$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft File: a295a695-e91a-4c5a-8a31-a920a42ea44d.mft (raw, json) Hash identifier: cYj/132kEXr3M0CpmcL/8ltYSh8C48oODrd1bRgtzYI= Subject key identifier: 24:A5:C7:91:3F:13:F9:CE:0D:E4:04:91:01:52:5E:96:3B:F9:CB:D2 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584D4A8F57B4162B5E45686EC700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft Manifest number: 010D0C9F43285849ABC8124D60A5EBB8636DE169 Signing time: Thu 26 Mar 2026 01:00:09 +0000 Manifest this update: Thu 26 Mar 2026 01:00:09 +0000 Manifest next update: Sun 29 Mar 2026 01:00:00 +0000 Files and hashes: 1: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (hash: Q6WgCi209nwnqTMqkh4mxn3si2kC81qo9YpV4cvJDH0=) 2: a295a695-e91a-4c5a-8a31-a920a42ea44d.crl (hash: RhhNivXX3Cqm3rT0ElganBzZK6w5C5h4daUrqgy6ICM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:57:b4:16:2b:5e:45:68:6e:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Mar 26 01:00:09 2026 GMT Not After : Mar 29 01:00:00 2026 GMT Subject: CN=10658f9f-7f72-4eec-ac40-aed861fb4658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:b8:79:15:85:92:fb:d3:c7:00:b5:dd:a5: ff:66:1e:06:25:19:cd:91:b9:07:19:6e:64:37:69: e6:3e:e7:e6:f6:cc:26:2f:c4:6a:b4:bb:07:82:d0: c9:25:4f:0f:0a:2a:bf:d5:60:8a:84:8f:ba:66:76: ae:31:9b:a4:40:ef:c2:68:7a:8c:d2:7d:bb:89:2c: bb:f0:9e:d5:73:8a:13:95:9f:ca:7c:3a:27:53:16: 96:51:c4:fb:a2:73:62:15:03:31:7d:39:f5:00:50: 89:53:e8:86:6a:65:0c:bd:df:e2:a4:6e:32:e7:57: 31:a9:cd:0d:5f:76:b0:9e:70:59:38:e0:58:95:e6: 3b:a0:57:ea:9c:84:ec:44:73:e4:ea:f7:c0:f8:d5: 33:8a:9c:0d:2e:0e:6b:aa:09:7b:f4:04:13:c2:9b: 11:75:ec:33:6f:9c:a8:8e:98:45:6e:c5:24:97:c5: 00:55:ac:68:69:a9:64:bf:77:95:c1:b9:88:9b:4b: 73:c3:d4:8c:82:4f:ab:00:2f:17:b8:7d:73:ca:b9: ac:ae:67:ca:20:7c:30:2d:d3:46:81:d5:2d:18:0b: 2d:d9:70:dc:d9:2a:04:ff:cf:6c:d0:45:d4:90:43: b7:09:32:b5:bc:b0:14:5e:45:7f:7f:2b:9e:cc:58: bb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A5:C7:91:3F:13:F9:CE:0D:E4:04:91:01:52:5E:96:3B:F9:CB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d6:6e:1b:f9:69:d2:dc:b5:50:7b:cf:f8:5e:84:04:39:7e: fa:03:1b:d6:26:4e:c3:d9:53:a2:67:43:be:b5:60:75:6e:8b: 74:48:12:f2:9e:19:cd:3e:01:67:b5:26:c0:7b:95:c8:84:e9: 6b:d7:49:44:bd:2f:3a:c8:ed:b2:9d:86:b6:a4:aa:0d:3a:6a: e9:d0:3a:57:09:b0:73:75:78:79:24:01:3b:2c:6b:42:56:5a: 27:bf:09:ba:e6:81:08:3a:73:97:6c:e2:8c:94:fd:23:08:d9: 10:00:8e:f2:40:c9:cc:4f:40:c2:16:c0:5e:5f:ad:39:5d:04: 14:99:bb:90:52:1a:ed:4f:d3:f4:67:7f:42:f6:8a:fe:97:cf: 8e:92:14:44:32:c5:b0:bc:b9:de:e7:ff:ab:cd:03:ef:ee:da: 06:31:d8:98:2e:c2:d7:40:04:fb:61:42:81:90:84:c9:94:ef: 77:6f:ba:8f:bd:15:36:b3:59:8a:a5:83:90:98:4e:86:09:e3: 49:dd:45:6a:12:c2:e6:0a:30:b9:3a:b9:03:c9:41:b8:1a:b9: 78:63:71:1a:0f:e8:75:26:a4:83:7d:cd:cb:d1:85:c3:58:ac: 64:9f:99:9c:9d:04:fe:8f:2e:e6:52:6f:23:e2:9a:46:ef:3d: b1:24:58:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Kj1e0FiteRWhuxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDMyNjAxMDAwOVoXDTI2MDMyOTAxMDAwMFowLzEtMCsGA1UEAxMk MTA2NThmOWYtN2Y3Mi00ZWVjLWFjNDAtYWVkODYxZmI0NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE64eRWFkvvTxwC13aX/Zh4GJRnNkbkHGW5k N2nmPufm9swmL8RqtLsHgtDJJU8PCiq/1WCKhI+6ZnauMZukQO/CaHqM0n27iSy7 8J7Vc4oTlZ/KfDonUxaWUcT7onNiFQMxfTn1AFCJU+iGamUMvd/ipG4y51cxqc0N X3awnnBZOOBYleY7oFfqnITsRHPk6vfA+NUzipwNLg5rqgl79AQTwpsRdewzb5yo jphFbsUkl8UAVaxoaalkv3eVwbmIm0tzw9SMgk+rAC8XuH1zyrmsrmfKIHwwLdNG gdUtGAst2XDc2SoE/89s0EXUkEO3CTK1vLAUXkV/fyuezFi7CwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSlx5E/E/nODeQEkQFSXpY7+cvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvYTI5NWE2OTUtZTkxYS00 YzVhLThhMzEtYTkyMGE0MmVhNDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv1m4b+WnS3LVQe8/4XoQE OX76AxvWJk7D2VOiZ0O+tWB1bot0SBLynhnNPgFntSbAe5XIhOlr10lEvS86yO2y nYa2pKoNOmrp0DpXCbBzdXh5JAE7LGtCVlonvwm65oEIOnOXbOKMlP0jCNkQAI7y QMnMT0DCFsBeX605XQQUmbuQUhrtT9P0Z39C9or+l8+OkhREMsWwvLne5/+rzQPv 7toGMdiYLsLXQAT7YUKBkITJlO93b7qPvRU2s1mKpYOQmE6GCeNJ3UVqEsLmCjC5 OrkDyUG4Grl4Y3EaD+h1JqSDfc3L0YXDWKxkn5mcnQT+jy7mUm8j4ppG7z2xJFhH -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:22 2026 by rpki-client