$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft File: f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft (raw, json) Hash identifier: hFD8IKIK7EbeLtWaC3UYqFfDzNCCOBp0Aef7QV86xaA= Subject key identifier: 3A:E4:8A:C1:BC:86:8F:C6:C4:32:1F:F1:48:33:C7:2B:42:5E:AF:7D Authority key identifier: DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7 Certificate issuer: /CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e Certificate serial: 010D0C9F4328584D4A53BA58C11309F51C803200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft Manifest number: 010D0C9F43285842C45A8340C2FF12F03B85C940 Signing time: Wed 25 Mar 2026 23:00:03 +0000 Manifest this update: Wed 25 Mar 2026 23:00:03 +0000 Manifest next update: Fri 27 Mar 2026 23:00:00 +0000 Files and hashes: 1: 3184777e-25fd-379a-a23f-0b1444886974.roa (hash: YO1Qy54boaASEVgqAqH4ORba6p40Ccc7NCLu+MpTp18=) 2: f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl (hash: n10MQGBy8SFi0c0goDntvJ+Mud+3/bVz2/hjq8rDZNk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:ba:58:c1:13:09:f5:1c:80:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e Validity Not Before: Mar 25 23:00:03 2026 GMT Not After : Mar 27 23:00:00 2026 GMT Subject: CN=a1fd0cf5-8f47-468b-9005-c2cab72269f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:f4:82:dc:f0:d6:3e:1f:bd:09:30:a4:31: 3d:f8:bc:1d:ba:1e:9f:0f:96:c7:b8:a5:86:02:89: e0:ce:57:50:ee:c1:13:42:81:bc:ca:64:ca:08:d9: f3:88:8c:b5:4c:61:1e:cc:28:17:6f:64:b6:76:98: 89:b9:ae:e7:32:e6:11:6b:15:42:41:64:d1:4d:98: 38:6d:ce:27:57:40:64:8e:c9:dc:7e:2f:e3:2a:2a: 78:2f:56:0b:db:70:5d:3d:24:9c:7d:00:38:f5:30: 99:fa:bc:4a:c2:c7:ab:80:07:7a:9d:a5:cb:30:13: cb:95:66:03:5e:b4:56:5d:a7:99:4a:d9:7c:0a:47: 1f:61:dc:cb:a9:d2:02:c5:5a:10:30:3c:60:92:a0: 39:d8:20:8d:d8:af:65:bb:c2:22:70:da:69:87:69: 74:f9:c7:e7:19:99:f8:bf:44:f4:1a:0d:39:6a:ed: 62:11:0d:8a:80:6b:90:30:4d:3d:7c:d4:be:9e:6f: 6d:fc:a4:a4:13:1f:3b:ec:d7:75:ae:8b:41:c5:04: 20:59:1e:0e:1f:03:24:c0:ab:d3:72:d6:82:28:0f: af:0e:7b:38:ef:b1:cc:44:34:73:7d:83:1f:97:16: 24:91:0d:96:4b:e0:c8:4f:eb:b2:03:41:0c:e8:7d: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:8A:C1:BC:86:8F:C6:C4:32:1F:F1:48:33:C7:2B:42:5E:AF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl X509v3 Authority Key Identifier: keyid:DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d5:25:cd:1b:b7:e7:1e:17:06:dd:81:af:d4:84:97:e2:70: c3:b5:1b:07:29:0f:c3:78:3b:95:e1:41:e4:94:49:70:d3:82: 3a:ea:bf:91:1c:3b:b1:5a:b0:d8:d1:1d:46:ae:41:8c:cc:a2: c9:e6:9a:fa:a8:9b:6a:61:15:c7:fc:e4:15:32:e8:99:87:3a: 2f:6b:a1:cf:2a:f6:0b:f2:1a:ad:48:6a:c4:39:e2:ff:5a:2c: 9e:37:91:b4:90:70:b2:cc:23:1b:2b:59:3d:b2:a7:6d:71:ee: 8e:b9:30:2b:c6:d4:88:1a:b5:14:9f:26:5c:e9:02:11:48:af: 72:d6:40:d1:10:f5:0e:8e:8a:42:93:f7:c5:f8:f7:97:5b:4a: 1d:a3:7f:1c:25:ca:02:fa:0a:0a:b1:7e:60:32:52:4d:bb:34: b9:88:f5:88:b2:3b:1b:e5:e6:ba:a4:1b:2e:a4:0e:26:0b:8f: c7:93:0f:7a:2c:e0:0d:26:7d:24:cd:5c:32:fc:20:c7:46:7b: 89:82:77:0e:79:4f:21:ef:62:76:79:94:d4:bf:b4:55:e6:ef: 4b:dd:3d:48:d5:bc:4f:ee:d3:53:1c:74:36:66:8f:37:3a:d2: c4:43:06:00:d2:b2:aa:3e:0f:4c:ed:63:07:38:fb:b8:52:39: 88:52:4e:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KU7pYwRMJ9RyAMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUyMWU0YTItZmJkNy00MjkxLTliZTAtMmVhNjE5YTE4 YzdlMB4XDTI2MDMyNTIzMDAwM1oXDTI2MDMyNzIzMDAwMFowLzEtMCsGA1UEAxMk YTFmZDBjZjUtOGY0Ny00NjhiLTkwMDUtYzJjYWI3MjI2OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd30gtzw1j4fvQkwpDE9+Lwduh6fD5bHuKWG AongzldQ7sETQoG8ymTKCNnziIy1TGEezCgXb2S2dpiJua7nMuYRaxVCQWTRTZg4 bc4nV0Bkjsncfi/jKip4L1YL23BdPSScfQA49TCZ+rxKwsergAd6naXLMBPLlWYD XrRWXaeZStl8CkcfYdzLqdICxVoQMDxgkqA52CCN2K9lu8IicNpph2l0+cfnGZn4 v0T0Gg05au1iEQ2KgGuQME09fNS+nm9t/KSkEx877Nd1rotBxQQgWR4OHwMkwKvT ctaCKA+vDns477HMRDRzfYMflxYkkQ2WS+DIT+uyA0EM6H0v0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDrkisG8ho/GxDIf8UgzxytCXq99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNTIx ZTRhMi1mYmQ3LTQyOTEtOWJlMC0yZWE2MTlhMThjN2UvZjUyMWU0YTItZmJkNy00 MjkxLTliZTAtMmVhNjE5YTE4YzdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjUyMWU0YTItZmJkNy00MjkxLTli ZTAtMmVhNjE5YTE4YzdlL2Y1MjFlNGEyLWZiZDctNDI5MS05YmUwLTJlYTYxOWEx OGM3ZS5jcmwwHwYDVR0jBBgwFoAU25Ua3TQyhRiM9J8jpRlu1S03o6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNTIxZTRhMi1mYmQ3LTQyOTEtOWJlMC0yZWE2 MTlhMThjN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx1SXNG7fnHhcG3YGv1ISX 4nDDtRsHKQ/DeDuV4UHklElw04I66r+RHDuxWrDY0R1GrkGMzKLJ5pr6qJtqYRXH /OQVMuiZhzova6HPKvYL8hqtSGrEOeL/WiyeN5G0kHCyzCMbK1k9sqdtce6OuTAr xtSIGrUUnyZc6QIRSK9y1kDREPUOjopCk/fF+PeXW0odo38cJcoC+goKsX5gMlJN uzS5iPWIsjsb5ea6pBsupA4mC4/Hkw96LOANJn0kzVwy/CDHRnuJgncOeU8h72J2 eZTUv7RV5u9L3T1I1bxP7tNTHHQ2Zo83OtLEQwYA0rKqPg9M7WMHOPu4UjmIUk4X -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:53 2026 by rpki-client