$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft File: d9bb608e-c60e-4ceb-b32a-f101c944038d.mft (raw, json) Hash identifier: +hoSX1pfrK2RfZ5WcOyUMoMYmBSk8x+SxjDfHhsJInk= Subject key identifier: E7:EB:25:1E:0B:47:13:62:D6:00:C2:9E:7B:EF:D6:8C:77:F2:DF:21 Authority key identifier: 2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F Certificate issuer: /CN=d9bb608e-c60e-4ceb-b32a-f101c944038d Certificate serial: 010D0C9F4328584D4A183A1C54AA4E34B4347B88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft Manifest number: 010D0C9F432858460C6BE4A97B6C5689D3D8932A Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 29a0033e-011d-388f-8797-7e1f26f33d84.roa (hash: hq4nE6JoB5EF3nhSqFd+eilSrKPILp4fDnH9b/MIjwA=) 2: d9bb608e-c60e-4ceb-b32a-f101c944038d.crl (hash: DkArkxY8HgNWUYKnbMsZkRaZ2GgLebaRdyLnNuSHF6Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3a:1c:54:aa:4e:34:b4:34:7b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9bb608e-c60e-4ceb-b32a-f101c944038d Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=e7d1b5a8-d59d-483b-b727-516af05c5b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:17:16:66:a2:31:59:dc:1e:66:b5:b4:28: 54:75:99:b2:3c:aa:68:77:2e:b2:d6:81:b5:02:9f: e5:8c:8c:19:8b:45:0e:7f:4a:67:e6:02:8c:44:6c: eb:d2:4f:2f:25:82:69:27:13:04:c8:20:43:0d:84: 0d:71:b7:d4:4a:e1:2b:e2:0d:32:a6:fe:ce:e2:9a: 64:14:5e:63:b9:8e:37:1a:94:04:33:12:93:7f:4d: 90:95:67:af:e3:97:ee:7d:1b:42:c0:c3:b8:18:16: 5a:c1:35:de:36:94:e8:c8:91:af:02:7e:5a:1b:91: cb:d1:1c:e4:92:2c:b2:7a:db:11:47:72:aa:ff:16: a9:52:94:71:7d:10:a1:1e:12:83:6c:3f:ae:a9:b6: e0:27:77:87:84:39:03:9a:c6:d8:00:1d:73:0b:d8: 92:93:3a:15:f4:0e:4d:f5:9e:39:5c:b0:69:22:bb: 45:81:58:43:54:b6:40:45:28:a9:9f:5f:c1:15:42: 73:bb:b4:ed:d3:b3:19:a5:c1:ea:21:ff:45:ea:1e: 61:5c:af:ee:67:26:94:14:5b:ed:bd:e5:22:cf:fa: 7e:41:a2:49:3b:74:10:48:5f:97:72:69:25:19:b3: f8:40:43:cc:64:25:ac:a8:8e:50:aa:e9:75:05:5b: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EB:25:1E:0B:47:13:62:D6:00:C2:9E:7B:EF:D6:8C:77:F2:DF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl X509v3 Authority Key Identifier: keyid:2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f5:a3:75:2c:a4:c9:da:7e:d7:1e:5e:35:a4:c9:b4:06:7c: ce:55:0f:fc:11:a5:d9:6a:35:02:e2:f1:e7:2e:d1:63:d5:c3: 3b:6e:e4:3c:79:a7:0a:87:83:b7:56:cf:20:35:37:ca:bd:7a: ef:99:7e:c0:79:f6:3a:28:b9:ba:0f:60:be:dc:c0:61:50:d1: 5b:8f:2a:87:32:3d:95:30:9e:b3:19:c2:45:56:55:46:e6:49: 64:5d:30:9d:80:aa:b8:e8:56:5d:09:1f:af:8b:d7:f4:a7:01: 40:32:86:be:0f:bd:64:96:5a:26:11:2c:7e:79:f5:be:30:57: 9c:58:4a:da:34:1f:3a:79:2b:0d:eb:1f:96:69:84:b4:39:a1: 26:0b:dc:76:89:95:2a:74:37:4e:66:09:a4:20:21:ac:f6:b3: be:5b:03:60:92:ec:59:e6:38:d9:a0:c2:fe:08:e4:28:22:a6: 3d:98:2d:a0:15:c3:c9:fb:02:61:04:00:89:59:f4:c8:e2:79: 93:17:2a:12:ba:f3:c4:1e:69:4c:e9:e4:6a:21:57:00:b2:16: a9:c6:6b:fb:18:d0:37:e1:17:80:59:4a:45:b8:4b:d9:6d:dc: ec:8b:46:26:8e:41:ea:dc:71:eb:e3:7d:1f:bd:a8:be:4a:ac: 10:5c:56:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDocVKpONLQ0e4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDliYjYwOGUtYzYwZS00Y2ViLWIzMmEtZjEwMWM5NDQw MzhkMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk ZTdkMWI1YTgtZDU5ZC00ODNiLWI3MjctNTE2YWYwNWM1YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1swXFmaiMVncHma1tChUdZmyPKpody6y1oG1 Ap/ljIwZi0UOf0pn5gKMRGzr0k8vJYJpJxMEyCBDDYQNcbfUSuEr4g0ypv7O4ppk FF5juY43GpQEMxKTf02QlWev45fufRtCwMO4GBZawTXeNpToyJGvAn5aG5HL0Rzk kiyyetsRR3Kq/xapUpRxfRChHhKDbD+uqbbgJ3eHhDkDmsbYAB1zC9iSkzoV9A5N 9Z45XLBpIrtFgVhDVLZARSipn1/BFUJzu7Tt07MZpcHqIf9F6h5hXK/uZyaUFFvt veUiz/p+QaJJO3QQSF+XcmklGbP4QEPMZCWsqI5Qqul1BVsiZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOfrJR4LRxNi1gDCnnvv1ox38t8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOWJi NjA4ZS1jNjBlLTRjZWItYjMyYS1mMTAxYzk0NDAzOGQvZDliYjYwOGUtYzYwZS00 Y2ViLWIzMmEtZjEwMWM5NDQwMzhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDliYjYwOGUtYzYwZS00Y2ViLWIz MmEtZjEwMWM5NDQwMzhkL2Q5YmI2MDhlLWM2MGUtNGNlYi1iMzJhLWYxMDFjOTQ0 MDM4ZC5jcmwwHwYDVR0jBBgwFoAULbRA8RkiN8mB8P5B9iDQ+ZhH5H8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kOWJiNjA4ZS1jNjBlLTRjZWItYjMyYS1mMTAx Yzk0NDAzOGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG9aN1LKTJ2n7XHl41pMm0 BnzOVQ/8EaXZajUC4vHnLtFj1cM7buQ8eacKh4O3Vs8gNTfKvXrvmX7AefY6KLm6 D2C+3MBhUNFbjyqHMj2VMJ6zGcJFVlVG5klkXTCdgKq46FZdCR+vi9f0pwFAMoa+ D71kllomESx+efW+MFecWEraNB86eSsN6x+WaYS0OaEmC9x2iZUqdDdOZgmkICGs 9rO+WwNgkuxZ5jjZoML+COQoIqY9mC2gFcPJ+wJhBACJWfTI4nmTFyoSuvPEHmlM 6eRqIVcAshapxmv7GNA34ReAWUpFuEvZbdzsi0YmjkHq3HHr430fvai+SqwQXFYr -----END CERTIFICATE-----Generated at Thu Mar 26 03:55:23 2026 by rpki-client