$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft File: e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft (raw, json) Hash identifier: fcmMdYCdFDpFMA3HOtIs6h4f3NyCbpNDHfIHTWpZjsM= Subject key identifier: C2:70:11:9D:DD:54:86:09:48:2B:73:6B:E0:B0:52:B7:1D:B6:7C:5B Authority key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Certificate issuer: /CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Certificate serial: 010D0C9F4328584D4C30311F2FA754B908D95C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft Manifest number: 010D0C9F4328584953F44ECEC333E02BE3C8F703 Signing time: Thu 26 Mar 2026 15:00:03 +0000 Manifest this update: Thu 26 Mar 2026 15:00:03 +0000 Manifest next update: Sun 29 Mar 2026 15:00:00 +0000 Files and hashes: 1: 37f5eb07-a40d-3482-901c-9f9b4beba4f9.roa (hash: eKTQ/DxZRiHp6QAarMsn+6JywYH5ZOqdHIb/fixSEuE=) 2: 57885098-9972-374b-a52b-32c8dd1d5114.roa (hash: CTDC7pGuXx5s2yBXs7DteBfnBtYW8RI3Cu3Ua9hmSxA=) 3: 9e9160d4-5351-385b-b9fb-c87cb1f84359.roa (hash: 8Vil/OIaC8H4mNUrsZLtQB2um5VYHP0VMB7yIIJ0PfE=) 4: dd51c628-a0be-34a1-866d-ad0210fafe09.roa (hash: RFjqH7E18yKVV8CTAGRKQatgZd/KKfb0frqSuIHBpZA=) 5: e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl (hash: cJlTJNjUn15hVcSwlo4hDpvwq/i/rhptd/cxQAy5oyg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:30:31:1f:2f:a7:54:b9:08:d9:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Validity Not Before: Mar 26 15:00:03 2026 GMT Not After : Mar 29 15:00:00 2026 GMT Subject: CN=a016c6df-5814-4a25-a9ef-f64bcf1665be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:8d:be:65:0b:77:79:b2:ff:ae:a4:44:9b: 4c:1e:80:b8:80:2c:a4:41:53:84:26:77:e6:45:3f: db:54:a7:11:51:1a:b5:1d:09:bf:00:3e:e4:f1:d4: 7a:3f:7a:f8:4c:86:2e:9d:f0:17:8f:6a:24:79:ad: 50:78:0e:63:1e:9b:3f:fa:87:61:91:52:00:eb:21: 7d:34:ea:ef:99:ba:eb:37:8e:23:a1:2f:ba:b0:65: 5f:1a:2e:1b:49:65:ff:59:1a:66:98:23:fa:b0:48: 99:4d:0b:2a:74:50:94:97:1b:6c:b4:35:c8:fc:cb: 45:c0:d5:59:95:08:bc:4d:fc:82:ee:bd:a8:4f:0b: 19:ef:75:c0:cc:48:72:6f:2d:2e:a4:a3:0e:57:5f: b5:64:05:a9:20:d6:5f:09:dc:3d:67:d6:65:53:fb: f6:30:49:3d:d8:17:06:30:8b:84:00:f4:05:88:fc: f6:30:4f:d6:c3:0c:06:e8:8d:f5:c7:5c:b4:e0:c8: 72:f3:dd:b7:59:bf:11:a9:e9:87:a1:d0:01:c4:ff: 26:7d:5c:8d:e1:ad:15:50:0a:fa:f6:14:14:ee:29: c5:ee:32:00:63:28:14:b0:c3:b4:b6:f2:f3:d5:94: 53:51:2b:1e:87:df:6e:15:b8:cd:1d:98:7d:ee:14: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:70:11:9D:DD:54:86:09:48:2B:73:6B:E0:B0:52:B7:1D:B6:7C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl X509v3 Authority Key Identifier: keyid:83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bd:06:d5:cc:96:b6:69:1a:41:78:59:94:57:12:a2:78:fa: 30:9f:54:d7:c3:ff:f7:e6:40:e4:cb:91:23:bf:f7:9c:70:e8: 59:3f:cd:b8:57:33:04:ae:18:c2:79:c6:94:37:ee:ed:ab:81: 26:35:47:81:23:b5:1d:2f:8e:54:67:d3:fa:44:a8:1c:5f:ee: 4a:37:86:9f:1c:5d:9b:98:ae:ca:9f:ff:27:f3:06:f6:35:6c: 82:1f:bb:48:d9:6b:8c:17:fa:20:f8:6d:f2:b1:84:4b:49:2c: b4:aa:17:7a:e5:13:fd:b5:65:c9:22:f0:dd:07:70:2c:d3:c1: 57:7d:1b:a7:34:ff:6e:c2:18:02:45:df:27:7a:00:ac:f4:9d: ee:df:04:74:76:40:53:be:82:82:3d:d1:55:66:37:c1:56:03: cc:79:da:b3:2c:3e:01:38:c7:99:02:20:3b:9e:a2:af:c0:c2: 82:ec:5b:c5:f6:fa:d4:83:d9:8e:a7:b1:1f:b5:b3:f7:7d:56: d4:5d:ec:af:ff:48:c2:ae:e5:54:df:b9:a8:a2:fa:eb:ad:cf: f9:c8:b3:33:88:9d:db:2a:4f:e3:dd:8d:a8:87:24:4e:d2:58: c3:fa:05:e6:75:42:ac:a6:ff:b1:72:1d:14:90:09:7e:17:94: eb:9f:83:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MMDEfL6dUuQjZXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0YzAzN2QtZjA2ZC00YzAxLTlhZjUtZWYwYjJhZDNl ZGU4MB4XDTI2MDMyNjE1MDAwM1oXDTI2MDMyOTE1MDAwMFowLzEtMCsGA1UEAxMk YTAxNmM2ZGYtNTgxNC00YTI1LWE5ZWYtZjY0YmNmMTY2NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TyNvmULd3my/66kRJtMHoC4gCykQVOEJnfm RT/bVKcRURq1HQm/AD7k8dR6P3r4TIYunfAXj2okea1QeA5jHps/+odhkVIA6yF9 NOrvmbrrN44joS+6sGVfGi4bSWX/WRpmmCP6sEiZTQsqdFCUlxtstDXI/MtFwNVZ lQi8TfyC7r2oTwsZ73XAzEhyby0upKMOV1+1ZAWpINZfCdw9Z9ZlU/v2MEk92BcG MIuEAPQFiPz2ME/WwwwG6I31x1y04Mhy8923Wb8RqemHodABxP8mfVyN4a0VUAr6 9hQU7inF7jIAYygUsMO0tvLz1ZRTUSseh99uFbjNHZh97hSsHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJwEZ3dVIYJSCtza+CwUrcdtnxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRj MDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFkM2VkZTgvZTA0YzAzN2QtZjA2ZC00 YzAxLTlhZjUtZWYwYjJhZDNlZGU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTA0YzAzN2QtZjA2ZC00YzAxLTlh ZjUtZWYwYjJhZDNlZGU4L2UwNGMwMzdkLWYwNmQtNGMwMS05YWY1LWVmMGIyYWQz ZWRlOC5jcmwwHwYDVR0jBBgwFoAUg1v50PJ9ZS2Whi/oVqq6HZ/FYIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBi MmFkM2VkZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7vQbVzJa2aRpBeFmUVxKi ePown1TXw//35kDky5Ejv/eccOhZP824VzMErhjCecaUN+7tq4EmNUeBI7UdL45U Z9P6RKgcX+5KN4afHF2bmK7Kn/8n8wb2NWyCH7tI2WuMF/og+G3ysYRLSSy0qhd6 5RP9tWXJIvDdB3As08FXfRunNP9uwhgCRd8negCs9J3u3wR0dkBTvoKCPdFVZjfB VgPMedqzLD4BOMeZAiA7nqKvwMKC7FvF9vrUg9mOp7EftbP3fVbUXeyv/0jCruVU 37moovrrrc/5yLMziJ3bKk/j3Y2ohyRO0ljD+gXmdUKspv+xch0UkAl+F5Trn4MM -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:10 2026 by rpki-client