$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft File: 0499e690-23fd-496a-a697-cd290d3127f5.mft (raw, json) Hash identifier: QTFjjQ7Ks5fHJ9hcd6eJQS9rLzOYYVoEsF5MFyOy0QQ= Subject key identifier: A0:E5:D0:4D:3F:B3:2F:69:93:0E:18:08:F3:9F:AD:B5:CF:77:65:1C Authority key identifier: DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C Certificate issuer: /CN=0499e690-23fd-496a-a697-cd290d3127f5 Certificate serial: 010D0C9F4328584D49834661B05A8145C6B98D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft Manifest number: 010D0C9F43285845F2A4FA22127B84E8C06B5032 Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 0499e690-23fd-496a-a697-cd290d3127f5.crl (hash: OEiw4GYbRAA8TSe9m4RFpDn1KwnYZ/lcKlyAAClAFF8=) 2: 62e3aae7-d67e-33d5-8a5d-16320c5b1c17.roa (hash: 10uugvt7cLp6i7n9g+NZ5Gx0vrBy+AH+wywxrEEAnNA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:46:61:b0:5a:81:45:c6:b9:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0499e690-23fd-496a-a697-cd290d3127f5 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=6c3577fb-12a3-42c3-ab69-7500c66a50a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:6f:1a:c1:1b:2f:b1:b7:60:83:26:2a:8f: af:60:0a:f7:94:44:2f:c8:e7:db:aa:ff:2f:e7:6d: 32:7f:30:ae:1b:ea:bd:b2:ea:34:26:79:da:ec:40: 95:af:ab:f4:fa:08:14:d8:5b:4b:6f:df:23:b8:07: dd:14:1e:a4:c2:b8:6d:88:af:e2:9e:67:22:e8:d7: 9e:d5:64:28:d9:ab:4a:ce:f9:7b:47:50:80:65:4d: 6a:12:6b:4a:81:79:78:ef:47:e0:4b:e7:da:37:a9: cf:8a:2d:59:db:6c:87:18:63:81:6b:75:76:f2:27: c5:da:32:68:0a:3f:1e:36:76:7c:f8:34:4e:d6:79: cf:76:0d:b1:c1:f4:00:5c:4f:57:9f:52:27:4e:45: 96:49:18:18:91:d8:25:f9:e7:22:2f:1e:82:f1:c2: 9d:1e:b2:5e:5c:9f:4b:45:00:ca:af:ed:21:b4:0c: 9d:77:9c:74:b4:f3:ea:3f:77:3b:de:81:c7:6e:83: c8:0d:21:b9:31:00:2d:5e:9b:5b:e8:b8:9c:31:75: 35:94:0c:e9:15:f9:0e:e0:0d:6c:06:78:a0:51:44: 59:9b:65:9b:5e:46:87:94:46:5c:09:ee:d7:0f:9c: 29:aa:f2:1a:01:a8:07:1c:de:09:a0:92:52:41:9d: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:D0:4D:3F:B3:2F:69:93:0E:18:08:F3:9F:AD:B5:CF:77:65:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl X509v3 Authority Key Identifier: keyid:DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:35:0a:e3:d2:69:90:ad:87:16:f1:fa:69:7f:27:f6:aa:b0: 2e:e2:00:3b:37:26:d8:6f:f5:9c:9c:da:18:84:da:e6:a3:dc: dd:bd:29:c6:bc:a2:c5:53:c7:5b:e4:aa:fc:05:b2:11:4f:a8: 39:0e:4e:20:6e:14:a6:cc:e9:25:bb:d7:1e:3e:c5:2e:a7:e4: 8c:84:67:73:67:1d:94:76:cb:bf:bd:f3:b2:69:74:d0:a3:12: 38:cd:f0:5e:d4:e3:34:98:61:98:70:45:4f:00:c7:08:be:51: d0:d8:f2:16:8f:2e:ab:43:4a:83:a9:ee:45:0d:1a:1a:1c:6d: 19:a7:0d:54:dc:8d:94:86:74:9b:19:2f:f7:d2:e2:80:e6:c7: 00:dd:63:ff:60:62:63:da:46:35:78:fa:d0:b9:b5:2e:fb:7a: d4:ac:68:3d:6f:89:dc:2e:fe:85:22:d9:49:77:6c:1c:1d:32: fd:7d:d5:39:94:69:08:b6:ca:ac:28:6b:7d:a5:4e:e6:9d:92: 9a:55:7e:86:98:17:5e:5f:07:d5:a2:35:6e:c7:30:bf:ee:54: 24:3b:d5:ba:c5:02:2e:db:56:e6:5f:20:23:25:58:2d:cb:05: ce:1a:5a:9b:ab:e8:82:1a:a6:fd:c8:30:55:23:c7:fb:2e:11: a6:1c:40:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0ZhsFqBRca5jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ5OWU2OTAtMjNmZC00OTZhLWE2OTctY2QyOTBkMzEy N2Y1MB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk NmMzNTc3ZmItMTJhMy00MmMzLWFiNjktNzUwMGM2NmE1MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLdvGsEbL7G3YIMmKo+vYAr3lEQvyOfbqv8v 520yfzCuG+q9suo0Jnna7ECVr6v0+ggU2FtLb98juAfdFB6kwrhtiK/inmci6Nee 1WQo2atKzvl7R1CAZU1qEmtKgXl470fgS+faN6nPii1Z22yHGGOBa3V28ifF2jJo Cj8eNnZ8+DRO1nnPdg2xwfQAXE9Xn1InTkWWSRgYkdgl+eciLx6C8cKdHrJeXJ9L RQDKr+0htAydd5x0tPPqP3c73oHHboPIDSG5MQAtXptb6LicMXU1lAzpFfkO4A1s BnigUURZm2WbXkaHlEZcCe7XD5wpqvIaAagHHN4JoJJSQZ3RUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKDl0E0/sy9pkw4YCPOfrbXPd2UcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5 ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5MGQzMTI3ZjUvMDQ5OWU2OTAtMjNmZC00 OTZhLWE2OTctY2QyOTBkMzEyN2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDQ5OWU2OTAtMjNmZC00OTZhLWE2 OTctY2QyOTBkMzEyN2Y1LzA0OTllNjkwLTIzZmQtNDk2YS1hNjk3LWNkMjkwZDMx MjdmNS5jcmwwHwYDVR0jBBgwFoAU2l8J0mVwJfrYhNuhc0YSUhBV3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5 MGQzMTI3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCNQrj0mmQrYcW8fppfyf2 qrAu4gA7NybYb/WcnNoYhNrmo9zdvSnGvKLFU8db5Kr8BbIRT6g5Dk4gbhSmzOkl u9cePsUup+SMhGdzZx2Udsu/vfOyaXTQoxI4zfBe1OM0mGGYcEVPAMcIvlHQ2PIW jy6rQ0qDqe5FDRoaHG0Zpw1U3I2UhnSbGS/30uKA5scA3WP/YGJj2kY1ePrQubUu +3rUrGg9b4ncLv6FItlJd2wcHTL9fdU5lGkItsqsKGt9pU7mnZKaVX6GmBdeXwfV ojVuxzC/7lQkO9W6xQIu21bmXyAjJVgtywXOGlqbq+iCGqb9yDBVI8f7LhGmHEDF -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:35 2026 by rpki-client