$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft File: c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft (raw, json) Hash identifier: uYwbRzuhFyU2IIvOtxlZP5z84q81QyMT2ItdE1H8AEY= Subject key identifier: E9:17:BA:E5:8A:51:41:CC:5F:4B:DA:90:02:B6:34:96:1D:D0:38:3E Authority key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Certificate issuer: /CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Certificate serial: 010D0C9F4328584D49BED4DE5D04000FE69F33CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft Manifest number: 010D0C9F4328584A17DA3FA749DC24C8808F30ED Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Fri 27 Mar 2026 18:00:00 +0000 Files and hashes: 1: 8d95541a-b336-3100-a13d-7931c32d52f2.roa (hash: TwIW/G+tQ68iT/fXUN2HNRJKTqOXJnpD1uDczVbBnsU=) 2: c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl (hash: sn/6JbEenILkAQTTd2syPvO4QGsWhQ52YnDTwexaPsI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d4:de:5d:04:00:0f:e6:9f:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 27 18:00:00 2026 GMT Subject: CN=9d6b7263-e470-41b7-a0cb-45059f9e4d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b2:13:66:c8:e9:67:cd:fc:6e:82:5c:a1:dd: 95:c0:eb:61:09:7b:a5:ec:1e:7a:c7:aa:79:50:a9: d5:8d:8a:ee:1c:5c:49:1c:11:37:0c:1e:6f:79:4c: 50:25:35:9f:31:b3:f2:6e:a1:21:5b:bb:7c:07:16: 6f:72:68:58:85:23:e2:c1:00:d9:42:6f:53:18:06: 41:d9:70:54:b4:eb:47:4f:70:fd:0e:fb:96:42:2b: b1:76:6d:7f:0f:ee:9c:c8:ac:f8:c8:57:0d:7a:bb: 5a:28:b4:f1:1c:56:d6:9c:0a:98:4c:01:0a:76:0f: 23:c1:db:fb:d2:8b:65:3a:be:49:92:ff:4d:f4:f2: b0:17:69:42:c0:6d:b5:88:d4:61:62:6f:f0:3a:d1: 5d:6f:24:b6:64:7b:b7:09:de:b3:57:c5:01:5f:b5: 01:00:18:b3:04:86:46:96:da:7d:4d:f8:cd:01:f6: 2a:49:af:5f:86:1b:4e:a0:c9:5f:63:10:24:7c:c4: 28:b3:9e:43:4d:4c:e8:7d:b1:db:30:dd:f2:51:8f: e1:e5:b4:51:10:bc:5f:40:39:d9:73:d5:8c:28:11: bc:37:f0:50:21:10:70:b4:5e:44:a3:1a:b1:ca:c6: c9:ac:76:a5:0a:af:66:01:74:6f:79:db:19:d3:53: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:17:BA:E5:8A:51:41:CC:5F:4B:DA:90:02:B6:34:96:1D:D0:38:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl X509v3 Authority Key Identifier: keyid:02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:30:5f:66:7d:62:9b:bb:42:56:09:8d:a5:12:ee:1c:dd:fd: 82:a8:e9:12:32:07:79:87:24:b9:83:b7:d8:7e:b0:e3:b8:b3: 06:2b:0b:7b:c2:2d:07:f3:4b:63:4d:2f:d6:de:b1:e4:df:a2: cf:b9:f4:62:99:b2:a0:73:4f:27:00:74:ae:fc:21:83:ab:3f: 61:cb:ba:4b:93:17:68:68:f8:2c:be:85:a1:6a:15:01:99:27: 6c:74:e0:53:bb:9a:fa:18:be:24:28:4c:90:45:98:79:7e:83: 13:ca:2d:10:c2:3b:dd:89:42:15:e8:09:e2:ac:62:26:68:ff: 0a:4e:bc:3d:88:bf:cf:03:95:7b:e8:77:0f:2d:8d:ab:0d:39: 20:22:19:e3:15:77:ac:c5:5c:d9:67:0c:0c:b1:16:b7:43:46: 1d:a1:37:16:2f:e5:73:73:46:5b:fb:f0:89:94:4e:ee:a1:6e: 01:6b:44:25:cd:b0:9e:46:8f:8b:23:36:de:e2:3b:19:aa:aa: 65:82:a6:89:d6:e3:0b:19:21:54:e3:30:92:f5:ae:0f:98:8e: 94:60:52:87:df:c4:7f:51:c1:4d:2b:9c:7a:8d:58:c2:f2:ba: dc:71:4e:fd:a3:83:86:7d:e6:6f:71:78:0f:8d:12:eb:91:1e: 48:14:6f:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtTeXQQAD+afM8owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhZWE3ZTItZTM4MC00NTU5LTlmZjMtNGZjNzEzOGM0 MzVlMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyNzE4MDAwMFowLzEtMCsGA1UEAxMk OWQ2YjcyNjMtZTQ3MC00MWI3LWEwY2ItNDUwNTlmOWU0ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLITZsjpZ838boJcod2VwOthCXul7B56x6p5 UKnVjYruHFxJHBE3DB5veUxQJTWfMbPybqEhW7t8BxZvcmhYhSPiwQDZQm9TGAZB 2XBUtOtHT3D9DvuWQiuxdm1/D+6cyKz4yFcNertaKLTxHFbWnAqYTAEKdg8jwdv7 0otlOr5Jkv9N9PKwF2lCwG21iNRhYm/wOtFdbyS2ZHu3Cd6zV8UBX7UBABizBIZG ltp9TfjNAfYqSa9fhhtOoMlfYxAkfMQos55DTUzofbHbMN3yUY/h5bRRELxfQDnZ c9WMKBG8N/BQIRBwtF5EoxqxysbJrHalCq9mAXRvedsZ01P4VQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOkXuuWKUUHMX0vakAK2NJYd0Dg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jN2Fl YTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4YzQzNWUvYzdhZWE3ZTItZTM4MC00 NTU5LTlmZjMtNGZjNzEzOGM0MzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzdhZWE3ZTItZTM4MC00NTU5LTlm ZjMtNGZjNzEzOGM0MzVlL2M3YWVhN2UyLWUzODAtNDU1OS05ZmYzLTRmYzcxMzhj NDM1ZS5jcmwwHwYDVR0jBBgwFoAUAueJuYYj4tMp8jV4mdgRxdPaCpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jN2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3 MTM4YzQzNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMMF9mfWKbu0JWCY2lEu4c 3f2CqOkSMgd5hyS5g7fYfrDjuLMGKwt7wi0H80tjTS/W3rHk36LPufRimbKgc08n AHSu/CGDqz9hy7pLkxdoaPgsvoWhahUBmSdsdOBTu5r6GL4kKEyQRZh5foMTyi0Q wjvdiUIV6AnirGImaP8KTrw9iL/PA5V76HcPLY2rDTkgIhnjFXesxVzZZwwMsRa3 Q0YdoTcWL+Vzc0Zb+/CJlE7uoW4Ba0QlzbCeRo+LIzbe4jsZqqplgqaJ1uMLGSFU 4zCS9a4PmI6UYFKH38R/UcFNK5x6jVjC8rrccU79o4OGfeZvcXgPjRLrkR5IFG+D -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:28 2026 by rpki-client