$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft File: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft (raw, json) Hash identifier: iWrMsveBI91N3u+vW7fFpBWhGcRfZch06eqXd/IZViI= Subject key identifier: 2A:1A:C7:0B:F2:AA:1D:DF:2B:F6:8C:32:E1:24:07:66:DB:02:C2:38 Authority key identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F Certificate issuer: /CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Certificate serial: 010D0C9F4328584D496581AE67E853F969EC6F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft Manifest number: 010D0C9F43285849864C6858DE047781D0D328A5 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl (hash: Yxw94BobYriQLtR4z9UxPf0x6s9buD93HCcH2r2JbyA=) 2: f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa (hash: 9HcnyMtcd66D8WoWYoWk6flL89TNbZqTOic5jAZdIlk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:81:ae:67:e8:53:f9:69:ec:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=0ac00a69-51c5-42fc-a940-839c0b44aa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b1:69:a0:9c:c5:ae:39:fb:48:aa:7c:51:ac: ab:1c:51:26:cc:cf:81:67:2b:d9:8a:42:1b:0a:65: 15:ff:77:f4:18:b1:f6:17:ac:29:b6:8d:c3:8e:2a: 3e:95:2a:8a:8d:2a:8c:98:e8:62:fa:61:68:d4:f8: c0:79:e8:4f:de:7f:ee:11:f8:23:73:a2:c1:3e:60: fc:db:f6:9d:ce:a5:1d:da:b1:13:f4:9c:2e:b5:cb: f8:9b:df:95:fd:a7:b2:08:51:82:5c:92:a8:57:78: e7:9c:9d:e5:97:cd:f6:1c:44:e7:84:33:da:50:86: 57:3f:65:df:9f:10:a3:8a:69:4f:bc:0e:b3:0e:66: ce:65:3d:5a:da:9e:56:92:1b:64:9c:b1:77:54:84: 7f:18:4c:aa:f1:e9:2c:24:cd:60:42:c9:a3:89:2f: 91:eb:c0:96:51:78:9f:a9:2a:1a:53:a7:ab:8e:f0: b6:ab:c2:39:99:b0:a4:c5:5a:18:45:52:26:ed:43: ae:b8:ba:a3:2c:f4:33:86:8e:9d:49:d9:06:47:65: 05:21:10:b5:d0:25:7c:96:74:03:0f:ea:dc:ed:63: 2e:ca:e9:c2:02:1c:e6:db:97:90:84:b9:12:d3:e4: c0:4e:cd:7c:9b:3b:b3:b1:6f:ad:99:ea:a3:f7:a5: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:C7:0B:F2:AA:1D:DF:2B:F6:8C:32:E1:24:07:66:DB:02:C2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl X509v3 Authority Key Identifier: keyid:47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:31:19:64:b7:e5:50:a6:bb:28:a3:ba:24:6e:30:60:2e:08: 8e:2f:a8:7d:3a:16:87:d5:d1:86:4b:12:17:4f:c8:dc:dd:ca: b0:26:da:2a:2c:58:27:21:91:04:5d:d2:38:a9:a8:96:65:ce: 35:bd:b1:7b:89:d3:24:07:f0:5d:f2:9f:f3:7d:c3:d2:1c:6e: 77:ae:33:4f:be:b2:1d:53:06:17:8e:f1:bf:bd:1d:4d:6f:50: b7:e3:61:1e:05:da:f2:48:af:7e:4d:67:e5:bf:d2:0f:03:7a: 0f:05:f0:c4:dc:7d:ee:9f:ef:3c:31:08:8b:1e:90:86:aa:c3: 86:d0:08:0e:c6:e1:c5:d6:4b:61:32:ec:5e:1b:6d:80:46:13: f6:52:00:2c:c5:03:18:46:ef:8e:37:b7:bb:68:fc:22:ad:02: 73:11:c5:66:82:8e:3c:b1:9a:36:2e:b5:ac:fb:5d:2b:60:1f: 1a:9f:2d:f7:6a:ed:17:39:a1:d7:77:04:a5:6c:99:50:d4:c9: 5d:db:c2:39:50:9c:12:1f:5a:20:e7:f7:a2:bc:2b:41:fe:f7: 7e:c9:b7:17:f4:e6:53:5c:b9:41:2f:d0:ec:fc:b4:2a:82:bc: 1a:d7:10:4b:bb:2e:51:f6:67:dc:69:81:a2:ec:d7:aa:98:d2: e9:4a:58:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYGuZ+hT+Wnsb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmNDhhMjgtN2FhMi00YTdmLWI4NWUtNzFiNzcwZGEy ZWU1MB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk MGFjMDBhNjktNTFjNS00MmZjLWE5NDAtODM5YzBiNDRhYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrFpoJzFrjn7SKp8UayrHFEmzM+BZyvZikIb CmUV/3f0GLH2F6wpto3Djio+lSqKjSqMmOhi+mFo1PjAeehP3n/uEfgjc6LBPmD8 2/adzqUd2rET9Jwutcv4m9+V/aeyCFGCXJKoV3jnnJ3ll832HETnhDPaUIZXP2Xf nxCjimlPvA6zDmbOZT1a2p5WkhtknLF3VIR/GEyq8eksJM1gQsmjiS+R68CWUXif qSoaU6erjvC2q8I5mbCkxVoYRVIm7UOuuLqjLPQzho6dSdkGR2UFIRC10CV8lnQD D+rc7WMuyunCAhzm25eQhLkS0+TATs18mzuzsW+tmeqj96XOXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCoaxwvyqh3fK/aMMuEkB2bbAsI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0 OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3NzBkYTJlZTUvOGJmNDhhMjgtN2FhMi00 YTdmLWI4NWUtNzFiNzcwZGEyZWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGJmNDhhMjgtN2FhMi00YTdmLWI4 NWUtNzFiNzcwZGEyZWU1LzhiZjQ4YTI4LTdhYTItNGE3Zi1iODVlLTcxYjc3MGRh MmVlNS5jcmwwHwYDVR0jBBgwFoAURxtKQHSuzhWP+XrpHrVSVcRSkR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3 NzBkYTJlZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeMRlkt+VQprsoo7okbjBg LgiOL6h9OhaH1dGGSxIXT8jc3cqwJtoqLFgnIZEEXdI4qaiWZc41vbF7idMkB/Bd 8p/zfcPSHG53rjNPvrIdUwYXjvG/vR1Nb1C342EeBdrySK9+TWflv9IPA3oPBfDE 3H3un+88MQiLHpCGqsOG0AgOxuHF1kthMuxeG22ARhP2UgAsxQMYRu+ON7e7aPwi rQJzEcVmgo48sZo2LrWs+10rYB8any33au0XOaHXdwSlbJlQ1Mld28I5UJwSH1og 5/eivCtB/vd+ybcX9OZTXLlBL9Ds/LQqgrwa1xBLuy5R9mfcaYGi7NeqmNLpSlg8 -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:30 2026 by rpki-client