$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft File: 67e403a1-9185-4f5a-9910-5089c51f9fc3.mft (raw, json) Hash identifier: x9BaJmUG5Jx7PA4ntF7vvaAAsMeD8qV/+T8Elf2u2cY= Subject key identifier: DC:05:DC:10:4C:25:56:BE:7F:8A:63:E2:A4:4C:83:C8:CB:E7:28:BA Authority key identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE Certificate issuer: /CN=67e403a1-9185-4f5a-9910-5089c51f9fc3 Certificate serial: 010D0C9F4328584D4965821E949C245F0CCFB000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft Manifest number: 010D0C9F4328584D304C58A1C889D4D59303EF4A Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 67e403a1-9185-4f5a-9910-5089c51f9fc3.crl (hash: F+eLfIVpzm/WIUX8usnGjV5Bsfsa89bwsl5/hzbc7iQ=) 2: c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa (hash: QtWPrYOnk3cfu2YkASrau0blpC88I6AtsyUIyCsOnwk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:82:1e:94:9c:24:5f:0c:cf:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e403a1-9185-4f5a-9910-5089c51f9fc3 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=7b06f570-b70e-42db-92da-f6d611928dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:3f:7a:a3:10:af:8e:00:4f:18:ed:c5:b1: 52:84:b6:e3:b7:8a:f0:02:fa:af:53:03:10:ae:60: 26:42:5a:fc:bd:92:a7:5d:58:e4:bf:d0:8a:6c:e5: 6f:29:db:bc:9b:69:61:df:d9:b8:2c:97:18:36:be: 58:97:c6:3a:13:ab:43:0e:85:98:e3:4e:09:f0:b2: 8b:92:b3:5c:d5:8d:c5:a4:c8:bc:62:dc:ba:47:cc: 75:ad:ff:dc:2a:2e:8c:67:05:3d:7d:d4:2f:59:d8: 59:87:c0:40:9d:11:47:d5:99:b3:63:e6:93:53:05: fd:ed:c9:2e:bf:83:3d:b8:44:e3:fc:0a:7a:44:52: 75:49:bf:59:43:94:d5:f7:85:8c:aa:a1:d6:39:28: 4c:43:a2:ff:fb:e3:a7:a4:f9:50:9b:de:39:04:a6: 76:73:7c:d0:bc:c5:0f:cc:d2:44:32:c6:42:dc:aa: 31:c2:ac:95:e2:f8:a1:68:7f:cd:73:b2:85:9f:6b: 63:b9:a6:fb:da:f0:fb:8e:85:62:5e:93:0a:8c:ac: 8b:3e:dd:3b:ad:1d:fc:58:47:23:f1:7f:74:0e:54: a6:8f:26:11:60:7a:8e:93:8a:df:fa:87:09:7d:18: 6a:6a:4f:c1:d7:52:05:fc:38:d5:5c:c0:9b:fa:05: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:DC:10:4C:25:56:BE:7F:8A:63:E2:A4:4C:83:C8:CB:E7:28:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl X509v3 Authority Key Identifier: keyid:1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6b:59:c1:e3:ed:f1:f0:c6:74:01:8a:2d:b7:5c:16:5e:fd: c8:6a:c0:c6:e2:c7:94:bf:a0:6e:83:69:63:95:3e:6c:d8:cf: df:71:04:03:ef:82:f1:2d:a1:bd:87:37:3e:0c:84:33:88:94: 4b:f4:ce:fc:89:44:4f:66:b4:12:72:7a:b7:e7:4c:8e:84:b7: 21:20:29:fc:b8:2d:4f:d5:9a:b6:5e:db:34:47:18:cc:df:df: 04:74:91:6a:0a:c8:60:b0:47:dc:43:7c:c7:be:2d:ba:5e:9a: 6f:bd:19:00:11:51:71:b4:49:4a:ac:92:8b:0a:de:27:df:6b: f6:43:70:be:68:e2:c3:3a:ec:33:de:62:42:fa:81:df:9c:19: be:93:18:91:da:6b:11:4a:4a:bc:ad:8c:5c:5e:08:63:9e:e2: cf:52:2c:e5:7f:6b:d0:a4:d5:ec:3f:17:4b:b6:24:37:73:aa: c5:ee:7e:73:a9:e2:d0:79:0f:c3:6a:a2:e5:05:14:23:c1:ee: c6:3b:84:5b:2b:15:1e:ec:11:a0:69:2a:bd:60:a7:31:34:a2: 87:5f:ee:87:48:8e:4d:88:6b:4e:20:29:8b:c0:77:4c:d1:9d: 07:f2:5b:2b:f8:0d:aa:a3:e5:09:67:14:be:96:fc:18:4a:fe: 58:56:c7:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYIelJwkXwzPsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdlNDAzYTEtOTE4NS00ZjVhLTk5MTAtNTA4OWM1MWY5 ZmMzMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk N2IwNmY1NzAtYjcwZS00MmRiLTkyZGEtZjZkNjExOTI4ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eg/eqMQr44ATxjtxbFShLbjt4rwAvqvUwMQ rmAmQlr8vZKnXVjkv9CKbOVvKdu8m2lh39m4LJcYNr5Yl8Y6E6tDDoWY404J8LKL krNc1Y3FpMi8Yty6R8x1rf/cKi6MZwU9fdQvWdhZh8BAnRFH1ZmzY+aTUwX97cku v4M9uETj/Ap6RFJ1Sb9ZQ5TV94WMqqHWOShMQ6L/++OnpPlQm945BKZ2c3zQvMUP zNJEMsZC3KoxwqyV4vihaH/Nc7KFn2tjuab72vD7joViXpMKjKyLPt07rR38WEcj 8X90DlSmjyYRYHqOk4rf+ocJfRhqak/B11IF/DjVXMCb+gW7kQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNwF3BBMJVa+f4pj4qRMg8jL5yi6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82N2U0 MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5YzUxZjlmYzMvNjdlNDAzYTEtOTE4NS00 ZjVhLTk5MTAtNTA4OWM1MWY5ZmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNjdlNDAzYTEtOTE4NS00ZjVhLTk5 MTAtNTA4OWM1MWY5ZmMzLzY3ZTQwM2ExLTkxODUtNGY1YS05OTEwLTUwODljNTFm OWZjMy5jcmwwHwYDVR0jBBgwFoAUGlhOohDs22cDKHUDC8dgEqODgM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82N2U0MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5 YzUxZjlmYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHa1nB4+3x8MZ0AYott1wW Xv3IasDG4seUv6Bug2ljlT5s2M/fcQQD74LxLaG9hzc+DIQziJRL9M78iURPZrQS cnq350yOhLchICn8uC1P1Zq2Xts0RxjM398EdJFqCshgsEfcQ3zHvi26XppvvRkA EVFxtElKrJKLCt4n32v2Q3C+aOLDOuwz3mJC+oHfnBm+kxiR2msRSkq8rYxcXghj nuLPUizlf2vQpNXsPxdLtiQ3c6rF7n5zqeLQeQ/DaqLlBRQjwe7GO4RbKxUe7BGg aSq9YKcxNKKHX+6HSI5NiGtOICmLwHdM0Z0H8lsr+A2qo+UJZxS+lvwYSv5YVsdW -----END CERTIFICATE-----Generated at Thu Mar 26 00:10:35 2026 by rpki-client