$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.mft (raw, json) Hash identifier: BlgG5r1yfcbWu3i0v2GgUyKbi7eIN3obhpTo42ZmNEE= Subject key identifier: 49:33:82:41:34:38:53:7E:FD:C2:72:A5:29:F1:BE:84:97:79:9F:67 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584D4947BA238FA63C8A48C585E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft Manifest number: 010D0C9F4328584812E7A32F35C9A24960EDDE89 Signing time: Wed 25 Mar 2026 14:00:03 +0000 Manifest this update: Wed 25 Mar 2026 14:00:03 +0000 Manifest next update: Sat 28 Mar 2026 14:00:00 +0000 Files and hashes: 1: 2a85a41a-8114-4e04-abdb-a3a032b37a04.crl (hash: uWWDG33zSttM/5f4MVf/1cPXzXaxncVaV0VHBGsBYvo=) 2: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (hash: WkdV3IVJpQGTd5mYyBm8Z4GIuRnWdQ1SCjGoIOyp+uI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:47:ba:23:8f:a6:3c:8a:48:c5:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Mar 25 14:00:03 2026 GMT Not After : Mar 28 14:00:00 2026 GMT Subject: CN=1aae5266-d853-45f3-8f1a-068a00663975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:28:b4:3b:38:05:31:47:7c:74:d4:96:f9:26: 0c:21:02:a2:72:14:a2:d2:75:0e:18:6e:52:be:37: 15:0e:31:5b:41:5f:dc:43:95:40:c9:11:60:13:ef: 3a:25:df:7e:c9:16:24:aa:53:16:f6:8c:bc:0f:55: c7:d7:30:4f:3a:24:da:f8:8e:1d:0d:68:17:82:fe: af:ef:62:eb:c0:43:56:6b:99:f6:39:bd:f6:46:b8: 2c:52:7d:1b:27:44:4a:11:83:7a:d2:94:e4:c6:07: 84:38:b4:48:1b:2d:8b:84:30:4d:53:48:d5:2c:55: 1a:b3:a7:4b:e3:8c:20:e5:57:b0:7c:e1:ed:00:ee: 4d:f0:65:9b:59:8f:a9:86:33:eb:f3:c7:1f:9d:3e: d5:6c:c5:ac:1d:e2:81:48:00:b3:34:c9:2c:f8:03: 2c:7a:39:58:94:35:72:42:0d:88:66:c7:2f:59:76: ec:27:2b:6c:97:2d:7e:a0:32:09:3b:68:29:b4:ae: 7d:8e:0f:ea:ae:2e:ec:6a:39:23:2a:cc:2d:07:07: 3d:7d:c6:72:40:8f:73:b8:a7:73:37:6a:22:93:72: e8:bc:9a:36:44:c4:e9:b9:dc:29:51:fd:6a:8f:a5: 9f:44:53:87:7b:92:5c:48:f1:c8:30:9e:e7:3c:65: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:82:41:34:38:53:7E:FD:C2:72:A5:29:F1:BE:84:97:79:9F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9e:d1:57:8b:e7:fc:6d:29:5a:20:af:bf:bb:73:84:d2:5a: 13:b4:bc:4d:4f:22:ee:f4:c3:4e:96:fe:f3:a1:5b:96:78:d4: 82:ce:38:34:ea:f3:ee:25:53:f9:55:cb:b2:29:85:8e:07:94: 55:8f:29:eb:30:c3:66:fc:30:06:7d:a2:15:7d:3b:09:61:84: a1:cd:10:0f:b1:91:4c:ef:3b:e3:5d:be:39:ab:ca:b9:a1:1f: 95:eb:68:1f:4f:b2:e0:d1:f4:3e:e2:f7:25:d4:fc:77:fd:cb: d0:eb:f7:9e:de:33:a9:d2:58:c1:e9:69:5b:45:58:49:e4:dd: a3:c6:fc:1f:8e:a7:6a:1f:1d:91:89:b4:b7:d9:a5:ff:a1:9b: b4:d6:a5:67:20:63:32:98:d7:31:aa:9b:56:a8:95:f3:fd:29: ea:d5:b4:a2:5b:31:bb:53:f4:fb:4f:2a:06:96:7d:6a:26:6b: 5b:55:d7:e6:bc:14:eb:df:7c:f4:8a:29:55:ca:66:d6:8e:47: c9:fd:0e:12:b6:33:62:81:18:2d:56:94:14:be:82:6c:4f:94: 2c:f7:0f:e9:38:6f:36:4c:2c:53:1e:8f:8e:92:da:57:2a:07: 6f:87:c2:e7:43:eb:ff:16:c7:fd:5a:50:75:85:92:37:6e:63: 63:73:68:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JR7ojj6Y8ikjFheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI2MDMyNTE0MDAwM1oXDTI2MDMyODE0MDAwMFowLzEtMCsGA1UEAxMk MWFhZTUyNjYtZDg1My00NWYzLThmMWEtMDY4YTAwNjYzOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ci0OzgFMUd8dNSW+SYMIQKichSi0nUOGG5S vjcVDjFbQV/cQ5VAyRFgE+86Jd9+yRYkqlMW9oy8D1XH1zBPOiTa+I4dDWgXgv6v 72LrwENWa5n2Ob32RrgsUn0bJ0RKEYN60pTkxgeEOLRIGy2LhDBNU0jVLFUas6dL 44wg5VewfOHtAO5N8GWbWY+phjPr88cfnT7VbMWsHeKBSACzNMks+AMsejlYlDVy Qg2IZscvWXbsJytsly1+oDIJO2gptK59jg/qri7sajkjKswtBwc9fcZyQI9zuKdz N2oik3LovJo2RMTpudwpUf1qj6WfRFOHe5JcSPHIMJ7nPGWHYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEkzgkE0OFN+/cJypSnxvoSXeZ9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMmE4NWE0MWEtODExNC00 ZTA0LWFiZGItYTNhMDMyYjM3YTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcntFXi+f8bSlaIK+/u3OE 0loTtLxNTyLu9MNOlv7zoVuWeNSCzjg06vPuJVP5VcuyKYWOB5RVjynrMMNm/DAG faIVfTsJYYShzRAPsZFM7zvjXb45q8q5oR+V62gfT7Lg0fQ+4vcl1Px3/cvQ6/ee 3jOp0ljB6WlbRVhJ5N2jxvwfjqdqHx2RibS32aX/oZu01qVnIGMymNcxqptWqJXz /Snq1bSiWzG7U/T7TyoGln1qJmtbVdfmvBTr33z0iilVymbWjkfJ/Q4StjNigRgt VpQUvoJsT5Qs9w/pOG82TCxTHo+OktpXKgdvh8LnQ+v/Fsf9WlB1hZI3bmNjc2iP -----END CERTIFICATE-----Generated at Thu Mar 26 14:08:42 2026 by rpki-client