$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft File: 4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft (raw, json) Hash identifier: kG6f03LX4EyUaPqqD7uSS+3X58MZqDP8NJtFNufFQ58= Subject key identifier: F2:26:A1:FE:7F:28:05:E1:12:20:A7:5A:B0:B7:22:F9:E5:59:64:19 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F4328584D49657E7779355B9CBE360800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft Manifest number: 010D0C9F4328584101E93940E9437C70FE4C2320 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl (hash: sgMuBv4qbjUp3nPLT3kKa8Kd/V5JKa6LX+WrMNM3dl4=) 2: 6df0ab59-03d9-3306-8364-6288a57b01af.roa (hash: TRFsb1uuyIqDjmi5Ej2CbSeP+G67OPfsEX2jKYNvWf4=) 3: a90debc4-5a03-3d04-b433-557eafb4685f.roa (hash: INkdHtL8aiC31P8/v85BLxbidMJ/KzHlO7gX0sifWDY=) 4: de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa (hash: x0LkmpKHSy/lmJBjDU0aInTxHKdEP2cyu1D12pA0qG4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7e:77:79:35:5b:9c:be:36:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=05f3fe98-4155-4c60-9b3f-d8db090b4510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:02:ed:2a:47:55:42:6a:4f:3a:97:c4:21: b9:a4:8d:d6:93:76:5e:77:35:bb:34:52:64:38:22: 58:f6:90:ba:fc:c2:e7:1f:8f:08:48:ec:0a:ec:d1: 26:f5:42:ba:fe:ed:8b:16:3a:6a:81:14:05:eb:aa: ec:37:1b:d0:a2:05:29:d7:5a:0e:67:e4:0e:eb:17: 1d:46:70:ab:70:ef:08:24:3d:a4:53:83:9d:08:aa: 3d:cd:1d:f8:7e:ea:bf:62:f4:ad:a3:c1:7d:e4:a8: ac:1f:1a:b3:a8:9e:87:1f:16:a8:dd:09:f8:24:1e: 8b:6e:8d:e0:8a:59:5b:8d:e3:f1:88:b8:7b:27:b4: e8:2e:1d:78:2f:5c:c3:dc:c6:0d:2a:a9:22:f1:b6: 55:75:5b:1f:2d:80:3f:7d:26:df:6e:8d:ef:83:e5: ee:ca:3a:e1:05:bb:21:e3:57:06:b4:97:5b:79:76: a7:cf:b9:db:c7:4c:a2:53:de:8a:08:5d:9c:99:d9: db:cd:1d:fb:5d:ec:3e:4b:8a:70:e2:03:f8:72:1d: f2:4f:b9:1a:18:e0:b3:f2:e8:cb:a3:3d:f5:b9:a9: f0:09:ce:ec:9c:28:04:c5:a8:6a:68:60:b9:78:cb: fc:3d:5b:b3:c0:9b:49:e8:c5:47:25:ac:56:4c:0a: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:26:A1:FE:7F:28:05:E1:12:20:A7:5A:B0:B7:22:F9:E5:59:64:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:87:ec:0e:70:60:b6:59:36:ce:b0:04:bb:22:03:88:d4:62: e5:8e:f1:23:8c:77:8b:35:15:a7:11:fe:ce:46:55:49:a4:f5: c3:1e:fe:04:f6:02:1f:03:f8:f5:45:5b:b3:a0:7e:2e:99:40: bd:c7:9f:b0:41:66:48:f5:fc:06:a3:3c:02:5b:9a:fa:80:f3: 7c:3a:17:9a:e8:52:b1:80:76:2b:c5:fd:be:17:53:24:e3:db: 15:8b:34:c2:9c:39:60:23:8e:f8:61:9b:e0:66:dc:c7:92:49: 9b:3e:2f:fe:0e:46:4b:96:d0:73:a3:46:67:56:30:55:a6:a2: 13:8f:34:7e:a4:ef:a2:ed:f2:4a:eb:1b:e1:c2:f7:ea:84:4b: aa:b7:5b:33:f9:02:eb:37:2e:78:b8:91:4e:90:94:49:9e:a3: c1:34:d6:f7:25:ee:1c:42:f7:cf:31:9e:26:04:a5:ca:fc:bb: 7b:a5:9c:8b:b7:1c:77:fd:72:b9:02:ef:0a:42:46:f1:5b:ec: 85:ae:88:2a:0d:97:dd:d1:af:af:4f:a3:70:07:5e:f7:f0:53: cd:5b:02:e8:38:5e:48:1c:ae:76:1a:c1:d1:5c:36:f9:67:84: 53:4f:c9:2e:5a:7d:f7:79:1e:55:b8:b2:e7:30:8a:b3:cd:ef: 5f:9d:9a:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX53eTVbnL42CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk MDVmM2ZlOTgtNDE1NS00YzYwLTliM2YtZDhkYjA5MGI0NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqkC7SpHVUJqTzqXxCG5pI3Wk3ZedzW7NFJk OCJY9pC6/MLnH48ISOwK7NEm9UK6/u2LFjpqgRQF66rsNxvQogUp11oOZ+QO6xcd RnCrcO8IJD2kU4OdCKo9zR34fuq/YvSto8F95KisHxqzqJ6HHxao3Qn4JB6Lbo3g illbjePxiLh7J7ToLh14L1zD3MYNKqki8bZVdVsfLYA/fSbfbo3vg+XuyjrhBbsh 41cGtJdbeXanz7nbx0yiU96KCF2cmdnbzR37Xew+S4pw4gP4ch3yT7kaGOCz8ujL oz31uanwCc7snCgExahqaGC5eMv8PVuzwJtJ6MVHJaxWTAocaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPImof5/KAXhEiCnWrC3IvnlWWQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvNGRiZTNjYTItNDliZC00 NzU4LTgwNTQtNWQxNTU1YTkwYTExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIh+wOcGC2WTbOsAS7IgOI 1GLljvEjjHeLNRWnEf7ORlVJpPXDHv4E9gIfA/j1RVuzoH4umUC9x5+wQWZI9fwG ozwCW5r6gPN8Ohea6FKxgHYrxf2+F1Mk49sVizTCnDlgI474YZvgZtzHkkmbPi/+ DkZLltBzo0ZnVjBVpqITjzR+pO+i7fJK6xvhwvfqhEuqt1sz+QLrNy54uJFOkJRJ nqPBNNb3Je4cQvfPMZ4mBKXK/Lt7pZyLtxx3/XK5Au8KQkbxW+yFrogqDZfd0a+v T6NwB1738FPNWwLoOF5IHK52GsHRXDb5Z4RTT8kuWn33eR5VuLLnMIqzze9fnZp8 -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:20 2026 by rpki-client