$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: oXkd/gc4ERXqpHPi6kF/TdBM85C1bIHDmxLCUlvW9AM= Subject key identifier: 59:DD:D3:79:5F:A5:D5:33:95:0E:9E:11:88:31:30:A9:71:E4:B8:0A Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584D490C297A2277210AFA591400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF35E Signing time: Wed 25 Mar 2026 12:00:04 +0000 Manifest this update: Wed 25 Mar 2026 12:00:04 +0000 Manifest next update: Fri 27 Mar 2026 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: HSRD/Io4dyTnoSvIvrH5Ruainq2hoPdKzMWGJjqWyTM=) 2: 7240f3c2-ab10-300d-8db2-697e0432d604.roa (hash: GY69p6056QP1vWN6xrdg0I9mPr2w90mzu5nrOdef+qE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0c:29:7a:22:77:21:0a:fa:59:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Mar 25 12:00:04 2026 GMT Not After : Mar 27 12:00:00 2026 GMT Subject: CN=eb9b3b8b-07df-4aa4-a230-ab8f3e6abbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:9b:8d:6c:63:88:95:f1:55:d8:96:06:95: 3b:38:2d:c7:c6:a3:d4:c3:d2:b7:9a:b8:ad:20:14: 87:fa:58:1f:d6:e0:d0:13:38:27:38:e0:a6:fd:7c: 81:ec:e8:6d:b8:fa:ad:c7:2e:ed:27:2d:48:b6:4a: bc:8a:6a:e4:a2:6a:cd:5f:23:2f:87:a8:e7:5a:31: e9:d2:e2:53:07:f0:14:f7:c8:86:80:f4:41:27:1a: e4:c6:79:6f:dc:76:7d:52:0f:1c:b2:5d:dc:5a:c0: bb:f9:2b:f4:4e:84:1e:9e:5a:17:93:69:0d:fe:94: b8:15:94:10:c0:23:f5:2f:f1:6e:23:ad:ee:6d:f9: ec:0f:4d:f8:0a:19:a7:b7:cb:aa:f7:6d:f8:ab:fd: 62:1b:83:c4:5d:61:57:e8:98:f5:a8:33:8d:34:bc: cb:fe:95:83:11:cd:6f:b0:cd:04:f0:4f:e2:da:97: b1:b1:f8:ef:b7:0e:ae:86:12:83:b1:69:4a:34:af: 2c:c5:56:47:f9:be:16:c2:d1:a1:2f:67:fd:49:e9: 3e:da:33:ec:da:8e:cc:34:b7:d0:5f:41:01:3f:cb: 25:fa:9b:be:c5:89:8c:c5:88:df:61:14:27:7a:47: c9:2d:13:5e:29:b9:63:39:e4:3f:0f:8a:2b:3b:50: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DD:D3:79:5F:A5:D5:33:95:0E:9E:11:88:31:30:A9:71:E4:B8:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f8:e4:c0:4c:eb:a9:7f:76:af:38:ec:98:ca:e8:82:a1:16: a0:cd:ca:cb:eb:2d:57:d1:25:61:8c:0e:40:d5:d2:eb:8a:52: 80:1b:3f:ae:28:4b:1b:5b:73:9d:e3:a6:82:0a:5d:b4:c2:87: d7:38:e6:b3:7d:f3:45:0e:45:82:62:b9:92:6d:d4:0e:f4:e6: d4:04:74:97:cd:f9:41:7a:3a:dc:fc:1f:2b:e5:34:ee:cd:34: f4:1f:cc:de:c1:7e:2d:0c:c2:70:dd:66:d5:f6:85:82:6b:51: 69:23:4b:1c:a2:9d:66:17:b9:d9:9b:7b:b0:fe:47:b0:c7:6b: 6f:da:0e:b1:8e:f1:3a:fe:5d:ea:1d:67:93:e2:2a:68:e4:1e: c9:e2:b8:cb:85:68:5b:7d:30:8c:b9:71:f6:88:47:c2:3b:03: d8:9b:f1:7e:17:3e:83:22:af:cc:f5:d9:67:4c:28:f0:45:19: cf:87:bc:66:fa:90:47:67:4a:7b:c0:da:13:43:b6:68:82:ab: 5f:ea:cf:b3:6c:c4:ee:cc:dc:e7:13:b0:4b:72:64:18:1a:d1: f2:18:a3:cb:36:51:d3:a0:98:d0:c8:9d:a9:0c:98:dd:8c:89: c5:7f:62:8d:42:28:67:21:8a:38:93:d7:83:9d:64:f2:7c:18: e1:eb:55:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JDCl6InchCvpZFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDMyNTEyMDAwNFoXDTI2MDMyNzEyMDAwMFowLzEtMCsGA1UEAxMk ZWI5YjNiOGItMDdkZi00YWE0LWEyMzAtYWI4ZjNlNmFiYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN+bjWxjiJXxVdiWBpU7OC3HxqPUw9K3mrit IBSH+lgf1uDQEzgnOOCm/XyB7OhtuPqtxy7tJy1Itkq8imrkomrNXyMvh6jnWjHp 0uJTB/AU98iGgPRBJxrkxnlv3HZ9Ug8csl3cWsC7+Sv0ToQenloXk2kN/pS4FZQQ wCP1L/FuI63ubfnsD034Chmnt8uq9234q/1iG4PEXWFX6Jj1qDONNLzL/pWDEc1v sM0E8E/i2pexsfjvtw6uhhKDsWlKNK8sxVZH+b4WwtGhL2f9Sek+2jPs2o7MNLfQ X0EBP8sl+pu+xYmMxYjfYRQnekfJLRNeKbljOeQ/D4orO1BXKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFnd03lfpdUzlQ6eEYgxMKlx5LgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBA+OTATOupf3avOOyYyuiC oRagzcrL6y1X0SVhjA5A1dLrilKAGz+uKEsbW3Od46aCCl20wofXOOazffNFDkWC YrmSbdQO9ObUBHSXzflBejrc/B8r5TTuzTT0H8zewX4tDMJw3WbV9oWCa1FpI0sc op1mF7nZm3uw/kewx2tv2g6xjvE6/l3qHWeT4ipo5B7J4rjLhWhbfTCMuXH2iEfC OwPYm/F+Fz6DIq/M9dlnTCjwRRnPh7xm+pBHZ0p7wNoTQ7Zogqtf6s+zbMTuzNzn E7BLcmQYGtHyGKPLNlHToJjQyJ2pDJjdjInFf2KNQihnIYo4k9eDnWTyfBjh61Um -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:51 2026 by rpki-client