$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: NpWMbmhfl+mHq86R909j/th6shn8XNteSNZSzx90/RI= Subject key identifier: BA:D9:22:30:8C:81:74:7C:7A:21:F5:3D:7E:84:15:BB:6C:BA:B2:CC Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584D49FA7218AF11C699F60E4780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3CDD Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Sat 28 Mar 2026 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: t3Iv0icao1fIT/QaecVQYkmgY8m0EVtSmL5o2C2yr+M=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: NbpqVWOf+qWzj9lWb3526lNro+nf1CTC09A34TU35Fk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:72:18:af:11:c6:99:f6:0e:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 28 20:00:00 2026 GMT Subject: CN=60afe6db-2fcb-4ddb-b380-d10cfca654ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:90:b5:69:48:7a:1a:d4:27:9e:30:a0:59: 7e:2e:64:c0:b9:38:c1:5b:67:0c:64:77:1e:04:b5: d4:20:60:ee:55:08:82:db:0d:e8:d1:bb:22:1b:5f: cd:e6:87:26:be:7b:30:01:e0:44:8e:49:65:80:9e: 95:9e:68:e7:23:7e:9d:be:19:a5:7d:34:09:73:18: b9:df:e5:34:7f:96:6f:06:ec:dc:d0:95:85:e7:1e: b4:ea:93:39:ee:67:f7:8e:fa:99:92:a9:b7:6b:38: c7:4c:ac:43:0a:d0:8c:66:b1:76:7c:d4:59:b9:93: 99:05:1c:59:c2:8c:07:10:08:2a:62:93:18:2b:52: 0a:6e:0c:dd:e3:e3:70:d9:45:50:66:96:29:8f:73: 8d:88:b0:86:d3:6e:b5:9a:78:84:20:94:07:dc:88: 54:0f:08:2f:2c:d3:25:74:fe:ef:05:42:52:98:7b: 27:e1:1f:ab:e9:e5:24:89:8d:56:b7:29:90:12:02: fb:a9:0f:fc:64:20:a9:13:ae:73:33:1e:22:a1:36: 17:7c:ad:02:e0:02:c6:19:5e:98:5b:5e:74:15:c9: da:5e:51:02:5c:0a:f3:f9:55:4f:b9:13:56:41:22: e3:0c:58:f0:9b:a8:bb:99:03:be:df:8d:97:06:0a: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:22:30:8C:81:74:7C:7A:21:F5:3D:7E:84:15:BB:6C:BA:B2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:94:96:47:55:49:1c:4f:3f:c6:64:8d:98:a0:93:9f:df:d9: e7:92:4d:69:0b:13:88:b4:b1:ec:42:01:e0:5f:24:3e:e9:aa: 51:05:fa:29:47:3b:16:a9:c5:1c:a3:38:8e:11:2d:25:fd:29: b3:9e:95:2d:4a:f9:a8:85:3d:ff:7e:e8:2c:5a:7a:5f:8f:2f: 70:dd:24:64:83:fa:cf:da:89:1b:a3:0e:da:86:3c:67:c5:69: 68:10:02:38:30:f5:ba:b6:29:2f:f4:90:4f:d3:4c:b8:01:d2: c1:ab:f7:ed:c8:f0:87:0f:56:99:b6:ad:90:c1:93:4b:63:c6: 7e:75:60:50:b7:ad:a6:14:f0:b0:18:0b:21:90:1c:9a:9f:f2: 8d:7c:00:a1:a3:46:0b:cd:45:44:c7:dd:87:30:a4:49:9d:17: 59:b5:7d:6b:3f:3a:84:46:d3:1e:db:05:cf:84:8f:87:ed:b5: 3c:79:9d:56:cc:99:68:2a:83:a3:b8:8c:a3:df:d2:b3:a6:1e: 16:c2:a0:ca:63:bd:0f:3c:10:79:f5:ce:cd:af:18:07:0b:d4: 49:50:32:34:94:49:a8:6c:88:64:3d:01:26:d9:ae:96:00:74: b0:36:1e:e2:01:97:37:69:e6:83:1f:08:9d:f9:51:8e:e1:31: 60:8d:9c:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nIYrxHGmfYOR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyODIwMDAwMFowLzEtMCsGA1UEAxMk NjBhZmU2ZGItMmZjYi00ZGRiLWIzODAtZDEwY2ZjYTY1NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI2QtWlIehrUJ54woFl+LmTAuTjBW2cMZHce BLXUIGDuVQiC2w3o0bsiG1/N5ocmvnswAeBEjkllgJ6VnmjnI36dvhmlfTQJcxi5 3+U0f5ZvBuzc0JWF5x606pM57mf3jvqZkqm3azjHTKxDCtCMZrF2fNRZuZOZBRxZ wowHEAgqYpMYK1IKbgzd4+Nw2UVQZpYpj3ONiLCG0261mniEIJQH3IhUDwgvLNMl dP7vBUJSmHsn4R+r6eUkiY1WtymQEgL7qQ/8ZCCpE65zMx4ioTYXfK0C4ALGGV6Y W150FcnaXlECXArz+VVPuRNWQSLjDFjwm6i7mQO+342XBgqQrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLrZIjCMgXR8eiH1PX6EFbtsurLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmlJZHVUkcTz/GZI2YoJOf 39nnkk1pCxOItLHsQgHgXyQ+6apRBfopRzsWqcUcoziOES0l/SmznpUtSvmohT3/ fugsWnpfjy9w3SRkg/rP2okbow7ahjxnxWloEAI4MPW6tikv9JBP00y4AdLBq/ft yPCHD1aZtq2QwZNLY8Z+dWBQt62mFPCwGAshkByan/KNfACho0YLzUVEx92HMKRJ nRdZtX1rPzqERtMe2wXPhI+H7bU8eZ1WzJloKoOjuIyj39Kzph4WwqDKY70PPBB5 9c7NrxgHC9RJUDI0lEmobIhkPQEm2a6WAHSwNh7iAZc3aeaDHwid+VGO4TFgjZwo -----END CERTIFICATE-----Generated at Thu Mar 26 19:28:58 2026 by rpki-client