$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft (raw, json) Hash identifier: sDXjFIPutWA/E5thzRxJJQ+Rc14ZTeWKdKp8wxkQS4Y= Subject key identifier: 24:1A:38:FC:10:86:E0:86:BC:E7:84:36:94:A2:84:60:69:92:10:4A Authority key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Certificate issuer: /CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Certificate serial: 010D0C9F4328584D4929F0E9CFBFE11D0017A6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft Manifest number: 010D0C9F4328584A629AFAFAF4C26B8EDA69CF91 Signing time: Wed 25 Mar 2026 13:00:04 +0000 Manifest this update: Wed 25 Mar 2026 13:00:04 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl (hash: b6hc6xsXC7D+9meu1CsYUZZV1ikdyiJsCihGgLW5eGU=) 2: 9b8f3de7-adff-3b45-8b51-de811d42f4ce.roa (hash: APiWub95IP5qxbrWHbKfJdooeuDetjoTFPT/8VBJgBE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:29:f0:e9:cf:bf:e1:1d:00:17:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Validity Not Before: Mar 25 13:00:04 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=170ffbc9-4da2-4629-868f-8c9976861fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:ec:ad:1c:d9:e3:78:c5:5a:64:0a:44:8e: 8f:f5:12:21:87:10:f0:fa:e6:82:17:ea:88:fc:3c: e9:3a:48:28:fe:40:2c:27:ed:28:39:38:8e:65:7d: e9:48:fb:b9:1d:d5:aa:03:a0:95:21:bd:1f:92:f6: 66:b8:35:b5:2a:7b:fb:de:61:b2:72:97:4e:53:f5: 2c:03:0e:5a:9f:8c:b0:fd:08:ca:42:ac:41:79:66: b8:44:d2:37:ab:75:e1:ea:c9:1f:a0:ba:18:d1:a2: a1:20:80:f1:76:05:d5:e5:6b:da:70:4a:c4:63:6b: 2e:49:33:6f:2d:4e:cb:31:a0:94:0b:4a:a6:d7:d6: cf:9b:99:af:b4:e8:4e:83:52:51:fc:7c:30:a6:57: 9c:73:3e:35:02:c6:48:84:44:73:57:3f:c3:42:bf: 55:a6:71:28:0f:3b:dd:72:aa:ee:b1:28:09:42:5e: fb:53:49:cd:b9:4e:4e:d9:71:68:b7:d1:41:16:59: 76:71:d4:d2:4b:ec:29:17:20:7a:58:65:6e:19:df: 6a:8a:ce:72:25:00:8b:f5:59:7d:92:5e:5a:78:d3: 1b:09:0f:a5:ad:f6:72:af:4e:ee:cc:8a:8f:fc:ee: f2:f1:5e:a3:40:98:36:90:64:84:36:ab:2b:60:1a: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:38:FC:10:86:E0:86:BC:E7:84:36:94:A2:84:60:69:92:10:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl X509v3 Authority Key Identifier: keyid:78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:82:6c:ed:6a:23:75:d0:b6:c0:8a:03:fe:ba:5e:04:a2:1b: de:b9:e0:35:c4:8c:42:97:d6:0e:8b:6d:34:9e:27:65:38:81: 89:98:c6:98:b9:ff:22:29:97:c9:90:1d:51:f8:7d:68:49:01: 88:d2:1f:0c:cd:53:4d:d6:1c:38:be:24:e5:a3:51:fa:e3:4c: a6:87:8d:b3:1f:b3:88:8e:60:9a:ec:31:76:15:e2:57:c8:d2: 74:78:f9:64:57:08:85:22:b4:a5:1d:cc:02:f5:6a:ce:1c:18: 2c:75:d2:b4:26:b5:a8:6e:e3:9f:71:f9:73:1b:37:95:31:6c: c7:18:5a:3a:c6:4a:18:19:97:22:1f:ab:5f:26:f2:1e:5a:6e: aa:c9:da:21:8a:b8:4f:0b:43:c8:a5:26:f4:41:f1:c2:70:81: 5d:0c:f0:c5:19:78:af:e6:b1:f7:ec:c1:ff:4c:8a:80:c5:d3: 13:df:ba:22:56:a8:0f:6e:16:50:04:85:55:79:59:99:97:2f: a3:6c:77:36:1a:4f:1e:51:1e:89:0b:e7:55:d9:05:f0:7e:ce: 77:3d:40:c0:ff:1a:55:42:ad:56:9c:3d:0d:96:86:60:33:ea: 66:2c:88:9f:75:f3:b1:61:3d:dc:a0:15:14:fe:59:ce:90:62: ab:ed:2f:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKfDpz7/hHQAXpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRh YzJiMB4XDTI2MDMyNTEzMDAwNFoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk MTcwZmZiYzktNGRhMi00NjI5LTg2OGYtOGM5OTc2ODYxZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeDsrRzZ43jFWmQKRI6P9RIhhxDw+uaCF+qI /DzpOkgo/kAsJ+0oOTiOZX3pSPu5HdWqA6CVIb0fkvZmuDW1Knv73mGycpdOU/Us Aw5an4yw/QjKQqxBeWa4RNI3q3Xh6skfoLoY0aKhIIDxdgXV5WvacErEY2suSTNv LU7LMaCUC0qm19bPm5mvtOhOg1JR/Hwwpleccz41AsZIhERzVz/DQr9VpnEoDzvd cqrusSgJQl77U0nNuU5O2XFot9FBFll2cdTSS+wpFyB6WGVuGd9qis5yJQCL9Vl9 kl5aeNMbCQ+lrfZyr07uzIqP/O7y8V6jQJg2kGSENqsrYBqbmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCQaOPwQhuCGvOeENpSihGBpkhBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDIw YTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvODAyMGEzOTktN2U4My00 YmI1LThkOGQtZTQyNGUyZWRhYzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODAyMGEzOTktN2U4My00YmI1LThk OGQtZTQyNGUyZWRhYzJiLzgwMjBhMzk5LTdlODMtNGJiNS04ZDhkLWU0MjRlMmVk YWMyYi5jcmwwHwYDVR0jBBgwFoAUeBxTEnLOMDBJLVBrmal/6fZM5X0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0 ZTJlZGFjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsgmztaiN10LbAigP+ul4E ohveueA1xIxCl9YOi200nidlOIGJmMaYuf8iKZfJkB1R+H1oSQGI0h8MzVNN1hw4 viTlo1H640ymh42zH7OIjmCa7DF2FeJXyNJ0ePlkVwiFIrSlHcwC9WrOHBgsddK0 JrWobuOfcflzGzeVMWzHGFo6xkoYGZciH6tfJvIeWm6qydohirhPC0PIpSb0QfHC cIFdDPDFGXiv5rH37MH/TIqAxdMT37oiVqgPbhZQBIVVeVmZly+jbHc2Gk8eUR6J C+dV2QXwfs53PUDA/xpVQq1WnD0NloZgM+pmLIifdfOxYT3coBUU/lnOkGKr7S/l -----END CERTIFICATE-----Generated at Thu Mar 26 03:37:23 2026 by rpki-client