$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft File: 32e1eff5-1423-4100-89f4-3340efd8f1ea.mft (raw, json) Hash identifier: suL063csLPeQnUuUdvyxtsPiC0gNNi8ZIv7uQ84o7fY= Subject key identifier: 2C:09:99:F2:19:80:6D:4A:0E:9B:45:DB:A5:29:2E:11:76:9E:29:39 Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 Certificate issuer: /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Certificate serial: 010D0C9F4328584D4A183C86E6ED9034510A2800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft Manifest number: 010D0C9F43285847F4EEB68E0F8455B2D5797CF7 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 32e1eff5-1423-4100-89f4-3340efd8f1ea.crl (hash: F7x0tb6qxXGO8u3hIwcd+zlNTFq0QdXbavn8GR7tSq0=) 2: b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa (hash: arOopM4Uivqgj3bOg51jtAttVG25ukeZRTDAPr91RQc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3c:86:e6:ed:90:34:51:0a:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=21bdc957-1610-490b-ac3d-96a1a0866a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a8:f9:dd:9c:cc:fd:9d:e7:d5:59:c5:21:9d: e4:e0:10:5e:52:0b:9b:dc:1b:7c:f5:33:92:e8:79: 5f:60:80:ad:b0:24:dc:58:bb:0c:3f:45:98:3e:ee: cb:91:7b:81:8b:af:63:fa:a7:e4:1c:81:de:b5:f6: e6:5e:b4:e9:fd:d6:25:ca:f8:ea:d7:e7:4c:d6:b5: 5d:8b:69:a6:5f:55:1c:7c:91:2c:d1:dc:cc:08:d1: dd:44:95:ac:e7:03:0b:31:a2:23:56:56:54:ff:0a: c4:39:05:61:da:bd:48:9f:ef:f0:aa:f2:ea:12:a5: c2:ae:c4:a4:c4:3a:3c:17:16:76:d8:35:5b:bf:62: d1:a7:29:a5:d5:42:dd:ba:a1:be:c0:fe:23:b9:8f: 0c:0b:77:41:d2:8e:1c:ec:ff:34:39:1b:e1:ff:2a: c1:ce:5a:80:90:7e:53:6c:b1:e3:ee:a2:93:3f:5d: b9:6e:51:4a:fc:44:42:4d:ff:39:76:79:fd:04:dd: 22:9d:01:98:7e:2a:4a:59:00:e1:9e:79:79:ed:b1: a1:56:9f:c0:26:ec:96:d5:dc:8f:0a:fb:89:a5:1b: 67:67:0f:e7:e6:25:cb:d3:07:c5:10:8b:38:a8:48: 69:a9:d5:1b:c3:0d:15:8e:3a:b7:fe:09:74:10:42: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:09:99:F2:19:80:6D:4A:0E:9B:45:DB:A5:29:2E:11:76:9E:29:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl X509v3 Authority Key Identifier: keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:be:3b:e9:42:4e:aa:3d:8d:9f:fc:68:e8:9d:dc:7c:b6:92: ed:25:36:39:fb:5e:74:98:2c:9e:5d:8a:0d:a8:f2:b0:38:a0: 6d:d3:3b:07:02:17:aa:73:04:63:9a:1b:ff:64:46:56:ac:01: 2b:07:a3:b6:04:ca:02:c3:d6:74:70:9a:cd:92:f0:7b:dc:6d: 7b:bd:3c:f0:34:8b:9f:5c:ae:98:72:eb:37:0c:72:f0:1a:26: d3:ab:8b:12:00:48:34:f9:62:ae:a5:f7:07:75:b9:d3:f2:d8: 70:a3:97:44:f4:98:70:c2:fc:b2:c2:83:71:2e:fc:75:7e:b9: 6d:ef:73:a5:02:7b:26:5c:c5:87:73:ef:53:2d:fd:56:b5:10: ad:37:4b:4b:eb:62:41:cf:e6:64:2f:ef:6b:3a:fe:0f:00:04: 87:4c:c5:d2:59:38:a2:1b:55:20:12:15:ac:da:57:bb:e3:e2: 83:15:1c:b4:07:63:0d:84:33:39:de:5c:14:5c:18:fe:17:06: fd:89:40:e8:af:be:65:48:01:5a:fd:e9:c8:13:1f:1f:7e:bc: 4d:92:6e:15:b3:64:32:ae:f8:0c:dd:1f:f9:43:36:8e:06:83: ef:a6:e2:a2:e2:c6:c4:18:f0:21:52:97:09:f8:cc:58:6e:c7: 8f:48:25:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDyG5u2QNFEKKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlMWVmZjUtMTQyMy00MTAwLTg5ZjQtMzM0MGVmZDhm MWVhMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk MjFiZGM5NTctMTYxMC00OTBiLWFjM2QtOTZhMWEwODY2YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaj53ZzM/Z3n1VnFIZ3k4BBeUgub3Bt89TOS 6HlfYICtsCTcWLsMP0WYPu7LkXuBi69j+qfkHIHetfbmXrTp/dYlyvjq1+dM1rVd i2mmX1UcfJEs0dzMCNHdRJWs5wMLMaIjVlZU/wrEOQVh2r1In+/wqvLqEqXCrsSk xDo8FxZ22DVbv2LRpyml1ULduqG+wP4juY8MC3dB0o4c7P80ORvh/yrBzlqAkH5T bLHj7qKTP125blFK/ERCTf85dnn9BN0inQGYfipKWQDhnnl57bGhVp/AJuyW1dyP CvuJpRtnZw/n5iXL0wfFEIs4qEhpqdUbww0Vjjq3/gl0EEIc6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCwJmfIZgG1KDptF26UpLhF2nik5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUx ZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQwZWZkOGYxZWEvMzJlMWVmZjUtMTQyMy00 MTAwLTg5ZjQtMzM0MGVmZDhmMWVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJlMWVmZjUtMTQyMy00MTAwLTg5 ZjQtMzM0MGVmZDhmMWVhLzMyZTFlZmY1LTE0MjMtNDEwMC04OWY0LTMzNDBlZmQ4 ZjFlYS5jcmwwHwYDVR0jBBgwFoAUJUAu2vdRljOCQujdZADl1BGI5/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUxZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQw ZWZkOGYxZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAvjvpQk6qPY2f/Gjondx8 tpLtJTY5+150mCyeXYoNqPKwOKBt0zsHAheqcwRjmhv/ZEZWrAErB6O2BMoCw9Z0 cJrNkvB73G17vTzwNIufXK6Ycus3DHLwGibTq4sSAEg0+WKupfcHdbnT8thwo5dE 9JhwwvyywoNxLvx1frlt73OlAnsmXMWHc+9TLf1WtRCtN0tL62JBz+ZkL+9rOv4P AASHTMXSWTiiG1UgEhWs2le74+KDFRy0B2MNhDM53lwUXBj+Fwb9iUDor75lSAFa /enIEx8ffrxNkm4Vs2QyrvgM3R/5QzaOBoPvpuKi4sbEGPAhUpcJ+MxYbsePSCVi -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:11 2026 by rpki-client