$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft File: d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft (raw, json) Hash identifier: KhI4cqjAsdgIuhm+Yd+xcXVUxfNeeJalCJDHrqubE3g= Subject key identifier: D7:16:67:CE:F2:11:06:D7:E0:36:27:CF:4D:3C:92:C4:1F:79:31:9E Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Certificate issuer: /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Certificate serial: 010D0C9F4328584D47C5A549D7388A5589333760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft Manifest number: 010D0C9F4328584079F7178F391409E30DFB2D09 Signing time: Wed 25 Mar 2026 01:02:09 +0000 Manifest this update: Wed 25 Mar 2026 01:02:09 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 48f97528-3e97-38f3-9284-47f513ced13e.asa (hash: aQrIhvj2P6kUw1lQ8jXpC3VmfOLTLeLrXajDDFPwxOo=) 2: 8b8be658-4911-3e79-adcb-5f756862b67a.roa (hash: inKQlJOwi66xAUwJtlIqTPBbiyCV8+eGmRu6Jt6kutY=) 3: d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl (hash: qhCcQveS3TJDUKNpXjwnsOOUfQfDjYL80NoN+I92le4=) 4: dc85d078-3c0f-3902-98d0-203d1cb2755a.roa (hash: CKfexomYLLZAygumLbCaqWr6rVBkdw3WYxQNWp1+aiQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:a5:49:d7:38:8a:55:89:33:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Validity Not Before: Mar 25 01:02:09 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=c6724f97-f961-49ac-a254-6086c16dc919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:ea:b3:ca:37:67:8d:07:a2:63:aa:86:27: e2:03:3d:62:55:ad:35:d4:c7:40:a3:0a:93:a0:2d: 2d:4e:e4:58:2c:fb:86:38:81:6b:da:73:57:a7:b3: 8c:41:eb:d0:d4:45:6b:39:c7:1a:06:77:1c:d6:cc: a2:a9:2a:96:0b:b0:b2:ca:68:30:6b:37:b4:d6:d0: 21:b9:9c:6a:56:4b:c3:03:a2:01:7d:6d:05:aa:eb: 58:01:42:15:61:d1:b1:e3:c1:60:36:dc:bf:3b:6c: 41:f3:f2:c1:02:8d:ad:0e:fb:0e:41:b6:e1:6b:07: 94:8f:b4:11:71:dc:86:23:77:12:c0:02:59:8f:bc: 24:bb:cd:5d:f7:7a:90:2c:8d:f1:f1:f1:3d:79:d6: 33:21:53:fc:30:56:da:bb:6b:aa:81:41:83:28:c7: f8:b0:17:b3:b5:70:8d:e0:5e:4e:9d:c4:c1:65:30: 1a:07:7d:da:7c:3b:14:79:a8:33:6f:6d:70:0d:1d: 2e:9c:eb:d5:aa:4f:63:65:ab:e7:7d:99:cd:5c:26: e3:51:1e:fc:b5:eb:16:1f:79:05:12:60:e9:f8:ae: b3:5f:01:f4:3e:ca:ec:b1:db:50:9c:f8:92:8c:40: 84:04:28:9b:fb:ea:a9:44:23:19:af:34:0e:6f:25: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:67:CE:F2:11:06:D7:E0:36:27:CF:4D:3C:92:C4:1F:79:31:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl X509v3 Authority Key Identifier: keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5e:cd:bf:4d:d5:10:14:ec:da:4b:4e:e2:59:55:65:1b:60: 1f:52:29:5a:bf:c0:0b:e4:af:d0:50:3b:81:d0:aa:cf:c8:32: 1d:c2:f3:7b:7e:18:35:0e:a0:b8:59:df:39:74:ee:33:79:59: cb:a9:54:e7:c0:88:fa:ed:62:3c:69:91:9d:5d:aa:c3:b7:d5: 8b:08:f0:a1:2d:b0:90:9a:cc:c1:f5:48:f1:17:38:87:53:f2: bc:9b:6a:e0:c6:e2:48:f9:39:06:3a:60:06:17:92:e9:28:08: b2:fb:d3:0c:59:f0:1e:97:90:7d:dc:be:a5:a6:ec:d8:fe:7b: ef:27:39:0d:3e:62:a3:6d:14:c6:24:40:93:f3:55:49:3a:c5: 70:7a:90:e8:88:85:61:3f:c3:ed:45:77:50:dc:00:ba:ad:15: 8f:10:2d:93:1b:7f:0b:41:b5:e3:fc:bd:63:b6:ff:29:c3:29: c9:2a:84:fd:d2:a5:4e:d5:f7:83:fb:30:bc:40:76:6f:04:4f: 84:39:b2:58:25:7e:5a:e5:54:13:bf:da:05:fc:7d:66:30:c6: 83:aa:91:c5:5c:05:1b:c3:61:d8:85:75:27:50:71:d2:9f:9c: 91:e1:48:2c:b6:84:d6:91:bc:41:47:48:dd:30:58:97:f7:36: eb:51:8b:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1HxaVJ1ziKVYkzN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh ZWYxMB4XDTI2MDMyNTAxMDIwOVoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk YzY3MjRmOTctZjk2MS00OWFjLWEyNTQtNjA4NmMxNmRjOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsHqs8o3Z40HomOqhifiAz1iVa011MdAowqT oC0tTuRYLPuGOIFr2nNXp7OMQevQ1EVrOccaBncc1syiqSqWC7Cyymgwaze01tAh uZxqVkvDA6IBfW0FqutYAUIVYdGx48FgNty/O2xB8/LBAo2tDvsOQbbhaweUj7QR cdyGI3cSwAJZj7wku81d93qQLI3x8fE9edYzIVP8MFbau2uqgUGDKMf4sBeztXCN 4F5OncTBZTAaB33afDsUeagzb21wDR0unOvVqk9jZavnfZnNXCbjUR78tesWH3kF EmDp+K6zXwH0PsrssdtQnPiSjECEBCib++qpRCMZrzQObyVr1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNcWZ87yEQbX4DYnz008ksQfeTGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1 OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvZDQ1NThlZmYtNmMyNi00 YTE3LWJiOWUtNTQzNzdlYTJhZWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3 N2VhMmFlZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4Xs2/TdUQFOzaS07iWVVl G2AfUilav8AL5K/QUDuB0KrPyDIdwvN7fhg1DqC4Wd85dO4zeVnLqVTnwIj67WI8 aZGdXarDt9WLCPChLbCQmszB9UjxFziHU/K8m2rgxuJI+TkGOmAGF5LpKAiy+9MM WfAel5B93L6lpuzY/nvvJzkNPmKjbRTGJECT81VJOsVwepDoiIVhP8PtRXdQ3AC6 rRWPEC2TG38LQbXj/L1jtv8pwynJKoT90qVO1feD+zC8QHZvBE+EObJYJX5a5VQT v9oF/H1mMMaDqpHFXAUbw2HYhXUnUHHSn5yR4UgstoTWkbxBR0jdMFiX9zbrUYvk -----END CERTIFICATE-----Generated at Wed Mar 25 22:47:00 2026 by rpki-client