$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.mft File: 24e52767-6012-48fa-94d1-fdf7be879715.mft (raw, json) Hash identifier: +uJfZLFUpyrcVyPuLPAAy+JAF25hDO1/bfY86p4s6DY= Subject key identifier: B3:00:7F:EA:14:7A:1D:9A:D9:13:F8:18:42:81:6E:33:C5:43:D7:9B Authority key identifier: 4A:03:AF:BD:E4:43:FE:8C:DF:70:A5:05:98:F0:4D:82:25:35:DC:36 Certificate issuer: /CN=24e52767-6012-48fa-94d1-fdf7be879715 Certificate serial: 010D0C9F4328584D49FA734A6F3FBACCF2F59B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.mft Manifest number: 010D0C9F4328584891175AB1A307295ACAAA287C Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 24e52767-6012-48fa-94d1-fdf7be879715.crl (hash: ERRp1ggJkFTMoOmMpkc4ahX1Pm2wK0oMnIeeEQlRO4k=) 2: 7a3cf317-375a-391d-9ea6-5b0c3f515ddd.roa (hash: RcYkpWuAbVHPUUWCNZGIUB8dVW7ptgAecBsKipkqz+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:73:4a:6f:3f:ba:cc:f2:f5:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e52767-6012-48fa-94d1-fdf7be879715 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=969fcc74-5e57-450f-9c08-968e1e4c68e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:e3:92:fd:2f:e2:65:fe:c9:be:81:43:70: 42:f0:fb:6a:d9:10:35:8f:e6:0d:00:16:f0:46:ba: 5b:9b:0b:87:e7:20:3b:23:f0:f5:a9:8e:da:38:a7: 37:b3:15:a3:a1:7c:dd:ce:b5:6a:fe:1e:4b:c9:51: 9f:f1:42:18:fb:b5:ac:48:6c:fb:7e:b2:0e:e0:5f: e2:a2:51:0c:c1:5c:69:c3:a8:6f:dc:a6:ea:2c:d6: 14:6b:a1:1b:fc:d7:80:eb:9e:a7:ff:07:45:d3:6e: fa:12:6a:fa:eb:73:07:8a:1a:2c:41:aa:5d:fe:d0: 89:e7:2c:e8:13:0d:7e:03:89:eb:8a:e8:a7:df:ef: 78:09:47:c5:34:3f:e7:b2:b2:32:66:82:1b:4c:ff: 5c:3d:0a:38:8b:24:d3:94:35:af:dc:79:23:b0:cf: c1:96:ac:e4:65:96:a8:fa:9b:52:89:00:13:2c:db: 60:61:5b:01:18:96:92:ad:19:82:6b:79:b9:f0:1e: 91:1a:b7:f3:d2:d0:3a:f6:cc:ef:24:8f:f2:8c:16: a0:f6:ad:fc:65:b4:62:c3:06:cf:6a:2e:3b:2e:be: ed:e1:f5:55:78:99:db:de:7a:01:c6:8e:66:35:a7: 63:60:c1:43:99:c2:d5:65:9b:80:dd:e4:f7:61:31: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:7F:EA:14:7A:1D:9A:D9:13:F8:18:42:81:6E:33:C5:43:D7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.crl X509v3 Authority Key Identifier: keyid:4A:03:AF:BD:E4:43:FE:8C:DF:70:A5:05:98:F0:4D:82:25:35:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c3:61:29:db:e6:c9:fe:30:30:7a:91:d6:37:1a:44:4f:d0: 2f:91:00:3f:41:a8:65:3f:2c:2f:ca:56:a8:7c:24:0b:d5:42: f7:d5:a0:7d:b4:fb:8e:3e:c9:c9:3c:85:14:73:20:dd:e8:12: ac:6b:3f:78:27:a6:6d:de:39:66:51:4f:cc:df:b2:cb:1f:0d: 37:f6:5c:d9:de:97:d3:f6:07:9e:70:2e:92:f7:d0:44:93:24: 4e:fb:13:86:b1:78:05:97:84:ee:48:fc:7a:d6:5c:5c:28:c1: 48:bd:a5:92:7f:66:27:08:d8:26:be:20:b3:93:51:74:14:1a: 32:07:ee:c3:3b:f4:fe:91:9d:b2:fb:e1:49:6a:5e:20:87:28: 53:96:6b:01:63:a6:3a:92:54:ca:23:4a:7b:18:33:8f:3a:a4: 17:6f:7d:79:a0:2f:dc:f5:e4:a2:57:f9:f0:01:b9:44:85:4f: 6f:d7:0b:87:63:6a:e8:bb:cc:71:7f:cd:bc:dd:28:3c:47:ac: 83:69:28:b7:72:87:0d:c8:82:32:cd:27:d0:d8:fc:a0:83:eb: f1:cc:93:7c:f4:e2:bf:82:e0:69:ef:07:af:2f:91:47:00:a5: e4:79:09:c5:f5:e1:8d:91:6c:a2:cd:14:f4:e0:b0:ef:8f:df: f4:35:b0:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nNKbz+6zPL1mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRlNTI3NjctNjAxMi00OGZhLTk0ZDEtZmRmN2JlODc5 NzE1MB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk OTY5ZmNjNzQtNWU1Ny00NTBmLTljMDgtOTY4ZTFlNGM2OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Hjkv0v4mX+yb6BQ3BC8Ptq2RA1j+YNABbw RrpbmwuH5yA7I/D1qY7aOKc3sxWjoXzdzrVq/h5LyVGf8UIY+7WsSGz7frIO4F/i olEMwVxpw6hv3KbqLNYUa6Eb/NeA656n/wdF0276Emr663MHihosQapd/tCJ5yzo Ew1+A4nriuin3+94CUfFND/nsrIyZoIbTP9cPQo4iyTTlDWv3HkjsM/BlqzkZZao +ptSiQATLNtgYVsBGJaSrRmCa3m58B6RGrfz0tA69szvJI/yjBag9q38ZbRiwwbP ai47Lr7t4fVVeJnb3noBxo5mNadjYMFDmcLVZZuA3eT3YTHhjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMAf+oUeh2a2RP4GEKBbjPFQ9ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNGU1 Mjc2Ny02MDEyLTQ4ZmEtOTRkMS1mZGY3YmU4Nzk3MTUvMjRlNTI3NjctNjAxMi00 OGZhLTk0ZDEtZmRmN2JlODc5NzE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjRlNTI3NjctNjAxMi00OGZhLTk0 ZDEtZmRmN2JlODc5NzE1LzI0ZTUyNzY3LTYwMTItNDhmYS05NGQxLWZkZjdiZTg3 OTcxNS5jcmwwHwYDVR0jBBgwFoAUSgOvveRD/ozfcKUFmPBNgiU13DYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNGU1Mjc2Ny02MDEyLTQ4ZmEtOTRkMS1mZGY3 YmU4Nzk3MTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxw2Ep2+bJ/jAwepHWNxpE T9AvkQA/QahlPywvylaofCQL1UL31aB9tPuOPsnJPIUUcyDd6BKsaz94J6Zt3jlm UU/M37LLHw039lzZ3pfT9geecC6S99BEkyRO+xOGsXgFl4TuSPx61lxcKMFIvaWS f2YnCNgmviCzk1F0FBoyB+7DO/T+kZ2y++FJal4ghyhTlmsBY6Y6klTKI0p7GDOP OqQXb315oC/c9eSiV/nwAblEhU9v1wuHY2rou8xxf8283Sg8R6yDaSi3cocNyIIy zSfQ2Pygg+vxzJN89OK/guBp7wevL5FHAKXkeQnF9eGNkWyizRT04LDvj9/0NbAJ -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:29 2026 by rpki-client