$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: qVtVhS41RT3JxonWZ98D/cQuY1ckqAH0DiM6kCY4X6s= Subject key identifier: 88:94:46:1D:B3:F0:4B:4F:60:69:6F:61:BF:BB:96:77:C9:E0:35:C9 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584D4877462BF9C4E84910CA5380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3434 Signing time: Wed 25 Mar 2026 07:00:04 +0000 Manifest this update: Wed 25 Mar 2026 07:00:04 +0000 Manifest next update: Sat 28 Mar 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: n3S4fnJ2tPTUqx19WPfvs2LPBwXVp588ob5jjCauYGI=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: 2ng/ljHrknP4eliRmlPiEWVJlbnmahW1lMWt3yz8LMY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:77:46:2b:f9:c4:e8:49:10:ca:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Mar 25 07:00:04 2026 GMT Not After : Mar 28 07:00:00 2026 GMT Subject: CN=9fbf919d-bd7a-4dab-843f-1b88a5099dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:72:12:e5:af:2e:49:95:41:61:e6:97:e4: fe:cf:b4:ec:fb:21:e9:c9:f6:b6:21:6d:a7:23:28: 34:f6:a6:92:a5:c4:4c:f2:19:35:aa:4c:87:27:79: 02:d2:76:0b:75:34:2d:7f:0e:ba:e8:de:20:c8:20: 87:19:07:ba:dc:ec:75:86:f1:ff:cf:01:13:dd:04: 25:54:d7:a6:a6:82:a9:c3:8b:b9:8c:af:0c:a0:cd: 92:2f:af:ef:6a:96:60:92:80:d9:e2:6d:6f:c2:f7: b0:bf:37:ab:db:6d:22:c0:f9:eb:2c:57:14:4f:72: 41:47:b2:0b:86:7a:d2:a1:9b:8b:92:c8:00:50:6b: 07:93:62:19:e6:d6:24:ec:32:f1:6d:ea:9b:53:f5: 2d:aa:63:7b:14:db:07:02:56:76:7d:17:61:26:04: a1:fb:2d:f5:9e:e2:39:a6:bf:6e:1e:fe:69:05:e6: c2:4f:97:a6:41:3b:11:e5:c4:9b:fd:dd:3f:84:41: 25:b6:0b:db:f4:37:f6:8a:a4:c2:0b:77:04:f1:0e: dc:16:a2:ca:f7:63:7f:49:6a:3e:68:d7:02:0e:d4: 31:9e:a7:60:73:8e:77:d6:19:d5:9b:d5:a6:6f:b2: fb:c6:e9:a9:57:d5:25:62:5a:71:fd:99:63:9d:61: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:94:46:1D:B3:F0:4B:4F:60:69:6F:61:BF:BB:96:77:C9:E0:35:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:9e:47:8b:8e:b5:b4:50:9e:e4:26:bc:07:96:e4:b1:b1:ec: 52:3b:9d:55:30:25:a0:7a:bf:dc:fb:52:a6:4a:44:df:80:fe: 08:9c:fd:ad:ef:57:9f:4d:90:8a:bd:f5:d1:c2:dd:2a:97:32: a5:98:62:50:8e:bb:2a:3a:e2:c8:2c:8e:66:18:7c:67:dd:ca: 04:00:ed:51:a0:fe:d0:68:0e:56:a4:1c:b8:18:9d:79:4a:73: b1:d0:64:84:e8:cb:19:5e:a4:a7:ba:fe:70:0b:27:80:a1:2c: 00:a7:6f:9b:d9:77:9d:e3:dc:80:6f:31:33:de:80:2d:a3:93: 0a:f0:0a:0c:a9:33:8d:15:62:52:f1:23:64:2b:db:c5:4a:2a: 54:e5:ad:e9:98:6e:6d:f3:b5:d4:11:b8:06:2d:09:05:2f:5c: 9a:a0:89:82:a5:c2:e8:b1:b0:d8:4f:e8:8c:9a:52:22:de:b5: 52:7b:5b:91:54:2a:56:08:e4:8d:39:27:3f:2b:cc:20:d7:a1: 34:12:97:2b:b8:1a:5f:e8:0f:dc:db:a4:4d:5c:c0:6b:e6:7d: 11:59:5f:e1:a6:ee:dc:95:51:88:fe:97:11:81:ff:33:38:1e: d2:37:68:9e:a6:7e:07:84:23:ed:ba:29:34:44:66:01:ed:23: 27:36:b0:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Id0Yr+cToSRDKU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDMyNTA3MDAwNFoXDTI2MDMyODA3MDAwMFowLzEtMCsGA1UEAxMk OWZiZjkxOWQtYmQ3YS00ZGFiLTg0M2YtMWI4OGE1MDk5ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9lyEuWvLkmVQWHml+T+z7Ts+yHpyfa2IW2n Iyg09qaSpcRM8hk1qkyHJ3kC0nYLdTQtfw666N4gyCCHGQe63Ox1hvH/zwET3QQl VNempoKpw4u5jK8MoM2SL6/vapZgkoDZ4m1vwvewvzer220iwPnrLFcUT3JBR7IL hnrSoZuLksgAUGsHk2IZ5tYk7DLxbeqbU/UtqmN7FNsHAlZ2fRdhJgSh+y31nuI5 pr9uHv5pBebCT5emQTsR5cSb/d0/hEEltgvb9Df2iqTCC3cE8Q7cFqLK92N/SWo+ aNcCDtQxnqdgc4531hnVm9Wmb7L7xumpV9UlYlpx/ZljnWE0JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIiURh2z8EtPYGlvYb+7lnfJ4DXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC3nkeLjrW0UJ7kJrwHluSx sexSO51VMCWger/c+1KmSkTfgP4InP2t71efTZCKvfXRwt0qlzKlmGJQjrsqOuLI LI5mGHxn3coEAO1RoP7QaA5WpBy4GJ15SnOx0GSE6MsZXqSnuv5wCyeAoSwAp2+b 2Xed49yAbzEz3oAto5MK8AoMqTONFWJS8SNkK9vFSipU5a3pmG5t87XUEbgGLQkF L1yaoImCpcLosbDYT+iMmlIi3rVSe1uRVCpWCOSNOSc/K8wg16E0EpcruBpf6A/c 26RNXMBr5n0RWV/hpu7clVGI/pcRgf8zOB7SN2iepn4HhCPtuik0RGYB7SMnNrA2 -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:32 2026 by rpki-client