$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: gqTtK2VhzIYcys+ZTmFy6AIB1TsSNJSvcAq/UdxyY2Y= Subject key identifier: 34:91:D3:6A:27:92:A1:2E:0C:FA:8D:19:0C:45:53:8C:5E:07:54:56 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584D49DC9F84FAA104CE482E39C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7758 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: 9JmRN3JdeFEMVw1b6OmuI+OmnsudZ2V9i4OQHprEyxk=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: lCbOazsmpH46ZUjzw750wMm4tNbeZOLIe+R7KffQ1OI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9f:84:fa:a1:04:ce:48:2e:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=ac0b60e3-dc60-4317-84d5-e8b9d826c6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:b6:eb:91:75:c7:a4:a9:9a:91:a5:d7:09: ef:95:9c:64:af:cd:97:18:db:26:fa:17:85:c6:5a: da:99:2b:a5:54:60:37:3a:18:ca:50:74:4c:b0:74: 5a:9a:0d:c0:48:c5:cd:79:cf:74:9f:23:f6:f8:40: 7c:77:68:ff:e2:b0:91:99:7a:32:9d:8f:d5:e6:7c: d9:e2:af:13:ac:6b:80:c5:0c:70:84:75:8a:07:6a: 0b:85:e6:a8:ac:61:db:9d:05:d4:46:21:3f:e4:4b: 2c:45:6f:dc:d6:8c:81:09:12:f2:62:65:12:eb:a5: a9:1e:64:3d:71:51:f9:6a:04:b0:3f:17:92:1d:ff: 57:91:3c:31:6d:9a:2c:c2:da:64:95:6d:a2:10:9c: 42:0d:e3:77:23:2b:d8:6c:c2:8f:fc:97:24:06:9f: 71:c7:1a:8c:f2:c7:d7:54:77:8d:a7:4b:06:40:d0: 36:71:0a:e4:51:1d:08:a6:35:38:03:5c:97:ed:77: f8:44:30:11:f6:a0:4a:0f:70:e3:29:2e:52:08:f6: 26:10:7c:b9:f9:28:9a:af:db:95:41:f6:76:a0:cc: d4:5a:b8:da:ec:9b:20:52:e0:26:36:5a:5d:da:a0: 76:cb:9d:4a:e5:ca:7b:56:81:45:4c:21:ee:ba:87: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:D3:6A:27:92:A1:2E:0C:FA:8D:19:0C:45:53:8C:5E:07:54:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a2:67:f6:0b:ff:d0:f4:76:bf:60:a3:eb:14:3c:24:38:05: 53:a1:da:32:1b:c9:23:c0:ac:d5:b1:c8:4c:31:9b:5d:4c:65: 1a:58:38:87:0f:b9:4d:2d:ea:5c:4d:ba:a4:d7:ea:3b:b4:e4: 38:2d:20:3b:ab:73:3c:2d:f8:ac:be:4d:df:46:fe:4c:d4:89: cd:39:e1:f1:b4:49:d3:a2:e5:20:68:3a:93:b5:04:e0:92:39: 0d:79:42:40:df:9f:55:4b:33:d5:eb:21:02:8d:c3:42:f9:27: 46:77:57:df:a2:59:17:12:0f:d8:fa:dd:12:89:3a:70:06:87: 0b:90:dd:39:4d:01:e9:e0:8b:b2:da:68:4f:11:2b:06:a1:88: 18:53:11:5e:c8:d6:88:06:85:6e:ca:04:46:c0:04:9c:a9:c0: 97:e6:59:76:41:0c:d4:aa:36:da:40:55:50:8f:a5:68:1a:6a: 18:7a:f2:0d:22:85:47:2d:32:ab:83:8f:41:5b:8a:9f:e8:de: c9:74:ce:03:23:f2:b5:2e:53:2d:af:6f:80:73:16:f9:c1:d5: 8b:a1:c9:87:a4:0a:90:05:2d:0b:1c:11:5d:2c:ef:02:93:53: d3:25:98:99:e9:1c:5a:e6:e8:ee:66:29:0a:6f:67:84:0f:97: 37:e8:22:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J+E+qEEzkguOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk YWMwYjYwZTMtZGM2MC00MzE3LTg0ZDUtZThiOWQ4MjZjNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa+265F1x6SpmpGl1wnvlZxkr82XGNsm+heF xlramSulVGA3OhjKUHRMsHRamg3ASMXNec90nyP2+EB8d2j/4rCRmXoynY/V5nzZ 4q8TrGuAxQxwhHWKB2oLheaorGHbnQXURiE/5EssRW/c1oyBCRLyYmUS66WpHmQ9 cVH5agSwPxeSHf9XkTwxbZoswtpklW2iEJxCDeN3IyvYbMKP/JckBp9xxxqM8sfX VHeNp0sGQNA2cQrkUR0IpjU4A1yX7Xf4RDAR9qBKD3DjKS5SCPYmEHy5+Siar9uV QfZ2oMzUWrja7JsgUuAmNlpd2qB2y51K5cp7VoFFTCHuuoetSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDSR02onkqEuDPqNGQxFU4xeB1RWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/omf2C//Q9Ha/YKPrFDwk OAVTodoyG8kjwKzVschMMZtdTGUaWDiHD7lNLepcTbqk1+o7tOQ4LSA7q3M8Lfis vk3fRv5M1InNOeHxtEnTouUgaDqTtQTgkjkNeUJA359VSzPV6yECjcNC+SdGd1ff olkXEg/Y+t0SiTpwBocLkN05TQHp4Iuy2mhPESsGoYgYUxFeyNaIBoVuygRGwASc qcCX5ll2QQzUqjbaQFVQj6VoGmoYevINIoVHLTKrg49BW4qf6N7JdM4DI/K1LlMt r2+Acxb5wdWLocmHpAqQBS0LHBFdLO8Ck1PTJZiZ6Rxa5ujuZikKb2eED5c36CL3 -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:46 2026 by rpki-client