$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft File: 898522c4-7c40-4c25-80fb-b226c0ea4497.mft (raw, json) Hash identifier: /XRMmWyuJHjTkBDp549i33HJwCFkR6Dgp/kymu2vJFY= Subject key identifier: 9C:5C:00:DA:81:4A:35:20:20:F9:F0:1F:4D:FB:EC:6E:99:18:6B:55 Authority key identifier: 57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84 Certificate issuer: /CN=898522c4-7c40-4c25-80fb-b226c0ea4497 Certificate serial: 010D0C9F4328584D4C4DF91CE433F8E29FAAFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft Manifest number: 010D0C9F43285849DA30B4CA98623420F3977283 Signing time: Thu 26 Mar 2026 16:00:04 +0000 Manifest this update: Thu 26 Mar 2026 16:00:04 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 8933752b-a088-30e6-a4ff-c220d1563136.roa (hash: g06Uvacqu5EifhVyVcOjoCXsQUIgVU+Qmzb3EoBa444=) 2: 898522c4-7c40-4c25-80fb-b226c0ea4497.crl (hash: 4d5zZncwNWUobIjBkj+3GvIJLiVSGJtOA3qZM76m4eM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4d:f9:1c:e4:33:f8:e2:9f:aa:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=898522c4-7c40-4c25-80fb-b226c0ea4497 Validity Not Before: Mar 26 16:00:04 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=9c13ecb6-0f83-4ee0-aafe-d58bd6478a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:6f:c3:38:db:e3:10:28:20:f1:27:74:2d: 62:d8:77:94:f1:f6:da:5b:62:28:db:ed:7f:b0:2f: 01:bc:8c:32:3c:06:43:76:3d:6f:b9:68:6a:05:2e: ac:2c:7e:a2:d1:2c:7d:e0:84:b8:f6:c9:da:0b:3a: 0a:49:27:26:df:cd:86:b5:58:ca:ad:f1:07:51:82: 48:a4:7a:eb:b7:5a:20:48:16:97:27:8d:b8:b3:30: 3e:e5:c6:72:3a:55:f8:ed:05:93:9a:f0:87:a3:1c: ab:f2:e3:bc:0c:ce:a6:c7:06:ee:1e:06:f5:02:a0: 30:c7:d5:15:ec:39:05:6f:c2:09:1c:20:c6:b6:04: 36:1e:a1:f8:b6:37:25:2a:e9:3f:00:93:9d:2c:b2: 6e:d8:c1:3d:fb:5f:af:fb:35:ba:7b:91:c8:70:b2: e8:e9:7f:55:fb:33:c1:d6:ae:47:69:3e:46:0f:a5: c0:5f:2f:7d:63:e7:e9:fa:c9:a1:f9:71:d3:51:44: 7b:a9:a3:34:55:89:bf:7b:d2:b2:fc:b3:1a:ba:0d: fc:de:85:67:30:60:77:db:57:d5:3c:8d:47:7e:10: 45:d4:8a:52:50:0d:bd:5a:42:3e:bd:b1:0f:99:bd: fc:fe:2a:e3:6c:2f:b8:9f:6c:44:0d:d4:48:c9:fd: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:00:DA:81:4A:35:20:20:F9:F0:1F:4D:FB:EC:6E:99:18:6B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.crl X509v3 Authority Key Identifier: keyid:57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e5:9c:b1:9f:5f:97:a8:2b:5e:ff:c0:4b:f7:5e:6c:2b:13: 79:95:3d:2c:64:35:34:1f:13:06:d1:05:85:62:72:e1:a4:9a: 43:f0:44:73:ff:cd:1c:25:1b:97:fc:15:26:6d:e8:3e:61:44: 10:0b:74:90:8e:55:63:54:04:9e:bb:39:8c:a1:da:8d:bf:2a: ac:95:a6:49:46:3c:0e:b0:61:7c:75:e4:15:52:bc:30:b1:70: 52:29:48:55:7e:46:99:e2:93:a5:fd:d3:4c:46:dc:2e:d8:87: f1:e6:5d:55:53:41:cf:1c:1b:2c:86:4d:43:60:7d:dd:e8:78: c8:94:cf:5c:02:e4:df:07:10:26:b6:b8:56:ed:96:80:96:59: 22:e5:6a:fd:90:b4:44:f0:aa:97:4a:cf:7d:37:ed:b8:c1:27: bf:bd:24:fe:5f:7c:b2:4b:8b:db:d8:de:89:94:07:50:45:5e: 37:e7:44:c7:a8:5c:ca:01:8e:b6:83:38:2b:36:c0:f2:d6:c1: f1:bc:9e:74:69:56:52:35:a4:21:f9:8c:15:bb:44:52:e8:c1: e3:13:7f:38:2c:34:38:26:68:27:eb:b4:2e:2c:4e:37:61:e9: e2:09:f6:d4:a3:43:62:11:4b:ff:0b:e2:9e:da:84:2d:25:53: 79:6e:85:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MTfkc5DP44p+q+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk4NTIyYzQtN2M0MC00YzI1LTgwZmItYjIyNmMwZWE0 NDk3MB4XDTI2MDMyNjE2MDAwNFoXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk OWMxM2VjYjYtMGY4My00ZWUwLWFhZmUtZDU4YmQ2NDc4YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Bvwzjb4xAoIPEndC1i2HeU8fbaW2Io2+1/ sC8BvIwyPAZDdj1vuWhqBS6sLH6i0Sx94IS49snaCzoKSScm382GtVjKrfEHUYJI pHrrt1ogSBaXJ424szA+5cZyOlX47QWTmvCHoxyr8uO8DM6mxwbuHgb1AqAwx9UV 7DkFb8IJHCDGtgQ2HqH4tjclKuk/AJOdLLJu2ME9+1+v+zW6e5HIcLLo6X9V+zPB 1q5HaT5GD6XAXy99Y+fp+smh+XHTUUR7qaM0VYm/e9Ky/LMaug383oVnMGB321fV PI1HfhBF1IpSUA29WkI+vbEPmb38/irjbC+4n2xEDdRIyf2YwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJxcANqBSjUgIPnwH0377G6ZGGtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84OTg1 MjJjNC03YzQwLTRjMjUtODBmYi1iMjI2YzBlYTQ0OTcvODk4NTIyYzQtN2M0MC00 YzI1LTgwZmItYjIyNmMwZWE0NDk3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODk4NTIyYzQtN2M0MC00YzI1LTgw ZmItYjIyNmMwZWE0NDk3Lzg5ODUyMmM0LTdjNDAtNGMyNS04MGZiLWIyMjZjMGVh NDQ5Ny5jcmwwHwYDVR0jBBgwFoAUVyiHIdoOuwcwVZpYf2LvBeaWpIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84OTg1MjJjNC03YzQwLTRjMjUtODBmYi1iMjI2 YzBlYTQ0OTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB45Zyxn1+XqCte/8BL915s KxN5lT0sZDU0HxMG0QWFYnLhpJpD8ERz/80cJRuX/BUmbeg+YUQQC3SQjlVjVASe uzmModqNvyqslaZJRjwOsGF8deQVUrwwsXBSKUhVfkaZ4pOl/dNMRtwu2Ifx5l1V U0HPHBsshk1DYH3d6HjIlM9cAuTfBxAmtrhW7ZaAllki5Wr9kLRE8KqXSs99N+24 wSe/vST+X3yyS4vb2N6JlAdQRV4350THqFzKAY62gzgrNsDy1sHxvJ50aVZSNaQh +YwVu0RS6MHjE384LDQ4Jmgn67QuLE43YeniCfbUo0NiEUv/C+Ke2oQtJVN5boXO -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:02 2026 by rpki-client