$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: /IEvgimuXzGl1cRVeNZN7hqeZNTmyvdK1n+8CDD9xak= Subject key identifier: E7:A1:18:69:47:11:CB:CD:D4:56:44:14:15:43:79:99:E7:A6:69:E2 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584D4EBF5ECF75789D939A511000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA7FE Signing time: Fri 27 Mar 2026 13:00:09 +0000 Manifest this update: Fri 27 Mar 2026 13:00:09 +0000 Manifest next update: Mon 30 Mar 2026 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: t+YZ0L8003+XIT+l2LdclhKvjDExo2bfUahSIk7Zgsc=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: sjqq4TtKL79h4xJwZK6H/K9jWE7VYvTSL7cT/c68z0E=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: Un/wsca/kduwZfT/iTJDSNv7G3Ne4B87o4ZocVmFH24=) 4: e4eb8e84-793c-33ec-9088-110eaf427f80.asa (hash: Y0e8ZTVF02sVUrA1ppPaEIt1VNWewS1PNOZCo0NoRbA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:5e:cf:75:78:9d:93:9a:51:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Mar 27 13:00:09 2026 GMT Not After : Mar 30 13:00:00 2026 GMT Subject: CN=b244f82d-e3f2-4056-bfd0-d13762fe103b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:4a:5f:20:f0:37:b0:1f:37:0a:4b:b5:4d: 8e:dc:e8:58:28:19:38:19:85:e8:48:67:d3:59:8f: a4:e3:ac:67:d6:d3:22:d6:d1:dc:91:28:6c:d4:dd: f5:00:f6:d8:15:4b:e6:ee:43:18:25:f1:c5:2d:ba: 9b:93:c1:0d:f2:c1:6b:4b:2e:01:d3:22:50:6f:28: 78:e5:bd:eb:8b:d8:ea:c8:de:67:a9:fa:59:5a:0f: 75:83:58:f3:80:4b:db:03:72:fa:66:83:46:65:3f: 93:ec:3b:b2:42:01:4f:8b:3c:d3:1c:55:ec:4b:f7: 2b:93:de:d1:41:f8:08:3b:d7:0e:a7:bf:34:a5:e2: e4:58:7a:0e:9a:56:bd:3c:fb:ac:f1:fe:19:4f:ef: 7a:cd:5d:78:64:0c:fe:aa:f2:78:34:b2:0c:eb:9c: 64:42:4c:03:2d:90:24:dd:0b:29:b2:0a:0d:10:f6: e7:76:97:6c:7d:de:a3:35:3d:45:0e:f8:0d:87:a9: 94:95:12:c9:87:be:39:71:94:86:f6:b6:2c:d7:ad: f3:8e:ed:2c:ef:82:03:62:43:64:b1:53:22:2a:b5: a4:da:7b:80:6c:f4:f2:ee:68:60:dd:26:60:64:f8: 56:15:8a:04:06:91:71:61:42:dd:18:9d:3b:a1:6f: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:18:69:47:11:CB:CD:D4:56:44:14:15:43:79:99:E7:A6:69:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:18:7a:52:65:a2:65:fc:6e:2b:52:74:e3:dc:0e:f4:35:9c: 1a:20:c5:ab:d0:46:b3:8f:c6:89:7a:6b:30:4a:03:80:ba:8d: 34:8d:d6:4c:80:75:83:16:5a:e0:fc:27:e0:ff:ce:81:5d:79: 68:aa:71:e7:e3:c0:1f:27:3a:7b:b9:74:d8:16:d8:85:19:d7: b7:1a:1d:6f:0a:15:be:9a:72:75:2c:7d:ae:8a:70:a0:d4:b1: 17:4c:11:58:49:73:31:12:07:ef:74:8d:fa:0b:b8:52:b7:a7: 55:1b:90:19:9f:59:99:c3:1f:dc:9c:be:8d:65:46:b4:8a:7f: a1:62:17:9a:35:20:97:2e:97:c1:0f:e4:4a:65:2f:a9:8a:31: d3:61:c6:6f:90:91:33:ae:42:b8:b1:47:b2:99:d4:bd:15:f1: 27:95:5c:f2:fb:3c:5f:81:91:05:4e:6b:27:5c:d9:3f:d7:05: 10:15:ea:17:02:f2:69:51:d4:68:d2:dd:0d:c9:57:9a:1d:0e: bb:f8:f0:c2:5c:9f:d4:af:ad:03:f9:f3:46:12:ec:26:bc:05: 0b:96:74:9d:4a:00:37:fb:e7:4b:23:fa:f8:81:76:42:8a:da: 65:66:5e:58:5d:ba:1a:07:b5:66:45:44:ab:5c:4d:e5:80:0c: a5:14:3f:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ov17PdXidk5pREAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDMyNzEzMDAwOVoXDTI2MDMzMDEzMDAwMFowLzEtMCsGA1UEAxMk YjI0NGY4MmQtZTNmMi00MDU2LWJmZDAtZDEzNzYyZmUxMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C5KXyDwN7AfNwpLtU2O3OhYKBk4GYXoSGfT WY+k46xn1tMi1tHckShs1N31APbYFUvm7kMYJfHFLbqbk8EN8sFrSy4B0yJQbyh4 5b3ri9jqyN5nqfpZWg91g1jzgEvbA3L6ZoNGZT+T7DuyQgFPizzTHFXsS/crk97R QfgIO9cOp780peLkWHoOmla9PPus8f4ZT+96zV14ZAz+qvJ4NLIM65xkQkwDLZAk 3QspsgoNEPbndpdsfd6jNT1FDvgNh6mUlRLJh745cZSG9rYs163zju0s74IDYkNk sVMiKrWk2nuAbPTy7mhg3SZgZPhWFYoEBpFxYULdGJ07oW/hIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOehGGlHEcvN1FZEFBVDeZnnpmniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpGHpSZaJl/G4rUnTj3A70 NZwaIMWr0Eazj8aJemswSgOAuo00jdZMgHWDFlrg/Cfg/86BXXloqnHn48AfJzp7 uXTYFtiFGde3Gh1vChW+mnJ1LH2uinCg1LEXTBFYSXMxEgfvdI36C7hSt6dVG5AZ n1mZwx/cnL6NZUa0in+hYheaNSCXLpfBD+RKZS+pijHTYcZvkJEzrkK4sUeymdS9 FfEnlVzy+zxfgZEFTmsnXNk/1wUQFeoXAvJpUdRo0t0NyVeaHQ67+PDCXJ/Ur60D +fNGEuwmvAULlnSdSgA3++dLI/r4gXZCitplZl5YXboaB7VmRUSrXE3lgAylFD8y -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:54 2026 by rpki-client