$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft File: 4680d191-3a38-4cef-89dd-c84240e3a1cf.mft (raw, json) Hash identifier: YsQgFAShLK3i0O7V5jaVS+cF++c6fIRft/KaIdng4qo= Subject key identifier: 8F:27:D5:A8:A3:C6:6E:70:B3:1E:A8:89:4E:07:8C:30:AE:2B:1D:2C Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584D496582A3F670BB6313082080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft Manifest number: 010D0C9F43285849276F14CDE0AA3B404E68F085 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 4680d191-3a38-4cef-89dd-c84240e3a1cf.crl (hash: x/typ8+dEi2JGtC85cmlxlUoD67k6sce2zJO3w4I6iw=) 2: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (hash: VBgDhDDy7/YPrYLUoH6kOIA1pShLMQlz7U3TrbdK3nY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:82:a3:f6:70:bb:63:13:08:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=aeed30cc-04fc-497a-953a-9ceb74190f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:a2:fe:6f:2d:7b:aa:0e:bd:41:89:7c:d1: 54:8e:08:6a:b7:15:0e:06:de:c1:b4:ca:6a:10:23: d9:07:9a:f5:23:58:67:53:b6:bd:f7:25:aa:eb:eb: 36:55:2b:9d:5c:98:fd:6d:83:aa:83:10:4e:b1:1c: ba:a0:aa:6a:3c:63:bd:19:cf:bc:8c:ef:e9:fb:86: 3a:8e:e1:66:37:26:8b:51:1b:35:dc:9a:51:16:b7: b2:96:4a:58:d0:a3:13:fb:59:3d:97:76:34:74:17: a8:76:b1:59:f0:88:a8:9f:c8:12:19:1b:f5:ea:29: a2:be:44:30:b9:4d:27:65:dc:1b:79:4a:93:44:f6: 70:7a:d4:ea:f8:1c:4f:45:15:bf:21:5e:1b:ed:f5: 09:7f:11:41:de:5d:7d:3b:64:57:74:eb:06:97:fa: c0:b6:cd:3f:80:fc:f1:4e:b8:ba:d2:a6:4d:9b:ef: f0:5f:4b:90:7e:32:cd:3f:a0:4f:68:c7:81:eb:0d: d2:e6:82:6d:ed:9c:7c:28:e0:34:7c:6f:0e:29:67: 91:b5:fe:6d:40:bf:01:f3:1f:99:7b:c6:92:4a:00: f4:52:cc:37:9a:a8:bb:d6:ea:64:90:08:9d:4c:6e: d8:95:0c:68:e6:22:38:0c:e3:52:58:a1:1c:32:82: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:27:D5:A8:A3:C6:6E:70:B3:1E:A8:89:4E:07:8C:30:AE:2B:1D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cb:cd:a3:7d:2b:5b:68:94:40:0b:ca:af:47:18:0d:67:35: 96:02:55:9c:bc:fc:ee:9c:2a:4c:04:51:20:6f:55:21:4b:4e: 40:76:d2:dc:25:e5:b1:bc:c1:a6:cd:e2:65:d1:cc:81:30:81: 00:fe:84:44:7c:79:0d:26:1d:0f:5d:a8:61:12:c7:8b:85:d7: 86:b0:24:a8:28:8f:f4:81:9f:b5:56:47:0a:30:cc:5b:a1:02: 22:8a:46:68:6c:3d:40:1c:34:ea:a1:ee:ff:3b:0b:db:15:84: 79:f1:8d:17:ad:51:63:3e:c4:ab:9f:7d:74:92:48:77:f4:12: 67:21:43:05:5a:9e:31:42:ef:fa:d0:fe:4e:27:65:98:15:d0: 0d:34:a1:65:91:50:90:84:8b:ee:ff:ff:e1:fd:16:43:de:cc: fb:9f:14:77:b0:ad:fd:39:a3:02:8e:5a:ef:85:56:d8:41:77: e7:ee:05:e4:1f:c4:e9:6e:d8:b1:8e:68:93:96:aa:0c:bf:a8: 3d:9d:46:5e:dc:42:e5:4a:f8:b2:e1:0f:fa:70:f2:7c:2a:92: 7c:1f:54:c9:1f:82:7e:5c:0c:94:20:73:31:8f:ec:d9:b6:fd: be:80:28:16:ce:a0:fe:02:91:99:58:1d:4d:65:25:41:5b:00: 04:32:ae:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYKj9nC7YxMIIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk YWVlZDMwY2MtMDRmYy00OTdhLTk1M2EtOWNlYjc0MTkwZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweGi/m8te6oOvUGJfNFUjghqtxUOBt7BtMpq ECPZB5r1I1hnU7a99yWq6+s2VSudXJj9bYOqgxBOsRy6oKpqPGO9Gc+8jO/p+4Y6 juFmNyaLURs13JpRFreylkpY0KMT+1k9l3Y0dBeodrFZ8Iion8gSGRv16imivkQw uU0nZdwbeUqTRPZwetTq+BxPRRW/IV4b7fUJfxFB3l19O2RXdOsGl/rAts0/gPzx Tri60qZNm+/wX0uQfjLNP6BPaMeB6w3S5oJt7Zx8KOA0fG8OKWeRtf5tQL8B8x+Z e8aSSgD0Usw3mqi71upkkAidTG7YlQxo5iI4DONSWKEcMoJ4ewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI8n1aijxm5wsx6oiU4HjDCuKx0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvNDY4MGQxOTEtM2EzOC00 Y2VmLTg5ZGQtYzg0MjQwZTNhMWNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiy82jfStbaJRAC8qvRxgN ZzWWAlWcvPzunCpMBFEgb1UhS05AdtLcJeWxvMGmzeJl0cyBMIEA/oREfHkNJh0P XahhEseLhdeGsCSoKI/0gZ+1VkcKMMxboQIiikZobD1AHDTqoe7/OwvbFYR58Y0X rVFjPsSrn310kkh39BJnIUMFWp4xQu/60P5OJ2WYFdANNKFlkVCQhIvu///h/RZD 3sz7nxR3sK39OaMCjlrvhVbYQXfn7gXkH8TpbtixjmiTlqoMv6g9nUZe3ELlSviy 4Q/6cPJ8KpJ8H1TJH4J+XAyUIHMxj+zZtv2+gCgWzqD+ApGZWB1NZSVBWwAEMq7n -----END CERTIFICATE-----Generated at Thu Mar 26 14:44:52 2026 by rpki-client