$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: dwBZxqv1j0icaCDZfTUNKVcxW5Saj8QSdrd5r0xKIQs= Subject key identifier: ED:10:65:F0:E5:FB:2D:F9:86:82:77:14:D7:E9:73:8F:F8:CF:19:5D Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584D4929F1FB0A2DAB6490B828C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060D1F Signing time: Wed 25 Mar 2026 13:00:04 +0000 Manifest this update: Wed 25 Mar 2026 13:00:04 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: A4GNwicFyCrroBx89rRPY1Eubef8T7wLS+/+JQoERhQ=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: PuOhUazhCwO/erB60O9CtwBCyvIQy0kH++ql/3L/IlE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:29:f1:fb:0a:2d:ab:64:90:b8:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Mar 25 13:00:04 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=f33fb100-d328-4e28-94a7-4f102d6a8bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:37:19:bc:d0:ab:66:a1:13:fe:a5:17:97: fa:11:2a:41:f0:8a:12:3a:86:af:ce:41:b6:24:8a: 5f:a2:fe:19:b1:d8:cb:3a:eb:3e:18:4d:80:d2:f6: 2f:7c:4a:54:76:3c:4a:fb:35:fe:37:b0:e7:9b:67: 19:e7:0a:21:78:a3:4a:67:f4:06:9d:b7:06:1a:03: 53:ff:23:f0:f0:c5:52:6a:6f:06:d6:63:bd:59:79: 44:d8:be:71:09:48:4f:89:c5:0c:5f:e0:42:90:ba: ca:1a:5c:5b:cb:d8:99:db:c5:48:87:38:9c:b3:a6: ec:04:3f:b4:2a:d0:c4:29:a6:1a:f1:d5:9d:b9:0d: c0:5e:d5:d8:a0:03:b4:c6:d8:78:6c:13:ee:34:e9: ab:be:0f:7f:2e:4e:ed:24:bd:58:5f:97:b0:36:87: 8b:cc:ff:19:79:08:bb:67:49:02:9d:e9:0a:b6:a1: 6a:74:7a:bc:99:5d:8f:79:0f:ff:b3:a3:b3:88:30: 66:ae:44:83:eb:bd:ad:cd:4b:d9:e6:61:10:c5:f8: b6:e3:53:ee:19:c3:5b:89:2e:9c:27:cb:0b:a6:39: ce:5b:bd:2a:bc:7e:00:58:2f:5c:3a:22:6d:b3:e6: 67:f0:d7:71:97:67:39:47:5c:fc:c0:89:3a:57:5d: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:10:65:F0:E5:FB:2D:F9:86:82:77:14:D7:E9:73:8F:F8:CF:19:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d2:29:6d:e2:6e:b8:ed:b8:50:c9:ab:70:7a:62:7b:2c:97: a8:fe:98:85:0f:a6:78:7f:a5:61:73:2b:1f:d8:3e:7c:68:26: 10:df:db:4e:48:1d:91:97:b9:ee:52:ec:e0:d6:bf:90:b6:eb: 2a:f8:78:8c:92:6d:c3:fd:ea:42:a2:c8:c4:a9:bf:dd:04:27: ee:ea:43:14:af:40:0b:8d:ee:bd:eb:e0:4f:39:b7:ba:2e:8a: 06:0a:3f:ca:77:fc:e5:f7:50:95:30:71:81:09:22:4c:7c:42: fa:90:ff:f1:8c:f1:ad:f6:9f:40:fa:25:9b:0c:ef:82:6e:48: 85:fe:aa:40:cd:e3:02:e9:57:dc:d8:3b:a4:d6:dc:9a:c6:e9: dd:c6:59:f5:4d:5b:f3:a4:d9:b5:d9:55:49:39:4c:37:e2:f0: c0:50:6d:d2:74:cf:46:c2:5e:8e:49:da:60:74:2b:c4:a8:17: 87:91:e1:07:ef:d0:13:50:9e:ab:3a:2b:a2:72:0d:e0:7b:1e: 14:8d:c4:08:a2:75:9d:1a:57:1b:f1:1d:e1:aa:f5:70:2b:e2: 82:c1:f1:27:92:77:06:39:cb:0b:bd:78:3e:7f:7d:bc:44:85: 6e:5c:54:ba:3d:d8:2a:4f:8c:b6:a3:c6:1b:d6:47:e9:1b:91: 8e:29:7c:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKfH7Ci2rZJC4KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDMyNTEzMDAwNFoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk ZjMzZmIxMDAtZDMyOC00ZTI4LTk0YTctNGYxMDJkNmE4YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt83GbzQq2ahE/6lF5f6ESpB8IoSOoavzkG2 JIpfov4ZsdjLOus+GE2A0vYvfEpUdjxK+zX+N7Dnm2cZ5woheKNKZ/QGnbcGGgNT /yPw8MVSam8G1mO9WXlE2L5xCUhPicUMX+BCkLrKGlxby9iZ28VIhzics6bsBD+0 KtDEKaYa8dWduQ3AXtXYoAO0xth4bBPuNOmrvg9/Lk7tJL1YX5ewNoeLzP8ZeQi7 Z0kCnekKtqFqdHq8mV2PeQ//s6OziDBmrkSD672tzUvZ5mEQxfi241PuGcNbiS6c J8sLpjnOW70qvH4AWC9cOiJts+Zn8Ndxl2c5R1z8wIk6V1310QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO0QZfDl+y35hoJ3FNfpc4/4zxldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx0ilt4m647bhQyatwemJ7 LJeo/piFD6Z4f6Vhcysf2D58aCYQ39tOSB2Rl7nuUuzg1r+Qtusq+HiMkm3D/epC osjEqb/dBCfu6kMUr0ALje696+BPObe6LooGCj/Kd/zl91CVMHGBCSJMfEL6kP/x jPGt9p9A+iWbDO+CbkiF/qpAzeMC6Vfc2Duk1tyaxundxln1TVvzpNm12VVJOUw3 4vDAUG3SdM9Gwl6OSdpgdCvEqBeHkeEH79ATUJ6rOiuicg3gex4UjcQIonWdGlcb 8R3hqvVwK+KCwfEnkncGOcsLvXg+f328RIVuXFS6PdgqT4y2o8Yb1kfpG5GOKXzK -----END CERTIFICATE-----Generated at Thu Mar 26 10:38:26 2026 by rpki-client