$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft File: fac97b3d-4c08-472b-89c2-d580150a0c8e.mft (raw, json) Hash identifier: 9dWZrYueJ12L/lsIGbkj24Bdh7ZPHS0CNmkRRglnrI4= Subject key identifier: 71:DB:4D:8E:49:8C:5D:02:84:B1:9E:F9:17:1A:96:F9:29:C9:9F:78 Authority key identifier: 50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21 Certificate issuer: /CN=fac97b3d-4c08-472b-89c2-d580150a0c8e Certificate serial: 010D0C9F4328584D490C2A77D6A76DECBA56EB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft Manifest number: 010D0C9F4328584BE3C778F539696C6DD3B95FC3 Signing time: Wed 25 Mar 2026 12:00:04 +0000 Manifest this update: Wed 25 Mar 2026 12:00:04 +0000 Manifest next update: Sat 28 Mar 2026 12:00:00 +0000 Files and hashes: 1: 57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa (hash: UENVQzz3EjptVFIhG6RW+YpK7s7J7is3QQ12oeB6rL8=) 2: fac97b3d-4c08-472b-89c2-d580150a0c8e.crl (hash: NCTJuT+GIcUQCEgomm7PrFe1l6lmmed2vAykWDC5WmE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0c:2a:77:d6:a7:6d:ec:ba:56:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac97b3d-4c08-472b-89c2-d580150a0c8e Validity Not Before: Mar 25 12:00:04 2026 GMT Not After : Mar 28 12:00:00 2026 GMT Subject: CN=088975ba-8e91-4409-b90e-c555d5bdc08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dd:ed:16:24:fe:9f:25:14:d6:16:89:a6:dd: 9e:1d:31:0e:bc:46:b5:0b:bb:7c:5f:74:06:55:96: b4:8f:e3:b4:2f:22:f1:a6:49:b2:8e:8a:0b:dc:c2: 90:42:c1:f7:82:ca:d9:0f:07:ee:f7:79:a7:30:de: 4f:16:e3:9b:c8:05:5a:03:60:5e:4b:f6:df:14:ba: 35:82:54:36:c4:18:f0:67:50:14:2b:4e:b2:19:a5: 82:0d:9e:69:04:fe:69:a8:b8:db:87:02:55:4d:e1: c7:c3:ea:36:77:fd:ea:d5:43:3c:45:ab:50:6e:51: c1:04:b9:8e:f3:d0:b6:50:81:0c:a8:54:bc:b1:08: 8d:31:3e:88:bd:f7:6a:1c:bb:64:2f:6e:55:3e:3b: 3d:f8:75:ff:df:1a:94:86:20:ee:21:11:b4:2a:e0: ed:e6:dc:9e:57:d6:72:e2:03:bb:d3:fe:2f:ce:0c: e5:ed:26:ba:95:0c:d1:fb:c9:68:2f:d5:8e:5a:6c: 61:36:8d:c4:c1:5d:aa:78:77:f1:1e:04:50:0b:5d: 87:6a:f3:c9:9c:67:0a:2a:31:c0:68:63:62:00:57: 49:39:be:19:e8:4a:4c:56:0a:ee:c4:b6:f7:83:c1: 02:09:2f:ec:2c:f8:a7:9b:55:da:fb:ba:d3:20:ad: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DB:4D:8E:49:8C:5D:02:84:B1:9E:F9:17:1A:96:F9:29:C9:9F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.crl X509v3 Authority Key Identifier: keyid:50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:19:91:a6:b8:fa:21:80:e9:45:6c:38:22:a5:4a:c2:d7:49: e4:a0:bb:cf:13:3f:e2:f8:c0:62:cb:3d:a0:b4:5b:9b:99:4c: 33:46:84:5c:17:43:f2:47:a3:83:fc:53:9e:62:b8:d4:1c:2e: 99:4f:80:cc:48:59:f1:ab:2a:12:3d:17:dc:54:28:b4:7b:ab: 4c:21:a4:7a:56:2e:bc:19:b9:49:5f:ba:2d:e4:f8:db:95:32: 86:39:fc:60:88:d0:b5:e4:1f:d9:8f:58:0d:af:c6:70:85:2b: 3e:fd:a1:bc:bb:78:c0:47:36:17:8c:a3:8b:d5:04:97:95:2c: 82:d8:5b:f6:9d:c5:ec:13:19:62:9d:98:a0:89:1f:59:02:0b: 5a:e2:81:e4:f2:5a:c3:43:02:80:10:ab:45:39:f5:29:69:9a: f0:a8:16:4f:cc:cf:01:a9:5b:65:99:04:25:15:94:1a:5d:76: 52:83:d4:f4:f5:e9:2d:3e:cb:d9:1f:d1:4e:a7:57:bf:56:44: fd:c3:57:79:0f:47:c0:70:37:72:18:95:f3:e8:75:90:16:67: e9:4b:49:2c:92:34:e4:da:34:dd:15:db:96:83:fa:f3:bf:f7: 3a:ba:cb:d0:01:bf:5f:c8:42:df:46:e2:24:1d:88:7a:1f:a4: 8e:f9:1b:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JDCp31qdt7LpW64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFjOTdiM2QtNGMwOC00NzJiLTg5YzItZDU4MDE1MGEw YzhlMB4XDTI2MDMyNTEyMDAwNFoXDTI2MDMyODEyMDAwMFowLzEtMCsGA1UEAxMk MDg4OTc1YmEtOGU5MS00NDA5LWI5MGUtYzU1NWQ1YmRjMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t3tFiT+nyUU1haJpt2eHTEOvEa1C7t8X3QG VZa0j+O0LyLxpkmyjooL3MKQQsH3gsrZDwfu93mnMN5PFuObyAVaA2BeS/bfFLo1 glQ2xBjwZ1AUK06yGaWCDZ5pBP5pqLjbhwJVTeHHw+o2d/3q1UM8RatQblHBBLmO 89C2UIEMqFS8sQiNMT6IvfdqHLtkL25VPjs9+HX/3xqUhiDuIRG0KuDt5tyeV9Zy 4gO70/4vzgzl7Sa6lQzR+8loL9WOWmxhNo3EwV2qeHfxHgRQC12HavPJnGcKKjHA aGNiAFdJOb4Z6EpMVgruxLb3g8ECCS/sLPinm1Xa+7rTIK3AgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHbTY5JjF0ChLGe+RcalvkpyZ94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYWM5 N2IzZC00YzA4LTQ3MmItODljMi1kNTgwMTUwYTBjOGUvZmFjOTdiM2QtNGMwOC00 NzJiLTg5YzItZDU4MDE1MGEwYzhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZmFjOTdiM2QtNGMwOC00NzJiLTg5 YzItZDU4MDE1MGEwYzhlL2ZhYzk3YjNkLTRjMDgtNDcyYi04OWMyLWQ1ODAxNTBh MGM4ZS5jcmwwHwYDVR0jBBgwFoAUUH7YNv9XpzMScnB920/tv25GHiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYWM5N2IzZC00YzA4LTQ3MmItODljMi1kNTgw MTUwYTBjOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUGZGmuPohgOlFbDgipUrC 10nkoLvPEz/i+MBiyz2gtFubmUwzRoRcF0PyR6OD/FOeYrjUHC6ZT4DMSFnxqyoS PRfcVCi0e6tMIaR6Vi68GblJX7ot5PjblTKGOfxgiNC15B/Zj1gNr8ZwhSs+/aG8 u3jARzYXjKOL1QSXlSyC2Fv2ncXsExlinZigiR9ZAgta4oHk8lrDQwKAEKtFOfUp aZrwqBZPzM8BqVtlmQQlFZQaXXZSg9T09ektPsvZH9FOp1e/VkT9w1d5D0fAcDdy GJXz6HWQFmfpS0kskjTk2jTdFduWg/rzv/c6usvQAb9fyELfRuIkHYh6H6SO+Rtv -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:44 2026 by rpki-client