$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft File: a4738e65-dd12-4c12-b10b-7a16621165e0.mft (raw, json) Hash identifier: AACqX8icX1ih5/LnUzF/LVqzUrmqIjouR/8iwMJ9/2g= Subject key identifier: 6E:2A:71:2F:3B:8F:98:F7:8D:74:64:10:A9:5D:61:49:43:52:3A:10 Authority key identifier: DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87 Certificate issuer: /CN=a4738e65-dd12-4c12-b10b-7a16621165e0 Certificate serial: 010D0C9F4328584D4B9B4AE09A662A0AAF853380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft Manifest number: 010D0C9F4328584B73E77F49CD7C7241AD6BC6AE Signing time: Thu 26 Mar 2026 10:00:03 +0000 Manifest this update: Thu 26 Mar 2026 10:00:03 +0000 Manifest next update: Sat 28 Mar 2026 10:00:00 +0000 Files and hashes: 1: a4738e65-dd12-4c12-b10b-7a16621165e0.crl (hash: 9IqAxdc0wPK5fpU01pBnECMOpIiD8CDPyOxR25mUFnE=) 2: b857fd5a-5185-3e49-b5f7-ca152e420a13.roa (hash: /3h3k9QNcCU+yx05po6ng1709/9Ppf982y8n8PI0z3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:9b:4a:e0:9a:66:2a:0a:af:85:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4738e65-dd12-4c12-b10b-7a16621165e0 Validity Not Before: Mar 26 10:00:03 2026 GMT Not After : Mar 28 10:00:00 2026 GMT Subject: CN=3770dcc7-b552-4822-a0aa-4a7a890a8b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f2:36:25:0d:0d:9e:63:23:4a:44:17:ae:dd: fa:39:c3:7e:03:f0:9c:d9:31:1d:95:b5:81:74:c6: 88:99:3d:6e:37:6d:88:c8:6c:1a:9e:2f:57:06:4c: 70:7d:d1:9e:37:a9:68:b2:d3:69:e1:e4:39:86:2b: 6e:2e:3e:04:2e:13:e0:ef:d3:56:1b:55:34:f1:af: d2:17:1e:de:a0:de:41:8f:c4:37:cb:1c:85:5f:47: bd:7c:52:13:dc:15:8b:92:4c:9b:e6:5f:0b:1c:ec: 42:65:60:5d:bb:a9:71:77:cd:d1:ba:5b:19:80:4e: 36:2b:81:96:4e:54:10:a4:44:bf:ad:24:59:e1:46: 69:f8:0f:14:6b:da:21:d9:5d:be:0a:58:95:b7:6c: 39:56:c0:53:86:5d:f9:81:85:67:e3:f8:2a:cf:75: cb:35:e3:2e:28:bc:f0:2f:21:86:a0:62:dd:b2:63: 68:60:58:92:37:c0:0c:a7:8f:b6:09:99:0a:07:21: a2:95:2d:b2:bd:00:d6:dd:11:ff:f0:8f:0f:2e:ca: 61:a3:9f:e5:7d:05:f5:40:8b:82:f6:57:bc:ad:38: 59:a1:9d:23:ec:69:da:4f:ea:54:f5:89:8a:1b:b5: c5:19:02:dc:22:04:dc:ec:e7:a5:d5:35:b6:d9:55: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:71:2F:3B:8F:98:F7:8D:74:64:10:A9:5D:61:49:43:52:3A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl X509v3 Authority Key Identifier: keyid:DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:28:d7:a9:6a:cd:7e:80:9b:39:ae:20:4c:10:b2:a8:8b:08: 13:4e:f8:65:02:b5:28:16:5b:72:c0:16:94:98:e7:dc:95:60: d4:c7:16:23:24:9a:63:de:3a:8a:cc:c1:a1:d5:b9:e4:6c:f9: fc:90:e8:73:19:57:e1:1d:12:0b:a8:04:4f:b9:83:54:2c:41: 73:a5:84:4d:e6:ca:28:59:4e:da:70:8c:0b:ac:0f:2e:e2:eb: 9f:6b:6c:fb:19:aa:bd:ce:0f:1c:53:37:63:15:34:99:23:85: b8:45:c4:c6:3e:ac:a4:71:28:5f:93:e4:08:2c:4d:5a:bc:fc: de:59:9a:3a:95:dd:17:86:61:46:18:d2:ad:53:eb:46:45:c3: bf:82:85:30:cd:47:76:72:e9:5b:ff:ab:75:b4:ca:80:11:9d: e6:6b:73:20:e3:ba:5d:98:4e:92:fb:f2:9e:e8:06:99:19:ab: 30:71:d8:99:da:98:5a:f7:89:6b:37:2b:b3:61:3c:5f:32:6a: 98:d4:d8:7d:a5:77:94:b6:01:e5:0c:85:10:3e:6a:bf:b1:a7: 7a:23:8e:bc:e9:ea:27:62:12:ab:e3:80:2c:15:db:b8:f9:f7: ce:c4:4f:f0:a1:47:23:98:e9:fd:6e:09:00:1b:8c:43:e2:1e: ea:48:54:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Lm0rgmmYqCq+FM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ3MzhlNjUtZGQxMi00YzEyLWIxMGItN2ExNjYyMTE2 NWUwMB4XDTI2MDMyNjEwMDAwM1oXDTI2MDMyODEwMDAwMFowLzEtMCsGA1UEAxMk Mzc3MGRjYzctYjU1Mi00ODIyLWEwYWEtNGE3YTg5MGE4YjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/I2JQ0NnmMjSkQXrt36OcN+A/Cc2TEdlbWB dMaImT1uN22IyGwani9XBkxwfdGeN6lostNp4eQ5hituLj4ELhPg79NWG1U08a/S Fx7eoN5Bj8Q3yxyFX0e9fFIT3BWLkkyb5l8LHOxCZWBdu6lxd83RulsZgE42K4GW TlQQpES/rSRZ4UZp+A8Ua9oh2V2+CliVt2w5VsBThl35gYVn4/gqz3XLNeMuKLzw LyGGoGLdsmNoYFiSN8AMp4+2CZkKByGilS2yvQDW3RH/8I8PLspho5/lfQX1QIuC 9le8rThZoZ0j7GnaT+pU9YmKG7XFGQLcIgTc7Oel1TW22VVV7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG4qcS87j5j3jXRkEKldYUlDUjoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNDcz OGU2NS1kZDEyLTRjMTItYjEwYi03YTE2NjIxMTY1ZTAvYTQ3MzhlNjUtZGQxMi00 YzEyLWIxMGItN2ExNjYyMTE2NWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTQ3MzhlNjUtZGQxMi00YzEyLWIx MGItN2ExNjYyMTE2NWUwL2E0NzM4ZTY1LWRkMTItNGMxMi1iMTBiLTdhMTY2MjEx NjVlMC5jcmwwHwYDVR0jBBgwFoAU3dQwp3H8bdePg1+A4Q+UZ87xJocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNDczOGU2NS1kZDEyLTRjMTItYjEwYi03YTE2 NjIxMTY1ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdKNepas1+gJs5riBMELKo iwgTTvhlArUoFltywBaUmOfclWDUxxYjJJpj3jqKzMGh1bnkbPn8kOhzGVfhHRIL qARPuYNULEFzpYRN5sooWU7acIwLrA8u4uufa2z7Gaq9zg8cUzdjFTSZI4W4RcTG PqykcShfk+QILE1avPzeWZo6ld0XhmFGGNKtU+tGRcO/goUwzUd2culb/6t1tMqA EZ3ma3Mg47pdmE6S+/Ke6AaZGaswcdiZ2pha94lrNyuzYTxfMmqY1Nh9pXeUtgHl DIUQPmq/sad6I4686eonYhKr44AsFdu4+ffOxE/woUcjmOn9bgkAG4xD4h7qSFRt -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:35 2026 by rpki-client