$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft File: fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft (raw, json) Hash identifier: qaL3uzqBQgqAPITMVZVJCJtzMxAMjG1AQOzdVVmZpiw= Subject key identifier: 73:38:B5:E0:6B:12:0C:58:29:5B:FC:67:87:DD:60:A9:8F:BC:E5:22 Authority key identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 Certificate issuer: /CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25 Certificate serial: 010D0C9F4328584D4A53B978D263E1682969E4D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft Manifest number: 010D0C9F4328584A4D7E1BD4D3CEA83F23D59ED9 Signing time: Wed 25 Mar 2026 23:00:03 +0000 Manifest this update: Wed 25 Mar 2026 23:00:03 +0000 Manifest next update: Sat 28 Mar 2026 23:00:00 +0000 Files and hashes: 1: 33843f95-5170-3761-9f6b-ef4bc13b712c.roa (hash: v9XOQuUDTdr1Xd5Zrn8mKDeFdIQdBlM7t1+xhCn+Hk8=) 2: fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl (hash: glq9KZYq4eIHK0fxum5PRSiXJ/bAYB7QgyFV6DfMQjc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:b9:78:d2:63:e1:68:29:69:e4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25 Validity Not Before: Mar 25 23:00:03 2026 GMT Not After : Mar 28 23:00:00 2026 GMT Subject: CN=ddb54d83-0974-48fa-a00b-89355ea76cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:ee:63:1a:b4:b4:3f:69:43:00:39:8d:38: 46:6b:99:67:1d:8c:fa:64:34:54:8a:2a:fa:c0:eb: aa:c6:14:7f:5b:7d:4c:b0:7e:7b:6f:53:31:83:f4: a4:e5:d3:c5:69:b2:79:a1:55:c5:67:2d:da:a5:01: 59:35:c1:b4:40:97:4c:d9:95:96:19:b0:c8:da:dc: 58:49:3c:2e:da:44:6b:f2:fa:34:8d:ea:a1:c9:5c: 79:4a:0a:d5:fd:f3:ba:cc:f9:ec:3f:ae:66:42:e3: 1b:72:98:61:3e:66:17:43:0b:88:5c:a9:d2:d3:17: 90:d3:26:a7:95:82:4c:f3:64:c6:9c:bd:a9:52:db: 20:43:f9:62:20:06:33:bb:5e:35:2d:8f:43:43:a0: 83:88:e0:0f:55:27:e8:66:58:50:ea:28:84:49:a8: a2:f3:f4:fa:99:bc:2a:fc:18:36:94:04:7f:22:6d: e1:c0:7d:37:21:94:ed:05:be:df:57:bc:9b:9e:0a: f6:42:04:25:9c:ea:4d:e5:76:81:8b:dd:e5:c3:29: a8:2c:52:ea:a8:8b:d1:fa:16:90:a1:65:7f:fd:1b: 89:a8:27:67:20:90:bb:8a:9f:a6:b8:31:f8:aa:e8: 70:bc:e5:33:b3:4b:6d:35:00:8c:52:d4:b0:1f:69: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:38:B5:E0:6B:12:0C:58:29:5B:FC:67:87:DD:60:A9:8F:BC:E5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl X509v3 Authority Key Identifier: keyid:F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:94:2a:11:02:5d:02:5c:d5:08:34:1a:c3:c9:7f:fd:37:33: 9c:e5:d1:45:92:f1:de:82:27:12:15:8c:96:b5:d9:5a:58:bb: 76:b0:0c:08:0f:80:5f:f2:04:6f:f2:88:68:2c:49:5a:a6:30: 52:1f:b2:0e:14:8d:5e:d0:92:d7:ce:27:22:cf:78:d3:e6:39: a2:1c:b1:8a:2e:eb:38:06:b2:80:18:c7:5e:48:14:a1:a1:e4: f0:e4:b6:3a:f2:cf:e7:c1:90:82:f0:98:f7:4d:6c:7c:db:72: 38:65:32:7b:19:ad:43:f1:a0:9e:1e:8c:f1:ae:7d:ad:ac:70: ae:49:8b:01:10:5d:5a:c6:7b:bd:80:a3:8e:08:25:3e:5e:1d: 96:2b:e7:0d:27:9e:f0:7f:6f:f6:96:94:55:ca:e5:91:b8:85: e6:67:97:c4:68:c5:72:9a:df:fe:9e:c6:70:18:0e:c8:af:c7: 82:1e:0e:73:d6:d3:57:b1:89:54:5f:05:24:58:97:82:26:70: c8:be:25:ca:08:68:6d:a8:64:71:2b:8f:df:9f:a0:e1:41:c5: 36:83:34:bd:85:a7:7e:6c:82:d0:4d:9a:b7:15:5f:cd:41:36: 9a:68:ef:ed:13:83:d6:b9:08:f1:5b:9d:94:4c:b7:ad:09:a0: ca:a4:ba:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KU7l40mPhaClp5NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFiMWE5NTgtZGVkOS00YTk0LTk3ZDktMGZmNDFhNjdh YjI1MB4XDTI2MDMyNTIzMDAwM1oXDTI2MDMyODIzMDAwMFowLzEtMCsGA1UEAxMk ZGRiNTRkODMtMDk3NC00OGZhLWEwMGItODkzNTVlYTc2Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT/uYxq0tD9pQwA5jThGa5lnHYz6ZDRUiir6 wOuqxhR/W31MsH57b1Mxg/Sk5dPFabJ5oVXFZy3apQFZNcG0QJdM2ZWWGbDI2txY STwu2kRr8vo0jeqhyVx5SgrV/fO6zPnsP65mQuMbcphhPmYXQwuIXKnS0xeQ0yan lYJM82TGnL2pUtsgQ/liIAYzu141LY9DQ6CDiOAPVSfoZlhQ6iiESaii8/T6mbwq /Bg2lAR/Im3hwH03IZTtBb7fV7ybngr2QgQlnOpN5XaBi93lwymoLFLqqIvR+haQ oWV//RuJqCdnIJC7ip+muDH4quhwvOUzs0ttNQCMUtSwH2k5ZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHM4teBrEgxYKVv8Z4fdYKmPvOUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mYWIx YTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0MWE2N2FiMjUvZmFiMWE5NTgtZGVkOS00 YTk0LTk3ZDktMGZmNDFhNjdhYjI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmFiMWE5NTgtZGVkOS00YTk0LTk3 ZDktMGZmNDFhNjdhYjI1L2ZhYjFhOTU4LWRlZDktNGE5NC05N2Q5LTBmZjQxYTY3 YWIyNS5jcmwwHwYDVR0jBBgwFoAU9Y1mGnGo8nADQVNtkMnDYV/6fJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mYWIxYTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0 MWE2N2FiMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKlCoRAl0CXNUINBrDyX/9 NzOc5dFFkvHegicSFYyWtdlaWLt2sAwID4Bf8gRv8ohoLElapjBSH7IOFI1e0JLX ziciz3jT5jmiHLGKLus4BrKAGMdeSBShoeTw5LY68s/nwZCC8Jj3TWx823I4ZTJ7 Ga1D8aCeHozxrn2trHCuSYsBEF1axnu9gKOOCCU+Xh2WK+cNJ57wf2/2lpRVyuWR uIXmZ5fEaMVymt/+nsZwGA7Ir8eCHg5z1tNXsYlUXwUkWJeCJnDIviXKCGhtqGRx K4/fn6DhQcU2gzS9had+bILQTZq3FV/NQTaaaO/tE4PWuQjxW52UTLetCaDKpLrn -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:21 2026 by rpki-client