$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.mft (raw, json) Hash identifier: lOkX3aCrD+jkIkUV3QZvNbTqFnhEf8/drb2qjTHSEBo= Subject key identifier: A6:59:1F:CE:12:D7:8F:58:EE:72:E2:60:F1:2F:A0:BB:90:CD:55:05 Authority key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Certificate issuer: /CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Certificate serial: 010D0C9F4328584D49BED7B9243D2308A333F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft Manifest number: 010D0C9F4328584B963D1DFEB59C4ACB2FD6721E Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 00583209-5ea8-3fc8-9999-e6dec99e63c9.roa (hash: Zr35Bm15w049cl6aI2be1lSMTlesnT9gCOJghpIQXto=) 2: 4625cd05-e90e-4f91-9b34-2899122cfc5f.crl (hash: k6gZfQ9msNwdBTUo0AQhcUqm6Dj1+QM2fU+LqoV4Dp4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d7:b9:24:3d:23:08:a3:33:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=286f2f19-b80e-4678-a202-e3c97c15e5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:7f:e9:4e:73:3c:39:0d:f6:86:84:27:07: da:d3:1b:98:18:6b:65:cc:72:23:28:9a:6a:23:29: 1a:fd:f1:d3:7e:57:17:f5:7d:ab:dd:52:46:5a:a7: 84:00:94:86:19:86:e5:6f:89:16:e4:73:d5:66:95: 14:69:12:ca:59:76:01:b5:f9:dd:01:0d:16:77:57: 27:fd:68:92:a5:34:b8:ed:66:d8:ee:3c:88:d0:3a: 1d:ee:91:0f:1b:75:d4:c4:54:81:90:02:77:d9:41: 86:23:ee:29:cc:b1:32:e7:27:94:09:18:ff:a6:9c: 1b:63:da:9d:15:39:4d:52:df:ba:5b:49:b3:52:8c: a7:b6:d4:36:6e:3d:b3:e8:1d:e9:3e:ba:24:b0:84: a6:4b:d2:a0:59:7c:f7:5f:12:6c:8f:09:3e:31:67: c9:9a:8c:c0:83:8f:0a:68:d2:0d:b0:8d:7a:33:1e: 15:81:b6:29:f0:95:c5:7e:99:60:fa:dd:7c:d5:2a: 32:15:95:6a:8c:07:b3:9d:1f:bc:f3:d7:77:79:d1: 1f:e0:6b:00:f3:28:ff:0d:ed:55:c8:8d:13:4a:2b: e4:2a:f4:bc:00:46:a7:53:21:c9:a9:a2:ef:1b:74: 44:ff:32:b5:94:b2:21:b7:bf:9b:f5:e6:43:85:05: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:1F:CE:12:D7:8F:58:EE:72:E2:60:F1:2F:A0:BB:90:CD:55:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl X509v3 Authority Key Identifier: keyid:52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:eb:42:fa:a9:64:16:6c:9e:bb:e3:92:2b:33:d2:57:15:94: 40:93:06:99:6a:90:ab:5a:80:6e:b9:ad:84:0c:96:8b:0f:52: cd:82:80:1b:89:c8:dd:86:4c:78:39:76:ce:4f:19:37:9c:45: 9c:3f:ce:49:33:b9:8b:62:59:eb:3e:b9:eb:23:2c:3e:db:dd: f9:5a:75:98:57:0d:06:5e:89:72:bc:b9:4d:f1:07:50:ae:3d: 6e:ef:6b:5b:d7:52:2c:a4:f8:b4:93:87:df:03:47:3d:e7:c2: 63:1a:28:32:4e:cb:ea:f2:2f:c1:60:72:00:82:ce:b6:78:2c: a8:ab:02:7c:87:60:82:3e:79:45:83:14:1e:ef:0f:4b:22:88: c9:20:9d:d7:31:45:9e:b8:6a:45:2b:94:80:9c:29:ab:17:86: 65:7e:9c:5c:38:7c:00:0b:2c:f8:71:5e:cf:a4:0e:4a:4c:4c: 86:59:c0:14:e1:d7:05:2d:f3:d5:89:5f:fc:33:12:2c:5c:65: dd:70:c3:be:d8:cc:dc:48:03:d3:5c:51:f4:fd:a8:d4:28:70: 99:77:b7:8f:57:f0:a9:34:f1:f2:2c:a0:23:69:d7:7d:af:15: 4f:b6:2e:e5:dd:6d:a9:76:c4:2e:a3:27:50:b7:a1:b1:20:75: f8:7d:a0:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jvte5JD0jCKMz8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNm YzVmMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk Mjg2ZjJmMTktYjgwZS00Njc4LWEyMDItZTNjOTdjMTVlNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75/6U5zPDkN9oaEJwfa0xuYGGtlzHIjKJpq Iyka/fHTflcX9X2r3VJGWqeEAJSGGYblb4kW5HPVZpUUaRLKWXYBtfndAQ0Wd1cn /WiSpTS47WbY7jyI0Dod7pEPG3XUxFSBkAJ32UGGI+4pzLEy5yeUCRj/ppwbY9qd FTlNUt+6W0mzUoynttQ2bj2z6B3pProksISmS9KgWXz3XxJsjwk+MWfJmozAg48K aNINsI16Mx4VgbYp8JXFfplg+t181SoyFZVqjAeznR+889d3edEf4GsA8yj/De1V yI0TSivkKvS8AEanUyHJqaLvG3RE/zK1lLIht7+b9eZDhQWGGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKZZH84S149Y7nLiYPEvoLuQzVUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1 Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvNDYyNWNkMDUtZTkwZS00 ZjkxLTliMzQtMjg5OTEyMmNmYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDYyNWNkMDUtZTkwZS00ZjkxLTli MzQtMjg5OTEyMmNmYzVmLzQ2MjVjZDA1LWU5MGUtNGY5MS05YjM0LTI4OTkxMjJj ZmM1Zi5jcmwwHwYDVR0jBBgwFoAUUheecWx1fh1zBe8WvU1WIcoiY1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5 MTIyY2ZjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAu60L6qWQWbJ6745IrM9JX FZRAkwaZapCrWoBuua2EDJaLD1LNgoAbicjdhkx4OXbOTxk3nEWcP85JM7mLYlnr PrnrIyw+2935WnWYVw0GXolyvLlN8QdQrj1u72tb11IspPi0k4ffA0c958JjGigy Tsvq8i/BYHIAgs62eCyoqwJ8h2CCPnlFgxQe7w9LIojJIJ3XMUWeuGpFK5SAnCmr F4ZlfpxcOHwACyz4cV7PpA5KTEyGWcAU4dcFLfPViV/8MxIsXGXdcMO+2MzcSAPT XFH0/ajUKHCZd7ePV/CpNPHyLKAjadd9rxVPti7l3W2pdsQuoydQt6GxIHX4faCu -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:19 2026 by rpki-client