$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft File: a8d70f86-b257-4225-9609-989938a4164f.mft (raw, json) Hash identifier: x/bliA4ik6CtoFVmeO27B1Ypc/22/iXiAHTWZXHZJPg= Subject key identifier: 5A:C7:81:76:3D:FB:69:56:46:6B:62:2A:F7:22:D2:CB:3A:B9:18:DD Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584D4B41F3D82211B0A653511500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft Manifest number: 010D0C9F4328584B816AC2FE5D272DDE15CA1AE9 Signing time: Thu 26 Mar 2026 07:00:04 +0000 Manifest this update: Thu 26 Mar 2026 07:00:04 +0000 Manifest next update: Sun 29 Mar 2026 07:00:00 +0000 Files and hashes: 1: 062098c5-0138-3dd6-b2b3-0b23b92be422.roa (hash: Bl4NegxawvLSj+vuohDUqvYz5qCqqSGkWkkxnaKbamA=) 2: a8d70f86-b257-4225-9609-989938a4164f.crl (hash: wIMb6eEOXxyiRqD/cwpuxmYpu5L0A1YtfpRHGrDU8Fk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:41:f3:d8:22:11:b0:a6:53:51:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Mar 26 07:00:04 2026 GMT Not After : Mar 29 07:00:00 2026 GMT Subject: CN=1b5fd4c8-862b-4e32-a5fa-3d0da3b3e922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:d5:9c:49:17:95:71:fa:ae:33:3a:e3:3b: fe:e7:28:6b:10:c5:dc:b6:5d:23:8f:28:32:0f:27: 0a:ce:eb:2b:01:48:c3:69:9f:4c:5b:2f:d4:02:ad: b5:d2:ef:6f:83:26:c9:2d:8d:80:c0:22:31:00:3f: 93:60:3a:ef:9a:11:c4:86:6f:17:94:18:b9:74:37: 4e:2a:58:f9:77:c8:1a:55:f7:47:22:a8:d1:39:d3: 3f:11:a2:96:7e:ed:d8:f6:6c:e9:a7:28:b4:70:64: 6f:32:26:f6:39:78:84:94:e3:7b:d1:b1:2f:5a:3d: 56:f1:ec:71:d3:49:07:cb:c8:4f:79:35:11:8e:9a: 07:c9:7b:2f:ac:e9:8a:11:e5:00:f8:45:be:05:e4: e1:d3:1f:8c:b0:39:3c:4d:bb:dc:cc:86:a7:07:14: 5a:14:f4:80:25:6f:50:81:c3:bd:6a:62:2d:85:64: fe:91:34:0e:8e:9d:fc:a5:84:5e:3d:fe:34:c7:f1: 0f:81:bf:18:b9:88:b3:ae:1f:dd:4d:8a:95:36:82: 77:b2:b4:d3:d4:65:e4:0e:90:67:92:5d:af:d5:72: 77:78:90:63:0c:a7:7d:9e:39:7d:f7:8d:74:52:99: 58:b5:bc:93:f2:a3:d0:6a:74:b2:b7:42:e2:15:ab: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C7:81:76:3D:FB:69:56:46:6B:62:2A:F7:22:D2:CB:3A:B9:18:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:aa:f2:46:d6:46:5f:fc:21:94:fb:69:f9:30:a7:e7:02:89: 56:5b:d0:39:1e:c2:4e:cf:44:07:e5:93:58:be:ae:02:c8:af: 77:e7:cb:69:97:a2:17:61:76:dc:3b:ce:35:b4:d5:60:40:f9: 43:54:72:24:19:64:b1:8c:ae:23:3a:06:98:4c:8d:63:48:41: f9:6a:6b:af:11:21:ce:a0:16:4d:76:4d:9c:ef:42:50:eb:e8: ad:cb:8b:a9:0f:e2:a3:d0:9c:74:12:73:d9:30:b0:3c:c9:cf: 7a:99:57:8c:6f:bf:ef:71:ef:86:ef:af:d3:08:25:3a:0f:30: 78:0c:d3:4d:98:3d:32:1b:68:02:b1:62:35:e5:33:d7:33:3e: 06:9c:10:95:8f:9c:19:6c:7c:71:a8:0f:2a:10:45:a0:0e:9f: 3d:5c:d5:4a:12:46:48:71:ff:b0:4b:51:c7:27:1c:9f:60:c6: 34:15:7b:c6:33:e1:84:49:12:1a:35:a1:55:50:1e:ea:57:df: a4:85:18:6d:cf:4f:c4:38:b6:aa:02:ba:9d:8d:d8:2f:33:4e: 3d:83:e9:44:54:ca:23:80:1a:eb:f9:30:61:2c:98:e5:91:24: e1:3d:82:83:aa:69:fc:5d:7b:b2:76:f7:8a:0e:94:b8:4f:1d: 54:7c:4a:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LQfPYIhGwplNRFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI2MDMyNjA3MDAwNFoXDTI2MDMyOTA3MDAwMFowLzEtMCsGA1UEAxMk MWI1ZmQ0YzgtODYyYi00ZTMyLWE1ZmEtM2QwZGEzYjNlOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunzVnEkXlXH6rjM64zv+5yhrEMXctl0jjygy DycKzusrAUjDaZ9MWy/UAq210u9vgybJLY2AwCIxAD+TYDrvmhHEhm8XlBi5dDdO Klj5d8gaVfdHIqjROdM/EaKWfu3Y9mzppyi0cGRvMib2OXiElON70bEvWj1W8exx 00kHy8hPeTURjpoHyXsvrOmKEeUA+EW+BeTh0x+MsDk8TbvczIanBxRaFPSAJW9Q gcO9amIthWT+kTQOjp38pYRePf40x/EPgb8YuYizrh/dTYqVNoJ3srTT1GXkDpBn kl2v1XJ3eJBjDKd9njl99410UplYtbyT8qPQanSyt0LiFatTDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFrHgXY9+2lWRmtiKvci0ss6uRjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvYThkNzBmODYtYjI1Ny00 MjI1LTk2MDktOTg5OTM4YTQxNjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApqvJG1kZf/CGU+2n5MKfn AolWW9A5HsJOz0QH5ZNYvq4CyK9358tpl6IXYXbcO841tNVgQPlDVHIkGWSxjK4j OgaYTI1jSEH5amuvESHOoBZNdk2c70JQ6+ity4upD+Kj0Jx0EnPZMLA8yc96mVeM b7/vce+G76/TCCU6DzB4DNNNmD0yG2gCsWI15TPXMz4GnBCVj5wZbHxxqA8qEEWg Dp89XNVKEkZIcf+wS1HHJxyfYMY0FXvGM+GESRIaNaFVUB7qV9+khRhtz0/EOLaq ArqdjdgvM049g+lEVMojgBrr+TBhLJjlkSThPYKDqmn8XXuydveKDpS4Tx1UfEqg -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:23 2026 by rpki-client