$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft File: ae85d24a-77d4-4cf7-80aa-c071199c2889.mft (raw, json) Hash identifier: UOuERmPfs/ObsP9JTfyh+QEUZdS9QfUZqOUJdnxSrc0= Subject key identifier: 9B:90:49:3F:ED:8B:7E:20:AF:B8:1D:26:52:4E:4C:EA:44:71:B0:78 Authority key identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Certificate issuer: /CN=ae85d24a-77d4-4cf7-80aa-c071199c2889 Certificate serial: 010D0C9F4328584D49DC9FE2C87909652008D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft Manifest number: 010D0C9F432858411064A6981F8E14F8AB91E766 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer (hash: kiMkUi2O+d+EHUVYlS9wxp+DGfd54/vB3ankVjFXZt8=) 2: ae85d24a-77d4-4cf7-80aa-c071199c2889.crl (hash: kYu4AbN+PdI9lki7Jzi89Y8/O0v4F4V7VE61XLZ/xn4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9f:e2:c8:79:09:65:20:08:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=58c5cec2-0f23-448c-b8ba-78d0b32f42b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:b0:d3:3f:2a:eb:1a:c7:8e:4e:2a:a6:6d: f7:1d:59:89:c2:ba:19:5d:4e:1b:f6:6f:58:7e:73: dc:e3:43:9c:2b:d5:d6:14:41:2b:33:2f:3a:49:c9: 4e:c4:93:ad:35:53:ff:1d:1d:7f:08:75:a6:b9:b0: c5:ed:25:2d:8f:47:3c:c2:40:29:a8:20:24:ee:3b: e3:a8:ff:7e:bc:ff:92:cb:53:5b:68:5a:01:a4:f0: 32:9a:af:91:83:90:78:00:99:af:80:79:41:14:df: 30:ec:1c:7d:de:9a:74:4f:3d:bd:85:26:67:8e:d8: 53:9a:65:88:7f:cb:fe:b3:e5:9c:a6:dc:96:8a:26: 52:70:cd:b7:e9:c9:90:2c:3a:05:99:73:48:3d:04: 5d:8b:8e:00:c2:bd:bb:74:ad:e5:ad:f8:a8:ba:9a: 7c:6f:5c:a5:f8:f2:39:e4:f9:fa:64:27:c7:85:b5: 77:62:f1:39:78:d5:14:dd:8b:87:05:71:af:d2:ed: dc:bc:fa:d9:4a:4f:5b:38:8b:31:7c:b6:63:94:8a: f3:bd:15:3b:91:86:92:6a:74:cd:65:e5:46:ac:f9: f4:1c:3a:ff:10:77:52:23:8b:77:91:77:c6:fb:35: ff:63:6b:e4:eb:00:c0:34:70:2b:8e:ea:5f:ba:53: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:90:49:3F:ED:8B:7E:20:AF:B8:1D:26:52:4E:4C:EA:44:71:B0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl X509v3 Authority Key Identifier: keyid:7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c9:50:9e:53:4c:76:2d:2d:42:86:89:ce:c4:d8:91:a6:c3: 80:e1:62:4a:bf:af:a2:e6:e0:c1:71:da:ac:24:62:41:a2:76: 19:7e:6b:d6:c1:ed:f0:83:c7:0b:3a:50:28:24:a4:fd:16:c7: 9d:97:88:e9:e8:8a:99:3f:98:f7:31:e4:9c:9d:16:38:37:30: 85:b1:e5:5e:d5:71:ee:ae:db:45:8a:b7:f2:92:68:a3:3d:40: 92:82:da:71:1c:34:c9:f7:ef:bc:4f:4c:ce:89:57:5f:ea:6a: 79:bf:b2:7d:05:bb:d9:2d:39:7a:86:ca:93:ed:2b:22:9e:41: a2:30:ae:cc:db:2a:2d:32:9b:83:2d:31:23:51:07:b0:a3:57: cd:6b:8b:9e:06:53:79:40:f4:df:09:4a:ea:d1:0c:0f:6e:44: 07:03:5c:1b:38:65:d6:14:86:94:79:31:f5:e7:05:8f:ad:56: b4:6c:95:94:b0:56:3d:ee:81:d2:f8:04:4f:a3:7b:29:69:4a: a8:16:f3:73:89:c8:51:11:62:02:a7:4a:01:6e:14:a5:ed:8d: 82:f5:91:6b:f0:f7:ab:e4:ec:c3:ad:46:5c:6a:8c:1d:3e:0e: 9f:b2:46:94:d4:a6:3d:64:a3:03:dd:39:18:d3:62:9e:2f:7b: e6:44:45:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J/iyHkJZSAI1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4NWQyNGEtNzdkNC00Y2Y3LTgwYWEtYzA3MTE5OWMy ODg5MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk NThjNWNlYzItMGYyMy00NDhjLWI4YmEtNzhkMGIzMmY0MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmqw0z8q6xrHjk4qpm33HVmJwroZXU4b9m9Y fnPc40OcK9XWFEErMy86SclOxJOtNVP/HR1/CHWmubDF7SUtj0c8wkApqCAk7jvj qP9+vP+Sy1NbaFoBpPAymq+Rg5B4AJmvgHlBFN8w7Bx93pp0Tz29hSZnjthTmmWI f8v+s+WcptyWiiZScM236cmQLDoFmXNIPQRdi44Awr27dK3lrfioupp8b1yl+PI5 5Pn6ZCfHhbV3YvE5eNUU3YuHBXGv0u3cvPrZSk9bOIsxfLZjlIrzvRU7kYaSanTN ZeVGrPn0HDr/EHdSI4t3kXfG+zX/Y2vk6wDANHArjupfulOMcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJuQST/ti34gr7gdJlJOTOpEcbB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZTg1 ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5YzI4ODkvYWU4NWQyNGEtNzdkNC00 Y2Y3LTgwYWEtYzA3MTE5OWMyODg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWU4NWQyNGEtNzdkNC00Y2Y3LTgw YWEtYzA3MTE5OWMyODg5L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTlj Mjg4OS5jcmwwHwYDVR0jBBgwFoAUfSbj1SSyCrFTP4U4cQqKspffBx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcx MTk5YzI4ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/yVCeU0x2LS1ChonOxNiR psOA4WJKv6+i5uDBcdqsJGJBonYZfmvWwe3wg8cLOlAoJKT9Fsedl4jp6IqZP5j3 MeScnRY4NzCFseVe1XHurttFirfykmijPUCSgtpxHDTJ9++8T0zOiVdf6mp5v7J9 BbvZLTl6hsqT7SsinkGiMK7M2yotMpuDLTEjUQewo1fNa4ueBlN5QPTfCUrq0QwP bkQHA1wbOGXWFIaUeTH15wWPrVa0bJWUsFY97oHS+ARPo3spaUqoFvNzichREWIC p0oBbhSl7Y2C9ZFr8Per5OzDrUZcaowdPg6fskaU1KY9ZKMD3TkY02KeL3vmREWf -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:36 2026 by rpki-client