$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft File: a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft (raw, json) Hash identifier: CYTRHlXiPaCZGqGOV1c30StXTUcE4sYpxxz8y4wHmFg= Subject key identifier: 5F:FC:AE:FC:29:EE:A4:19:56:34:FB:4F:6E:82:8C:42:3F:CD:7A:2D Authority key identifier: 9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 Certificate issuer: /CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Certificate serial: 010D0C9F4328584D49FA7354BD22FCD2B3C5A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft Manifest number: 010D0C9F4328584C142274DBAD88B659957DB5F1 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl (hash: gj4KEW9CEo8g1qlaE/tUBmoojT5n3a52StCBGMsG/1o=) 2: de847a06-de42-39bb-b42d-d6634e0c9a95.roa (hash: n9lDwRHTmY7xOyx7EaJQmQFwsfYuruq/rvhfSP/jaew=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:73:54:bd:22:fc:d2:b3:c5:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=65cd3e0d-e986-44c4-8d2e-1f0218d14f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:04:54:58:c2:0b:64:d3:be:55:bc:85:42: ef:71:2c:03:48:14:76:72:5b:fe:13:c6:42:87:34: c5:19:0f:ff:24:56:88:14:9e:59:88:c9:40:2c:23: 62:d6:14:31:c1:81:c7:a5:98:0d:47:33:0e:09:5d: 5d:07:f5:21:70:36:fb:d3:be:07:5f:fc:52:d7:d3: b0:cd:58:71:30:43:e2:b4:92:e4:63:3d:7e:0c:f5: 77:63:ae:87:a1:17:e9:a6:2f:55:14:35:12:fe:8f: 7c:86:a2:fb:b6:ae:9f:85:c3:6e:bc:a9:61:de:ce: 81:49:00:06:16:f9:07:4a:9b:49:9e:19:db:cc:f7: 1f:ac:30:9f:58:70:6a:10:46:e4:b1:34:c6:76:5a: b6:31:1d:ec:7a:ef:64:47:77:1f:e8:88:a7:7f:ed: 7c:39:22:e1:bd:3c:84:62:cc:32:78:18:af:e3:55: fe:87:0d:af:ed:16:14:55:11:6e:d6:36:df:b0:03: 21:b9:99:1d:9e:07:fa:b3:f5:12:ec:32:d3:54:c6: 45:1d:f5:1d:8f:69:f9:1a:42:2d:d1:bd:28:ff:6e: d7:d6:a6:97:bd:3d:c4:ef:4c:85:d3:e0:cf:30:93: 47:e5:9e:c3:b5:b9:15:d3:1d:9d:11:87:41:f9:6e: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:AE:FC:29:EE:A4:19:56:34:FB:4F:6E:82:8C:42:3F:CD:7A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl X509v3 Authority Key Identifier: keyid:9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:40:5c:99:5e:d3:e4:a7:d6:be:6c:da:d4:d5:94:2e:b0:ce: 64:a5:d6:ae:94:20:5b:20:17:93:7d:f8:10:98:9c:a2:5c:04: c3:f9:e6:7b:3f:ba:07:40:d1:25:1f:cc:f6:3d:1a:a9:47:6a: 0c:95:3b:54:7a:b6:7b:76:dc:26:00:8f:ee:e1:50:77:86:82: 8b:5c:bd:7c:34:10:47:c9:5d:3c:b5:84:d6:66:34:ea:c1:2d: 04:85:23:f7:3a:ac:32:7c:f6:8d:32:19:0d:e9:ed:ed:03:b2: 9d:87:d1:b8:e2:60:f7:b1:01:48:d3:46:ef:52:62:2c:8d:6f: 12:d2:ee:e7:0d:a1:69:19:e9:27:81:9b:d8:60:35:bf:00:62: 6a:49:f0:9d:95:11:da:ad:b2:da:2e:ff:39:97:b8:c1:8a:c8: 34:71:9d:e3:3a:67:c3:f7:36:ea:31:34:e1:09:68:6b:74:69: 5c:c5:26:a5:52:65:69:11:83:f4:24:6c:a5:2f:4f:74:ef:40: 48:4b:95:50:7f:48:82:04:64:a0:0b:37:b3:26:a9:e0:72:86: 80:90:4f:06:ef:4e:32:ea:f5:67:d3:ae:bb:4b:23:8a:59:54: a0:c9:d6:d4:e4:eb:ef:23:aa:b6:b7:8f:65:5a:32:94:a0:0a: 25:5b:0a:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nNUvSL80rPFpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRiZjk2MjgtYWY0ZC00YWZhLWFlNzktYWM1MWU4NjU1 ZDMyMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NjVjZDNlMGQtZTk4Ni00NGM0LThkMmUtMWYwMjE4ZDE0ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D8EVFjCC2TTvlW8hULvcSwDSBR2clv+E8ZC hzTFGQ//JFaIFJ5ZiMlALCNi1hQxwYHHpZgNRzMOCV1dB/UhcDb7074HX/xS19Ow zVhxMEPitJLkYz1+DPV3Y66HoRfppi9VFDUS/o98hqL7tq6fhcNuvKlh3s6BSQAG FvkHSptJnhnbzPcfrDCfWHBqEEbksTTGdlq2MR3seu9kR3cf6Iinf+18OSLhvTyE YswyeBiv41X+hw2v7RYUVRFu1jbfsAMhuZkdngf6s/US7DLTVMZFHfUdj2n5GkIt 0b0o/27X1qaXvT3E70yF0+DPMJNH5Z7DtbkV0x2dEYdB+W6pEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF/8rvwp7qQZVjT7T26CjEI/zXotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJm OTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUxZTg2NTVkMzIvYTRiZjk2MjgtYWY0ZC00 YWZhLWFlNzktYWM1MWU4NjU1ZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRiZjk2MjgtYWY0ZC00YWZhLWFl NzktYWM1MWU4NjU1ZDMyL2E0YmY5NjI4LWFmNGQtNGFmYS1hZTc5LWFjNTFlODY1 NWQzMi5jcmwwHwYDVR0jBBgwFoAUmnon3up0B6ZLkvm/jzWi6HFlpMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJmOTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUx ZTg2NTVkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjQFyZXtPkp9a+bNrU1ZQu sM5kpdaulCBbIBeTffgQmJyiXATD+eZ7P7oHQNElH8z2PRqpR2oMlTtUerZ7dtwm AI/u4VB3hoKLXL18NBBHyV08tYTWZjTqwS0EhSP3OqwyfPaNMhkN6e3tA7Kdh9G4 4mD3sQFI00bvUmIsjW8S0u7nDaFpGekngZvYYDW/AGJqSfCdlRHarbLaLv85l7jB isg0cZ3jOmfD9zbqMTThCWhrdGlcxSalUmVpEYP0JGylL09070BIS5VQf0iCBGSg CzezJqngcoaAkE8G704y6vVn0667SyOKWVSgydbU5OvvI6q2t49lWjKUoAolWwqM -----END CERTIFICATE-----Generated at Thu Mar 26 05:10:18 2026 by rpki-client