$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft File: 88d13a4f-a038-4d71-9494-9d48fef32c35.mft (raw, json) Hash identifier: ESAHNwlZyWGBxUjyKz4AC3RpF8f39+5nQ7ScXxUOAVI= Subject key identifier: E2:60:1F:35:D2:3E:EA:21:50:61:9F:44:6C:11:25:72:DE:E0:2F:4C Authority key identifier: 59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 Certificate issuer: /CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Certificate serial: 010D0C9F4328584D4BD6D8599FFCBF0794B36440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft Manifest number: 010D0C9F4328584A1462E2890A10EA2C9890896E Signing time: Thu 26 Mar 2026 12:00:03 +0000 Manifest this update: Thu 26 Mar 2026 12:00:03 +0000 Manifest next update: Sat 28 Mar 2026 12:00:00 +0000 Files and hashes: 1: 88d13a4f-a038-4d71-9494-9d48fef32c35.crl (hash: TcgdBOQnKxwT5iswa97825ZolKQch1Ouh4l8uN7CKE0=) 2: eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa (hash: fn1PrpoYaPnvx1MT7KOodwcPxH/r4dSTPHv1xVjJgQg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:d6:d8:59:9f:fc:bf:07:94:b3:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Validity Not Before: Mar 26 12:00:03 2026 GMT Not After : Mar 28 12:00:00 2026 GMT Subject: CN=8fa8f40a-dbae-4ce2-b25e-7e0d66baf4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:d6:92:87:1d:92:54:5a:8a:5f:93:c4:23: c5:12:97:65:86:96:e4:ba:8a:48:5c:33:79:f7:e0: 8b:8e:6f:f3:1d:b0:91:db:8a:71:6d:bf:e8:a2:81: c1:cf:ec:60:1c:d1:62:c1:4f:08:d6:b5:89:67:c0: 4d:07:ae:4a:f6:df:77:88:84:74:31:05:2a:2d:49: 53:89:b2:8f:17:ef:a4:2e:bd:e1:60:f3:87:e4:84: d8:e2:3a:ee:54:c3:0d:47:0b:9f:74:1a:22:52:59: b0:5c:10:85:2e:44:2f:52:e7:81:8a:0c:c3:7b:65: c2:f0:d0:0b:9e:ec:7e:0b:1b:b5:93:2b:61:a0:21: 38:46:0e:05:ae:c1:5f:19:12:ae:f5:05:d5:a6:7b: ec:79:85:41:b8:10:69:af:dc:72:fd:44:f9:8d:0f: b9:cb:11:07:d7:0d:10:43:5b:b9:1f:45:a0:65:0f: 03:1d:6a:f5:ab:13:77:77:16:c9:aa:af:6f:71:06: 7a:3f:39:06:b1:e3:df:c2:3c:ed:92:da:8a:08:91: 4b:0f:53:56:62:26:b3:48:b0:62:a8:36:00:2a:49: 9e:f8:f5:c6:5b:f2:a3:b2:c3:2b:b7:77:b0:09:34: 48:f7:e3:cc:4c:4b:ce:16:c8:73:2b:cf:d9:be:2c: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:60:1F:35:D2:3E:EA:21:50:61:9F:44:6C:11:25:72:DE:E0:2F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl X509v3 Authority Key Identifier: keyid:59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:01:76:28:0c:26:e0:a8:4b:ed:67:a3:3c:e3:d1:bb:0c:28: 0d:ec:d3:43:fb:e0:bf:50:67:84:97:fe:58:05:8f:32:79:c1: dd:81:c8:eb:be:34:d3:b7:c2:59:1e:a1:53:74:22:70:ba:66: 84:0f:fc:56:bc:ef:91:18:0d:c8:2a:9a:80:eb:74:83:a9:0a: 13:8d:a4:a7:84:27:5f:0f:c3:22:ce:0f:01:9a:77:50:4e:3d: 65:55:66:7e:b7:cd:9b:75:56:7d:25:f1:6e:92:b7:e1:85:15: 09:3a:73:44:ea:e7:bf:3d:ab:ea:08:9c:99:4e:75:08:e5:84: 7d:73:18:ca:9b:8c:c3:0e:95:ac:11:32:5c:b8:74:5c:48:ec: fb:22:78:e0:4a:16:87:55:d4:1a:fe:cf:22:9c:11:7b:e2:03: 5b:bb:f7:d0:56:38:06:56:ff:c1:39:93:a4:30:10:1a:23:d4: 77:a3:5e:fe:50:f9:ef:e8:bd:c1:66:49:98:83:21:99:c4:69: 79:14:76:d7:f4:d3:1b:8b:cb:1d:49:f2:77:be:1e:23:02:60: e0:b8:fe:57:cc:cc:7b:70:46:34:6b:fe:84:87:77:db:8b:0c: 12:eb:94:24:48:43:b8:05:b8:d3:06:09:31:e8:36:d4:57:60: 3d:fc:62:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L1thZn/y/B5SzZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkMTNhNGYtYTAzOC00ZDcxLTk0OTQtOWQ0OGZlZjMy YzM1MB4XDTI2MDMyNjEyMDAwM1oXDTI2MDMyODEyMDAwMFowLzEtMCsGA1UEAxMk OGZhOGY0MGEtZGJhZS00Y2UyLWIyNWUtN2UwZDY2YmFmNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNXWkocdklRail+TxCPFEpdlhpbkuopIXDN5 9+CLjm/zHbCR24pxbb/oooHBz+xgHNFiwU8I1rWJZ8BNB65K9t93iIR0MQUqLUlT ibKPF++kLr3hYPOH5ITY4jruVMMNRwufdBoiUlmwXBCFLkQvUueBigzDe2XC8NAL nux+Cxu1kythoCE4Rg4FrsFfGRKu9QXVpnvseYVBuBBpr9xy/UT5jQ+5yxEH1w0Q Q1u5H0WgZQ8DHWr1qxN3dxbJqq9vcQZ6PzkGsePfwjztktqKCJFLD1NWYiazSLBi qDYAKkme+PXGW/KjssMrt3ewCTRI9+PMTEvOFshzK8/ZvizJyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOJgHzXSPuohUGGfRGwRJXLe4C9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84OGQx M2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4ZmVmMzJjMzUvODhkMTNhNGYtYTAzOC00 ZDcxLTk0OTQtOWQ0OGZlZjMyYzM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODhkMTNhNGYtYTAzOC00ZDcxLTk0 OTQtOWQ0OGZlZjMyYzM1Lzg4ZDEzYTRmLWEwMzgtNGQ3MS05NDk0LTlkNDhmZWYz MmMzNS5jcmwwHwYDVR0jBBgwFoAUWeKwUyEXZQKPVQZ09Hb2BvuPcoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84OGQxM2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4 ZmVmMzJjMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnAXYoDCbgqEvtZ6M849G7 DCgN7NND++C/UGeEl/5YBY8yecHdgcjrvjTTt8JZHqFTdCJwumaED/xWvO+RGA3I KpqA63SDqQoTjaSnhCdfD8Mizg8BmndQTj1lVWZ+t82bdVZ9JfFukrfhhRUJOnNE 6ue/PavqCJyZTnUI5YR9cxjKm4zDDpWsETJcuHRcSOz7InjgShaHVdQa/s8inBF7 4gNbu/fQVjgGVv/BOZOkMBAaI9R3o17+UPnv6L3BZkmYgyGZxGl5FHbX9NMbi8sd SfJ3vh4jAmDguP5XzMx7cEY0a/6Eh3fbiwwS65QkSEO4BbjTBgkx6DbUV2A9/GJt -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:08 2026 by rpki-client