$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: GFL64ObFBTmvCMHqmfbMn3YW1JjqapM0LTsy3zJnDJ8= Subject key identifier: 16:E9:D5:33:C1:89:26:CC:C8:A1:8E:7F:02:BB:32:10:DF:E5:0F:D7 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584D49658228555ED4C2DCA20500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A4788E Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: HKALk7APB9C5aWicLi6TTCgStel3ebW62XQl7OQXD3w=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: J72rHF9A90Ko+EylHcbY9n/Qq8C19QHCudgUch2KpfQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:82:28:55:5e:d4:c2:dc:a2:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=90eeb39f-5600-4bf1-a20c-28892210548b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:66:d3:d1:c8:03:dc:50:43:78:44:1a:54: 06:37:6b:90:27:6d:ed:37:75:7c:54:f2:9a:da:ca: 99:a8:23:64:3a:32:dc:3e:d0:b8:d0:75:86:06:7c: c8:f3:4e:40:83:e3:cd:bf:b5:9b:29:c8:c2:ca:1e: 33:1d:9e:87:f1:01:8b:76:09:36:39:8a:d9:98:ee: 60:9b:87:0d:bf:d2:be:d6:41:14:41:5e:09:57:df: 75:79:5b:ed:87:b1:32:97:cf:75:12:ce:fe:d2:ed: f6:9a:fa:80:5f:41:24:5d:16:0d:58:61:c5:18:38: cf:bc:a2:39:58:4f:33:f9:5b:91:51:55:dc:cf:23: 95:05:e7:db:a4:f4:7f:dc:fa:9f:ce:df:95:53:9a: fa:d6:94:f6:98:3a:7b:18:55:51:e3:21:cb:45:c1: fb:8b:aa:9a:b7:bb:db:e6:c3:8c:77:23:e3:5f:3e: af:50:29:73:5a:c9:d6:23:7d:cf:9d:b7:28:9e:1f: 74:54:b7:24:fc:37:eb:e8:bc:fd:5b:fd:c5:a4:a0: 6f:a7:71:8e:9b:33:4b:d9:67:0e:35:c4:0a:df:f4: 95:0b:df:68:31:34:d1:71:ac:a0:6a:4d:31:e5:0f: 64:f9:ce:06:04:c8:8f:30:dc:6b:c3:ff:e3:e4:cf: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:D5:33:C1:89:26:CC:C8:A1:8E:7F:02:BB:32:10:DF:E5:0F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:47:86:f8:c4:e0:a3:ec:03:f5:06:c6:5d:ad:52:d8:bf:12: 5a:1e:8c:88:c2:8b:1d:3d:33:a4:d9:92:70:27:0b:ab:e9:c1: 70:52:66:06:e4:71:d5:29:d5:80:26:59:10:71:c1:f4:44:60: 19:1e:ab:b5:15:a2:ee:a9:b3:ce:9d:52:54:cb:65:43:6c:6a: 72:fb:8b:e1:25:56:1a:52:84:be:ed:c8:6f:01:39:4d:74:bf: 8d:5e:67:49:62:9a:b6:33:34:65:46:1a:ef:7e:24:64:a7:b9: 17:bf:aa:1f:00:f3:2c:22:e7:7d:31:18:11:4a:d9:1f:cd:da: a3:a9:72:5d:b5:ab:2c:03:38:52:2e:d6:b2:98:24:33:35:c3: e7:73:d7:9c:88:bc:29:5c:45:e8:33:b3:c1:28:e5:b7:57:24: b5:5a:40:0d:df:d6:bf:7f:02:d4:cf:54:a5:8d:1b:0f:d4:3a: 1b:d1:f2:2d:0a:ee:6e:d0:76:41:50:19:b6:6b:46:bc:a2:db: 4d:e6:af:8e:58:84:8b:b2:e0:32:db:ac:92:c8:34:6f:cb:c0: eb:d3:6d:28:00:d0:d8:c5:21:87:d6:40:da:55:48:ae:f8:ee: 05:8a:ad:e4:f7:b4:51:85:f0:b2:81:df:9c:18:f1:b4:b6:76: 08:d1:28:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYIoVV7UwtyiBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk OTBlZWIzOWYtNTYwMC00YmYxLWEyMGMtMjg4OTIyMTA1NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMJm09HIA9xQQ3hEGlQGN2uQJ23tN3V8VPKa 2sqZqCNkOjLcPtC40HWGBnzI805Ag+PNv7WbKcjCyh4zHZ6H8QGLdgk2OYrZmO5g m4cNv9K+1kEUQV4JV991eVvth7Eyl891Es7+0u32mvqAX0EkXRYNWGHFGDjPvKI5 WE8z+VuRUVXczyOVBefbpPR/3Pqfzt+VU5r61pT2mDp7GFVR4yHLRcH7i6qat7vb 5sOMdyPjXz6vUClzWsnWI33Pnbconh90VLck/Dfr6Lz9W/3FpKBvp3GOmzNL2WcO NcQK3/SVC99oMTTRcaygak0x5Q9k+c4GBMiPMNxrw//j5M+44wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBbp1TPBiSbMyKGOfwK7MhDf5Q/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdR4b4xOCj7AP1BsZdrVLY vxJaHoyIwosdPTOk2ZJwJwur6cFwUmYG5HHVKdWAJlkQccH0RGAZHqu1FaLuqbPO nVJUy2VDbGpy+4vhJVYaUoS+7chvATlNdL+NXmdJYpq2MzRlRhrvfiRkp7kXv6of APMsIud9MRgRStkfzdqjqXJdtassAzhSLtaymCQzNcPnc9eciLwpXEXoM7PBKOW3 VyS1WkAN39a/fwLUz1SljRsP1Dob0fItCu5u0HZBUBm2a0a8ottN5q+OWISLsuAy 26ySyDRvy8Dr020oANDYxSGH1kDaVUiu+O4Fiq3k97RRhfCygd+cGPG0tnYI0SjI -----END CERTIFICATE-----Generated at Thu Mar 26 12:18:51 2026 by rpki-client