$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.mft File: 29dba61f-e904-40c2-8cfb-7736efc12d29.mft (raw, json) Hash identifier: ufrcYq4L+BNN5M1M4WsInXcbJCmNmM3S88VpxgB33sI= Subject key identifier: 1C:18:D4:C0:D5:20:B0:F9:CB:BD:F3:9D:4F:7A:1B:4B:A1:1F:BE:CD Authority key identifier: 64:53:F2:1D:3A:14:91:76:15:5F:A7:79:44:3D:F0:6F:BA:7E:63:15 Certificate issuer: /CN=29dba61f-e904-40c2-8cfb-7736efc12d29 Certificate serial: 010D0C9F4328584D4A35F3438C752F30D3F50F50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.mft Manifest number: 010D0C9F4328584073A82A967227AA1A9BD44F65 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 29dba61f-e904-40c2-8cfb-7736efc12d29.crl (hash: /kwxVZWHx6f4MNHPvvIm/1ReYz64xYfyvquzbSwcCuc=) 2: 77ef46b3-b307-3643-91ed-99067bdd1762.roa (hash: dobTx6cz8Tbvb+0xC8cFUBXqXe0sSGLZYIAhSo5krhs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f3:43:8c:75:2f:30:d3:f5:0f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29dba61f-e904-40c2-8cfb-7736efc12d29 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=ba298318-e73b-4a57-abd0-028b9156b4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:87:82:52:65:c3:97:29:50:db:b6:5d:79: 93:97:a0:da:f5:bc:c9:a4:ac:f6:90:d3:dc:32:68: c7:13:17:df:df:47:57:b6:b8:ec:b5:ae:e7:2e:a5: 84:9c:19:90:79:2b:5e:75:e6:74:cc:a4:ff:4e:ff: 06:d2:45:54:ee:ae:98:bf:76:01:77:6b:5e:60:1b: e1:92:fd:88:b9:f8:6a:66:4e:b0:c9:ac:bf:a2:7f: 63:1f:e1:c0:21:0b:8d:dc:76:88:a0:75:62:c6:23: d8:81:64:22:26:c0:f7:ca:d6:a9:c1:58:85:5f:a8: ce:ac:1e:76:9b:b9:be:b9:1e:db:f2:75:6b:d1:79: 8e:f4:70:b9:bb:39:c6:04:d7:41:c3:9b:8a:c7:78: bc:c6:c9:cd:58:25:73:2a:76:d0:c0:49:d0:ee:9a: 97:bb:48:a3:51:96:95:d4:d8:d6:2e:9c:04:fe:a5: 9e:ba:85:4f:05:2a:a9:e5:15:d6:e0:b4:7c:f5:c7: 54:50:bb:a5:27:38:39:29:1e:f9:b3:68:50:1a:0a: 4a:8a:43:4e:01:33:b2:9d:7a:60:17:fd:a6:81:b5: 8f:a4:06:d0:c2:52:7d:a3:d7:2f:4a:4f:d8:8c:55: ff:ee:91:af:8c:db:4c:e0:82:2b:60:d9:8d:30:21: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:D4:C0:D5:20:B0:F9:CB:BD:F3:9D:4F:7A:1B:4B:A1:1F:BE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.crl X509v3 Authority Key Identifier: keyid:64:53:F2:1D:3A:14:91:76:15:5F:A7:79:44:3D:F0:6F:BA:7E:63:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:03:8b:aa:1c:11:ae:2b:c3:57:56:f1:7f:0c:75:58:88:7a: 05:c2:d3:c5:08:14:59:95:98:61:2b:a5:c2:ef:1b:ed:2d:c9: d6:c2:95:a1:07:e7:33:09:ff:7e:85:5c:2c:df:1b:22:d1:37: eb:f5:cb:2e:be:45:0a:f1:5a:49:95:8e:ee:fb:e3:23:e2:21: c5:96:cf:58:f6:48:d1:08:a9:ea:c7:1d:86:4c:37:68:63:fc: f1:e5:ec:46:4c:3b:1b:5e:4a:a6:84:50:85:6f:b7:5a:06:9a: 5e:da:29:b4:d3:50:40:08:b1:79:6f:b9:6f:29:1e:61:0d:10: d3:2e:51:35:23:43:26:ae:fe:ee:70:ab:f5:5e:8d:f0:59:74: fd:ce:a4:f9:b3:dd:e5:15:30:d3:c1:5b:5d:f6:9a:01:18:d6: 5f:f6:5e:43:b0:b4:4a:7a:b3:ad:82:36:b7:cb:b5:a8:22:2d: 6a:1c:a8:90:60:df:d5:e4:a3:7c:5f:23:cf:9d:22:21:b0:2c: a2:b8:0d:73:11:b1:fd:87:dc:d0:6e:f7:4f:d3:fb:23:97:89: 8b:29:68:78:a7:f2:7f:6d:26:2a:dd:11:77:e5:2c:40:26:14: 01:bf:f6:24:e9:4f:22:fe:35:b0:88:1d:1b:28:e9:dc:99:8d: 8e:fb:05:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfNDjHUvMNP1D1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkYmE2MWYtZTkwNC00MGMyLThjZmItNzczNmVmYzEy ZDI5MB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk YmEyOTgzMTgtZTczYi00YTU3LWFiZDAtMDI4YjkxNTZiNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4eHglJlw5cpUNu2XXmTl6Da9bzJpKz2kNPc MmjHExff30dXtrjsta7nLqWEnBmQeStedeZ0zKT/Tv8G0kVU7q6Yv3YBd2teYBvh kv2IufhqZk6wyay/on9jH+HAIQuN3HaIoHVixiPYgWQiJsD3ytapwViFX6jOrB52 m7m+uR7b8nVr0XmO9HC5uznGBNdBw5uKx3i8xsnNWCVzKnbQwEnQ7pqXu0ijUZaV 1NjWLpwE/qWeuoVPBSqp5RXW4LR89cdUULulJzg5KR75s2hQGgpKikNOATOynXpg F/2mgbWPpAbQwlJ9o9cvSk/YjFX/7pGvjNtM4IIrYNmNMCHLyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBwY1MDVILD5y73znU96G0uhH77NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWRi YTYxZi1lOTA0LTQwYzItOGNmYi03NzM2ZWZjMTJkMjkvMjlkYmE2MWYtZTkwNC00 MGMyLThjZmItNzczNmVmYzEyZDI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjlkYmE2MWYtZTkwNC00MGMyLThj ZmItNzczNmVmYzEyZDI5LzI5ZGJhNjFmLWU5MDQtNDBjMi04Y2ZiLTc3MzZlZmMx MmQyOS5jcmwwHwYDVR0jBBgwFoAUZFPyHToUkXYVX6d5RD3wb7p+YxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWRiYTYxZi1lOTA0LTQwYzItOGNmYi03NzM2 ZWZjMTJkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQA4uqHBGuK8NXVvF/DHVY iHoFwtPFCBRZlZhhK6XC7xvtLcnWwpWhB+czCf9+hVws3xsi0Tfr9csuvkUK8VpJ lY7u++Mj4iHFls9Y9kjRCKnqxx2GTDdoY/zx5exGTDsbXkqmhFCFb7daBppe2im0 01BACLF5b7lvKR5hDRDTLlE1I0Mmrv7ucKv1Xo3wWXT9zqT5s93lFTDTwVtd9poB GNZf9l5DsLRKerOtgja3y7WoIi1qHKiQYN/V5KN8XyPPnSIhsCyiuA1zEbH9h9zQ bvdP0/sjl4mLKWh4p/J/bSYq3RF35SxAJhQBv/Yk6U8i/jWwiB0bKOncmY2O+wVt -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:45 2026 by rpki-client