$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: 0LQV/7bGzGscON8up1kf8nf7Q37sFVVQ9kweSILGGNE= Subject key identifier: 73:A0:75:07:8F:4A:2A:C1:A5:86:EF:EC:20:AB:8A:07:68:F1:6A:44 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584D4A53BA22819ECDD8CD3C36C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CB53 Signing time: Wed 25 Mar 2026 23:00:03 +0000 Manifest this update: Wed 25 Mar 2026 23:00:03 +0000 Manifest next update: Fri 27 Mar 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: FdgcLu5c6DKRkOgzbYxHM4aNkQITSncejoa1UlvpVXk=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: paFTnhtNnT11KFi1hSpcunqTlG2y2j6A2LrpdgzkqFU=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: LiCwpOGdOHzaK/1kkNpiT+rH2LUS2Nd3G9GIhI+s1HE=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: Sv3kt3zKTHyMtLkyPcXpX6sDSVe3Y0DqZurh+T6Hgoc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:ba:22:81:9e:cd:d8:cd:3c:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Mar 25 23:00:03 2026 GMT Not After : Mar 27 23:00:00 2026 GMT Subject: CN=8669f47e-5c0e-42e9-91fd-33adf6e954f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:1c:c3:af:ad:2f:0b:29:41:98:d0:1f:4a: 16:59:53:b6:6e:7e:5a:be:97:c7:89:92:d7:b6:e8: 38:01:5f:45:e3:95:24:81:de:5e:59:7e:22:a2:bd: 4b:f3:5b:06:99:e8:99:fe:a9:d3:11:c3:d1:b6:2d: 9e:80:0f:33:71:59:3e:a4:17:d9:96:f3:cc:55:8f: 1d:db:e5:de:13:29:53:cf:39:14:75:5e:e5:9e:36: 49:35:2e:fb:ff:b9:bc:79:1f:9b:70:d2:ee:fd:4c: c9:f7:a3:e7:1b:a0:73:f7:f1:5c:28:a2:b0:5e:2c: 5c:65:38:0a:94:38:15:72:5e:b6:9a:d8:cc:8f:0b: 85:fa:b5:e8:da:92:55:ad:1e:6a:1b:b9:84:de:f9: 8f:93:ca:29:8b:08:a0:04:42:49:25:c5:a3:ce:8a: b3:28:3d:15:8b:17:1b:23:06:4c:d3:0c:82:53:09: f5:10:ff:10:e2:ea:0c:cd:b5:85:d7:17:aa:d9:dc: 05:bf:93:7e:85:45:02:79:4b:ef:44:2d:f7:fc:bf: 02:ee:0e:f3:88:07:14:8d:ba:7e:10:c8:41:20:b6: 29:9e:80:33:5f:9b:03:aa:02:e9:0f:1a:ae:00:74: ad:8d:5d:3d:ad:b4:6e:5c:d6:d7:30:3b:2a:a7:22: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A0:75:07:8F:4A:2A:C1:A5:86:EF:EC:20:AB:8A:07:68:F1:6A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c2:5c:05:45:27:13:6f:07:2d:a3:3c:91:b9:90:52:a5:ae: 2f:aa:72:b2:9e:8a:e0:4a:5f:83:88:18:9e:fb:ae:17:a6:36: fd:4a:60:85:24:9d:e2:dc:41:1a:57:23:6c:76:84:12:1e:91: 39:d9:74:14:7f:f8:be:c1:e8:f2:e2:2c:d8:75:b6:a2:76:52: 51:19:3c:6a:c1:a4:72:fb:da:33:89:15:f8:b1:bd:04:8e:f2: c3:72:0f:c6:86:df:c4:2f:5f:c3:d7:c9:1a:c1:c9:94:02:9c: 46:13:14:88:ff:7f:d4:a4:3a:15:65:30:77:01:83:3c:58:10: db:62:cf:4a:cd:60:d4:df:f1:ce:ba:d3:cf:9d:37:e1:a3:8a: 60:e4:eb:43:22:98:61:ce:d5:a7:3d:4d:9e:97:1e:3d:a0:46: 3c:25:29:8d:06:b9:fd:31:f5:9d:59:93:74:55:85:49:c9:de: 86:e8:94:d3:2a:4d:63:60:59:84:6b:66:a2:de:ba:8d:19:e2: f3:d9:ad:da:14:84:6c:2e:3c:10:2d:88:67:3b:94:9e:d0:96: bb:b0:d7:58:41:16:21:bc:86:6b:06:29:2c:e7:e4:94:68:f6: 7f:de:52:19:dc:d3:2a:ae:72:1f:73:b9:8e:f5:50:65:d8:d0: 4b:3b:7f:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KU7oigZ7N2M08NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDMyNTIzMDAwM1oXDTI2MDMyNzIzMDAwMFowLzEtMCsGA1UEAxMk ODY2OWY0N2UtNWMwZS00MmU5LTkxZmQtMzNhZGY2ZTk1NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx4cw6+tLwspQZjQH0oWWVO2bn5avpfHiZLX tug4AV9F45Ukgd5eWX4ior1L81sGmeiZ/qnTEcPRti2egA8zcVk+pBfZlvPMVY8d 2+XeEylTzzkUdV7lnjZJNS77/7m8eR+bcNLu/UzJ96PnG6Bz9/FcKKKwXixcZTgK lDgVcl62mtjMjwuF+rXo2pJVrR5qG7mE3vmPk8opiwigBEJJJcWjzoqzKD0Vixcb IwZM0wyCUwn1EP8Q4uoMzbWF1xeq2dwFv5N+hUUCeUvvRC33/L8C7g7ziAcUjbp+ EMhBILYpnoAzX5sDqgLpDxquAHStjV09rbRuXNbXMDsqpyKRvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHOgdQePSirBpYbv7CCrigdo8WpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbwlwFRScTbwctozyRuZBS pa4vqnKynorgSl+DiBie+64Xpjb9SmCFJJ3i3EEaVyNsdoQSHpE52XQUf/i+wejy 4izYdbaidlJRGTxqwaRy+9oziRX4sb0EjvLDcg/Ght/EL1/D18kawcmUApxGExSI /3/UpDoVZTB3AYM8WBDbYs9KzWDU3/HOutPPnTfho4pg5OtDIphhztWnPU2elx49 oEY8JSmNBrn9MfWdWZN0VYVJyd6G6JTTKk1jYFmEa2ai3rqNGeLz2a3aFIRsLjwQ LYhnO5Se0Ja7sNdYQRYhvIZrBiks5+SUaPZ/3lIZ3NMqrnIfc7mO9VBl2NBLO39U -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:59 2026 by rpki-client