$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: QnmtwqYoMPFluN7zqgekPFRliF45d+8c+hKsKN3C4Zo= Subject key identifier: 67:B0:2D:84:B7:FC:05:AA:4E:B4:B4:4E:C3:ED:E2:46:3F:B7:EC:EA Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584D49BED5F3F2370E5D8E598E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DB0F5 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Fri 27 Mar 2026 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: DyFZjAv/Fntz6b63fNrzbXrMN0zQm7dvetaIaB3C380=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: c9bGxbQW79CsAqoXh4KoWK02RP0j6pSH4jHDeLf2hFE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d5:f3:f2:37:0e:5d:8e:59:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 27 18:00:00 2026 GMT Subject: CN=78e44fab-4d47-4a35-b29b-9a22b456b405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:93:4c:e5:ce:67:7a:aa:77:43:2a:e7:c0:dc: 28:e7:e2:db:6f:09:83:15:49:21:66:94:f4:c2:5f: 99:75:cb:38:53:a4:80:f5:92:75:4a:c9:dd:da:80: 5c:80:9d:50:e6:d0:fa:f7:fd:43:49:63:e6:37:35: 87:de:57:96:e2:f3:d7:03:6b:fe:82:b3:bb:25:59: 7b:3e:a4:4f:43:30:3d:e1:4d:32:dc:67:54:cb:5f: c4:bf:2b:cc:e4:af:50:9b:ab:04:91:45:67:af:32: 75:7c:9a:e3:07:ef:cb:c4:e1:49:e0:a0:7f:50:6b: c3:64:16:86:10:8e:75:ef:ee:91:53:11:42:a2:a9: 3b:c5:5a:b1:e1:69:86:f2:9e:31:b3:7d:12:08:2c: 3b:55:1e:1a:5d:ad:b7:f4:cf:7d:7a:7b:b4:d1:80: a5:4f:24:be:71:16:c3:f9:e9:d3:5f:f7:0d:95:f7: 8a:cb:c6:e7:46:08:b5:e6:ca:b6:75:7d:85:cf:eb: ad:42:73:fe:bb:c8:ba:46:fa:fa:76:6e:1f:cb:e7: 86:1c:ff:2d:c9:0e:6c:bf:c5:5f:4b:2c:68:7d:de: 17:0c:2e:6b:1c:22:43:e4:da:87:0a:44:51:41:22: 8f:d5:6f:df:d0:93:53:6e:94:9e:6d:1a:43:3d:17: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B0:2D:84:B7:FC:05:AA:4E:B4:B4:4E:C3:ED:E2:46:3F:B7:EC:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a2:d2:48:e0:35:df:0c:fd:63:dd:fc:08:36:ec:34:e9:ae: b1:59:16:b8:7c:d0:04:63:d9:75:71:70:56:73:d3:79:43:8c: d4:30:e9:05:7b:05:78:7a:26:97:52:e0:a4:bb:71:de:3d:fb: 98:fc:c3:71:0d:e1:34:5b:50:cd:ec:fc:bc:2b:10:03:63:bc: 98:bf:69:87:86:b1:07:35:93:8c:91:77:32:b8:a9:d3:d0:41: 05:b7:0f:b6:44:7e:b1:a7:46:dc:1a:44:5d:1b:3e:3f:91:f7: 1a:09:07:58:50:04:0d:66:1e:1c:57:99:e9:1e:8e:72:13:c3: d2:ae:f5:13:78:e4:ba:d7:e5:f6:52:72:e1:8e:07:c0:c4:89: 18:b9:b3:f4:35:bc:51:a5:4c:8d:ec:08:f8:f3:d9:d4:41:01: 28:5a:de:ad:b4:d7:7e:9e:d0:d2:4d:81:30:59:40:66:4f:fb: a7:45:e0:d2:2d:24:3f:65:f6:40:fc:17:08:79:31:af:45:9e: e9:84:49:38:2a:b3:a9:ba:80:d2:6f:64:b5:13:63:18:ff:eb: 1c:e5:37:b0:34:7e:60:62:2d:10:a4:80:fc:16:d8:85:a8:05: f3:d4:fd:4f:00:24:37:35:62:27:84:c7:bc:8a:0f:e3:2d:41: 72:ae:6d:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtXz8jcOXY5ZjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyNzE4MDAwMFowLzEtMCsGA1UEAxMk NzhlNDRmYWItNGQ0Ny00YTM1LWIyOWItOWEyMmI0NTZiNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpNM5c5neqp3QyrnwNwo5+LbbwmDFUkhZpT0 wl+Zdcs4U6SA9ZJ1Ssnd2oBcgJ1Q5tD69/1DSWPmNzWH3leW4vPXA2v+grO7JVl7 PqRPQzA94U0y3GdUy1/EvyvM5K9Qm6sEkUVnrzJ1fJrjB+/LxOFJ4KB/UGvDZBaG EI517+6RUxFCoqk7xVqx4WmG8p4xs30SCCw7VR4aXa239M99enu00YClTyS+cRbD +enTX/cNlfeKy8bnRgi15sq2dX2Fz+utQnP+u8i6Rvr6dm4fy+eGHP8tyQ5sv8Vf Syxofd4XDC5rHCJD5NqHCkRRQSKP1W/f0JNTbpSebRpDPRcB/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGewLYS3/AWqTrS0TsPt4kY/t+zqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjotJI4DXfDP1j3fwINuw0 6a6xWRa4fNAEY9l1cXBWc9N5Q4zUMOkFewV4eiaXUuCku3HePfuY/MNxDeE0W1DN 7Py8KxADY7yYv2mHhrEHNZOMkXcyuKnT0EEFtw+2RH6xp0bcGkRdGz4/kfcaCQdY UAQNZh4cV5npHo5yE8PSrvUTeOS61+X2UnLhjgfAxIkYubP0NbxRpUyN7Aj489nU QQEoWt6ttNd+ntDSTYEwWUBmT/unReDSLSQ/ZfZA/BcIeTGvRZ7phEk4KrOpuoDS b2S1E2MY/+sc5TewNH5gYi0QpID8FtiFqAXz1P1PACQ3NWInhMe8ig/jLUFyrm2Q -----END CERTIFICATE-----Generated at Thu Mar 26 02:41:40 2026 by rpki-client