$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft File: 57da1f4a-da7b-44cf-8427-a74615d9a53e.mft (raw, json) Hash identifier: HrjQ7G7xsP2UmY1ibw5dbqpInS2RwcbgROkioKkngg0= Subject key identifier: C7:DC:7A:AA:B0:CB:41:DE:BC:39:C0:F3:B6:D3:90:13:67:3C:E0:38 Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Certificate serial: 010D0C9F4328584D4929F13A129FAA570C6CA680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft Manifest number: 010D0C9F4328584394910AAE776369E15CAEBB10 Signing time: Wed 25 Mar 2026 13:00:04 +0000 Manifest this update: Wed 25 Mar 2026 13:00:04 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 57da1f4a-da7b-44cf-8427-a74615d9a53e.crl (hash: qk4r44MkCSgUPziHrxrDZVmFqtkje6q0kvfuZUSaza4=) 2: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (hash: hqLj8X7OzTIxZhqJY06wRu2d0/Ips6XbJMTnTt2U6Rg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:29:f1:3a:12:9f:aa:57:0c:6c:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Validity Not Before: Mar 25 13:00:04 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=80720f50-0ac6-4f6a-996b-aae4aa7229e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:3b:71:3c:34:8f:93:e8:a3:5c:46:7f:85: 36:3d:b5:a2:64:3b:49:07:a1:d1:bb:16:25:e3:ca: 6a:4e:51:e7:66:c2:80:ff:ab:70:41:7f:df:a7:21: 4e:0f:97:34:6b:19:6d:86:80:ea:62:c4:f1:48:57: f3:5a:33:73:ad:f7:f0:2f:12:90:82:0c:30:ef:3f: a5:70:6d:04:a3:d1:5e:ca:75:4c:9a:db:29:47:c6: 76:cb:f8:3f:57:48:f3:d9:6b:e4:e7:80:dd:27:38: 45:11:97:56:fe:ba:77:6a:9e:e0:7a:4a:4a:a4:4a: 98:b0:35:68:8b:74:11:fe:40:da:0e:ec:b5:16:70: d3:8a:f0:61:1e:5b:5a:fe:33:70:49:95:af:c5:e4: d3:a5:47:a6:44:17:03:09:ec:24:21:96:89:10:46: 61:89:60:4e:7b:65:93:a7:1d:c6:26:e0:3f:88:61: 17:64:6d:db:a3:98:ba:43:74:2f:70:f2:5a:01:95: fd:aa:f0:14:c8:91:9b:c9:fe:7c:f8:f1:c0:94:ab: 9c:6b:6f:6d:18:fc:0e:99:0e:7f:34:7e:78:43:3d: b7:cd:34:64:d4:2f:4c:b9:1a:4e:ed:71:9e:52:5b: 5b:51:c8:37:3c:30:57:58:43:ad:2d:e9:3b:23:49: cf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DC:7A:AA:B0:CB:41:DE:BC:39:C0:F3:B6:D3:90:13:67:3C:E0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl X509v3 Authority Key Identifier: keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6b:9f:09:b2:6e:fe:42:fd:26:68:b7:ba:7a:78:72:7e:0b: 18:b1:27:e3:95:d3:8b:54:be:60:1f:bd:19:87:10:db:0d:ab: f3:ef:7b:21:26:5a:2c:9e:ac:46:85:e7:65:b0:9b:f0:dd:29: 37:91:7e:f8:69:ca:28:da:87:10:a2:89:e4:0e:ad:ca:98:0d: 21:12:92:bc:02:aa:51:11:a2:c8:05:95:c5:b1:ca:d8:56:7f: df:39:ad:7f:24:23:fe:9d:ca:b9:21:76:cc:e0:8f:84:3a:46: ac:eb:10:06:f9:ca:bf:02:5b:4f:0b:05:27:f9:64:35:3c:a9: 1a:6e:90:80:9f:9b:cd:74:ac:6b:e9:ca:07:7e:88:b3:b3:2a: 9e:67:de:62:39:5c:e2:69:f1:91:c2:af:bd:bb:a8:81:a3:64: 52:cb:89:5d:dc:bc:fc:08:31:98:e4:b8:8b:7c:b3:c4:76:ff: 83:83:0d:b7:56:6a:c1:86:a3:37:94:3e:d6:d7:c9:41:29:33: b9:f0:d0:8c:aa:27:ca:b3:71:4e:20:f8:7c:ec:82:cd:a7:16: a7:be:4e:f4:c5:1b:81:b6:20:12:03:78:34:1a:bd:24:69:41: 7b:26:15:73:f5:5f:bb:af:1a:58:b4:1c:5c:5b:d9:10:71:68: 46:a2:57:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKfE6Ep+qVwxspoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdkYTFmNGEtZGE3Yi00NGNmLTg0MjctYTc0NjE1ZDlh NTNlMB4XDTI2MDMyNTEzMDAwNFoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk ODA3MjBmNTAtMGFjNi00ZjZhLTk5NmItYWFlNGFhNzIyOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kc7cTw0j5Poo1xGf4U2PbWiZDtJB6HRuxYl 48pqTlHnZsKA/6twQX/fpyFOD5c0axlthoDqYsTxSFfzWjNzrffwLxKQggww7z+l cG0Eo9FeynVMmtspR8Z2y/g/V0jz2Wvk54DdJzhFEZdW/rp3ap7gekpKpEqYsDVo i3QR/kDaDuy1FnDTivBhHlta/jNwSZWvxeTTpUemRBcDCewkIZaJEEZhiWBOe2WT px3GJuA/iGEXZG3bo5i6Q3QvcPJaAZX9qvAUyJGbyf58+PHAlKuca29tGPwOmQ5/ NH54Qz23zTRk1C9MuRpO7XGeUltbUcg3PDBXWEOtLek7I0nPKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMfceqqwy0HevDnA87bTkBNnPOA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Rh MWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2MTVkOWE1M2UvNTdkYTFmNGEtZGE3Yi00 NGNmLTg0MjctYTc0NjE1ZDlhNTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdkYTFmNGEtZGE3Yi00NGNmLTg0 MjctYTc0NjE1ZDlhNTNlLzU3ZGExZjRhLWRhN2ItNDRjZi04NDI3LWE3NDYxNWQ5 YTUzZS5jcmwwHwYDVR0jBBgwFoAU3FkuqnL/ai5aXRbcKWR980gMKgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2RhMWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2 MTVkOWE1M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAga58Jsm7+Qv0maLe6enhy fgsYsSfjldOLVL5gH70ZhxDbDavz73shJlosnqxGhedlsJvw3Sk3kX74acoo2ocQ oonkDq3KmA0hEpK8AqpREaLIBZXFscrYVn/fOa1/JCP+ncq5IXbM4I+EOkas6xAG +cq/AltPCwUn+WQ1PKkabpCAn5vNdKxr6coHfoizsyqeZ95iOVziafGRwq+9u6iB o2RSy4ld3Lz8CDGY5LiLfLPEdv+Dgw23VmrBhqM3lD7W18lBKTO58NCMqifKs3FO IPh87ILNpxanvk70xRuBtiASA3g0Gr0kaUF7JhVz9V+7rxpYtBxcW9kQcWhGolfK -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:32 2026 by rpki-client