$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft File: 529c456a-0a45-44a6-8d94-800e442e44a9.mft (raw, json) Hash identifier: YDHbgelyfM79XLGsNfff05umblmdnnwwpO5ODPs7A3k= Subject key identifier: F6:0D:CA:FA:CB:23:1A:D7:9E:F8:02:82:34:4E:F6:1D:48:80:28:D4 Authority key identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Certificate issuer: /CN=529c456a-0a45-44a6-8d94-800e442e44a9 Certificate serial: 010D0C9F4328584D49657EE12B46CE2A9FE8C640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft Manifest number: 010D0C9F4328584659E265B2C6F1188D0BDC308E Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 529c456a-0a45-44a6-8d94-800e442e44a9.crl (hash: /gtwl/9XQQP7UAuxWEv4nFOeaDOUVLGAr95NdtJsH6E=) 2: 73f2506f-bf58-34a0-a0a8-51f114b130ce.roa (hash: rxI30Tl5PX5ko74A9msTX4/XrGOzBtyrwF5WE2e0JPs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7e:e1:2b:46:ce:2a:9f:e8:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529c456a-0a45-44a6-8d94-800e442e44a9 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=25ae8c05-2e08-4fae-aa66-24365ff61b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:5b:6f:b3:22:1a:d2:50:96:06:e3:28:76: 60:ef:f1:bc:4c:d3:24:0e:69:fe:45:d4:f6:8c:df: ac:6b:01:58:e0:cb:0a:dc:73:2a:3d:44:e4:4e:0b: 9a:92:44:f3:ea:46:45:47:4f:54:e7:46:8a:e3:5c: 23:aa:7c:bd:81:84:64:95:04:1f:b4:dc:86:ac:5f: 40:0f:77:31:3e:14:d8:f8:35:f2:d2:d3:b6:5c:1e: 14:e8:e9:0d:cb:d0:ce:40:7e:61:2d:70:2a:9a:ed: 33:f0:d7:76:36:33:fe:d7:5b:72:70:d4:2c:4f:c7: 3f:22:5f:99:be:29:a1:0c:82:7c:20:d6:93:44:b6: 4b:8a:60:7b:df:e2:8c:4c:71:64:1b:27:93:a3:15: 6f:27:6c:06:d1:13:74:50:ad:bc:26:1f:19:38:b3: f2:73:5a:14:34:59:96:a9:bb:be:96:ca:f8:ac:4d: f5:c1:68:7d:54:8f:88:b9:0e:be:03:75:d8:b3:70: 6e:a8:63:21:30:8b:09:57:1c:9b:62:7a:2d:06:9e: d2:c8:d7:42:9f:6a:af:e8:72:12:96:12:c5:5e:72: fa:ff:68:66:00:3d:c5:ad:b2:3d:30:b7:cf:87:af: 9f:73:6f:1b:74:8b:4e:22:c7:f0:d9:9c:1f:80:c0: 0c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0D:CA:FA:CB:23:1A:D7:9E:F8:02:82:34:4E:F6:1D:48:80:28:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl X509v3 Authority Key Identifier: keyid:76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c8:6a:a8:8d:48:32:c6:65:19:c5:b8:16:94:bb:41:db:75: 43:0a:8a:f6:a1:92:8e:9f:60:69:52:e5:fe:2b:bb:20:53:1b: b1:d5:45:1a:98:20:ca:b0:94:3e:8e:4e:4b:a4:fa:a4:c0:e6: b9:45:b9:9f:9b:15:19:a2:09:3f:17:81:6a:68:26:bc:a0:bb: 21:02:0b:59:fd:c6:a0:76:79:0f:c3:05:12:4f:a8:2c:97:06: 95:f7:2c:99:4b:87:5c:73:30:23:95:dc:0a:76:74:59:04:40: b7:28:42:42:ed:d6:00:16:f2:25:04:51:44:d1:d8:b5:40:02: 66:57:29:09:7c:ae:65:86:97:ba:8c:f2:2a:94:d4:d5:98:72: 28:49:bc:9b:48:39:4c:74:8e:e7:57:98:5c:69:04:f5:f1:81: 82:a8:81:cb:e4:96:39:c4:a9:97:15:9d:3d:fb:f4:98:3d:a1: a0:2b:8b:2a:ab:e4:a3:fd:6d:8b:53:0b:08:69:12:51:bf:04: a2:57:8d:ab:d1:97:cb:ac:1f:06:0b:26:d7:be:b6:8d:01:3c: 95:1d:4c:32:90:fd:f6:0f:49:09:28:89:ec:f0:c9:51:6e:34: d6:06:0f:67:de:87:18:a9:fc:46:ff:30:64:20:14:44:f5:35: c5:27:2c:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX7hK0bOKp/oxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0 NGE5MB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk MjVhZThjMDUtMmUwOC00ZmFlLWFhNjYtMjQzNjVmZjYxYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBbb7MiGtJQlgbjKHZg7/G8TNMkDmn+RdT2 jN+sawFY4MsK3HMqPUTkTguakkTz6kZFR09U50aK41wjqny9gYRklQQftNyGrF9A D3cxPhTY+DXy0tO2XB4U6OkNy9DOQH5hLXAqmu0z8Nd2NjP+11tycNQsT8c/Il+Z vimhDIJ8INaTRLZLimB73+KMTHFkGyeToxVvJ2wG0RN0UK28Jh8ZOLPyc1oUNFmW qbu+lsr4rE31wWh9VI+IuQ6+A3XYs3BuqGMhMIsJVxybYnotBp7SyNdCn2qv6HIS lhLFXnL6/2hmAD3FrbI9MLfPh6+fc28bdItOIsfw2ZwfgMAMVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPYNyvrLIxrXnvgCgjRO9h1IgCjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Mjlj NDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvNTI5YzQ1NmEtMGE0NS00 NGE2LThkOTQtODAwZTQ0MmU0NGE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTI5YzQ1NmEtMGE0NS00NGE2LThk OTQtODAwZTQ0MmU0NGE5LzUyOWM0NTZhLTBhNDUtNDRhNi04ZDk0LTgwMGU0NDJl NDRhOS5jcmwwHwYDVR0jBBgwFoAUdkyoaAug9g7c3MxmybTs5uGD8KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBl NDQyZTQ0YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYyGqojUgyxmUZxbgWlLtB 23VDCor2oZKOn2BpUuX+K7sgUxux1UUamCDKsJQ+jk5LpPqkwOa5RbmfmxUZogk/ F4FqaCa8oLshAgtZ/cagdnkPwwUST6gslwaV9yyZS4dcczAjldwKdnRZBEC3KEJC 7dYAFvIlBFFE0di1QAJmVykJfK5lhpe6jPIqlNTVmHIoSbybSDlMdI7nV5hcaQT1 8YGCqIHL5JY5xKmXFZ09+/SYPaGgK4sqq+Sj/W2LUwsIaRJRvwSiV42r0ZfLrB8G CybXvraNATyVHUwykP32D0kJKIns8MlRbjTWBg9n3ocYqfxG/zBkIBRE9TXFJyzo -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:30 2026 by rpki-client