$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft (raw, json) Hash identifier: jXJmDeRoRBrD0IGUrd7A/eXrBWMQ5yd/k/eLMWnbVvE= Subject key identifier: 13:FE:52:E7:CB:93:86:7A:46:18:99:B5:CD:F4:B9:F4:9B:BD:E0:5B Authority key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Certificate issuer: /CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Certificate serial: 010D0C9F4328584D47E260453C03AF4A8A740100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft Manifest number: 010D0C9F4328584073A837D5DC90CFDD9E2C4B34 Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl (hash: /MyxCX6mA8eycRPkEz5P3v0Ycl51rVBd/TFgu7mTCTE=) 2: c565c5c0-8555-3cb8-bca1-d3a92ed022e8.roa (hash: 1YkpDqxtBYiukJdcxB1b7lzOwmh/B91nq6ITW7Al4Vk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:60:45:3c:03:af:4a:8a:74:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=e7726e15-83a4-4ac3-9716-534cf98bf31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:45:08:7c:98:00:4b:33:53:74:2f:ca:43: 6d:c8:b6:ec:a7:0a:17:6e:35:81:f3:be:79:06:9c: d2:bd:ca:cc:b9:30:90:09:3b:ae:33:e8:7f:05:22: 8b:38:c1:aa:1f:7b:4b:9d:76:c3:c3:d5:bf:0d:8f: 94:aa:dc:12:38:53:12:60:9d:c7:0e:b9:be:34:1b: c6:86:40:a7:d2:d9:5e:70:f3:c1:d1:f9:c2:fd:17: 6a:92:ad:9f:a1:ab:0b:c9:c3:75:bf:77:07:d0:5d: 3e:4b:59:d3:51:55:5f:3e:64:b8:57:1d:89:4a:6f: bf:39:39:0a:56:6f:7f:b3:3b:fd:e0:89:58:d4:e8: 0f:a2:7e:59:0c:69:99:11:df:a4:ed:1a:2d:96:8e: ce:16:64:b3:8b:84:2b:5c:e5:62:e5:25:07:e4:50: 34:c1:11:34:bb:c0:6b:ef:2a:46:e7:21:d3:a4:ad: 41:72:c9:f0:47:49:c6:2c:5c:b2:74:e8:f0:72:91: f7:27:45:ce:9c:b2:ce:1e:b0:33:10:69:35:73:87: 89:e4:d3:50:8a:ab:bd:5a:c8:a8:b9:ce:14:6f:b4: 46:33:74:46:e7:f3:93:b6:03:4f:69:c0:a9:7c:d8: fd:9c:4c:b6:3a:84:fa:ac:41:66:b4:ca:5d:0e:22: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FE:52:E7:CB:93:86:7A:46:18:99:B5:CD:F4:B9:F4:9B:BD:E0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl X509v3 Authority Key Identifier: keyid:57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ca:df:bf:4b:9d:0a:4f:78:d9:de:4e:c9:55:f7:d8:f8:65: f9:81:26:fe:ba:57:1c:b8:fa:19:c0:fc:5f:47:db:5c:f3:04: 9b:0f:d0:e3:95:03:99:57:67:a6:51:70:1f:06:46:cd:16:8f: d5:5f:eb:8e:3d:28:dc:73:51:d2:d8:08:3c:bc:00:12:a8:57: 50:fd:bb:87:90:1f:9d:f0:5e:88:ae:7a:d6:0c:bc:c5:a8:d8: 9b:72:73:a9:d0:3e:45:03:60:d4:81:61:b2:e8:b5:e9:ce:83: 1b:af:97:3a:02:c3:79:46:e3:ec:5f:1a:44:8a:e7:a2:f9:a4: 73:2a:a9:58:fb:c5:53:7d:42:08:3f:ca:84:6c:a9:5a:4c:24: 1e:d1:14:1b:03:ba:e9:06:7a:6c:fb:fe:ea:96:f6:fd:45:35: b1:29:ba:93:48:5d:5b:cf:30:53:7e:bd:eb:e7:3c:48:27:4c: 5a:ab:34:28:4a:b8:82:29:88:68:9f:43:21:6e:2f:31:48:0b: ef:e2:0a:56:4b:9c:c5:3b:39:ac:1f:c2:0d:c9:27:a7:75:e0: a0:84:8a:69:05:42:8e:aa:e5:01:ea:0e:f5:6e:84:89:6d:58: 0d:2d:e6:27:d4:1f:9b:84:39:fb:5b:5d:4e:e3:37:52:bc:37: 66:f8:5d:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4mBFPAOvSop0AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWEx NGM2MB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk ZTc3MjZlMTUtODNhNC00YWMzLTk3MTYtNTM0Y2Y5OGJmMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YdFCHyYAEszU3QvykNtyLbspwoXbjWB8755 BpzSvcrMuTCQCTuuM+h/BSKLOMGqH3tLnXbDw9W/DY+UqtwSOFMSYJ3HDrm+NBvG hkCn0tlecPPB0fnC/Rdqkq2foasLycN1v3cH0F0+S1nTUVVfPmS4Vx2JSm+/OTkK Vm9/szv94IlY1OgPon5ZDGmZEd+k7Rotlo7OFmSzi4QrXOVi5SUH5FA0wRE0u8Br 7ypG5yHTpK1BcsnwR0nGLFyydOjwcpH3J0XOnLLOHrAzEGk1c4eJ5NNQiqu9Wsio uc4Ub7RGM3RG5/OTtgNPacCpfNj9nEy2OoT6rEFmtMpdDiJZ1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBP+UufLk4Z6RhiZtc30ufSbveBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0 NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvNDk5NDUwYmQtNjQzMi00 ZTVkLWEyOWYtMWMzOGMxZWExNGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDk5NDUwYmQtNjQzMi00ZTVkLWEy OWYtMWMzOGMxZWExNGM2LzQ5OTQ1MGJkLTY0MzItNGU1ZC1hMjlmLTFjMzhjMWVh MTRjNi5jcmwwHwYDVR0jBBgwFoAUV5x9/YcwBLe0R40DMFkQXZSTefEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4 YzFlYTE0YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeyt+/S50KT3jZ3k7JVffY +GX5gSb+ulccuPoZwPxfR9tc8wSbD9DjlQOZV2emUXAfBkbNFo/VX+uOPSjcc1HS 2Ag8vAASqFdQ/buHkB+d8F6IrnrWDLzFqNibcnOp0D5FA2DUgWGy6LXpzoMbr5c6 AsN5RuPsXxpEiuei+aRzKqlY+8VTfUIIP8qEbKlaTCQe0RQbA7rpBnps+/7qlvb9 RTWxKbqTSF1bzzBTfr3r5zxIJ0xaqzQoSriCKYhon0Mhbi8xSAvv4gpWS5zFOzms H8INySendeCghIppBUKOquUB6g71boSJbVgNLeYn1B+bhDn7W11O4zdSvDdm+F1e -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:57 2026 by rpki-client