$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: hPmb4IL2uFsmWN05PYPbCyw+fdirZ+l3N0xVsxil1hc= Subject key identifier: 55:E3:AA:EA:48:51:0C:B2:33:ED:6C:AA:12:D3:CD:10:1D:02:28:0A Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584D4C899524E18111908D5C5940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F9AB Signing time: Thu 26 Mar 2026 18:00:09 +0000 Manifest this update: Thu 26 Mar 2026 18:00:09 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: M26dw+3lwnNZ+DVFYSahdp/Ve37gidtWyyiItysvGYc=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: wg5Am+1eVK9nWXq7A9G558av0ekJ3XZxNJVWWK13oqU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:89:95:24:e1:81:11:90:8d:5c:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Mar 26 18:00:09 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=0468fe3b-dd57-4cf8-a602-7204fdbabeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:1d:17:2d:37:e7:bf:27:df:24:ab:95:f7: aa:b8:c9:66:97:0c:83:35:cf:d4:d5:a7:70:79:4c: 11:a2:ce:00:38:1d:a1:d6:c4:a0:4c:4b:ca:ae:94: b4:7c:04:7d:17:87:d1:9c:4a:d8:d6:67:4e:31:71: 22:9d:76:6b:4b:8e:eb:ad:c2:af:c8:50:4e:32:68: dd:47:b2:91:16:65:8a:4d:90:3d:c2:7e:aa:5e:6e: f9:0a:d9:64:6c:81:48:93:96:54:0a:2c:7b:f5:96: 84:c8:45:c1:66:13:0c:d3:89:39:a0:95:5c:74:ec: e8:37:bc:ba:3d:59:60:5e:60:f3:f2:92:22:53:12: 1c:83:1e:89:b3:0d:e1:cc:88:b2:4b:00:da:21:8d: 5d:21:3b:6e:74:ee:d7:10:74:bd:7f:3e:85:7e:ab: e5:2b:56:01:7a:7a:d1:da:cb:1e:9a:24:0d:ca:d2: b3:29:0b:24:8d:7e:23:7a:86:c9:5d:1c:1b:0f:8e: 34:79:e4:67:9b:ca:8e:f8:5e:1d:22:1b:be:89:9e: 4f:b5:43:b4:c7:7e:7e:8a:93:ad:cb:38:99:3e:5d: 0a:40:92:0d:51:96:71:2a:ee:d6:10:6e:05:e8:e5: e3:5b:dd:2a:af:d3:4c:eb:8d:05:f7:db:50:f4:0b: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:AA:EA:48:51:0C:B2:33:ED:6C:AA:12:D3:CD:10:1D:02:28:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d2:8e:fb:71:4f:56:57:e5:56:fc:44:83:d6:52:22:44:e8: dd:47:f7:9c:ae:ff:fd:9c:a4:4d:b4:71:d6:77:fb:0b:53:0a: 1c:ab:18:82:6d:bc:7f:c9:c5:fa:55:ef:20:f9:07:5a:54:c7: 4b:86:07:ed:0d:99:31:97:03:53:64:45:ec:54:6c:e5:73:e2: ba:a2:f7:b8:d6:3a:26:c5:ec:bc:35:48:24:99:2d:7e:60:e1: 6e:99:21:25:b4:4b:d2:d5:a6:5d:88:a6:77:c1:e3:a1:9b:2b: 2a:20:0f:0b:13:dc:db:9d:b3:40:43:11:1f:6d:d0:03:60:78: a7:97:03:fa:56:01:cc:69:62:09:5f:e6:ac:bb:9f:01:d5:71: f5:25:b7:ea:98:09:30:90:21:c9:15:7b:53:4f:c0:ae:4e:38: 09:69:ad:84:75:c9:2d:6e:9d:d1:3e:34:5a:b8:de:56:3e:c0: 7f:d3:91:56:4f:e1:c7:b4:98:89:d4:b7:98:04:9d:fb:c9:ca: 14:0c:b4:56:90:62:d3:ca:04:e7:9f:a7:c8:a9:45:22:bd:09: f7:4c:e5:db:e3:fc:e1:1e:90:8d:a6:aa:aa:93:72:8c:c6:72: cb:de:5c:e1:ab:0e:b3:c0:97:20:6d:c7:b2:77:c9:22:d8:97: ae:97:4a:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MiZUk4YERkI1cWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDMyNjE4MDAwOVoXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk MDQ2OGZlM2ItZGQ1Ny00Y2Y4LWE2MDItNzIwNGZkYmFiZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ8dFy03578n3ySrlfequMlmlwyDNc/U1adw eUwRos4AOB2h1sSgTEvKrpS0fAR9F4fRnErY1mdOMXEinXZrS47rrcKvyFBOMmjd R7KRFmWKTZA9wn6qXm75CtlkbIFIk5ZUCix79ZaEyEXBZhMM04k5oJVcdOzoN7y6 PVlgXmDz8pIiUxIcgx6Jsw3hzIiySwDaIY1dITtudO7XEHS9fz6FfqvlK1YBenrR 2ssemiQNytKzKQskjX4jeobJXRwbD440eeRnm8qO+F4dIhu+iZ5PtUO0x35+ipOt yziZPl0KQJINUZZxKu7WEG4F6OXjW90qr9NM640F99tQ9AuuZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFXjqupIUQyyM+1sqhLTzRAdAigKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAu0o77cU9WV+VW/ESD1lIi ROjdR/ecrv/9nKRNtHHWd/sLUwocqxiCbbx/ycX6Ve8g+QdaVMdLhgftDZkxlwNT ZEXsVGzlc+K6ove41jomxey8NUgkmS1+YOFumSEltEvS1aZdiKZ3weOhmysqIA8L E9zbnbNAQxEfbdADYHinlwP6VgHMaWIJX+asu58B1XH1JbfqmAkwkCHJFXtTT8Cu TjgJaa2Edcktbp3RPjRauN5WPsB/05FWT+HHtJiJ1LeYBJ37ycoUDLRWkGLTygTn n6fIqUUivQn3TOXb4/zhHpCNpqqqk3KMxnLL3lzhqw6zwJcgbceyd8ki2Jeul0pG -----END CERTIFICATE-----Generated at Fri Mar 27 09:36:24 2026 by rpki-client