$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: hHfDLUertrD0ghUG88KdY+jyagZ5x2xE2mPuvLU3UB0= Subject key identifier: 42:17:EF:3F:FF:EF:0B:2E:E7:AA:58:FC:B0:A8:00:DE:1F:D3:25:FE Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584D4A183CE3928ACDF6551378E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079A98 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: eNhtNthPFKRheeIBRtqSf9+A7pkT6qV+MFQwEiz9ToY=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: jKC27pyMI/3aDf82xfTsk5FPxXSQsYlEaHhsl553p0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3c:e3:92:8a:cd:f6:55:13:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=2525a977-2569-46ac-9b3d-5ba9409b410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:d0:b8:41:d0:2f:42:b9:d1:2a:d9:4a:ce: 23:76:50:e0:72:83:e8:21:5a:5c:ba:c6:2e:89:7e: bb:df:47:76:20:dd:bf:ea:a6:3c:41:f8:e3:c2:ea: e6:a1:81:a0:03:ea:e6:9c:6b:82:de:7d:a7:bc:fe: 8c:7f:cd:a6:c4:64:26:87:26:fc:4c:93:bd:a0:06: 2a:03:98:c2:fc:3f:dc:02:5b:f7:d9:f6:2f:60:b4: 1a:29:d1:15:69:0e:80:98:d7:da:1d:48:8c:4a:18: 37:e2:a5:b3:8d:68:d4:83:d8:5d:f6:34:ab:d3:f8: 8a:bb:36:89:0e:d9:5a:7d:de:49:69:d3:8a:bd:64: 9e:e3:0d:51:6e:e4:c0:f4:91:bf:92:75:12:69:5c: f9:57:58:53:1c:63:1a:ba:cd:75:5f:a4:88:e7:c0: b3:52:da:e9:9a:e5:e0:35:cd:45:04:f0:5d:f4:79: 33:4b:8a:12:69:4c:cf:f7:d2:94:5a:24:88:78:e0: e0:3b:91:ec:11:6e:00:b0:0c:ea:c3:53:4d:9e:85: ac:82:5f:c2:6e:28:7e:c7:39:5b:4f:3a:51:36:46: 00:72:78:9d:cd:62:92:f2:ce:a9:9d:f0:7d:a4:38: e8:2a:ae:d8:40:e0:3a:b4:e2:fa:39:0e:9f:4b:48: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:17:EF:3F:FF:EF:0B:2E:E7:AA:58:FC:B0:A8:00:DE:1F:D3:25:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fc:55:6b:3b:16:50:78:f3:16:1e:2a:63:97:8b:dd:95:cf: 19:b2:6f:8a:77:ba:9f:db:96:ff:21:3f:b3:76:6e:7a:1a:ad: e4:fc:f3:70:3c:d7:89:52:6d:51:bb:00:e8:da:03:53:c6:62: 73:e0:ec:49:bb:26:4c:c8:6c:6a:23:f8:6b:39:0a:e2:92:20: c5:07:68:eb:b1:33:fb:53:4d:5e:c7:ea:30:c7:69:16:56:a1: d7:61:46:f1:b2:a6:bb:ca:a8:72:1f:77:27:65:87:7a:25:de: 8b:20:0a:3a:7c:b2:01:d0:f2:70:3b:2e:3c:59:04:b6:91:46: bc:55:05:c6:ff:fc:5e:76:d2:19:6b:56:b1:6e:df:41:fa:15: 50:11:d1:6c:9c:a8:8d:a7:c8:cf:06:1f:22:71:e7:35:46:18: c1:37:73:8e:5d:55:1f:a8:dc:55:72:fd:cc:8a:2c:46:d6:02: 40:a0:b9:de:04:65:cd:67:82:e5:41:70:66:53:12:87:a6:ea: b8:e1:e0:71:c8:ff:f7:f7:a8:78:32:34:3a:24:aa:8f:4c:98: fe:28:c7:fe:77:f5:da:95:6f:75:a5:2e:49:5d:3e:96:04:21: f3:00:98:bf:8d:8e:f1:e2:38:8a:89:42:1c:d1:12:c4:a2:0e: ae:9e:d3:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDzjkorN9lUTeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk MjUyNWE5NzctMjU2OS00NmFjLTliM2QtNWJhOTQwOWI0MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqLQuEHQL0K50SrZSs4jdlDgcoPoIVpcusYu iX6730d2IN2/6qY8QfjjwurmoYGgA+rmnGuC3n2nvP6Mf82mxGQmhyb8TJO9oAYq A5jC/D/cAlv32fYvYLQaKdEVaQ6AmNfaHUiMShg34qWzjWjUg9hd9jSr0/iKuzaJ Dtlafd5JadOKvWSe4w1RbuTA9JG/knUSaVz5V1hTHGMaus11X6SI58CzUtrpmuXg Nc1FBPBd9HkzS4oSaUzP99KUWiSIeODgO5HsEW4AsAzqw1NNnoWsgl/Cbih+xzlb TzpRNkYAcnidzWKS8s6pnfB9pDjoKq7YQOA6tOL6OQ6fS0j9BQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEIX7z//7wsu56pY/LCoAN4f0yX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCj/FVrOxZQePMWHipjl4vd lc8Zsm+Kd7qf25b/IT+zdm56Gq3k/PNwPNeJUm1RuwDo2gNTxmJz4OxJuyZMyGxq I/hrOQrikiDFB2jrsTP7U01ex+owx2kWVqHXYUbxsqa7yqhyH3cnZYd6Jd6LIAo6 fLIB0PJwOy48WQS2kUa8VQXG//xedtIZa1axbt9B+hVQEdFsnKiNp8jPBh8icec1 RhjBN3OOXVUfqNxVcv3MiixG1gJAoLneBGXNZ4LlQXBmUxKHpuq44eBxyP/396h4 MjQ6JKqPTJj+KMf+d/XalW91pS5JXT6WBCHzAJi/jY7x4jiKiUIc0RLEog6untOq -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:38 2026 by rpki-client