$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft File: fd61a214-d867-444e-b2f4-ca291d4c4419.mft (raw, json) Hash identifier: m3ujWYzwHfMkyUCtIlUPbn3yqXNWxEh38lxUGW3o/5E= Subject key identifier: A3:FC:A6:6C:A9:D8:45:7B:EC:B5:19:88:87:32:28:36:F7:31:F9:06 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F4328584D4A183BEB547ACBB39DA35400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft Manifest number: 010D0C9F4328584073A828C80957C4AEF0069CAE Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 86181317-6bc3-3829-8e82-a5679c723f33.roa (hash: cx23cYroc84l09//Ga/IwwijRSAjoJDvi4Le4Xia4fA=) 2: fd61a214-d867-444e-b2f4-ca291d4c4419.crl (hash: HYWQRq8w9Ot30uNF3CFbacTm7BEGhqH2t3Asnf4YlkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3b:eb:54:7a:cb:b3:9d:a3:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=7d1d346f-143f-4ad0-8d5b-efcc97b5e107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:41:a4:74:b0:b8:5b:00:d8:28:cf:93:08: 95:51:7a:a3:eb:e7:97:c4:76:8a:b0:c6:98:80:22: 99:5f:7e:45:af:d4:1c:c2:b9:dd:67:5b:df:1b:3c: bf:cc:18:c4:71:9e:5f:f6:62:a2:3e:10:97:fd:35: c9:8f:9e:8d:89:42:8f:e1:c0:e1:15:ec:56:a9:3a: f1:6d:27:c2:c3:90:5a:30:ae:6c:62:db:1f:e9:1c: 5a:9f:15:c7:f3:6b:02:57:f1:c2:9d:6a:b2:9c:de: 3b:7e:8e:03:d0:a1:9b:cb:8e:c6:cf:88:27:f2:13: 4a:11:06:1a:98:cb:be:30:f6:ce:74:ee:a0:68:ff: 49:53:c9:68:67:d0:da:dd:c5:a5:16:d1:4d:9f:f5: 21:66:aa:68:1e:16:fc:09:87:d3:2f:b1:97:fc:6b: 91:1b:57:2d:3e:a9:c5:2d:0f:41:c2:39:83:a9:50: 7d:d3:2a:41:68:b6:d7:76:3f:91:4e:8d:78:10:93: 61:f4:16:b1:73:c1:75:ba:02:ad:d1:f8:22:cd:76: 5f:f6:39:ec:af:5b:54:33:2b:a9:cd:af:1a:6a:97: 6e:af:44:11:fb:4c:5b:4c:57:f1:09:c1:18:66:4d: 30:dc:99:ad:a7:31:7a:eb:e8:35:fe:8d:de:3d:1a: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FC:A6:6C:A9:D8:45:7B:EC:B5:19:88:87:32:28:36:F7:31:F9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:53:26:a6:e0:80:a4:86:74:53:e3:b8:9c:97:b0:94:3a:6b: aa:cc:13:f9:6a:e8:05:e0:20:08:ee:a2:7d:9c:0a:c5:a7:f3: c5:85:f6:f9:f7:7d:ec:fa:d3:83:7c:39:cc:27:a9:bf:45:a9: 62:56:0c:3a:12:ac:fd:38:3a:62:e8:f8:f2:23:8f:73:1d:56: 97:5e:bb:31:82:08:a4:d5:23:24:24:85:54:90:de:ff:ce:8e: 32:4d:91:13:2a:5f:06:f7:b0:96:dd:5a:48:16:3c:1d:72:14: ce:30:8f:c8:0e:9e:f9:4d:52:13:e3:38:8e:a9:1b:bb:25:32: 04:60:2b:78:41:51:c4:2a:9c:ca:ed:79:1d:c9:25:02:c7:02: 40:e3:52:cb:cb:0a:ae:88:d2:07:15:61:f8:53:9d:a9:67:aa: 30:55:e5:d3:e6:3a:ae:d8:2a:69:92:6c:9f:4f:2e:ab:27:dd: f9:ac:8b:94:b8:90:6b:80:b7:b1:f3:2b:93:a9:6c:48:d1:4c: 17:71:f1:4f:40:9f:32:7e:58:4f:28:2f:bd:4d:f6:55:f3:1d: de:43:6a:1c:7a:05:6a:f9:99:93:15:38:5b:97:06:21:fc:18: 37:07:1f:92:40:a5:c0:fa:29:a9:b4:00:25:af:3b:59:fc:c4: ff:51:c8:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDvrVHrLs52jVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk N2QxZDM0NmYtMTQzZi00YWQwLThkNWItZWZjYzk3YjVlMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxURBpHSwuFsA2CjPkwiVUXqj6+eXxHaKsMaY gCKZX35Fr9QcwrndZ1vfGzy/zBjEcZ5f9mKiPhCX/TXJj56NiUKP4cDhFexWqTrx bSfCw5BaMK5sYtsf6RxanxXH82sCV/HCnWqynN47fo4D0KGby47Gz4gn8hNKEQYa mMu+MPbOdO6gaP9JU8loZ9Da3cWlFtFNn/UhZqpoHhb8CYfTL7GX/GuRG1ctPqnF LQ9BwjmDqVB90ypBaLbXdj+RTo14EJNh9Baxc8F1ugKt0fgizXZf9jnsr1tUMyup za8aapdur0QR+0xbTFfxCcEYZk0w3JmtpzF66+g1/o3ePRp4awIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKP8pmyp2EV77LUZiIcyKDb3MfkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvZmQ2MWEyMTQtZDg2Ny00 NDRlLWIyZjQtY2EyOTFkNGM0NDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZUyam4ICkhnRT47icl7CU OmuqzBP5augF4CAI7qJ9nArFp/PFhfb5933s+tODfDnMJ6m/RaliVgw6Eqz9ODpi 6PjyI49zHVaXXrsxggik1SMkJIVUkN7/zo4yTZETKl8G97CW3VpIFjwdchTOMI/I Dp75TVIT4ziOqRu7JTIEYCt4QVHEKpzK7XkdySUCxwJA41LLywquiNIHFWH4U52p Z6owVeXT5jqu2CppkmyfTy6rJ935rIuUuJBrgLex8yuTqWxI0UwXcfFPQJ8yflhP KC+9TfZV8x3eQ2ocegVq+ZmTFThblwYh/Bg3Bx+SQKXA+imptAAlrztZ/MT/UcjQ -----END CERTIFICATE-----Generated at Thu Mar 26 02:34:36 2026 by rpki-client