$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: xOw7OU4xnGeAKxV876flFXO6kZkVV2GuhsOBInxjTv8= Subject key identifier: D1:C8:E8:E3:80:A0:DD:71:74:17:1D:F5:FF:5C:AE:7E:D6:2A:6A:C5 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584D4AAD1D96F20EA6A24135B940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337A59 Signing time: Thu 26 Mar 2026 02:00:09 +0000 Manifest this update: Thu 26 Mar 2026 02:00:09 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: 4+LDLGdZzBRhLwZVa2xZTZYnWEhRgU3b4vMKTe0TD9E=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: EB2LWe+1WD39PSjs8qyH3cT1b6F92AbWWjUA+TOk25o=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: +KDHYs216+AMFKtiRgdZ2AusNh+82tcFWznJUbC8h5w=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: X5H56wCb54eyPhgVf26tVICvXkywU3s4OFWmShVgH8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ad:1d:96:f2:0e:a6:a2:41:35:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Mar 26 02:00:09 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=64e822ff-addd-4479-9d60-d2f5522610dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:ee:1c:67:1b:1d:3a:29:60:f1:58:cb:55: 34:a1:67:ea:09:78:a4:bd:13:ee:03:77:38:d6:2c: fa:10:52:1e:68:16:4f:f7:aa:78:55:ca:59:24:d6: 8f:cf:c3:08:f4:d1:6f:66:00:2d:df:6b:fa:f3:c9: a5:79:5e:e0:85:6f:ef:17:33:84:fc:79:2f:7f:42: 13:ef:1a:0b:60:9f:d3:79:84:a1:c9:4c:9e:5b:ea: 67:d5:bb:56:34:db:65:22:86:db:90:eb:38:14:36: 2f:b8:8f:21:44:3c:4e:b5:9c:d7:8f:3f:d5:35:ee: 0e:d5:60:77:59:9a:98:d3:96:47:12:c2:4c:d8:e1: 19:f1:30:10:6a:78:7e:97:c0:51:ce:2f:29:dd:f9: 61:13:42:ea:23:cd:b3:b0:fd:b2:f7:7a:bb:67:d4: e7:98:14:2e:34:43:a0:d0:39:d9:56:da:09:a0:80: 5b:ab:b5:6f:66:9d:8d:a9:ff:26:80:84:ce:28:21: 13:c2:78:8a:0a:76:54:28:a6:17:41:d6:85:e9:3a: 58:98:b0:ba:f8:fd:cc:79:38:ce:0f:8e:8f:ba:29: b4:fe:93:ae:eb:1d:c8:71:77:7e:20:b5:2e:6b:80: 6b:5e:7f:15:4b:c9:62:53:2a:a4:2f:0e:d3:8c:fd: 52:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:E8:E3:80:A0:DD:71:74:17:1D:F5:FF:5C:AE:7E:D6:2A:6A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:21:32:94:50:45:33:ac:df:0a:75:4c:64:47:1c:f9:00:e0: 0d:f9:83:db:59:f0:6c:0d:f2:b2:15:18:d0:c9:86:15:a6:67: 2d:99:c2:bf:a0:48:e4:35:32:6f:86:1b:ad:2e:59:94:c4:18: 55:0c:17:c2:75:46:ef:54:a1:e0:57:ad:e3:f1:94:16:29:d3: 27:4d:ec:dc:08:3b:cf:8a:18:41:76:7c:a9:17:af:bd:99:69: 30:2a:3c:89:91:0d:7f:f6:36:07:5a:ea:dc:5d:bb:a8:ca:aa: 8f:6e:79:e8:14:09:4d:55:39:af:4d:31:1b:72:ae:da:ba:a1: 0e:ec:b3:24:cd:1a:89:ca:a6:5b:7a:33:04:48:cf:40:6d:07: f1:01:bc:9f:23:55:01:58:65:81:4b:4d:0c:d0:06:ab:9b:ee: b4:45:1f:40:97:57:65:2d:be:a5:87:0c:1b:d5:f6:c1:f6:64: be:90:a6:a6:31:0b:92:49:24:bd:fc:43:68:c2:03:18:cd:09: a2:5a:c2:de:5d:04:25:99:bb:7f:4c:1c:72:39:7a:ec:55:6d: 0d:49:a6:b0:7f:2f:5f:25:b3:3f:52:97:01:9b:03:42:06:f5: 35:4e:a1:a8:9f:4a:30:e0:8a:45:7b:c0:96:33:20:28:a4:be: c1:8a:8b:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KrR2W8g6mokE1uUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDMyNjAyMDAwOVoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk NjRlODIyZmYtYWRkZC00NDc5LTlkNjAtZDJmNTUyMjYxMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvazuHGcbHTopYPFYy1U0oWfqCXikvRPuA3c4 1iz6EFIeaBZP96p4VcpZJNaPz8MI9NFvZgAt32v688mleV7ghW/vFzOE/Hkvf0IT 7xoLYJ/TeYShyUyeW+pn1btWNNtlIobbkOs4FDYvuI8hRDxOtZzXjz/VNe4O1WB3 WZqY05ZHEsJM2OEZ8TAQanh+l8BRzi8p3flhE0LqI82zsP2y93q7Z9TnmBQuNEOg 0DnZVtoJoIBbq7VvZp2Nqf8mgITOKCETwniKCnZUKKYXQdaF6TpYmLC6+P3MeTjO D46Puim0/pOu6x3IcXd+ILUua4BrXn8VS8liUyqkLw7TjP1SKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNHI6OOAoN1xdBcd9f9crn7WKmrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVITKUUEUzrN8KdUxkRxz5 AOAN+YPbWfBsDfKyFRjQyYYVpmctmcK/oEjkNTJvhhutLlmUxBhVDBfCdUbvVKHg V63j8ZQWKdMnTezcCDvPihhBdnypF6+9mWkwKjyJkQ1/9jYHWurcXbuoyqqPbnno FAlNVTmvTTEbcq7auqEO7LMkzRqJyqZbejMESM9AbQfxAbyfI1UBWGWBS00M0Aar m+60RR9Al1dlLb6lhwwb1fbB9mS+kKamMQuSSSS9/ENowgMYzQmiWsLeXQQlmbt/ TBxyOXrsVW0NSaawfy9fJbM/UpcBmwNCBvU1TqGon0ow4IpFe8CWMyAopL7Biosw -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:09 2026 by rpki-client