$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft File: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft (raw, json) Hash identifier: 9MxhIaq25zyzJ6B/IuQbcOA7N7vRfmA21GjjfydR3Ek= Subject key identifier: 72:59:DA:A3:AE:34:7D:57:DC:DE:94:F9:C2:3F:D0:5D:FC:F3:82:06 Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F Certificate issuer: /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Certificate serial: 010D0C9F4328584D48EE6243E611C22ED1EE0D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft Manifest number: 010D0C9F4328584CCE1A458B83B939037D0FD62C Signing time: Wed 25 Mar 2026 11:00:04 +0000 Manifest this update: Wed 25 Mar 2026 11:00:04 +0000 Manifest next update: Sat 28 Mar 2026 11:00:00 +0000 Files and hashes: 1: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl (hash: qKICAAHzNDQ9Lje/fJpNTSTFV+U1CG9sP3di6Wl1Vp0=) 2: 57b08375-edfa-3ca6-816f-7c71735f8648.roa (hash: k5FwQpPl6DMx7/gfbMw9Q/N9m05beJRdBfkKImxnPaI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:ee:62:43:e6:11:c2:2e:d1:ee:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Validity Not Before: Mar 25 11:00:04 2026 GMT Not After : Mar 28 11:00:00 2026 GMT Subject: CN=11c02f80-c25e-457f-bfbb-841e78442203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:67:79:72:e8:6b:cc:c6:46:0f:e5:d2:b0:80: 69:57:b3:31:5c:09:c1:62:f1:c3:96:c9:5b:0b:f5: 13:34:9d:ff:dc:e7:80:68:ba:b6:36:93:40:64:00: 0f:2c:1d:c4:57:d2:b4:ae:4e:82:58:57:e8:26:ce: f8:03:4b:da:91:84:27:82:f4:ac:8b:a0:66:d0:e8: af:71:49:e1:9b:76:5d:22:5f:31:91:c7:4f:b5:5f: 73:f5:f3:42:43:37:e6:08:e8:ac:51:97:c8:03:7b: cf:0c:58:13:0c:2c:d8:d5:04:63:fc:94:88:ce:c0: f4:94:3a:36:e5:91:87:a8:d4:b3:95:d4:cb:86:8d: 38:5a:ed:da:72:1f:c0:55:4e:92:ba:ba:b8:35:91: c7:fb:0d:69:28:91:47:a6:46:ff:c4:d3:5a:b7:16: d8:41:b3:c6:84:76:b5:c7:be:1a:2c:fe:4a:08:8d: d4:bb:23:5e:45:e3:a0:01:42:bc:59:d6:32:4b:36: ac:0a:59:ec:2a:6f:30:8e:a2:64:2d:32:b6:2f:c5: ae:8f:c2:0d:c6:08:1e:c4:35:88:60:e4:85:bd:5b: 2f:f4:0b:01:87:02:13:fe:e8:96:aa:78:5c:d0:e5: a9:90:16:bc:5b:64:f8:a9:31:ed:6d:40:a0:2c:2e: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:59:DA:A3:AE:34:7D:57:DC:DE:94:F9:C2:3F:D0:5D:FC:F3:82:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl X509v3 Authority Key Identifier: keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:66:8b:fa:b5:b1:3b:a4:af:1d:6f:3c:39:9f:09:f1:6f:0d: df:f0:31:c6:fd:87:69:8d:25:ca:7c:f5:40:31:58:29:d5:88: f9:bc:4b:ec:de:c0:81:e8:05:6c:f5:11:18:ea:49:5c:38:50: de:4b:c9:03:03:4d:bd:21:4a:2f:42:25:1b:51:ab:31:5a:06: 43:b9:6b:53:25:df:87:4a:74:b1:1e:c8:ec:e9:39:4f:ea:01: c7:54:9a:32:22:99:f6:46:ec:c6:bd:7f:df:30:f7:40:0f:c6: b5:1d:cd:cf:a4:d1:df:1c:c6:99:7d:0a:00:2c:d8:40:90:28: c7:a9:a2:68:b7:af:70:6f:8a:ad:42:71:0d:ae:fa:81:52:a5: cc:93:c2:3f:cd:9d:82:4b:87:a2:03:dd:11:e3:8f:df:0f:a8: bc:00:c6:fc:01:cc:f6:79:87:4f:94:76:16:7b:26:78:1a:b1: 40:dc:95:4d:a9:bf:aa:c3:22:4e:53:f1:92:9e:59:4d:26:2d: 41:3a:92:9d:d1:d5:33:bc:a1:08:42:30:c1:aa:4a:cc:8a:cc: 6f:a3:21:df:8c:9d:87:e4:81:98:06:bc:29:91:9c:86:08:7b: 16:49:e6:a8:45:81:82:ca:07:08:97:1d:c8:e4:37:b2:22:52: a5:9a:87:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I7mJD5hHCLtHuDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMWQ4OGMtNGIxZC00YThhLTgzMTktNWQ3ODRlOTk1 YmUyMB4XDTI2MDMyNTExMDAwNFoXDTI2MDMyODExMDAwMFowLzEtMCsGA1UEAxMk MTFjMDJmODAtYzI1ZS00NTdmLWJmYmItODQxZTc4NDQyMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGd5cuhrzMZGD+XSsIBpV7MxXAnBYvHDlslb C/UTNJ3/3OeAaLq2NpNAZAAPLB3EV9K0rk6CWFfoJs74A0vakYQngvSsi6Bm0Oiv cUnhm3ZdIl8xkcdPtV9z9fNCQzfmCOisUZfIA3vPDFgTDCzY1QRj/JSIzsD0lDo2 5ZGHqNSzldTLho04Wu3ach/AVU6Surq4NZHH+w1pKJFHpkb/xNNatxbYQbPGhHa1 x74aLP5KCI3UuyNeReOgAUK8WdYySzasClnsKm8wjqJkLTK2L8Wuj8INxggexDWI YOSFvVsv9AsBhwIT/uiWqnhc0OWpkBa8W2T4qTHtbUCgLC5mXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHJZ2qOuNH1X3N6U+cI/0F3884IGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYx ZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4NGU5OTViZTIvMWRmMWQ4OGMtNGIxZC00 YThhLTgzMTktNWQ3ODRlOTk1YmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWRmMWQ4OGMtNGIxZC00YThhLTgz MTktNWQ3ODRlOTk1YmUyLzFkZjFkODhjLTRiMWQtNGE4YS04MzE5LTVkNzg0ZTk5 NWJlMi5jcmwwHwYDVR0jBBgwFoAUO4o8adHio5sJm2d2r75YFyzbC08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYxZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4 NGU5OTViZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEZov6tbE7pK8dbzw5nwnx bw3f8DHG/YdpjSXKfPVAMVgp1Yj5vEvs3sCB6AVs9REY6klcOFDeS8kDA029IUov QiUbUasxWgZDuWtTJd+HSnSxHsjs6TlP6gHHVJoyIpn2RuzGvX/fMPdAD8a1Hc3P pNHfHMaZfQoALNhAkCjHqaJot69wb4qtQnENrvqBUqXMk8I/zZ2CS4eiA90R44/f D6i8AMb8Acz2eYdPlHYWeyZ4GrFA3JVNqb+qwyJOU/GSnllNJi1BOpKd0dUzvKEI QjDBqkrMisxvoyHfjJ2H5IGYBrwpkZyGCHsWSeaoRYGCygcIlx3I5DeyIlKlmofG -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:55 2026 by rpki-client