$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft File: 7afbb48a-7a41-422c-a27b-4b92e0907153.mft (raw, json) Hash identifier: VHHV83JJ+Aj3xJIz31Kp1TibDo3WqBG0viBbI0JRSJ4= Subject key identifier: E2:EE:8A:FF:1D:06:44:A4:3A:28:3F:77:0F:CE:5D:87:F8:47:93:60 Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E Certificate issuer: /CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Certificate serial: 010D0C9F4328584D4AE89E7E1189BD19479323E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft Manifest number: 010D0C9F432858496EA47549D85836F89350972A Signing time: Thu 26 Mar 2026 04:00:03 +0000 Manifest this update: Thu 26 Mar 2026 04:00:03 +0000 Manifest next update: Sun 29 Mar 2026 04:00:00 +0000 Files and hashes: 1: 309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (hash: C07WgfqT9r7BP6RGc62jo6j5aiac9J3X6oKustInT9s=) 2: 7afbb48a-7a41-422c-a27b-4b92e0907153.crl (hash: ape4ugWiVont7R9di1AZQRNIYUQP2d0CdSpsZ5XkuPE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:e8:9e:7e:11:89:bd:19:47:93:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Validity Not Before: Mar 26 04:00:03 2026 GMT Not After : Mar 29 04:00:00 2026 GMT Subject: CN=cedec4fa-118c-4cb3-998c-7beecdbbe954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:da:b6:4e:2a:41:dc:88:d9:77:57:09:1c: 05:a6:7f:22:93:7e:22:58:c2:33:ed:a9:93:af:49: b8:12:01:a3:ca:d4:21:02:49:63:4b:35:56:45:b1: 8b:ba:f7:7d:a9:96:f8:8f:a1:00:83:0c:79:7c:46: 1a:8c:3e:d2:5b:32:17:41:90:1b:3b:20:fe:4c:f4: f1:97:3d:79:63:10:0d:48:e8:4e:bf:e2:77:01:f0: 6a:97:f1:10:64:44:af:4e:c1:93:d9:9a:5a:06:7c: 76:04:33:8c:c7:de:5a:fe:77:55:1c:06:f9:ad:48: 6e:e0:bf:46:32:37:dd:1e:b7:05:75:90:6b:ce:05: fe:7f:9d:74:b8:19:f7:f9:18:0e:ba:61:ec:a8:45: 97:a7:cc:dd:ed:08:73:f8:a1:83:6f:d6:21:ca:be: e7:9c:a2:e7:0e:eb:4b:53:3f:ed:05:49:d9:c8:2f: f6:64:04:62:ad:bc:ec:4f:cf:e1:f7:59:a5:42:6d: bf:66:34:6d:79:d1:0d:27:c9:11:df:e6:bb:87:98: 79:41:c5:32:ac:d0:9a:ee:6c:26:6f:8a:ae:ac:77: 8c:0e:e1:a1:e3:12:1c:22:ed:a8:e6:fb:2b:74:b7: d1:34:19:ef:bb:8a:68:93:1f:c3:8b:68:5e:e0:86: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EE:8A:FF:1D:06:44:A4:3A:28:3F:77:0F:CE:5D:87:F8:47:93:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl X509v3 Authority Key Identifier: keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:19:16:49:fd:d6:92:81:94:7e:73:da:59:49:18:99:67:ea: 5e:b6:d1:08:7a:62:18:26:a0:e5:b9:a5:08:d3:9c:11:da:36: c2:2e:e3:10:e1:a4:df:8d:c5:2f:52:f1:18:3f:d5:d1:51:77: b4:5b:02:0b:89:81:a5:8c:f6:92:ab:4f:c6:f2:22:64:a0:0c: 93:89:01:f1:88:d0:13:f1:84:fa:d2:ae:7d:6a:8d:be:2b:c2: df:3b:14:25:7c:80:48:4c:8f:5b:1a:97:f9:6f:27:b0:36:fc: 70:72:d5:ea:2a:33:ad:02:77:89:98:86:06:c4:3e:a3:d6:8d: 3b:83:28:82:15:14:c2:07:c8:e1:3d:5b:20:8c:58:7d:b9:2e: 10:80:49:11:a9:5e:6e:07:ce:9c:87:4b:28:e1:59:ce:03:25: 2a:13:10:c8:c8:b1:bf:41:c7:81:9d:fb:54:7c:b8:de:8f:af: 27:2f:d2:48:25:49:b8:e4:f1:6b:f1:b7:6f:0b:f2:1b:ea:19: 6d:d0:b1:f2:42:a5:1a:c4:2d:fa:e4:54:24:d6:93:3c:5d:5f: 32:11:70:4f:6a:9a:d0:4d:e6:76:7e:23:64:a6:86:93:74:fc: 40:a7:c3:08:26:e1:a6:a1:2d:61:02:d0:e7:62:c0:38:cc:d0: 84:71:f5:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1K6J5+EYm9GUeTI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYmI0OGEtN2E0MS00MjJjLWEyN2ItNGI5MmUwOTA3 MTUzMB4XDTI2MDMyNjA0MDAwM1oXDTI2MDMyOTA0MDAwMFowLzEtMCsGA1UEAxMk Y2VkZWM0ZmEtMTE4Yy00Y2IzLTk5OGMtN2JlZWNkYmJlOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLvatk4qQdyI2XdXCRwFpn8ik34iWMIz7amT r0m4EgGjytQhAkljSzVWRbGLuvd9qZb4j6EAgwx5fEYajD7SWzIXQZAbOyD+TPTx lz15YxANSOhOv+J3AfBql/EQZESvTsGT2ZpaBnx2BDOMx95a/ndVHAb5rUhu4L9G MjfdHrcFdZBrzgX+f510uBn3+RgOumHsqEWXp8zd7Qhz+KGDb9Yhyr7nnKLnDutL Uz/tBUnZyC/2ZARirbzsT8/h91mlQm2/ZjRtedENJ8kR3+a7h5h5QcUyrNCa7mwm b4qurHeMDuGh4xIcIu2o5vsrdLfRNBnvu4pokx/Di2he4IZqEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOLuiv8dBkSkOig/dw/OXYf4R5NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83YWZi YjQ4YS03YTQxLTQyMmMtYTI3Yi00YjkyZTA5MDcxNTMvN2FmYmI0OGEtN2E0MS00 MjJjLWEyN2ItNGI5MmUwOTA3MTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2FmYmI0OGEtN2E0MS00MjJjLWEy N2ItNGI5MmUwOTA3MTUzLzdhZmJiNDhhLTdhNDEtNDIyYy1hMjdiLTRiOTJlMDkw NzE1My5jcmwwHwYDVR0jBBgwFoAUIzJ1MrQ9OnACvnyh5vqZeNyLeY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83YWZiYjQ4YS03YTQxLTQyMmMtYTI3Yi00Yjky ZTA5MDcxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkGRZJ/daSgZR+c9pZSRiZ Z+pettEIemIYJqDluaUI05wR2jbCLuMQ4aTfjcUvUvEYP9XRUXe0WwILiYGljPaS q0/G8iJkoAyTiQHxiNAT8YT60q59ao2+K8LfOxQlfIBITI9bGpf5byewNvxwctXq KjOtAneJmIYGxD6j1o07gyiCFRTCB8jhPVsgjFh9uS4QgEkRqV5uB86ch0so4VnO AyUqExDIyLG/QceBnftUfLjej68nL9JIJUm45PFr8bdvC/Ib6hlt0LHyQqUaxC36 5FQk1pM8XV8yEXBPaprQTeZ2fiNkpoaTdPxAp8MIJuGmoS1hAtDnYsA4zNCEcfVg -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:04 2026 by rpki-client