$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft File: ae425633-e238-4a95-9c23-f41543ed4ad0.mft (raw, json) Hash identifier: cLpXGzos9neR4RXhgWZ4+GVcjIPLTVvKQm4zBuRnx54= Subject key identifier: 79:4C:56:2E:4B:EC:4D:4F:DC:D2:F1:61:04:B9:50:C9:BA:15:4C:CA Authority key identifier: FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7 Certificate issuer: /CN=ae425633-e238-4a95-9c23-f41543ed4ad0 Certificate serial: 010D0C9F4328584D4B7D82CECB0EDBA4ED1F5170 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft Manifest number: 010D0C9F4328584073A84B7241EED1C3721DCD1B Signing time: Thu 26 Mar 2026 09:00:04 +0000 Manifest this update: Thu 26 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: ae425633-e238-4a95-9c23-f41543ed4ad0.crl (hash: owtVtVQIhyAyL+/YbK/4L5O/gJ4n6socyCwMMejYPzM=) 2: e052977a-1de1-3684-ac1b-1357e58568d9.roa (hash: gk87MBdT4wEuzEFTaEo5tXJpZZ0Nrh9uZJmzcZgauts=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:7d:82:ce:cb:0e:db:a4:ed:1f:51:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae425633-e238-4a95-9c23-f41543ed4ad0 Validity Not Before: Mar 26 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=5a7eb1c6-1684-4564-8dc7-b886848f1d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:5c:6b:ba:31:78:b3:35:5f:fe:35:eb:45: 29:60:65:b0:58:ea:aa:3a:9c:40:56:f5:37:2e:7b: 98:ee:fb:d8:f0:88:de:22:12:32:30:ab:72:7f:f6: 0c:c2:bf:20:fd:23:eb:3d:db:44:71:f5:5f:5b:55: 43:7d:20:a9:63:da:c0:dc:b6:30:68:8f:a2:15:fa: 91:64:3e:76:80:31:09:58:3d:25:fc:ae:9d:49:9c: 42:bf:8f:d1:88:3c:e1:f5:f3:96:ca:cf:33:05:46: 04:40:f5:93:21:05:f2:86:ef:bd:14:44:fa:bd:30: 76:d0:08:90:1f:86:4c:a3:02:88:ad:61:94:5e:75: b5:f8:fe:30:9e:2e:1b:6f:2c:c9:04:30:df:ee:85: 75:47:6e:b8:2e:39:56:fd:e4:62:dc:3a:03:06:b6: 9e:44:68:73:b1:62:a6:f9:7f:80:81:49:68:5e:da: 70:17:87:4e:be:08:a5:8c:4c:50:d2:e9:39:c9:a9: a8:fb:5a:cf:a0:ed:a9:b7:f2:69:ec:96:04:67:bb: 17:46:ff:39:9d:b1:2a:ff:4b:4f:a7:5b:9f:d1:2f: 3e:0d:05:fc:2d:d7:ad:05:9c:02:c8:f6:94:60:f4: 96:e5:75:1c:53:92:a6:a3:05:97:fa:e6:ad:0a:e0: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4C:56:2E:4B:EC:4D:4F:DC:D2:F1:61:04:B9:50:C9:BA:15:4C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.crl X509v3 Authority Key Identifier: keyid:FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1e:43:90:48:00:ef:3a:d7:60:a8:77:f4:05:06:8f:a6:9e: eb:d7:e0:1d:ff:e9:2a:fd:89:f9:3f:0c:01:99:1f:51:a2:55: d9:f5:f7:bf:93:2a:22:6c:7b:91:7c:d3:11:3a:ab:cc:fa:88: c8:b3:0f:48:9c:c1:b0:60:0a:b6:6a:d5:f3:ef:09:ea:04:a2: 9e:04:45:83:48:e4:55:65:79:e8:82:fb:14:09:88:dc:92:dc: 20:fd:cf:90:32:69:9b:45:47:ff:e6:f3:26:1b:04:1a:4c:cd: 59:63:bc:06:8c:00:43:75:94:24:f4:f1:78:67:75:0b:0a:6c: 16:2c:cc:59:cb:c6:6b:81:6b:61:fa:38:c5:6c:8b:3a:0b:24: 9e:6a:7b:f6:0b:b5:7a:d7:ea:4f:16:62:8a:c3:ac:c8:4e:51: 4e:8e:9b:89:64:ae:2c:ae:fd:b1:fd:d1:b8:d0:da:60:c9:9e: fe:fc:26:2c:df:06:6e:00:40:d4:ae:55:b8:5b:3e:17:05:ab: 6d:4d:f3:14:0d:b4:12:e3:0b:42:20:84:3e:37:13:6f:0f:2c: 97:7b:fe:e2:3c:ff:8b:03:e4:50:15:0b:7e:b2:d4:05:69:40: ac:ae:db:76:bf:47:ec:3c:b8:97:37:40:72:ac:39:1a:fe:98: c5:79:b8:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LfYLOyw7bpO0fUXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0MjU2MzMtZTIzOC00YTk1LTljMjMtZjQxNTQzZWQ0 YWQwMB4XDTI2MDMyNjA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk NWE3ZWIxYzYtMTY4NC00NTY0LThkYzctYjg4Njg0OGYxZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Vca7oxeLM1X/4160UpYGWwWOqqOpxAVvU3 LnuY7vvY8IjeIhIyMKtyf/YMwr8g/SPrPdtEcfVfW1VDfSCpY9rA3LYwaI+iFfqR ZD52gDEJWD0l/K6dSZxCv4/RiDzh9fOWys8zBUYEQPWTIQXyhu+9FET6vTB20AiQ H4ZMowKIrWGUXnW1+P4wni4bbyzJBDDf7oV1R264LjlW/eRi3DoDBraeRGhzsWKm +X+AgUloXtpwF4dOvgiljExQ0uk5yamo+1rPoO2pt/Jp7JYEZ7sXRv85nbEq/0tP p1uf0S8+DQX8LdetBZwCyPaUYPSW5XUcU5KmowWX+uatCuCifQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHlMVi5L7E1P3NLxYQS5UMm6FUzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hZTQy NTYzMy1lMjM4LTRhOTUtOWMyMy1mNDE1NDNlZDRhZDAvYWU0MjU2MzMtZTIzOC00 YTk1LTljMjMtZjQxNTQzZWQ0YWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWU0MjU2MzMtZTIzOC00YTk1LTlj MjMtZjQxNTQzZWQ0YWQwL2FlNDI1NjMzLWUyMzgtNGE5NS05YzIzLWY0MTU0M2Vk NGFkMC5jcmwwHwYDVR0jBBgwFoAU/i8aFc1kOedbHiJjxzuzGUYfZOcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hZTQyNTYzMy1lMjM4LTRhOTUtOWMyMy1mNDE1 NDNlZDRhZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1HkOQSADvOtdgqHf0BQaP pp7r1+Ad/+kq/Yn5PwwBmR9RolXZ9fe/kyoibHuRfNMROqvM+ojIsw9InMGwYAq2 atXz7wnqBKKeBEWDSORVZXnogvsUCYjcktwg/c+QMmmbRUf/5vMmGwQaTM1ZY7wG jABDdZQk9PF4Z3ULCmwWLMxZy8ZrgWth+jjFbIs6CySeanv2C7V61+pPFmKKw6zI TlFOjpuJZK4srv2x/dG40NpgyZ7+/CYs3wZuAEDUrlW4Wz4XBattTfMUDbQS4wtC IIQ+NxNvDyyXe/7iPP+LA+RQFQt+stQFaUCsrtt2v0fsPLiXN0ByrDka/pjFebgZ -----END CERTIFICATE-----Generated at Thu Mar 26 23:52:51 2026 by rpki-client