$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft File: 1c636f45-fa6a-4556-b6ee-5189124d0893.mft (raw, json) Hash identifier: hKxfJHajYfCm07ykqmmAjAXHcQHcz5RLiFbHR1sRyrY= Subject key identifier: 28:D0:78:66:FD:39:4F:56:18:96:E3:D8:72:90:8D:D5:66:0A:8E:A9 Authority key identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF Certificate issuer: /CN=1c636f45-fa6a-4556-b6ee-5189124d0893 Certificate serial: 010D0C9F4328584D4C6BBE37BF132FA6AF3D0000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft Manifest number: 010D0C9F4328584A17BB821FDEB1198EF617F32D Signing time: Thu 26 Mar 2026 17:00:04 +0000 Manifest this update: Thu 26 Mar 2026 17:00:04 +0000 Manifest next update: Sun 29 Mar 2026 17:00:00 +0000 Files and hashes: 1: 1c636f45-fa6a-4556-b6ee-5189124d0893.crl (hash: 3IcReghbh9Zsux7dUTOWk2Cd3kTOExnGQthb6qyW0xE=) 2: b12cfdaa-6423-367c-9b22-98354d5a010c.roa (hash: wCToWI6Ca4cElbbWM/DnTsBc1gGcLBaOhYl+0D5SxDE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:6b:be:37:bf:13:2f:a6:af:3d:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c636f45-fa6a-4556-b6ee-5189124d0893 Validity Not Before: Mar 26 17:00:04 2026 GMT Not After : Mar 29 17:00:00 2026 GMT Subject: CN=52109a19-95dc-4b16-97c4-f3d25fd80cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:66:d8:63:87:c2:06:a2:53:a7:20:7a:3b: 45:be:36:2d:28:68:b9:83:e0:99:2f:aa:06:2a:c1: 2b:70:51:69:8b:1e:f0:d1:15:98:51:ed:ab:75:bd: 8f:64:04:99:8c:3e:b6:ca:0a:73:b1:95:2d:29:70: 03:b0:6e:3a:47:74:5e:28:40:5c:a0:ad:bb:d4:d5: 75:81:77:7c:fb:94:22:a4:3d:54:74:28:7c:36:85: 8f:9f:57:43:b1:17:49:c0:4f:4d:c7:8b:51:fe:60: 74:aa:22:02:84:34:7b:04:9f:7a:46:27:ce:f1:d0: e6:9b:a6:2d:e8:da:cb:cd:b6:47:06:1a:68:c5:57: 30:fe:bc:54:aa:db:de:9f:07:27:74:88:b7:ec:f9: c3:f8:bf:90:e3:be:9f:1b:26:93:21:58:47:3a:aa: b9:6b:75:c9:f6:31:e4:36:32:3c:43:f1:0b:77:e1: 5f:1a:15:fc:d6:4f:60:64:5c:69:51:97:2b:a7:ad: a3:5d:d6:99:3d:32:4b:06:12:3a:35:4e:27:6a:af: 21:02:fd:f7:2e:89:99:6f:9f:30:b1:97:35:ca:ec: ae:ac:60:b8:cb:6d:dd:e9:9f:2c:20:27:7d:4c:bd: 2c:10:b4:fc:20:88:c1:69:93:ba:99:39:9a:43:bf: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D0:78:66:FD:39:4F:56:18:96:E3:D8:72:90:8D:D5:66:0A:8E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl X509v3 Authority Key Identifier: keyid:72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:93:20:11:bd:ae:f4:07:69:8a:10:30:6b:c1:53:1e:b3:0c: aa:df:e2:eb:c8:3f:19:55:81:c5:53:95:a7:cc:6d:01:dd:b4: 3b:16:74:fe:6c:dd:be:39:fe:39:ed:17:bd:ec:32:3a:a9:89: 17:3d:8b:a4:eb:b9:ba:90:3e:4f:a9:37:23:57:dd:33:d0:8c: f8:4b:18:19:20:ed:2e:98:96:fd:ba:c4:16:05:4c:39:27:2e: 46:65:45:2c:ce:fc:7d:7d:af:d0:1f:66:be:60:70:d9:0e:e0: 1f:12:4c:bf:21:5e:8c:bd:9f:aa:f3:65:8b:d4:e8:5d:b8:b3: 2f:94:3e:54:50:23:35:83:9c:d3:1d:1b:88:5b:ce:4c:0a:25: c8:c8:3b:30:3c:89:0e:08:01:14:14:7e:c6:e5:95:cf:76:8a: bf:ec:1e:de:43:16:c2:4f:9a:ab:17:91:e0:3f:08:d3:2c:a5: 83:8c:60:26:87:77:8e:0f:b2:d6:f6:3f:b9:84:44:14:2a:c7: 97:fd:2e:7c:5f:e6:22:76:2b:c4:27:e8:cf:83:9b:0e:50:19: 2e:dc:70:44:fc:58:85:b2:47:77:e6:9d:0f:cd:95:5a:bd:e5: f1:34:83:42:50:ee:d4:ba:80:af:eb:e4:11:c3:76:73:7a:a7: 0b:ca:8c:9e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ma743vxMvpq89AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM2MzZmNDUtZmE2YS00NTU2LWI2ZWUtNTE4OTEyNGQw ODkzMB4XDTI2MDMyNjE3MDAwNFoXDTI2MDMyOTE3MDAwMFowLzEtMCsGA1UEAxMk NTIxMDlhMTktOTVkYy00YjE2LTk3YzQtZjNkMjVmZDgwY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZm2GOHwgaiU6cgejtFvjYtKGi5g+CZL6oG KsErcFFpix7w0RWYUe2rdb2PZASZjD62ygpzsZUtKXADsG46R3ReKEBcoK271NV1 gXd8+5QipD1UdCh8NoWPn1dDsRdJwE9Nx4tR/mB0qiIChDR7BJ96RifO8dDmm6Yt 6NrLzbZHBhpoxVcw/rxUqtvenwcndIi37PnD+L+Q476fGyaTIVhHOqq5a3XJ9jHk NjI8Q/ELd+FfGhX81k9gZFxpUZcrp62jXdaZPTJLBhI6NU4naq8hAv33LomZb58w sZc1yuyurGC4y23d6Z8sICd9TL0sELT8IIjBaZO6mTmaQ7/NXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCjQeGb9OU9WGJbj2HKQjdVmCo6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYz NmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0ZDA4OTMvMWM2MzZmNDUtZmE2YS00 NTU2LWI2ZWUtNTE4OTEyNGQwODkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWM2MzZmNDUtZmE2YS00NTU2LWI2 ZWUtNTE4OTEyNGQwODkzLzFjNjM2ZjQ1LWZhNmEtNDU1Ni1iNmVlLTUxODkxMjRk MDg5My5jcmwwHwYDVR0jBBgwFoAUcnrfnS8r1FDBqWTDEQ6QFIhxuP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5 MTI0ZDA4OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAikyARva70B2mKEDBrwVMe swyq3+LryD8ZVYHFU5WnzG0B3bQ7FnT+bN2+Of457Re97DI6qYkXPYuk67m6kD5P qTcjV90z0Iz4SxgZIO0umJb9usQWBUw5Jy5GZUUszvx9fa/QH2a+YHDZDuAfEky/ IV6MvZ+q82WL1OhduLMvlD5UUCM1g5zTHRuIW85MCiXIyDswPIkOCAEUFH7G5ZXP doq/7B7eQxbCT5qrF5HgPwjTLKWDjGAmh3eOD7LW9j+5hEQUKseX/S58X+YidivE J+jPg5sOUBku3HBE/FiFskd35p0PzZVaveXxNINCUO7UuoCv6+QRw3ZzeqcLyoye -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:07 2026 by rpki-client