$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft File: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft (raw, json) Hash identifier: a5IzpkKYFKru51mnZ5CKtsnWwhpDzF/u4WO4ZQ6GsWE= Subject key identifier: F1:9F:8D:70:E3:E9:0C:7B:AA:6D:2A:BA:D4:7A:27:89:9A:41:BE:AC Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584D490C2A32FBC3AA3DCD5C0F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft Manifest number: 010D0C9F4328584073A851A9D5E916254E2FBCD2 Signing time: Wed 25 Mar 2026 12:00:04 +0000 Manifest this update: Wed 25 Mar 2026 12:00:04 +0000 Manifest next update: Sat 28 Mar 2026 12:00:00 +0000 Files and hashes: 1: 7be3ce67-426a-397a-9a74-e2c03aae3762.roa (hash: hRUm/srfdDK11meHY3yISLeol5zTDYRM55xMrBy+A7M=) 2: 842ecda0-182f-3843-adab-4bdda84d6875.roa (hash: fDy+hlDp7P9Sgor2v0Y24R0Ib4fxwPIrBXmxlF7KGw4=) 3: 9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa (hash: h4+sUswhqtkwOnmwgRjQ80ufug+8nR2dkA5kNG+cZM0=) 4: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (hash: hecmn1weWQrlP5yKcrHFf75VD/ouurmoGCbH16rV7To=) 5: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl (hash: QnXwi4Q5P5XxZ1AsVnGuLN/je7f4wkSgIPI4W1H5IXA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0c:2a:32:fb:c3:aa:3d:cd:5c:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Mar 25 12:00:04 2026 GMT Not After : Mar 28 12:00:00 2026 GMT Subject: CN=5301f8be-9eee-4a71-9471-e68f76448c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:04:b6:4f:1d:dc:24:4b:6f:6a:05:94:16: 17:7e:76:5b:c4:7c:c9:e0:7e:11:ac:db:a7:d1:71: 6c:3d:bb:2c:af:c1:69:ca:90:d7:f2:6b:60:78:11: a7:f0:86:96:5f:5f:ae:a4:17:70:99:4d:40:59:6c: ce:5e:ff:04:f5:d8:69:6a:10:9d:54:cf:2b:81:47: ad:c8:16:24:2e:e7:c3:1a:0a:25:e1:68:09:5f:c0: f3:65:b3:4d:ab:63:3b:cd:42:0d:ad:0c:af:91:09: e0:15:fd:69:80:44:5a:35:8f:d9:7a:de:5f:7b:2e: 28:0d:62:61:a1:86:bb:8d:cc:77:90:5d:3b:e3:75: 13:eb:55:cd:2b:19:9a:64:56:9c:00:f8:ab:b1:87: 69:19:c8:15:38:81:53:f4:85:91:86:fc:49:6a:0e: 9c:e5:a6:dc:62:66:67:3e:a0:3b:22:15:f0:15:26: b3:47:ee:43:1d:fc:1e:9b:bf:be:14:56:08:eb:4c: 04:4d:f9:7a:95:51:de:5b:65:83:9f:6c:60:7f:f6: 8f:4a:fc:a2:ba:fb:6b:31:64:e9:26:bd:23:1b:f8: 42:cf:69:37:17:3f:30:31:2a:06:ac:9a:40:20:fa: 41:2c:3e:31:4c:fb:48:93:54:b7:46:61:d3:ce:9b: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9F:8D:70:E3:E9:0C:7B:AA:6D:2A:BA:D4:7A:27:89:9A:41:BE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:00:1e:b3:08:5d:ae:c5:f5:93:f5:f9:28:bd:0a:53:43:7a: 24:40:37:c1:35:d3:62:45:34:3d:ff:8e:de:00:a3:93:7e:09: 52:5d:43:68:19:55:64:27:02:f1:46:02:b2:b3:b3:c9:89:2e: a4:56:28:61:11:ff:fa:bf:89:fa:5c:94:44:30:d9:71:5b:09: 7e:f4:08:d7:d5:62:aa:a8:64:b1:89:af:91:86:c9:de:1e:62: 1d:05:aa:6c:73:2c:90:62:af:64:68:3c:57:47:fa:88:22:f6: 66:07:e8:7b:91:e7:5d:6c:76:1e:10:d5:cd:88:7c:f1:f3:bc: 4f:19:b7:16:87:13:05:df:f4:93:50:24:1c:0d:c1:a5:86:9a: dd:f2:b3:78:1c:27:f1:c8:57:c6:ad:46:4d:ce:73:05:d7:59: 68:fc:2e:7d:fd:0a:1b:66:ff:59:b5:8d:dd:ba:ad:77:1d:fa: ad:4d:3d:bf:59:d7:60:06:10:84:79:b8:ae:6f:66:68:91:b5: 61:3a:1c:1e:2b:9f:4d:5c:3e:7b:e3:60:bb:b3:71:23:27:01: 4f:75:d5:e1:fb:60:26:a6:64:93:dc:fc:28:6f:d9:99:93:4c: 2d:3e:45:34:79:5a:7a:f4:b0:16:10:c9:59:e7:f4:eb:4a:2f: 3e:d5:48:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JDCoy+8OqPc1cD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI2MDMyNTEyMDAwNFoXDTI2MDMyODEyMDAwMFowLzEtMCsGA1UEAxMk NTMwMWY4YmUtOWVlZS00YTcxLTk0NzEtZTY4Zjc2NDQ4YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKoEtk8d3CRLb2oFlBYXfnZbxHzJ4H4RrNun 0XFsPbssr8FpypDX8mtgeBGn8IaWX1+upBdwmU1AWWzOXv8E9dhpahCdVM8rgUet yBYkLufDGgol4WgJX8DzZbNNq2M7zUINrQyvkQngFf1pgERaNY/Zet5fey4oDWJh oYa7jcx3kF0743UT61XNKxmaZFacAPirsYdpGcgVOIFT9IWRhvxJag6c5abcYmZn PqA7IhXwFSazR+5DHfwem7++FFYI60wETfl6lVHeW2WDn2xgf/aPSvyiuvtrMWTp Jr0jG/hCz2k3Fz8wMSoGrJpAIPpBLD4xTPtIk1S3RmHTzpuSvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPGfjXDj6Qx7qm0qutR6J4maQb6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvYWQzZjY2MjAtMDU3Ni00 NmQ4LWIwNWQtM2UyY2RkMDZhZmEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMAB6zCF2uxfWT9fkovQpT Q3okQDfBNdNiRTQ9/47eAKOTfglSXUNoGVVkJwLxRgKys7PJiS6kVihhEf/6v4n6 XJREMNlxWwl+9AjX1WKqqGSxia+RhsneHmIdBapscyyQYq9kaDxXR/qIIvZmB+h7 keddbHYeENXNiHzx87xPGbcWhxMF3/STUCQcDcGlhprd8rN4HCfxyFfGrUZNznMF 11lo/C59/QobZv9ZtY3duq13HfqtTT2/WddgBhCEebiub2ZokbVhOhweK59NXD57 42C7s3EjJwFPddXh+2AmpmST3Pwob9mZk0wtPkU0eVp69LAWEMlZ5/TrSi8+1Uh6 -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:31 2026 by rpki-client