$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft File: 7405a32c-964c-4b30-a008-0f287767e1c1.mft (raw, json) Hash identifier: qPC87Iczjwi2KkigrAm4kPy6VQXn4wEmIvK+PjaONnU= Subject key identifier: 0F:5C:FF:45:80:33:49:45:86:7B:D5:E4:7D:C2:08:51:76:83:3F:80 Authority key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Certificate issuer: /CN=7405a32c-964c-4b30-a008-0f287767e1c1 Certificate serial: 010D0C9F4328584D49FA71A8781128D71090D580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft Manifest number: 010D0C9F4328584073A82713ADABE847F09C55B4 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa (hash: VN+UXygOFV2wSPRSMm7bY3l0RLGqHjxfIetAF5xv27Y=) 2: 7405a32c-964c-4b30-a008-0f287767e1c1.crl (hash: qWCbVtjVPmHRsrKIHuZdZSMYUGsFXETXEH2IlTOQl48=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:71:a8:78:11:28:d7:10:90:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7405a32c-964c-4b30-a008-0f287767e1c1 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=77cf3522-1ea3-4db5-afeb-d696971a6cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:01:4e:81:9c:a7:5b:e6:d8:6a:f4:19:64: d6:a8:c7:5c:9c:f3:b3:59:28:19:85:11:97:1d:a1: dc:7b:eb:1c:dd:8f:84:5e:30:2b:ba:12:d9:6b:f8: 84:5c:5f:ba:31:1f:38:f0:c3:0a:24:2d:b9:52:de: dc:20:63:09:d5:1b:9d:0a:cf:e3:bc:f0:87:36:46: 67:71:b6:c8:46:4c:e9:b0:d7:0c:c8:bd:5e:28:de: f2:d0:79:17:c1:21:fa:c1:3f:b0:5c:5e:94:bb:dd: fc:3c:04:8c:bd:34:a2:3e:ca:86:6b:3e:16:49:54: 94:59:a8:b7:06:93:ea:5b:bd:0e:1c:1b:0f:ad:77: ce:22:c9:ee:55:6c:9a:36:8c:13:6e:d7:4e:d6:b2: 73:04:27:3f:ac:7a:d7:a8:d5:58:b3:5b:2f:c3:99: d5:aa:04:f1:7c:94:01:de:3e:f3:1c:e3:c2:e2:0b: a1:9c:d7:cb:92:4d:6d:e3:4a:ed:82:39:45:b6:1e: 4d:0a:1a:46:07:00:13:2e:ab:44:c7:54:41:1b:6f: c6:a2:78:be:48:11:bf:35:cb:3c:e1:d6:64:93:e2: d6:dd:61:70:5b:07:f3:dc:b1:10:09:09:70:73:32: fb:d1:57:06:2a:3f:f0:7d:d1:42:d4:37:2b:5a:31: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5C:FF:45:80:33:49:45:86:7B:D5:E4:7D:C2:08:51:76:83:3F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl X509v3 Authority Key Identifier: keyid:E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ae:2f:44:24:b9:ee:13:fd:83:2e:43:f6:25:aa:b4:ae:a0: d7:06:43:6b:38:ee:72:b1:19:bd:e3:45:f2:c4:07:6d:30:7e: b2:09:c6:8a:97:ce:f9:66:f7:6f:69:5b:fe:01:a1:b0:db:50: cb:34:00:0c:54:62:32:86:44:d6:2f:e1:64:61:c6:bf:53:52: 74:cc:1d:99:74:5f:f3:94:a9:db:db:84:62:d0:44:e7:bb:a2: ae:87:9b:9a:02:61:1c:6e:08:bc:03:26:73:7b:9b:86:33:8e: 17:d5:a5:27:7c:0c:84:e6:fa:f7:a7:5e:47:8e:f7:41:4d:ac: 60:54:f2:32:2f:71:67:3a:92:d7:f5:61:13:04:d5:2e:bc:67: 01:f3:69:e4:3e:ed:9d:08:d3:b8:3d:57:ec:90:9e:5a:f0:cb: 6b:d0:e1:d5:ff:e0:b8:47:f7:7f:7b:9b:15:8d:a3:af:0b:4d: 89:d4:d1:65:5c:3b:f2:03:87:dc:af:15:c1:99:ad:38:46:4d: 28:58:e4:6c:df:5b:49:8b:0c:44:7d:00:3f:a6:f2:c4:83:05: 5a:e4:cc:07:f3:90:1d:c7:0f:2e:d0:54:48:37:3b:52:d1:9f: b0:b0:12:68:15:22:d7:18:28:2c:7e:3e:d6:88:33:66:c0:57: e0:2a:be:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nGoeBEo1xCQ1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3Njdl MWMxMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NzdjZjM1MjItMWVhMy00ZGI1LWFmZWItZDY5Njk3MWE2Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmoBToGcp1vm2Gr0GWTWqMdcnPOzWSgZhRGX HaHce+sc3Y+EXjAruhLZa/iEXF+6MR848MMKJC25Ut7cIGMJ1RudCs/jvPCHNkZn cbbIRkzpsNcMyL1eKN7y0HkXwSH6wT+wXF6Uu938PASMvTSiPsqGaz4WSVSUWai3 BpPqW70OHBsPrXfOIsnuVWyaNowTbtdO1rJzBCc/rHrXqNVYs1svw5nVqgTxfJQB 3j7zHOPC4guhnNfLkk1t40rtgjlFth5NChpGBwATLqtEx1RBG2/Goni+SBG/Ncs8 4dZkk+LW3WFwWwfz3LEQCQlwczL70VcGKj/wfdFC1DcrWjELRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA9c/0WAM0lFhnvV5H3CCFF2gz+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1 YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvNzQwNWEzMmMtOTY0Yy00 YjMwLWEwMDgtMGYyODc3NjdlMWMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQwNWEzMmMtOTY0Yy00YjMwLWEw MDgtMGYyODc3NjdlMWMxLzc0MDVhMzJjLTk2NGMtNGIzMC1hMDA4LTBmMjg3NzY3 ZTFjMS5jcmwwHwYDVR0jBBgwFoAU6XN7Fc1m7aMLaGZDcZRSCBP32FgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4 Nzc2N2UxYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAri9EJLnuE/2DLkP2Jaq0 rqDXBkNrOO5ysRm940XyxAdtMH6yCcaKl875ZvdvaVv+AaGw21DLNAAMVGIyhkTW L+FkYca/U1J0zB2ZdF/zlKnb24Ri0ETnu6Kuh5uaAmEcbgi8AyZze5uGM44X1aUn fAyE5vr3p15HjvdBTaxgVPIyL3FnOpLX9WETBNUuvGcB82nkPu2dCNO4PVfskJ5a 8Mtr0OHV/+C4R/d/e5sVjaOvC02J1NFlXDvyA4fcrxXBma04Rk0oWORs31tJiwxE fQA/pvLEgwVa5MwH85Adxw8u0FRINztS0Z+wsBJoFSLXGCgsfj7WiDNmwFfgKr5e -----END CERTIFICATE-----Generated at Thu Mar 26 02:43:11 2026 by rpki-client