$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: 0ScbocL2XZpfZ5YQ0u0w8DUz05wsfPh5NX3cjQx5PNo= Subject key identifier: 7B:3B:22:67:A3:E8:38:05:09:9A:64:79:1A:06:82:BE:DB:2C:8C:2C Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584D4929F1B5A7E960BC520B8580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C74 Signing time: Wed 25 Mar 2026 13:00:04 +0000 Manifest this update: Wed 25 Mar 2026 13:00:04 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: gqvk+YhyW0/E8WbWExmoduEmQd1AJKdoufVvXT0WLoE=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: WZGP92T652bWKLQkhkNSwK8CRYgoBdG2N8L+h0qohxA=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: dE+L6tpJdYe5vQ5i/X8fMPIb+d1JRq4VMiXky1vuYd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:29:f1:b5:a7:e9:60:bc:52:0b:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Mar 25 13:00:04 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=0104cc34-4c0b-4217-9f63-b58644a9c53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:7b:12:f1:ac:25:03:15:f3:c1:c3:ef:cc: 50:d2:72:9d:84:61:03:07:e5:4f:46:62:ef:09:7b: fd:e3:30:9f:6a:aa:da:97:c9:e8:83:af:b9:e8:ea: 71:9b:06:95:55:82:84:2c:03:19:58:21:9e:d9:90: 80:dc:51:4a:68:66:c5:7e:a3:68:f7:02:b7:5b:f7: 5f:52:cd:72:b5:f1:52:8c:6d:44:90:91:e8:3a:02: 7f:ef:81:bf:89:2a:e7:77:74:59:fc:50:80:71:d5: 50:31:05:1f:04:2a:cb:8d:03:69:e5:07:28:91:1c: 61:cb:9d:35:3c:e9:04:f2:85:b8:cd:ed:bd:a2:3d: b4:8e:a0:2a:f6:f5:cd:8c:e6:e0:a3:71:df:c4:28: 02:e3:43:00:7e:9d:be:e4:18:22:1e:79:c8:f2:c3: ca:3a:56:df:81:b7:ab:4e:5b:ee:1c:34:eb:ba:cb: c7:c8:bf:2b:7e:2c:b9:77:8c:cc:35:03:62:b9:57: 2b:bc:04:a9:bb:32:5d:6d:5f:eb:f0:3e:cc:8f:ae: 40:ab:8c:89:ba:4e:4d:ec:33:29:a7:65:a7:ce:7f: fd:fb:17:c0:63:46:02:8a:ff:5b:9f:41:0d:ec:59: 0d:5d:38:98:69:fe:60:42:e9:5f:53:67:e7:8f:7b: 90:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3B:22:67:A3:E8:38:05:09:9A:64:79:1A:06:82:BE:DB:2C:8C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:83:66:6b:a9:e2:a8:99:e9:19:00:08:8d:3b:b3:ff:cf:58: 89:b0:3c:e3:f2:01:8e:fb:e2:b3:1a:18:cc:7a:8f:47:2a:aa: 35:29:82:61:cd:bc:15:c9:4b:92:c8:2b:a6:21:99:c6:9a:9e: da:69:24:5b:e9:e9:bc:fb:5c:c2:f2:2b:6b:17:7d:22:5f:f0: e2:63:fb:7f:7a:12:a7:b0:17:c6:a3:ea:c4:e5:b0:7d:a2:09: 20:f6:f4:5f:bb:40:64:e1:b8:79:4b:ec:6a:84:f9:60:0c:73: 09:17:f7:56:ea:37:c8:ec:71:b5:a7:6a:98:f4:03:81:89:96: c7:73:d6:60:fb:a3:af:3c:fb:c9:ee:60:11:fe:ca:52:07:4e: 9b:c7:58:38:5e:43:b8:64:70:70:bd:dd:6b:1b:e5:9a:9b:ff: 85:89:8d:af:68:d2:7a:4d:92:74:72:88:45:7b:e9:ea:ee:66: 93:71:93:61:d9:fc:71:bd:52:17:bd:8f:ea:3e:5a:eb:96:b3: fe:49:b6:4a:5e:70:5c:34:c4:3a:15:2f:d7:25:0b:0e:bb:fa: 0b:2e:fa:68:6b:17:09:32:2f:d0:7f:fa:89:1b:62:f3:81:55: c9:f3:da:0d:1e:66:7e:9c:35:4c:d8:e2:28:81:f9:b2:20:e4: 51:5a:51:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKfG1p+lgvFILhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDMyNTEzMDAwNFoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk MDEwNGNjMzQtNGMwYi00MjE3LTlmNjMtYjU4NjQ0YTljNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYl7EvGsJQMV88HD78xQ0nKdhGEDB+VPRmLv CXv94zCfaqral8nog6+56OpxmwaVVYKELAMZWCGe2ZCA3FFKaGbFfqNo9wK3W/df Us1ytfFSjG1EkJHoOgJ/74G/iSrnd3RZ/FCAcdVQMQUfBCrLjQNp5QcokRxhy501 POkE8oW4ze29oj20jqAq9vXNjObgo3HfxCgC40MAfp2+5BgiHnnI8sPKOlbfgber TlvuHDTrusvHyL8rfiy5d4zMNQNiuVcrvASpuzJdbV/r8D7Mj65Aq4yJuk5N7DMp p2Wnzn/9+xfAY0YCiv9bn0EN7FkNXTiYaf5gQulfU2fnj3uQqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHs7Imej6DgFCZpkeRoGgr7bLIwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyg2ZrqeKomekZAAiNO7P/ z1iJsDzj8gGO++KzGhjMeo9HKqo1KYJhzbwVyUuSyCumIZnGmp7aaSRb6em8+1zC 8itrF30iX/DiY/t/ehKnsBfGo+rE5bB9ogkg9vRfu0Bk4bh5S+xqhPlgDHMJF/dW 6jfI7HG1p2qY9AOBiZbHc9Zg+6OvPPvJ7mAR/spSB06bx1g4XkO4ZHBwvd1rG+Wa m/+FiY2vaNJ6TZJ0cohFe+nq7maTcZNh2fxxvVIXvY/qPlrrlrP+SbZKXnBcNMQ6 FS/XJQsOu/oLLvpoaxcJMi/Qf/qJG2LzgVXJ89oNHmZ+nDVM2OIogfmyIORRWlH0 -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:50 2026 by rpki-client