$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft File: a1d568c5-f4e7-4018-a050-a2f04280e225.mft (raw, json) Hash identifier: DW/aNQ+SW02gxmJotl2dr1v1TZTMfiVwfJuW8tkyHog= Subject key identifier: 30:71:DD:E6:44:00:1A:DF:BD:D8:BC:60:54:C7:0F:66:8E:0A:CA:5B Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Certificate issuer: /CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Certificate serial: 010D0C9F4328584D4A35F3BCFFBB7EA2CE030180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft Manifest number: 010D0C9F43285847DBF247FABDDD04106F411EFE Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Sat 28 Mar 2026 22:00:00 +0000 Files and hashes: 1: a1d568c5-f4e7-4018-a050-a2f04280e225.crl (hash: QX89ktnAlSg1hkh2eQ87xTrcO87u0+KD0bv4H/pQCpg=) 2: e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (hash: jOvDZaKoBv7U1DSoKcqkeFE7Nh8qivLXc0luNM7o+Zc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f3:bc:ff:bb:7e:a2:ce:03:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 28 22:00:00 2026 GMT Subject: CN=6dfc3ee9-d10c-4a21-ae1e-74dd8b23b457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:98:7f:df:02:10:f8:17:35:91:0c:75:96: 5b:17:ae:00:5e:dd:21:9a:91:cf:a2:b2:c6:d3:ce: 67:ab:82:d0:9f:25:7a:c2:81:5e:d3:08:33:59:d4: 54:66:ae:e8:71:e2:c6:4d:19:c0:93:e0:a6:94:2e: a2:55:f8:6b:95:e3:08:ff:8f:e8:c4:bc:f8:e6:87: 95:bb:58:0a:15:0d:2d:0a:10:70:25:c9:ec:61:b6: 99:40:22:2f:50:e4:39:b2:b5:3a:6e:63:b3:c3:3a: 91:37:2a:95:6f:37:45:bb:1d:7b:9b:b0:62:64:2b: 27:0a:42:46:df:0a:77:70:ee:11:e7:2c:86:22:93: 54:d7:c0:72:82:56:8b:23:8e:fc:ec:86:93:87:b8: 3c:53:c4:d5:62:96:f1:d1:88:13:b1:0c:a2:6e:75: 1e:f9:7c:05:4e:5d:86:1b:9c:ff:18:cd:eb:aa:c0: b2:91:07:b5:8f:57:cc:f2:e3:4c:76:ed:ce:42:2d: a5:35:9a:bb:90:e4:6a:c1:2f:11:7a:05:c1:d7:96: da:6d:52:bf:ff:32:7b:4c:9c:5d:26:59:4c:09:a1: 85:e1:1c:bd:6d:19:ce:89:c5:ff:6c:d7:f5:f6:28: d4:70:e8:8e:78:5a:99:8b:91:b2:00:1e:6e:df:08: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:71:DD:E6:44:00:1A:DF:BD:D8:BC:60:54:C7:0F:66:8E:0A:CA:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl X509v3 Authority Key Identifier: keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:49:ec:52:1e:1b:87:91:a1:b2:bc:e6:c1:fa:f5:e8:df:47: a2:9c:6c:3d:98:70:da:10:a4:c8:91:3a:07:4f:11:8a:84:f3: 23:4e:0b:4d:17:96:ab:0b:e0:9c:38:a5:f3:f9:6f:c8:55:f1: 15:3e:73:c6:9b:34:f8:23:b0:0f:88:14:2e:f1:65:8d:ed:83: 94:97:38:67:6e:52:d5:66:3c:86:7e:26:86:b8:e5:7c:36:87: 32:8c:86:94:38:86:07:97:bf:56:c3:30:2f:d9:4b:f4:e2:8a: 24:91:ab:9d:ec:a4:50:8f:62:ed:60:a0:93:1d:01:16:9d:f0: cd:ab:18:9b:26:d0:5d:62:03:cc:49:3f:36:9c:f0:b7:2e:fc: 8c:c0:fc:1f:64:84:14:82:6e:fc:07:25:3b:c5:16:8f:7e:98: d3:93:22:3e:08:fb:40:24:73:87:70:79:36:b3:44:d5:ba:42: d9:36:e7:9e:f9:98:18:2d:90:61:05:5e:ef:3d:9e:4b:ae:9c: 15:2e:4d:2c:c0:f3:72:fb:ab:4b:18:89:d7:89:4f:fc:af:53: 88:0b:ff:d7:27:aa:f1:08:7c:b3:b1:39:89:d1:50:51:ef:7d: 6a:f8:7c:8c:73:e2:c5:43:5e:05:fa:d4:d3:86:b9:1e:34:97: eb:10:27:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfO8/7t+os4DAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkNTY4YzUtZjRlNy00MDE4LWEwNTAtYTJmMDQyODBl MjI1MB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyODIyMDAwMFowLzEtMCsGA1UEAxMk NmRmYzNlZTktZDEwYy00YTIxLWFlMWUtNzRkZDhiMjNiNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcWYf98CEPgXNZEMdZZbF64AXt0hmpHPorLG 085nq4LQnyV6woFe0wgzWdRUZq7oceLGTRnAk+CmlC6iVfhrleMI/4/oxLz45oeV u1gKFQ0tChBwJcnsYbaZQCIvUOQ5srU6bmOzwzqRNyqVbzdFux17m7BiZCsnCkJG 3wp3cO4R5yyGIpNU18ByglaLI4787IaTh7g8U8TVYpbx0YgTsQyibnUe+XwFTl2G G5z/GM3rqsCykQe1j1fM8uNMdu3OQi2lNZq7kORqwS8RegXB15babVK//zJ7TJxd JllMCaGF4Ry9bRnOicX/bNf19ijUcOiOeFqZi5GyAB5u3wgmrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDBx3eZEABrfvdi8YFTHD2aOCspbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1 NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4MGUyMjUvYTFkNTY4YzUtZjRlNy00 MDE4LWEwNTAtYTJmMDQyODBlMjI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTFkNTY4YzUtZjRlNy00MDE4LWEw NTAtYTJmMDQyODBlMjI1L2ExZDU2OGM1LWY0ZTctNDAxOC1hMDUwLWEyZjA0Mjgw ZTIyNS5jcmwwHwYDVR0jBBgwFoAUYK1fte4vsi2kNA7XGbVSe3y626AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYw NDI4MGUyMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdSexSHhuHkaGyvObB+vXo 30einGw9mHDaEKTIkToHTxGKhPMjTgtNF5arC+CcOKXz+W/IVfEVPnPGmzT4I7AP iBQu8WWN7YOUlzhnblLVZjyGfiaGuOV8NocyjIaUOIYHl79WwzAv2Uv04ookkaud 7KRQj2LtYKCTHQEWnfDNqxibJtBdYgPMST82nPC3LvyMwPwfZIQUgm78ByU7xRaP fpjTkyI+CPtAJHOHcHk2s0TVukLZNuee+ZgYLZBhBV7vPZ5LrpwVLk0swPNy+6tL GInXiU/8r1OIC//XJ6rxCHyzsTmJ0VBR731q+HyMc+LFQ14F+tTThrkeNJfrECdw -----END CERTIFICATE-----Generated at Thu Mar 26 02:49:36 2026 by rpki-client