$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: 8kkc5DS14MfhazpyBb9QBe1PxkGtJurLLLoRZ8Hd+fE= Subject key identifier: 57:C6:20:6F:A6:F8:15:77:3D:07:42:F1:DB:34:44:F5:B7:F7:8D:E7 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584D49A10F1A6CCDB3CE8736D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A881D Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: re1nXPstgO2mvuMxed2GIGmy6G5HAWiZ43KgcoxpKQ4=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: SOtzTZ9POAErCakOmmlY+wqW+6iRJJfzuhgFYIa5wZ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0f:1a:6c:cd:b3:ce:87:36:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=582161b4-b4a6-4cf0-94e7-63655008b7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:1c:ea:d7:1d:e5:6b:7a:83:d5:11:61:c1: f4:35:67:d8:27:eb:5d:fc:9e:2a:85:a2:82:2e:a7: 07:97:6d:b4:ea:30:2a:9c:d9:b8:cf:07:b2:8e:0b: 81:51:4b:e2:4e:a4:ff:93:30:ce:52:91:9e:28:0a: b3:7c:21:6f:83:74:5b:cc:7d:99:68:a3:f8:d9:d7: 7f:55:6b:9f:9e:7c:6d:42:41:f7:42:d8:60:12:ce: ea:a4:82:86:c1:c3:43:67:a0:19:a3:72:bf:4b:6f: 3f:d3:63:c5:6e:a5:f2:2d:a8:82:39:35:98:fb:38: 46:70:02:7a:3e:28:24:fd:0d:bb:36:6a:75:fa:65: a2:81:91:49:0c:77:7d:1d:55:78:4f:e4:1c:55:c6: 98:d1:47:0c:9c:56:7d:43:b1:1d:86:4b:7c:af:aa: 9f:fa:a4:9c:31:48:8d:b2:e5:df:93:4d:12:bf:64: 93:67:7a:6f:03:c2:bb:ac:41:2c:05:11:9c:52:ea: f7:f4:ee:68:a7:de:13:a7:55:af:5c:fb:85:85:ed: 12:49:c6:33:2e:7b:9e:f3:5c:d4:16:d9:4d:a6:6d: 61:a2:9f:d9:6f:12:be:66:ed:40:81:93:a2:bc:3a: 75:0e:4c:28:b7:70:6d:3a:72:1e:f9:f7:14:94:4f: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C6:20:6F:A6:F8:15:77:3D:07:42:F1:DB:34:44:F5:B7:F7:8D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:cf:bf:c7:d4:dd:89:e8:f1:eb:67:ce:0b:7e:69:59:ab:92: da:97:59:eb:06:f9:e7:5d:09:72:31:c7:4c:e7:46:d2:78:e9: 6e:94:42:8b:64:3e:61:bf:db:7a:73:c0:91:88:20:a9:5d:ea: fe:4e:4d:3a:0d:9c:8f:ac:7a:05:c1:52:f5:66:4a:37:99:36: c9:4b:d3:e9:d5:9b:b6:6b:9e:6e:eb:47:b1:bb:cd:bc:13:ff: 11:a3:70:a2:0f:d5:bd:22:27:c9:ff:f0:ba:ba:dc:c8:90:46: 03:e9:0d:e8:0d:92:bb:69:0c:92:8f:9c:04:a3:56:4c:b9:e3: bc:d3:c6:7b:ad:bd:ce:23:35:47:33:36:3a:53:d7:77:94:86: be:8a:6d:ad:5d:c5:56:6e:8f:dd:3a:67:c1:9a:c1:35:0b:2e: 1d:b2:9a:f5:32:62:01:91:0a:8d:71:a2:97:1f:57:91:a0:fe: 23:5e:86:39:56:6a:e7:a8:42:f0:16:1c:49:f2:28:56:11:60: 24:f9:fd:b1:27:fe:93:4e:81:e4:76:94:b3:60:b9:6c:1b:2f: ce:53:25:19:ac:ba:ad:f5:79:4b:7d:fc:98:0a:63:7c:55:ac: 45:05:41:5e:ac:d1:43:d8:5e:77:32:b3:54:d5:c3:13:60:dd: 64:a4:de:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ8abM2zzoc21gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk NTgyMTYxYjQtYjRhNi00Y2YwLTk0ZTctNjM2NTUwMDhiN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQAc6tcd5Wt6g9URYcH0NWfYJ+td/J4qhaKC LqcHl2206jAqnNm4zweyjguBUUviTqT/kzDOUpGeKAqzfCFvg3RbzH2ZaKP42dd/ VWufnnxtQkH3QthgEs7qpIKGwcNDZ6AZo3K/S28/02PFbqXyLaiCOTWY+zhGcAJ6 Pigk/Q27Nmp1+mWigZFJDHd9HVV4T+QcVcaY0UcMnFZ9Q7Edhkt8r6qf+qScMUiN suXfk00Sv2STZ3pvA8K7rEEsBRGcUur39O5op94Tp1WvXPuFhe0SScYzLnue81zU FtlNpm1hop/ZbxK+Zu1AgZOivDp1Dkwot3BtOnIe+fcUlE9VywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFfGIG+m+BV3PQdC8ds0RPW3943nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC8z7/H1N2J6PHrZ84LfmlZ q5Lal1nrBvnnXQlyMcdM50bSeOlulEKLZD5hv9t6c8CRiCCpXer+Tk06DZyPrHoF wVL1Zko3mTbJS9Pp1Zu2a55u60exu828E/8Ro3CiD9W9IifJ//C6utzIkEYD6Q3o DZK7aQySj5wEo1ZMueO808Z7rb3OIzVHMzY6U9d3lIa+im2tXcVWbo/dOmfBmsE1 Cy4dspr1MmIBkQqNcaKXH1eRoP4jXoY5VmrnqELwFhxJ8ihWEWAk+f2xJ/6TToHk dpSzYLlsGy/OUyUZrLqt9XlLffyYCmN8VaxFBUFerNFD2F53MrNU1cMTYN1kpN6i -----END CERTIFICATE-----Generated at Thu Mar 26 03:37:18 2026 by rpki-client