:71:12: f6:17:5c:14:4a:c4:4e:47:d6:7c:c4:71:95:00:58:ff:02:cf: 8e:db:35:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0loXRalVPi3M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlMjU4NjktZmIzNS00Yjc2LTgwNTMtMWI2YzUxYmQz YzNmMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk OTVjOWM2ZjYtYmZhYi00MWVjLThhZWYtMjdjYjI1MjY2MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkSmm1NfEWzYL3GFWRGt2WqErYYhysHdcNuI 3Daun0kBrR7nByPoatbmiFmJ3kMNj/QKE6shoNmPGkPSbRGJB79U5VScgnA0XaAP ECm8oZP+uOYNuzRwva1ax9LpN4/1jnVIYsjSWNsxT/TwQcBtH2WUWquNljsIl91i XIQo6x8SLS4xgnjdNfTF553RQfxYGPjYi7vLfrbJRNC+htcRfo1Vikv8lLFvEECY YX/1Y1HGchAw7AqlBu10y25KmdVtGcQtKjyUTy/60xZw4wN0sY7LGzFLPBeMBL5E tPF0p1OnzHe7FS+CYxR/QcQGoExYC62yAtHU3dUnk3jtPGE3iwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHYvbpAnkHWIIZAVjfU10YPaPso8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGUy NTg2OS1mYjM1LTRiNzYtODA1My0xYjZjNTFiZDNjM2YvZDhlMjU4NjktZmIzNS00 Yjc2LTgwNTMtMWI2YzUxYmQzYzNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhlMjU4NjktZmIzNS00Yjc2LTgw NTMtMWI2YzUxYmQzYzNmL2Q4ZTI1ODY5LWZiMzUtNGI3Ni04MDUzLTFiNmM1MWJk M2MzZi5jcmwwHwYDVR0jBBgwFoAUVcVcDO1F0T2Nkq4b+qqoF8u5150wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGUyNTg2OS1mYjM1LTRiNzYtODA1My0xYjZj NTFiZDNjM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADR4elY7Erwssyuq2QBHvE ku9G2IMVKqx3lX51qPWw1XqK2zJBjBQzFdBz8G8RW2IwaKYVPItrzhD9gt1OiqNG nyHjN3W/Gs2tYLS9fn6U/PtQUm9koz8yuzKdcz8XH64gIqAXM04eKTeXRmMXYSSv UiHVO47PftXWtIK8r4nv4791MJf+3vvmoxPhXKmfuFl5xisjerwN537PNfpqeEgp y13dc9zkwNQFkNYqM2MY0dM4t111ZePHn18PJsYijysAtg/eKX9kmmZAJJGLdxwC n5+6AR+0drn4UgwHVcG2dhd4sTodKI9gcRL2F1wUSsROR9Z8xHGVAFj/As+O2zW7 -----END CERTIFICATE-----Generated at Wed Mar 25 22:45:11 2026 by rpki-client