$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft File: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft (raw, json) Hash identifier: 8jT1pd0b95DvZppAMMN23iX8KTdp+4FtI4/sGtQjr74= Subject key identifier: FC:5D:4F:E0:E7:B8:52:D6:3B:49:0A:5D:4E:C1:24:B1:14:FE:56:89 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584D49658187E172A22CD1CD9740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft Manifest number: 010D0C9F4328584A1A40BB5ED5171D328F14E12B Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (hash: W9LlRCfAAW7emPF0V1FzPobmOUhI04/lHX2reMzEaT4=) 2: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl (hash: y4XRrW21JoTCCs6WJmEAuQX6KAjM+xhA8Zt34Ck7WJo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:81:87:e1:72:a2:2c:d1:cd:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=3c078f44-0191-4cd6-aa18-f0ca300d698d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:48:57:67:a8:e0:3e:a7:3e:95:7e:4e:2f: 8b:2a:18:e2:32:2f:17:06:1f:13:19:86:31:79:7d: 4a:20:66:3a:7e:c7:d5:fa:00:0e:d1:7e:a3:34:a2: a0:1e:d6:0a:c2:f1:4a:1b:6a:02:8c:ff:1f:7e:0d: 37:e0:cf:c2:2c:a2:47:10:db:93:6d:d7:f5:69:36: 19:7b:9e:d1:e9:7e:6e:a2:62:9e:88:52:60:bd:b1: 1e:36:5d:0c:44:55:47:46:84:06:e0:46:39:d7:ce: 59:aa:df:18:eb:72:11:81:c0:33:b3:3d:98:97:b8: c7:b3:61:54:c5:a3:12:03:23:43:13:51:50:0c:fb: 4e:d0:61:de:0f:03:e6:c9:40:4c:da:a4:8d:75:b2: 61:d7:9e:dc:3e:d3:9b:46:30:e1:3e:0e:56:b5:46: 6f:4b:62:92:35:5c:7e:80:a1:70:72:e6:ea:31:31: 80:ec:84:2f:7b:79:eb:25:52:6d:a7:28:81:e1:50: 83:9b:4d:ac:1a:19:91:1e:e9:05:aa:12:f5:1b:a1: c9:f5:e7:c7:cd:08:52:a4:ea:26:1b:4c:7f:7b:b5: 12:e7:ad:49:be:53:c4:d7:33:84:cc:db:7b:4a:72: c7:9b:c1:90:be:a6:1b:e4:df:d5:98:70:94:97:79: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5D:4F:E0:E7:B8:52:D6:3B:49:0A:5D:4E:C1:24:B1:14:FE:56:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4f:00:88:10:f3:c5:24:42:05:be:f2:4e:a6:dd:8c:da:ff: a4:ac:86:34:ff:67:db:0a:3c:ec:b6:ce:a9:ff:e4:9d:79:8b: 57:4a:3b:80:ba:43:27:1c:05:91:30:e9:b0:13:28:3d:2a:85: cf:ef:e3:23:50:41:45:8e:e1:41:de:0a:6c:e6:d9:74:f4:80: 72:e6:00:6c:29:c2:c7:db:24:75:dd:6d:a0:44:22:75:73:44: 41:78:ec:b7:6a:2f:9e:5d:10:c3:c8:d5:00:06:5b:93:42:e7: 10:05:d3:ec:6d:6d:42:35:84:e7:64:67:c4:2b:f0:51:18:2b: d8:80:68:11:30:ce:a3:c4:4c:19:a3:cb:5d:e0:ad:9f:74:4b: 8d:d6:d9:e4:3e:38:f8:63:b7:8a:a0:00:a8:02:4c:3c:95:a7: 88:e5:db:ff:bb:bf:9b:d4:87:2b:5c:31:8a:b4:98:ea:00:24: 55:73:1f:c0:f4:c3:7c:3e:83:7c:23:7a:ec:f5:7c:f9:99:8f: c6:06:7d:57:6f:e4:ce:f7:36:47:d8:37:55:58:d6:78:27:c1: 36:08:c3:e6:68:c8:c0:c9:4b:24:b5:c2:47:42:b4:ce:f9:31: a6:4b:bc:6b:8a:26:f9:a7:38:96:6e:8a:15:1d:01:87:59:22: 3b:bc:9f:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYGH4XKiLNHNl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk M2MwNzhmNDQtMDE5MS00Y2Q2LWFhMTgtZjBjYTMwMGQ2OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNNIV2eo4D6nPpV+Ti+LKhjiMi8XBh8TGYYx eX1KIGY6fsfV+gAO0X6jNKKgHtYKwvFKG2oCjP8ffg034M/CLKJHENuTbdf1aTYZ e57R6X5uomKeiFJgvbEeNl0MRFVHRoQG4EY5185Zqt8Y63IRgcAzsz2Yl7jHs2FU xaMSAyNDE1FQDPtO0GHeDwPmyUBM2qSNdbJh157cPtObRjDhPg5WtUZvS2KSNVx+ gKFwcubqMTGA7IQve3nrJVJtpyiB4VCDm02sGhmRHukFqhL1G6HJ9efHzQhSpOom G0x/e7US561JvlPE1zOEzNt7SnLHm8GQvqYb5N/VmHCUl3kG/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPxdT+DnuFLWO0kKXU7BJLEU/laJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvOGYxZDVlY2QtODc3MC00 NmEyLWI3YzgtMjUxYjU2NGI5ZTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxTwCIEPPFJEIFvvJOpt2M 2v+krIY0/2fbCjzsts6p/+SdeYtXSjuAukMnHAWRMOmwEyg9KoXP7+MjUEFFjuFB 3gps5tl09IBy5gBsKcLH2yR13W2gRCJ1c0RBeOy3ai+eXRDDyNUABluTQucQBdPs bW1CNYTnZGfEK/BRGCvYgGgRMM6jxEwZo8td4K2fdEuN1tnkPjj4Y7eKoACoAkw8 laeI5dv/u7+b1IcrXDGKtJjqACRVcx/A9MN8PoN8I3rs9Xz5mY/GBn1Xb+TO9zZH 2DdVWNZ4J8E2CMPmaMjAyUsktcJHQrTO+TGmS7xriib5pziWbooVHQGHWSI7vJ91 -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:51 2026 by rpki-client