$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: GBNHAWE2YXR91MVR+ciyhyUhT71FFFgl8cPX7Xtptlw= Subject key identifier: F2:17:90:1C:BC:1F:E7:43:98:B0:BF:28:D5:96:4F:D4:AA:33:6F:82 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584D4ACAD850EE329556566E4B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C096FC Signing time: Thu 26 Mar 2026 03:00:04 +0000 Manifest this update: Thu 26 Mar 2026 03:00:04 +0000 Manifest next update: Sat 28 Mar 2026 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: yY0M11Qux8do+vdYTQfIup5Aog+bEyJiSO7Cf4lIGRs=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: 8YEu6BTuEsbfzfGYWpGw5s5AT6Mx4g/sWPYs01xUWUI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ca:d8:50:ee:32:95:56:56:6e:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Mar 26 03:00:04 2026 GMT Not After : Mar 28 03:00:00 2026 GMT Subject: CN=4715dafb-c946-4f9b-a2df-91c1ab9f40c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:06:69:d5:9f:74:48:45:d3:ff:35:d0:0f: 22:97:e3:c3:3c:78:6c:d8:3d:a8:6a:57:6b:ef:a9: c5:3d:88:43:2a:72:93:06:48:eb:00:2d:f0:71:0a: 8a:2a:ab:e8:76:19:56:3b:65:1b:53:80:1e:ab:72: 90:48:5c:32:d3:d3:c5:6a:61:9a:b8:60:42:f2:7c: 8e:1f:a3:38:66:4f:32:35:be:c5:d0:e7:07:a6:5e: e2:6a:fa:7e:d7:17:5c:3e:5f:a0:8e:eb:04:d8:46: 5d:d3:18:2a:8d:94:58:60:9c:cd:0d:b3:0b:a0:cc: 19:93:e0:2e:ce:24:d7:7e:a3:ae:cb:48:f8:27:6c: 1f:45:12:89:38:87:19:c1:0a:27:52:3d:b5:95:5c: 04:47:c5:43:06:ca:05:1a:84:c0:67:27:dc:8f:7a: c4:3a:db:2e:9a:b3:4d:d1:95:23:b8:3f:6f:e7:3c: db:e1:aa:64:25:55:4d:09:b1:78:00:75:4d:a1:7c: c3:9c:74:25:91:71:f9:d2:84:db:44:83:8a:ec:e6: b8:32:b7:3a:65:a4:da:42:92:e2:b7:22:b3:a1:3f: 7b:b4:7c:2e:5e:3f:ff:51:78:a8:35:8b:0b:fd:fd: 10:0f:f2:e7:5b:2f:e4:85:e0:c2:54:76:61:c5:76: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:17:90:1C:BC:1F:E7:43:98:B0:BF:28:D5:96:4F:D4:AA:33:6F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3b:10:cf:cf:63:02:5d:f5:03:61:9f:ee:da:4a:a6:54:d4: 56:85:c7:ee:a0:2b:6d:31:fe:06:4c:bc:fc:41:ef:ec:76:13: fb:56:a0:f2:24:d7:cf:58:0d:e3:89:32:22:c2:61:7d:87:c1: 6a:20:59:f0:ca:11:44:34:98:39:76:6b:65:b3:da:c1:a5:71: 32:54:13:34:0d:7f:8a:d6:d4:b5:4b:41:7d:2a:57:ac:ad:d3: 59:29:a6:ea:b8:a2:36:f9:b2:cc:6d:cd:c0:df:9c:b2:9e:00: d5:ca:b6:99:37:fe:9d:6c:f8:2a:f2:cf:7d:2e:f2:3d:c2:a8: f2:69:d8:f5:c5:00:4b:80:e2:c3:e5:4a:d3:fa:99:d5:07:10: 2b:0e:8a:b6:bd:cf:11:fc:23:df:dd:79:76:5a:5d:2f:b2:7f: 3d:b0:ec:8d:94:a9:01:e4:65:45:ca:3c:08:f6:d5:0a:06:d9: 75:8c:ca:92:bd:c5:41:9a:05:3a:34:2f:ea:7d:73:52:64:3b: a7:be:b5:77:38:2d:b9:5b:0d:4d:5c:a5:e7:73:89:dc:8a:d2: 47:24:3b:4c:2b:29:ec:48:92:5a:c3:bd:71:5e:87:32:65:56: b8:e4:13:24:96:75:32:cd:69:5f:07:39:f8:07:73:03:c2:f1: 62:ef:fb:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KythQ7jKVVlZuS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI2MDMyNjAzMDAwNFoXDTI2MDMyODAzMDAwMFowLzEtMCsGA1UEAxMk NDcxNWRhZmItYzk0Ni00ZjliLWEyZGYtOTFjMWFiOWY0MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv8GadWfdEhF0/810A8il+PDPHhs2D2oaldr 76nFPYhDKnKTBkjrAC3wcQqKKqvodhlWO2UbU4Aeq3KQSFwy09PFamGauGBC8nyO H6M4Zk8yNb7F0OcHpl7iavp+1xdcPl+gjusE2EZd0xgqjZRYYJzNDbMLoMwZk+Au ziTXfqOuy0j4J2wfRRKJOIcZwQonUj21lVwER8VDBsoFGoTAZyfcj3rEOtsumrNN 0ZUjuD9v5zzb4apkJVVNCbF4AHVNoXzDnHQlkXH50oTbRIOK7Oa4Mrc6ZaTaQpLi tyKzoT97tHwuXj//UXioNYsL/f0QD/LnWy/kheDCVHZhxXY30wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPIXkBy8H+dDmLC/KNWWT9SqM2+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEOxDPz2MCXfUDYZ/u2kqm VNRWhcfuoCttMf4GTLz8Qe/sdhP7VqDyJNfPWA3jiTIiwmF9h8FqIFnwyhFENJg5 dmtls9rBpXEyVBM0DX+K1tS1S0F9KlesrdNZKabquKI2+bLMbc3A35yyngDVyraZ N/6dbPgq8s99LvI9wqjyadj1xQBLgOLD5UrT+pnVBxArDoq2vc8R/CPf3Xl2Wl0v sn89sOyNlKkB5GVFyjwI9tUKBtl1jMqSvcVBmgU6NC/qfXNSZDunvrV3OC25Ww1N XKXnc4ncitJHJDtMKynsSJJaw71xXocyZVa45BMklnUyzWlfBzn4B3MDwvFi7/vL -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:28 2026 by rpki-client