$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft File: 2a43a868-3d14-440f-a95a-5428c232c5d0.mft (raw, json) Hash identifier: hkF5jNZYZ88D9nPF9YRiWr6N3vfAeN3KmjmwqQccLtw= Subject key identifier: CA:EC:A8:D6:E2:56:ED:79:BA:23:D6:29:9D:F4:59:3D:49:31:96:F0 Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Certificate serial: 010D0C9F4328584D47A6E0CAEE53B451666ABC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft Manifest number: 010D0C9F4328584D12A4CFA7D715AE6277072E94 Signing time: Wed 25 Mar 2026 00:00:09 +0000 Manifest this update: Wed 25 Mar 2026 00:00:09 +0000 Manifest next update: Fri 27 Mar 2026 00:00:00 +0000 Files and hashes: 1: 2a43a868-3d14-440f-a95a-5428c232c5d0.crl (hash: nFeB/JvRUGZwjoOY0rtMZpYcmvReL3VmkQTcGmLXTTw=) 2: e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa (hash: PbHlIYHOIGfmnKF5s7nnGds4clQ2E/kgM/1/bzBkEEY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:a6:e0:ca:ee:53:b4:51:66:6a:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Validity Not Before: Mar 25 00:00:09 2026 GMT Not After : Mar 27 00:00:00 2026 GMT Subject: CN=69311bbf-3342-45b7-8597-de99c680ca50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:8a:58:e5:97:63:44:81:20:e1:49:1e:b3: 33:a4:de:ff:68:a4:79:e9:2f:dd:95:f9:5c:17:ae: fe:26:73:06:58:ee:79:32:e1:a2:85:98:39:14:a4: b7:1d:62:60:bc:28:f7:91:0a:58:0c:45:0e:1d:74: c8:61:34:c5:0a:9e:4a:f5:e7:5c:af:98:c3:5d:73: 32:0c:70:7a:62:d0:91:6d:29:61:53:73:46:03:fe: c5:e9:a1:21:94:72:d3:4d:e6:26:54:79:a4:f1:60: 6f:66:1b:0a:d4:5d:bb:24:49:2c:0f:a9:4a:38:d1: 12:e1:56:6d:4f:60:6c:14:00:67:da:10:c8:bf:31: 3b:e4:6a:10:63:0e:9b:4b:8c:6e:dd:e3:ff:45:7b: 68:ef:f2:d6:ad:4b:ee:e5:5a:e2:bc:74:d0:ca:e3: de:e5:33:c1:1f:9e:1b:db:c2:9c:19:f7:2b:26:1e: dc:45:e3:8d:93:4f:9c:f3:2f:d9:d0:6b:ef:a6:ec: 41:8f:42:d7:f8:af:ad:1a:76:19:0c:dd:cc:d1:4e: 33:88:e6:89:de:a3:b9:7e:8b:72:6b:9e:b4:67:e7: 16:11:a8:6e:9f:18:cc:e9:7e:bf:64:8b:6a:3d:7d: 00:df:94:f7:10:28:cd:96:d9:2e:21:0b:e5:28:16: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:A8:D6:E2:56:ED:79:BA:23:D6:29:9D:F4:59:3D:49:31:96:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl X509v3 Authority Key Identifier: keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:79:55:44:c8:ff:bf:68:84:e9:e8:98:c4:ad:b1:33:ed:39: 0a:a6:f9:1e:65:32:16:5e:cc:84:ee:a2:76:a4:5c:be:18:01: 9e:c9:f2:1f:2e:05:fe:81:92:b1:ea:16:7f:de:42:71:0b:52: 02:de:29:bd:d8:75:c2:30:44:29:60:32:2e:2f:5e:6b:de:bb: bb:66:39:63:d9:1d:d4:6a:65:09:66:80:a4:4d:97:9e:5c:0f: fe:8c:d6:b8:bb:03:1c:ca:aa:6f:a5:16:d3:98:51:d9:4e:35: ab:46:8d:2e:b6:06:8e:df:8c:fa:d9:31:83:ee:7e:0f:69:47: f1:5d:cd:cc:19:04:ae:e9:63:73:cb:02:cb:e4:71:9e:18:0c: 4f:08:96:2d:4c:cd:72:88:87:82:47:8e:3b:32:0b:4f:1d:e4: ee:7c:b5:78:81:e7:ae:f6:df:1c:85:5f:72:c7:5d:43:31:e7: 7f:05:cf:0b:45:51:e8:59:d1:9e:92:3b:1f:04:76:c9:b8:6b: 88:e1:0d:d2:7a:4d:e7:bc:46:ca:ac:bd:61:a3:51:93:0e:b3: 21:e8:6a:e9:60:44:ab:d2:7b:8b:d8:38:bd:8f:0a:5f:c7:fe: 28:a2:0c:96:3c:10:01:5d:d2:84:51:d4:87:0b:70:52:b2:9d: 02:8a:16:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1HpuDK7lO0UWZqvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0M2E4NjgtM2QxNC00NDBmLWE5NWEtNTQyOGMyMzJj NWQwMB4XDTI2MDMyNTAwMDAwOVoXDTI2MDMyNzAwMDAwMFowLzEtMCsGA1UEAxMk NjkzMTFiYmYtMzM0Mi00NWI3LTg1OTctZGU5OWM2ODBjYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFqKWOWXY0SBIOFJHrMzpN7/aKR56S/dlflc F67+JnMGWO55MuGihZg5FKS3HWJgvCj3kQpYDEUOHXTIYTTFCp5K9edcr5jDXXMy DHB6YtCRbSlhU3NGA/7F6aEhlHLTTeYmVHmk8WBvZhsK1F27JEksD6lKONES4VZt T2BsFABn2hDIvzE75GoQYw6bS4xu3eP/RXto7/LWrUvu5VrivHTQyuPe5TPBH54b 28KcGfcrJh7cReONk0+c8y/Z0GvvpuxBj0LX+K+tGnYZDN3M0U4ziOaJ3qO5foty a560Z+cWEahunxjM6X6/ZItqPX0A35T3ECjNltkuIQvlKBYAJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMrsqNbiVu15uiPWKZ30WT1JMZbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQz YTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4YzIzMmM1ZDAvMmE0M2E4NjgtM2QxNC00 NDBmLWE5NWEtNTQyOGMyMzJjNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmE0M2E4NjgtM2QxNC00NDBmLWE5 NWEtNTQyOGMyMzJjNWQwLzJhNDNhODY4LTNkMTQtNDQwZi1hOTVhLTU0MjhjMjMy YzVkMC5jcmwwHwYDVR0jBBgwFoAUiumx2z4c45AwqsnkROKvu5fxSzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQzYTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4 YzIzMmM1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVeVVEyP+/aITp6JjErbEz 7TkKpvkeZTIWXsyE7qJ2pFy+GAGeyfIfLgX+gZKx6hZ/3kJxC1IC3im92HXCMEQp YDIuL15r3ru7Zjlj2R3UamUJZoCkTZeeXA/+jNa4uwMcyqpvpRbTmFHZTjWrRo0u tgaO34z62TGD7n4PaUfxXc3MGQSu6WNzywLL5HGeGAxPCJYtTM1yiIeCR447MgtP HeTufLV4geeu9t8chV9yx11DMed/Bc8LRVHoWdGekjsfBHbJuGuI4Q3Sek3nvEbK rL1ho1GTDrMh6GrpYESr0nuL2Di9jwpfx/4oogyWPBABXdKEUdSHC3BSsp0CihYV -----END CERTIFICATE-----Generated at Thu Mar 26 00:11:15 2026 by rpki-client