$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft File: fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft (raw, json) Hash identifier: Nx9tkPUNoP26FSLseK6Apcim6VeR8O+Uu8vRfoyVXdo= Subject key identifier: 5E:0D:36:F7:4E:2E:CF:11:7D:B8:9E:8D:A5:DA:77:0F:3A:94:FF:B2 Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Certificate issuer: /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Certificate serial: 010D0C9F4328584D4A183AB5373D6F3629CDEA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft Manifest number: 010D0C9F43285846E0A0D6078549047048D745E8 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 0b2a314a-f1eb-36e4-bb95-7d543ca67af6.roa (hash: lgqrDORZft7hhPCpM9LgI+S44/vYRXnV987WAEpe6jk=) 2: 91602793-39d2-331e-9880-52568d0808f3.roa (hash: mduFisxCrdjLctEYf7Rkp2ZbbQnatLBMTg6xTd8o4wA=) 3: d4de5de1-5b41-39a7-b73e-1e492dfbacea.roa (hash: ddXf5eSjiI2IKYPuSVcdFxdAoc1Bc67HQY0VmuqJCJM=) 4: f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (hash: p2QlafG4k3IXjjAer9MxcBV4bEdI1GIimnzsmoMRLI4=) 5: fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl (hash: +gK280QqZw1AglIYGNGRDWqPLlK1WLeXVI1g4kmo8Bg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3a:b5:37:3d:6f:36:29:cd:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=fa43775d-ce9d-4227-96f9-4f1cada70379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:44:f4:0a:00:16:b6:f4:48:55:82:07:51: b7:d1:b6:4c:64:a3:94:24:f1:20:cd:2c:3e:6a:d4: ce:c5:7f:85:4f:55:18:c2:89:88:64:4b:6c:48:72: 39:d6:d6:6c:48:25:7b:3b:f7:a4:3d:00:51:80:b3: d4:e7:f9:05:e1:e3:fe:7e:11:06:8a:d4:93:bf:9e: 81:c5:ff:ad:bb:90:5a:31:33:a5:5b:c4:f8:92:4c: ae:b6:65:c6:ec:e7:ce:88:41:2d:56:21:eb:ac:d5: 23:84:ee:73:07:6b:24:c8:93:29:1d:9e:f2:e4:cf: 72:b3:0c:18:31:e0:db:49:d1:f9:d1:23:b1:e3:f8: dc:3e:ee:c8:1e:84:b0:cb:ce:1e:a9:c0:5a:39:86: e7:9d:65:0a:d0:1e:0b:fe:96:7c:30:5c:ca:42:da: f1:26:8c:16:67:a4:33:77:b7:91:77:17:b9:e3:ee: ef:5c:69:5d:4b:b4:54:9f:dd:ba:02:48:23:2a:3f: 80:c1:11:f6:1b:db:c4:03:f0:e9:6b:67:a1:2d:46: c1:23:04:c1:47:dd:7c:43:0f:80:be:9c:a0:c2:87: 48:98:17:84:41:c1:6e:d7:38:98:6b:69:b4:87:9b: 89:0d:8c:50:17:47:06:b4:cd:42:c3:c3:6c:3e:10: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0D:36:F7:4E:2E:CF:11:7D:B8:9E:8D:A5:DA:77:0F:3A:94:FF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl X509v3 Authority Key Identifier: keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a6:89:d0:c3:0b:82:8b:19:c9:3d:f9:1b:ad:bf:ab:a1:5c: 99:22:8f:a4:1c:74:ec:bb:ac:43:dd:39:bf:4f:c6:c5:b5:3a: 1b:d3:ae:39:98:dc:50:45:ba:4c:3e:1b:6a:a8:61:fe:df:e1: 32:ca:dc:c1:09:83:24:2e:ff:e9:bc:9f:cc:49:16:f0:f1:31: 88:71:a2:fc:bf:75:9d:22:af:ae:28:49:17:01:71:62:22:68: 79:21:e2:91:ac:91:e8:08:05:21:c2:c8:b9:09:d1:9d:71:7b: b4:a4:c7:78:61:87:ac:38:4d:d4:02:5a:a7:54:76:28:0f:9d: 6a:84:10:c7:6b:6f:4c:b5:da:7c:3c:5c:10:5c:92:23:cd:2c: 6e:85:c4:12:b9:43:1b:71:46:ce:58:21:56:3d:27:88:6e:47: e0:89:8b:99:41:25:4f:dd:62:28:37:9e:6e:e3:97:2b:a6:91: 00:19:18:71:0b:00:fc:d6:f0:29:dd:c8:5a:05:0a:2a:0e:b1: 9b:ed:cb:59:7a:18:9f:e8:d9:62:89:5a:44:b9:2c:57:5e:a1: cc:83:61:17:4e:f9:c3:e7:84:0d:cd:1c:75:f1:d4:7b:0a:56: b7:8a:aa:80:d0:fb:4a:0f:4c:48:79:60:c9:a5:93:81:9d:d3: c3:24:88:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDq1Nz1vNinN6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0 YmUwMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk ZmE0Mzc3NWQtY2U5ZC00MjI3LTk2ZjktNGYxY2FkYTcwMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv9E9AoAFrb0SFWCB1G30bZMZKOUJPEgzSw+ atTOxX+FT1UYwomIZEtsSHI51tZsSCV7O/ekPQBRgLPU5/kF4eP+fhEGitSTv56B xf+tu5BaMTOlW8T4kkyutmXG7OfOiEEtViHrrNUjhO5zB2skyJMpHZ7y5M9yswwY MeDbSdH50SOx4/jcPu7IHoSwy84eqcBaOYbnnWUK0B4L/pZ8MFzKQtrxJowWZ6Qz d7eRdxe54+7vXGldS7RUn926AkgjKj+AwRH2G9vEA/Dpa2ehLUbBIwTBR918Qw+A vpygwodImBeEQcFu1ziYa2m0h5uJDYxQF0cGtM1Cw8NsPhAR0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF4NNvdOLs8RfbiejaXadw86lP+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvZmUzZTEwNGUtZGFlZi00 ZmRiLTlkNjUtYWExZWU2ZGM0YmUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl ZTZkYzRiZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhponQwwuCixnJPfkbrb+r oVyZIo+kHHTsu6xD3Tm/T8bFtTob0645mNxQRbpMPhtqqGH+3+EyytzBCYMkLv/p vJ/MSRbw8TGIcaL8v3WdIq+uKEkXAXFiImh5IeKRrJHoCAUhwsi5CdGdcXu0pMd4 YYesOE3UAlqnVHYoD51qhBDHa29Mtdp8PFwQXJIjzSxuhcQSuUMbcUbOWCFWPSeI bkfgiYuZQSVP3WIoN55u45crppEAGRhxCwD81vAp3chaBQoqDrGb7ctZehif6Nli iVpEuSxXXqHMg2EXTvnD54QNzRx18dR7Cla3iqqA0PtKD0xIeWDJpZOBndPDJIgm -----END CERTIFICATE-----Generated at Thu Mar 26 23:17:20 2026 by rpki-client