$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft File: a678b84f-a615-4754-9dcb-e51b04125026.mft (raw, json) Hash identifier: 2d0XMPydjRZhBESWe0OsQPJn65qpurI7x5u6kiakbvk= Subject key identifier: 8E:0A:6C:F8:FE:96:69:AB:4F:9F:AC:E5:85:BD:26:EE:15:39:C2:53 Authority key identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 Certificate issuer: /CN=a678b84f-a615-4754-9dcb-e51b04125026 Certificate serial: 010D0C9F4328584D49DC9D00F91652BE00C5AF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft Manifest number: 010D0C9F43285846F3D248431601FE83D6761BDD Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: a678b84f-a615-4754-9dcb-e51b04125026.crl (hash: gTV+qI6BvT9rogMZYIWKa7X4vBSaNqLGmoBX72hh5/M=) 2: c40b8517-cb95-3d62-a746-1fc2642ef195.roa (hash: 81plJiYaU6R/pDAKnPsSioyh8kB8RN9wBFxCwBkUMNs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9d:00:f9:16:52:be:00:c5:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a678b84f-a615-4754-9dcb-e51b04125026 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=2cc18970-713e-49d8-8ec1-2b9fcbd76b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:0c:e9:d8:4d:dc:e7:7e:4e:00:c1:ca:72: 2d:25:4b:08:73:5a:64:09:3c:7a:8f:b7:ee:39:57: bd:ad:41:8f:c4:23:d9:fc:6e:71:63:6b:31:5a:78: af:ac:5e:45:33:5a:65:31:18:16:e8:73:5b:cd:24: a1:a2:49:0a:b2:22:c1:ba:a4:97:e4:da:27:24:f2: e1:21:aa:f3:0c:78:08:3f:11:40:22:4b:ce:02:f4: 29:92:a2:03:09:9d:23:ee:5a:31:e7:12:b1:b4:bd: 66:bc:28:5d:cc:3e:c9:ac:2d:a1:66:21:b0:eb:c7: 59:d9:d2:c8:82:71:45:98:5c:ea:e9:e7:5e:0a:30: 71:d7:92:ce:c6:b4:9b:f6:c1:e6:6e:75:4b:e2:4e: b6:46:18:d9:79:2e:c6:35:23:62:eb:65:6c:fa:ef: 0b:3d:fa:a1:5c:de:f4:0a:f0:78:31:02:1c:dc:96: 21:f9:0b:e3:9e:d8:53:ea:bb:a3:ee:74:f9:13:93: fe:6d:9f:fd:26:6b:d4:2e:23:6e:2b:67:cd:af:e3: 5d:24:42:9b:a7:bb:cc:18:d8:e3:63:cf:f8:e3:58: 02:20:48:3a:aa:4e:cd:ed:47:a3:46:43:ba:48:0b: 31:4f:32:da:14:74:81:a5:9f:07:3c:73:27:77:84: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0A:6C:F8:FE:96:69:AB:4F:9F:AC:E5:85:BD:26:EE:15:39:C2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl X509v3 Authority Key Identifier: keyid:D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:42:84:d3:37:8c:5b:e4:10:73:a0:eb:ee:f5:fc:a6:b3:5a: da:cc:1c:ed:9c:fb:ac:31:5a:68:ec:3a:c8:d0:63:88:ea:74: 04:a0:ce:a0:92:89:e2:ab:c6:32:3a:14:4d:76:dd:e0:b1:c6: c0:8f:7c:e8:61:32:9c:55:42:b4:ec:6f:fa:b4:e6:ad:cf:62: f5:f0:39:a6:6f:f8:5c:81:a3:11:3e:75:fb:b2:0a:e0:15:30: 6f:a4:a9:96:25:9a:09:94:01:76:17:96:cd:b3:29:e3:df:d0: 9b:16:15:4a:d8:9c:6a:a7:53:9d:0f:25:90:47:5a:44:bc:25: 87:6b:8b:4a:16:b6:f5:2f:94:23:5e:21:9e:26:fd:89:dc:19: b5:d8:fb:b0:3c:ee:39:f4:45:57:70:07:ac:56:9f:0c:93:db: 3c:98:b1:29:fb:26:5e:8d:52:12:8d:6f:62:14:aa:eb:79:b2: 95:67:6d:3e:a5:63:bc:a7:2a:96:16:24:b3:da:a0:62:da:eb: bf:8d:53:4e:e2:33:0d:e4:cc:9d:03:55:cb:d6:f1:ff:4e:4e: 1b:cc:9e:f4:e7:9c:7d:9a:dc:b2:55:20:43:f7:fc:50:03:1e: 80:70:7e:6c:bc:56:e4:ff:58:ec:87:82:3e:4b:ea:e1:8e:a7: dc:c9:8f:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J0A+RZSvgDFrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY3OGI4NGYtYTYxNS00NzU0LTlkY2ItZTUxYjA0MTI1 MDI2MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk MmNjMTg5NzAtNzEzZS00OWQ4LThlYzEtMmI5ZmNiZDc2YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApysM6dhN3Od+TgDBynItJUsIc1pkCTx6j7fu OVe9rUGPxCPZ/G5xY2sxWnivrF5FM1plMRgW6HNbzSShokkKsiLBuqSX5NonJPLh IarzDHgIPxFAIkvOAvQpkqIDCZ0j7lox5xKxtL1mvChdzD7JrC2hZiGw68dZ2dLI gnFFmFzq6edeCjBx15LOxrSb9sHmbnVL4k62RhjZeS7GNSNi62Vs+u8LPfqhXN70 CvB4MQIc3JYh+QvjnthT6ruj7nT5E5P+bZ/9JmvULiNuK2fNr+NdJEKbp7vMGNjj Y8/441gCIEg6qk7N7UejRkO6SAsxTzLaFHSBpZ8HPHMnd4QS+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI4KbPj+lmmrT5+s5YW9Ju4VOcJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNjc4 Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFiMDQxMjUwMjYvYTY3OGI4NGYtYTYxNS00 NzU0LTlkY2ItZTUxYjA0MTI1MDI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTY3OGI4NGYtYTYxNS00NzU0LTlk Y2ItZTUxYjA0MTI1MDI2L2E2NzhiODRmLWE2MTUtNDc1NC05ZGNiLWU1MWIwNDEy NTAyNi5jcmwwHwYDVR0jBBgwFoAU056UQF5VD2saQrT93Ug9XJD54eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNjc4Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFi MDQxMjUwMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYQoTTN4xb5BBzoOvu9fym s1razBztnPusMVpo7DrI0GOI6nQEoM6gkoniq8YyOhRNdt3gscbAj3zoYTKcVUK0 7G/6tOatz2L18Dmmb/hcgaMRPnX7sgrgFTBvpKmWJZoJlAF2F5bNsynj39CbFhVK 2Jxqp1OdDyWQR1pEvCWHa4tKFrb1L5QjXiGeJv2J3Bm12PuwPO459EVXcAesVp8M k9s8mLEp+yZejVISjW9iFKrrebKVZ20+pWO8pyqWFiSz2qBi2uu/jVNO4jMN5Myd A1XL1vH/Tk4bzJ7055x9mtyyVSBD9/xQAx6AcH5svFbk/1jsh4I+S+rhjqfcyY8R -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:37 2026 by rpki-client