$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft File: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft (raw, json) Hash identifier: 754xpB6CXHpvskPq0ymnn1zSWIPegIqDapppxPZUADw= Subject key identifier: 8D:C0:AD:0A:BF:F6:A1:CC:70:61:DA:5C:FB:6F:8A:D8:B2:EA:0E:E3 Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F4328584D48B2D3D915548C02118D0500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft Manifest number: 010D0C9F4328584073A84B5EB96B10DEBF636D29 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl (hash: LhVFbown3ZHsaV8jHYTc6bFsdsdSN+vp/oJm3xfE8io=) 2: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (hash: zY+nbPBlJ6+wRk2fJA6vwwO8yx629NYAsoww6vz9qkw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d3:d9:15:54:8c:02:11:8d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=abe89039-7908-4e3d-83b8-a7b002a91013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6d:02:5e:dc:5c:07:b8:38:00:9b:40:aa:71: 56:ce:ba:39:85:3e:29:86:50:dc:02:26:fa:89:1b: 38:7a:50:bf:b0:9d:8e:ad:f8:a6:48:40:d4:b8:47: b7:3b:13:f8:64:7f:94:f0:f5:38:8f:51:e0:15:68: 4c:24:84:6d:58:23:5e:fc:19:54:02:4a:85:5c:3c: 4f:62:eb:83:ea:52:13:45:bc:07:cb:22:23:b9:3b: ad:72:f2:2d:cd:90:ed:d6:fe:c8:cd:c0:d7:e8:6c: 68:ec:56:5b:09:17:1e:9c:c9:46:9d:cf:2c:ca:49: 9d:99:55:e6:59:97:66:2c:90:d8:c9:03:5c:5a:95: c3:15:0b:29:a0:33:a5:a9:74:a5:cd:50:85:52:04: ba:47:91:90:22:83:b7:38:0f:1b:25:1e:0c:29:9d: a1:a7:10:88:f7:d6:49:cb:0f:f5:48:9a:f1:bf:c1: 5e:b3:86:f0:21:09:92:ae:0f:e0:d7:8e:16:57:5a: a6:27:88:18:91:e9:fc:d8:23:99:fc:2e:c3:90:31: 03:8d:7c:d8:ff:43:27:6c:b4:81:b0:85:2b:ba:15: 0b:a5:df:fc:ac:d5:ad:ec:f2:b2:52:6d:26:d4:50: b6:11:e6:3f:d3:cc:bb:37:f7:78:64:4f:05:ba:80: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C0:AD:0A:BF:F6:A1:CC:70:61:DA:5C:FB:6F:8A:D8:B2:EA:0E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:18:c8:d5:da:84:63:69:da:0f:c1:3e:fd:31:b7:22:ae:2e: 02:75:3b:a2:48:c1:12:94:14:75:b4:b8:2f:b3:26:90:a5:5c: 4b:cf:80:a6:b2:78:dc:b9:62:66:88:b5:8a:c4:e0:03:10:34: 71:9f:93:8a:7d:29:3a:7b:9e:2c:6a:4d:0c:f5:4c:fc:4e:cc: 52:80:11:fc:d2:06:d0:56:a6:28:a6:d0:a8:6a:77:be:89:38: aa:77:be:2c:e4:13:15:6d:3b:fe:1d:8d:cc:dd:c4:2e:d9:e5: c1:14:4f:c9:9e:f4:26:52:7c:2b:b2:f7:73:00:9d:8d:15:3c: 89:5b:ac:59:c6:4f:f4:3c:40:57:03:f5:59:1e:97:b1:e6:6b: f2:20:e7:27:cb:75:c9:d8:89:e5:3c:5b:90:4e:a3:71:13:4f: 26:d0:b5:45:5a:e9:7c:7e:3e:51:36:63:05:db:3c:6a:b8:e7: c6:8b:53:6b:38:dd:c1:58:e0:5a:94:78:fe:9a:ff:05:e2:e0: 54:68:ed:08:36:ea:bc:0b:c4:a7:b0:c3:5b:f7:f0:36:a0:db: 43:22:3c:a7:33:16:df:85:03:f5:d7:51:80:87:a8:e2:2d:a2: 61:ed:76:09:a5:69:27:36:fa:34:1f:71:67:78:39:25:2f:ef: 1a:d1:37:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstPZFVSMAhGNBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk YWJlODkwMzktNzkwOC00ZTNkLTgzYjgtYTdiMDAyYTkxMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW0CXtxcB7g4AJtAqnFWzro5hT4phlDcAib6 iRs4elC/sJ2OrfimSEDUuEe3OxP4ZH+U8PU4j1HgFWhMJIRtWCNe/BlUAkqFXDxP YuuD6lITRbwHyyIjuTutcvItzZDt1v7IzcDX6Gxo7FZbCRcenMlGnc8sykmdmVXm WZdmLJDYyQNcWpXDFQspoDOlqXSlzVCFUgS6R5GQIoO3OA8bJR4MKZ2hpxCI99ZJ yw/1SJrxv8Fes4bwIQmSrg/g144WV1qmJ4gYken82COZ/C7DkDEDjXzY/0MnbLSB sIUruhULpd/8rNWt7PKyUm0m1FC2EeY/08y7N/d4ZE8FuoC6JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI3ArQq/9qHMcGHaXPtvitiy6g7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvMGE1YTg5MDktM2FhZi00 NGU4LWIwZDYtYzUwN2U1NTBkMDU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGGMjV2oRjadoPwT79Mbci ri4CdTuiSMESlBR1tLgvsyaQpVxLz4CmsnjcuWJmiLWKxOADEDRxn5OKfSk6e54s ak0M9Uz8TsxSgBH80gbQVqYoptCoane+iTiqd74s5BMVbTv+HY3M3cQu2eXBFE/J nvQmUnwrsvdzAJ2NFTyJW6xZxk/0PEBXA/VZHpex5mvyIOcny3XJ2InlPFuQTqNx E08m0LVFWul8fj5RNmMF2zxquOfGi1NrON3BWOBalHj+mv8F4uBUaO0INuq8C8Sn sMNb9/A2oNtDIjynMxbfhQP111GAh6jiLaJh7XYJpWknNvo0H3FneDklL+8a0Tem -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:49 2026 by rpki-client