$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft File: 20ffd753-1cb0-470b-9810-1f98670d442f.mft (raw, json) Hash identifier: zSdEKrNhJZgnSy/cpAZtZntT90PVysQaQFy6LRGDrys= Subject key identifier: 60:83:4E:F3:C0:DC:BB:0B:F6:26:6C:41:4B:D4:FE:13:24:97:BE:F9 Authority key identifier: F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 Certificate issuer: /CN=20ffd753-1cb0-470b-9810-1f98670d442f Certificate serial: 010D0C9F4328584D47E2607BF42B383219602E74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft Manifest number: 010D0C9F4328584C7C197954A173191D3E240F8A Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Fri 27 Mar 2026 02:00:00 +0000 Files and hashes: 1: 1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa (hash: 5ycHv+fTOWsXcn9VhdrjboZB/IBJk640xRueKxke3/U=) 2: 20ffd753-1cb0-470b-9810-1f98670d442f.crl (hash: +XQZreSaCHLeVzF3eTxix48aA60U6brsfW8qtHeKhcI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:60:7b:f4:2b:38:32:19:60:2e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ffd753-1cb0-470b-9810-1f98670d442f Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 27 02:00:00 2026 GMT Subject: CN=010b9705-97b6-46b0-a68b-aaa84e6e5a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:2d:f1:0a:96:22:60:fc:6f:f7:44:54:14: 66:e5:69:97:a0:ff:8b:91:cb:b9:a4:45:9f:54:9f: d9:42:0e:be:d3:29:6b:1e:e4:d9:00:41:b0:64:8d: 8f:26:7a:7a:c7:b9:65:3d:05:5c:ce:f2:9a:89:6b: f1:00:b9:67:dc:78:88:04:d5:43:9e:af:ef:4c:7e: e8:e9:cb:7e:9a:73:9e:83:1d:f8:1a:c0:43:a8:8b: 9d:38:e9:1c:79:fc:15:04:79:66:9c:fa:0d:29:af: 04:81:ba:7b:8b:80:a9:94:18:b8:39:fc:24:38:6c: 8e:63:ef:2b:08:08:b1:40:50:a2:8e:52:1d:16:65: 54:d9:7e:ae:a5:e8:4c:73:1d:04:01:4d:3a:9f:36: 7d:f0:c2:aa:7a:2c:98:94:c7:85:a2:db:72:a5:d9: fe:2d:1b:41:09:3f:df:4c:52:80:56:2c:06:44:3b: 7f:a7:0a:ce:25:1b:4f:b4:9a:6e:ee:4c:bb:f5:ed: 70:70:c6:47:ee:d9:2f:1a:9c:14:68:7f:9c:a2:b3: 5f:4e:4a:fd:35:67:ec:0f:9c:2e:a7:d7:fe:18:cf: 11:d8:39:c0:3c:4f:d0:2e:b5:1a:85:e2:5f:67:ce: 3f:52:ab:96:af:07:39:98:8d:bd:96:45:1b:08:00: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:83:4E:F3:C0:DC:BB:0B:F6:26:6C:41:4B:D4:FE:13:24:97:BE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl X509v3 Authority Key Identifier: keyid:F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8d:97:e7:cb:d7:a8:9c:fa:a2:e7:6b:2a:84:7b:19:b7:c2: 2f:21:8e:2d:16:5f:7a:66:53:91:d4:2e:f2:83:74:c9:ff:97: 77:56:09:bf:50:33:d8:c7:14:a9:d5:17:05:15:89:ce:69:39: 7a:91:a8:2a:18:d1:0b:04:43:d4:1e:e6:65:2d:87:82:d3:60: 47:ac:8e:2d:01:48:64:0f:a4:82:31:e9:25:22:7d:8f:24:82: 7b:9f:67:9b:8b:d8:48:fe:e3:56:a7:27:c9:b1:8a:7b:4e:4e: ae:bd:e3:d1:ca:6a:88:e2:42:c5:1f:24:bd:89:92:fd:68:74: ae:0c:19:46:cb:3a:c6:da:46:cd:f3:19:c8:62:ae:6a:8e:3e: dc:e8:e0:6b:93:ff:ee:18:4d:a5:41:fb:72:fc:ec:65:1d:ce: 7f:47:21:68:61:cb:4a:7b:8d:60:59:07:d3:71:c4:c0:31:5f: ff:19:75:f5:c2:50:d2:6c:b3:87:ba:19:85:f0:90:d4:4c:1c: 3d:a0:de:f7:ce:e6:0c:b5:50:6f:1d:72:17:fd:d0:f3:02:8e: 99:76:c4:33:d3:5a:73:e6:82:14:ee:67:16:d9:8e:e2:b2:a1: 9b:15:71:30:f3:9b:bd:50:b7:e9:08:43:64:64:41:1a:50:ed: f5:2f:c4:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4mB79Cs4MhlgLnQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmZmQ3NTMtMWNiMC00NzBiLTk4MTAtMWY5ODY3MGQ0 NDJmMB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyNzAyMDAwMFowLzEtMCsGA1UEAxMk MDEwYjk3MDUtOTdiNi00NmIwLWE2OGItYWFhODRlNmU1YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48It8QqWImD8b/dEVBRm5WmXoP+Lkcu5pEWf VJ/ZQg6+0ylrHuTZAEGwZI2PJnp6x7llPQVczvKaiWvxALln3HiIBNVDnq/vTH7o 6ct+mnOegx34GsBDqIudOOkcefwVBHlmnPoNKa8Egbp7i4CplBi4OfwkOGyOY+8r CAixQFCijlIdFmVU2X6upehMcx0EAU06nzZ98MKqeiyYlMeFottypdn+LRtBCT/f TFKAViwGRDt/pwrOJRtPtJpu7ky79e1wcMZH7tkvGpwUaH+corNfTkr9NWfsD5wu p9f+GM8R2DnAPE/QLrUaheJfZ84/UquWrwc5mI29lkUbCACXaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGCDTvPA3LsL9iZsQUvU/hMkl775MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZm ZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4NjcwZDQ0MmYvMjBmZmQ3NTMtMWNiMC00 NzBiLTk4MTAtMWY5ODY3MGQ0NDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjBmZmQ3NTMtMWNiMC00NzBiLTk4 MTAtMWY5ODY3MGQ0NDJmLzIwZmZkNzUzLTFjYjAtNDcwYi05ODEwLTFmOTg2NzBk NDQyZi5jcmwwHwYDVR0jBBgwFoAU9heFA0A8DSI3OwIV34+aUPibhoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZmZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4 NjcwZDQ0MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARjZfny9eonPqi52sqhHsZ t8IvIY4tFl96ZlOR1C7yg3TJ/5d3Vgm/UDPYxxSp1RcFFYnOaTl6kagqGNELBEPU HuZlLYeC02BHrI4tAUhkD6SCMeklIn2PJIJ7n2ebi9hI/uNWpyfJsYp7Tk6uvePR ymqI4kLFHyS9iZL9aHSuDBlGyzrG2kbN8xnIYq5qjj7c6OBrk//uGE2lQfty/Oxl Hc5/RyFoYctKe41gWQfTccTAMV//GXX1wlDSbLOHuhmF8JDUTBw9oN73zuYMtVBv HXIX/dDzAo6ZdsQz01pz5oIU7mcW2Y7isqGbFXEw85u9ULfpCENkZEEaUO31L8SL -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:07 2026 by rpki-client