$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft File: 509fd691-d18e-4244-b269-cdbfdf5bdf42.mft (raw, json) Hash identifier: gBVSRdk+ViUyfiydBdwcN5cQj+hyaQDNUc8jlYGo7VU= Subject key identifier: A9:E3:E1:31:D5:B1:6D:05:E5:FE:6D:ED:DB:45:CF:EA:44:A7:03:D0 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584D4A53B9A5D2B5E58A2F949740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft Manifest number: 010D0C9F4328584073A82F67BED60FA6D5635313 Signing time: Wed 25 Mar 2026 23:00:03 +0000 Manifest this update: Wed 25 Mar 2026 23:00:03 +0000 Manifest next update: Fri 27 Mar 2026 23:00:00 +0000 Files and hashes: 1: 509fd691-d18e-4244-b269-cdbfdf5bdf42.crl (hash: laodCQxp1UtvaMLVV3mIz+iceHbjwm/+HVE6Qp6YExE=) 2: 7454f8ef-50a0-3be6-ad8a-80f181155e30.roa (hash: WUREOAXDSs4LLpjSqR8lJ4BC0MrPPtYz6Fg8WYBjqo4=) 3: bf34a922-0471-34af-bb29-1cebd856cee0.roa (hash: wdYi1h3vaGakq1xwyojgY54HRdYaXP6V6xwPXswm5Ac=) 4: fed345fd-8d03-3def-913f-fe4dd7109671.roa (hash: w+GNYkXHlktjiGo9I6PwY6nVofMOt9+IcB7C5x55+A8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:b9:a5:d2:b5:e5:8a:2f:94:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Mar 25 23:00:03 2026 GMT Not After : Mar 27 23:00:00 2026 GMT Subject: CN=618f85b7-3c2c-441c-8d8a-8626fbafafd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:7e:28:8d:41:e5:11:3f:3f:12:69:b3:0b: 5b:87:88:58:5e:6c:6b:49:f9:ad:e6:6a:b9:93:cc: 6c:5e:ef:30:2e:8b:69:f2:ca:4b:a1:88:bd:54:5a: 64:4a:be:e7:c4:16:b1:b7:8c:cf:f0:05:02:61:d0: 52:0d:e0:67:08:03:f1:38:b2:be:a0:7f:84:3a:c5: c6:1a:7d:cb:e2:75:c8:31:e9:6c:4b:62:36:e5:17: f7:af:f5:b8:59:21:ed:e8:b0:91:fc:19:ec:83:5e: cf:d9:53:28:7a:36:02:f1:59:e3:13:0c:92:7b:29: 0a:fa:1a:92:28:5d:21:76:03:a0:50:dc:09:db:9f: db:a6:7d:c8:94:85:72:7b:33:28:26:35:08:14:30: 84:0c:46:13:82:09:3a:22:e2:61:ca:4d:14:f0:23: 2b:c9:93:0f:ac:74:02:d0:f6:4f:7d:5f:a5:11:9d: 6f:98:f5:d9:ba:a9:8d:c6:c8:85:ae:cc:02:24:d8: 5e:2e:e7:2b:f7:79:ef:71:c1:a4:84:56:19:ee:e0: 50:e3:2e:fd:b8:e8:2c:6f:59:45:55:9a:0b:bd:c5: 84:37:5d:ee:2c:92:f1:a8:16:0b:32:12:d5:3d:c9: b7:d4:a7:9b:cb:e8:11:1c:5c:a4:6a:8c:24:ba:98: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:E1:31:D5:B1:6D:05:E5:FE:6D:ED:DB:45:CF:EA:44:A7:03:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a4:30:d3:4a:38:50:d7:87:be:1c:ee:de:6d:f4:0a:e6:45: 03:61:c6:24:28:98:c7:e0:55:71:04:c6:f8:7b:2d:8f:b7:40: d4:70:e3:40:1f:ba:ef:89:d3:f4:19:98:57:03:ad:67:f1:87: 37:23:1a:ee:08:2f:b9:3f:78:a6:44:59:86:3e:ae:ab:f5:37: a4:6b:c6:9f:dc:a0:93:82:d3:5f:e2:43:bd:2b:04:52:47:bd: 98:8d:b9:f5:1c:ba:2c:93:a7:33:ce:13:49:d9:66:7f:b1:15: 85:bb:d4:01:7d:83:4b:35:40:4f:ab:75:86:34:8d:be:6e:6b: 75:e2:f8:02:09:83:86:6b:b2:1c:85:52:f4:d8:35:71:23:d4: 02:e1:31:ab:2e:7f:b4:7f:83:5b:1e:a1:85:0e:e4:a8:52:83: ed:7a:52:36:11:b7:64:4b:41:58:36:63:a9:24:a3:89:ff:f2: 23:a4:90:19:f5:eb:55:12:b2:a6:ce:b0:3d:5b:17:95:e1:9c: dd:f1:f5:46:4b:48:d7:b8:aa:33:f4:3b:4d:08:fa:23:03:e0: 95:8a:1a:e1:be:92:b9:dd:3d:84:41:a8:ec:7a:07:37:df:7d: d9:d7:92:28:ff:ea:9c:35:1b:af:1d:c0:6a:6d:b9:25:04:18: 43:19:49:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KU7ml0rXlii+Ul0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI2MDMyNTIzMDAwM1oXDTI2MDMyNzIzMDAwMFowLzEtMCsGA1UEAxMk NjE4Zjg1YjctM2MyYy00NDFjLThkOGEtODYyNmZiYWZhZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SF+KI1B5RE/PxJpswtbh4hYXmxrSfmt5mq5 k8xsXu8wLotp8spLoYi9VFpkSr7nxBaxt4zP8AUCYdBSDeBnCAPxOLK+oH+EOsXG Gn3L4nXIMelsS2I25Rf3r/W4WSHt6LCR/Bnsg17P2VMoejYC8VnjEwySeykK+hqS KF0hdgOgUNwJ25/bpn3IlIVyezMoJjUIFDCEDEYTggk6IuJhyk0U8CMryZMPrHQC 0PZPfV+lEZ1vmPXZuqmNxsiFrswCJNheLucr93nvccGkhFYZ7uBQ4y79uOgsb1lF VZoLvcWEN13uLJLxqBYLMhLVPcm31Keby+gRHFykaowkupi7pQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKnj4THVsW0F5f5t7dtFz+pEpwPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvNTA5ZmQ2OTEtZDE4ZS00 MjQ0LWIyNjktY2RiZmRmNWJkZjQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMpDDTSjhQ14e+HO7ebfQK 5kUDYcYkKJjH4FVxBMb4ey2Pt0DUcONAH7rvidP0GZhXA61n8Yc3IxruCC+5P3im RFmGPq6r9Teka8af3KCTgtNf4kO9KwRSR72Yjbn1HLosk6czzhNJ2WZ/sRWFu9QB fYNLNUBPq3WGNI2+bmt14vgCCYOGa7IchVL02DVxI9QC4TGrLn+0f4NbHqGFDuSo UoPtelI2EbdkS0FYNmOpJKOJ//IjpJAZ9etVErKmzrA9WxeV4Zzd8fVGS0jXuKoz 9DtNCPojA+CVihrhvpK53T2EQajsegc3333Z15Io/+qcNRuvHcBqbbklBBhDGUkM -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:08 2026 by rpki-client