$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft File: 0ec17157-66de-4aab-85e7-28af4de430e2.mft (raw, json) Hash identifier: sGeZjYQoIcwccRW2ZXKihWGJad9L7hsf2S54ITcETQg= Subject key identifier: 1F:7A:44:37:4F:45:12:09:72:D6:80:64:D4:70:B3:AA:0E:70:A3:AA Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584D49BED6830A08A3BD7FC2D830 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft Manifest number: 010D0C9F43285843A8B9A7EBB23BFBB59BA71688 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Fri 27 Mar 2026 18:00:00 +0000 Files and hashes: 1: 0ec17157-66de-4aab-85e7-28af4de430e2.crl (hash: GvM9q06BZhVuQ+KYALS+ukEYb/Tqkz+3w+90PsPXvEI=) 2: d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer (hash: Hn3prJrqHNDvNCFR4gMuVawpaxQFzcCtOIK4vGwbc0U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:83:0a:08:a3:bd:7f:c2:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 27 18:00:00 2026 GMT Subject: CN=6c3489a4-9938-48cd-95b0-c59456665d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:10:a3:b0:aa:02:61:de:f8:bf:6d:b2:f1:44: 3b:de:cf:8f:50:ab:b9:95:39:b0:98:87:a6:0a:fc: 94:53:0e:e8:fb:c7:62:59:dd:19:07:a9:f6:be:26: 0a:38:95:16:e1:fd:03:eb:34:00:dc:fb:43:48:07: 4f:d7:9e:bd:95:68:c4:39:e9:63:79:f3:61:56:cb: 54:ee:13:44:3e:f2:d4:ac:7a:4f:08:38:ec:77:11: 2d:c5:6a:7a:57:a0:f8:2a:51:81:a6:aa:ed:27:85: 87:bc:d5:ae:62:59:fc:bc:8d:a4:70:aa:bd:c7:75: 4e:5f:55:9a:cd:7e:94:59:58:14:bc:fd:f0:4d:19: 7f:16:65:aa:a3:8a:95:96:0c:73:d5:45:b9:c1:10: 12:fc:4b:8b:db:f4:10:1a:95:c0:d0:a8:18:7e:d5: 94:40:c7:87:41:ba:7e:5b:18:49:2f:54:cb:f4:eb: ac:45:fd:0b:91:75:c9:dd:b0:10:bd:09:00:23:76: fa:5b:6e:d7:79:1c:3f:82:74:aa:77:d5:cf:c9:bb: 01:f9:d1:02:6e:61:d8:7a:6c:df:33:8b:27:11:de: c4:c3:36:f8:42:b8:9e:3d:55:a8:ee:fc:cc:86:d8: 15:d0:f6:e0:9c:03:d0:a3:7c:93:cd:20:87:9f:72: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7A:44:37:4F:45:12:09:72:D6:80:64:D4:70:B3:AA:0E:70:A3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:63:1f:44:ee:5c:94:87:b4:f6:22:6e:cb:7d:71:42:53:e0: 8e:85:b5:df:55:98:3f:cf:a1:8f:77:9b:08:e5:74:83:9e:c4: dc:12:62:bb:a0:04:0f:43:02:e8:51:f6:4d:95:59:0b:62:2e: 29:56:99:48:f4:b2:31:1a:ff:ce:c6:7d:d5:02:95:35:51:0a: 2a:3a:73:57:96:cf:52:b1:d5:e1:86:0c:c7:8a:a4:30:ef:61: 2d:fb:d3:19:c7:ad:6b:9b:1a:91:94:be:09:6b:54:ab:ab:66: bf:f3:7b:6e:cc:01:55:15:50:c1:a2:0e:4e:ca:b3:70:f7:e5: 62:8a:2a:4e:6d:a4:61:ac:f8:f8:48:d5:2e:d6:99:d4:8a:ee: b1:c6:58:42:d9:1e:95:da:12:ad:cb:31:74:26:29:0c:10:a6: 00:ef:ae:95:da:fd:b1:23:97:8c:00:7d:21:37:d8:bb:5b:00: e0:af:85:c9:c9:b9:ad:27:fc:42:24:6e:4b:aa:5b:d1:00:88: 5b:77:7b:41:d8:9c:aa:9c:30:a8:26:69:46:43:69:53:5f:6c: 64:1f:26:3d:68:e3:b5:04:79:2a:d5:12:cd:df:a6:ca:3a:55: 5b:15:d9:de:a9:77:13:3b:e4:ca:70:f8:06:ec:a3:ed:74:3d: 25:f7:ef:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtaDCgijvX/C2DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyNzE4MDAwMFowLzEtMCsGA1UEAxMk NmMzNDg5YTQtOTkzOC00OGNkLTk1YjAtYzU5NDU2NjY1ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRCjsKoCYd74v22y8UQ73s+PUKu5lTmwmIem CvyUUw7o+8diWd0ZB6n2viYKOJUW4f0D6zQA3PtDSAdP1569lWjEOeljefNhVstU 7hNEPvLUrHpPCDjsdxEtxWp6V6D4KlGBpqrtJ4WHvNWuYln8vI2kcKq9x3VOX1Wa zX6UWVgUvP3wTRl/FmWqo4qVlgxz1UW5wRAS/EuL2/QQGpXA0KgYftWUQMeHQbp+ WxhJL1TL9OusRf0LkXXJ3bAQvQkAI3b6W27XeRw/gnSqd9XPybsB+dECbmHYemzf M4snEd7Ewzb4QriePVWo7vzMhtgV0PbgnAPQo3yTzSCHn3JByQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB96RDdPRRIJctaAZNRws6oOcKOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMx NzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcxNTctNjZkZS00 YWFiLTg1ZTctMjhhZjRkZTQzMGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVjMTcxNTctNjZkZS00YWFiLTg1 ZTctMjhhZjRkZTQzMGUyLzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0 MzBlMi5jcmwwHwYDVR0jBBgwFoAUy1R9vySHpXGysMeIlpnnOSA/cmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFm NGRlNDMwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8Yx9E7lyUh7T2Im7LfXFC U+COhbXfVZg/z6GPd5sI5XSDnsTcEmK7oAQPQwLoUfZNlVkLYi4pVplI9LIxGv/O xn3VApU1UQoqOnNXls9SsdXhhgzHiqQw72Et+9MZx61rmxqRlL4Ja1Srq2a/83tu zAFVFVDBog5OyrNw9+ViiipObaRhrPj4SNUu1pnUiu6xxlhC2R6V2hKtyzF0JikM EKYA766V2v2xI5eMAH0hN9i7WwDgr4XJybmtJ/xCJG5LqlvRAIhbd3tB2JyqnDCo JmlGQ2lTX2xkHyY9aOO1BHkq1RLN36bKOlVbFdneqXcTO+TKcPgG7KPtdD0l9++T -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:47 2026 by rpki-client