$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: Hu/cwC7lCCgiByhp+o1Y9+0+qCyzw2nl74izL3yFR+M= Subject key identifier: 14:84:57:AA:BB:07:25:67:C0:1A:45:EB:D3:A5:D4:33:59:73:F4:AD Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584D4EFAEED2FF531974125F42C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1F32 Signing time: Fri 27 Mar 2026 15:00:09 +0000 Manifest this update: Fri 27 Mar 2026 15:00:09 +0000 Manifest next update: Sun 29 Mar 2026 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: FPc21QiJJfEFN8KmibG/KMo06IBtWPLuli9kJcnoh1Q=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: +Tk6lpV8VKdGmzDN6eC2hHzGVhSaz4jodDW0bPnzXDw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:fa:ee:d2:ff:53:19:74:12:5f:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Mar 27 15:00:09 2026 GMT Not After : Mar 29 15:00:00 2026 GMT Subject: CN=c90a803b-5ebb-4dc8-8f9e-256480cd9a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:70:f1:a0:f4:13:ad:72:30:5b:48:f7:fc: 8e:ed:7a:5c:86:7e:b5:e2:02:99:c4:55:4f:3d:80: 68:9b:5c:24:be:68:85:07:69:e9:c3:ed:3c:ab:73: 97:27:45:cd:5a:13:e0:a8:71:dc:85:42:69:3d:fd: 01:5f:75:be:ff:43:28:de:e5:4d:52:c5:aa:a9:27: 64:ea:47:97:f4:50:7b:93:57:e3:9a:17:07:78:97: 90:ee:a1:28:cf:93:91:f3:83:63:a0:d2:c2:f2:63: 56:12:52:30:4e:bc:9e:7b:2c:1b:ea:2e:d8:b8:73: 1f:74:b0:4e:02:2e:45:7c:dc:09:2c:16:76:21:30: f7:b3:ed:db:d2:48:c5:12:5f:3d:22:b2:79:c2:40: 46:5e:31:84:12:6b:83:4d:21:45:2a:1e:0b:33:ca: d9:bb:48:47:df:c3:b0:aa:97:e1:7e:45:51:0f:60: f2:1e:00:58:eb:ee:5a:d1:90:41:4e:ca:c5:e6:ce: 29:9e:c4:b2:53:12:60:ac:76:6e:00:64:b9:5b:27: 01:1f:6d:8b:d7:c7:5a:66:ba:06:66:90:97:ed:77: 71:86:55:77:69:60:8e:2a:4b:3f:41:dd:68:1b:be: 42:07:ba:a5:c6:54:ca:ff:50:0d:f3:5c:65:d3:37: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:84:57:AA:BB:07:25:67:C0:1A:45:EB:D3:A5:D4:33:59:73:F4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:78:ed:91:33:d5:23:52:8c:17:fe:ad:d6:7a:2d:40:b3:11: 83:75:ca:9f:77:30:bc:27:3f:7f:e8:d9:b0:2d:4e:a2:79:11: 4a:b4:af:c4:4b:87:81:b5:74:21:b5:18:a4:78:83:88:40:de: 7d:08:9d:cd:df:47:b0:9f:62:6f:c6:a9:17:14:5d:66:fa:37: 5c:4a:64:25:b6:94:8f:d9:0c:3d:9f:27:54:58:6a:54:ae:47: f9:f3:11:bb:cf:44:a4:2e:4f:cc:a3:ae:22:50:e5:f1:8f:51: 1e:34:aa:4e:50:c8:2e:82:f6:49:52:b4:bb:8b:f2:40:d6:58: da:43:af:99:84:60:24:6c:59:90:b0:02:04:9f:1d:e6:84:38: 80:95:12:55:12:3b:7c:7d:84:85:fa:41:71:d4:65:59:ff:c2: 81:74:22:88:33:ad:fb:ff:7d:03:3a:f4:61:56:ec:4c:b0:e6: af:ee:07:fe:ad:f9:4b:c7:3b:5b:b8:69:7d:da:02:4d:bf:45: 01:cc:9e:84:ad:8c:fd:e7:b7:f9:63:b7:e4:54:6c:a9:fa:5b: 44:9e:42:12:82:90:fc:fd:e3:be:2b:ba:5e:27:22:af:6f:06: 58:f3:3a:10:39:55:39:d8:ea:71:bc:7e:34:b9:2d:c0:f1:72: 79:fe:76:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1O+u7S/1MZdBJfQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI2MDMyNzE1MDAwOVoXDTI2MDMyOTE1MDAwMFowLzEtMCsGA1UEAxMk YzkwYTgwM2ItNWViYi00ZGM4LThmOWUtMjU2NDgwY2Q5YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC5w8aD0E61yMFtI9/yO7Xpchn614gKZxFVP PYBom1wkvmiFB2npw+08q3OXJ0XNWhPgqHHchUJpPf0BX3W+/0Mo3uVNUsWqqSdk 6keX9FB7k1fjmhcHeJeQ7qEoz5OR84NjoNLC8mNWElIwTryeeywb6i7YuHMfdLBO Ai5FfNwJLBZ2ITD3s+3b0kjFEl89IrJ5wkBGXjGEEmuDTSFFKh4LM8rZu0hH38Ow qpfhfkVRD2DyHgBY6+5a0ZBBTsrF5s4pnsSyUxJgrHZuAGS5WycBH22L18daZroG ZpCX7XdxhlV3aWCOKks/Qd1oG75CB7qlxlTK/1AN81xl0zepMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSEV6q7ByVnwBpF69Ol1DNZc/StMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeeO2RM9UjUowX/q3Wei1A sxGDdcqfdzC8Jz9/6NmwLU6ieRFKtK/ES4eBtXQhtRikeIOIQN59CJ3N30ewn2Jv xqkXFF1m+jdcSmQltpSP2Qw9nydUWGpUrkf58xG7z0SkLk/Mo64iUOXxj1EeNKpO UMgugvZJUrS7i/JA1ljaQ6+ZhGAkbFmQsAIEnx3mhDiAlRJVEjt8fYSF+kFx1GVZ /8KBdCKIM637/30DOvRhVuxMsOav7gf+rflLxztbuGl92gJNv0UBzJ6ErYz957f5 Y7fkVGyp+ltEnkISgpD8/eO+K7peJyKvbwZY8zoQOVU52OpxvH40uS3A8XJ5/nbY -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:32 2026 by rpki-client