$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft File: 25422be5-720b-40bc-8a4d-02579ec1bead.mft (raw, json) Hash identifier: krFxzKJ+/76A+rt88EJx2+i3tWQwm48BEsazNDFa3Yc= Subject key identifier: 09:79:1F:E4:C3:D1:A2:26:DE:A5:45:8E:A1:36:56:07:69:E2:03:EC Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584D4B7D833A2AEBA5A16F533A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft Manifest number: 010D0C9F4328584073A84B9C832FD0665142AB15 Signing time: Thu 26 Mar 2026 09:00:04 +0000 Manifest this update: Thu 26 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 25422be5-720b-40bc-8a4d-02579ec1bead.crl (hash: gjKxYcy3n9Go0PXmgv+2nTzxcf5XVGY6x7qDB1xjEBM=) 2: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (hash: l8ybn5b2mUrLiKsP+K6Nc5vzfXhR9I7Pv30hi45ySJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:7d:83:3a:2a:eb:a5:a1:6f:53:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Mar 26 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=ae0fd8d6-d18e-4718-ac3d-a4b3cd4064da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:ae:49:35:54:8c:3a:0d:0e:bc:9c:89:5a: cf:57:26:b1:b8:38:17:a1:68:d7:62:77:2a:ef:fe: 09:d8:1f:fb:5f:39:ac:8a:3e:95:c5:a4:bb:9e:e3: 27:7f:6a:7d:3a:e5:d5:8a:a5:37:83:f7:9b:da:e1: ae:f7:47:fb:a8:e5:a8:86:24:20:20:7f:8b:3f:92: 0f:da:ac:82:64:e6:86:fd:e3:e5:4b:eb:dd:63:6e: 0e:f7:c0:51:c8:ce:4e:03:1c:c8:85:d9:5e:8e:64: c2:c1:ad:af:c5:de:11:30:b6:60:f0:3f:d8:09:aa: 0a:4b:42:4f:81:dc:da:49:b3:6c:3e:a5:a8:06:a8: b7:6c:d2:8e:1d:6e:72:4c:99:45:52:4d:d0:3e:ef: 4d:9a:11:89:83:32:b4:d1:d7:74:08:40:95:6b:62: 8c:ef:be:a0:30:38:9a:57:7e:cf:90:31:7d:18:85: 4c:fe:d9:aa:94:9b:41:24:8d:6a:03:3b:c5:76:18: 44:35:9b:82:11:8b:81:d6:19:92:a1:7a:f5:79:d7: 2d:db:10:aa:79:4c:47:2b:88:1d:43:dc:70:73:e5: 72:4f:ee:7b:d8:79:62:86:38:71:f3:dc:78:a8:78: 5f:be:14:c1:30:03:89:31:a5:c9:11:e5:9f:29:85: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:79:1F:E4:C3:D1:A2:26:DE:A5:45:8E:A1:36:56:07:69:E2:03:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:aa:3e:b6:62:e6:8a:05:26:29:98:13:62:20:0c:89:cd:ce: af:90:e5:0b:c7:ec:f2:80:f7:de:f5:6a:4f:2a:35:c6:1f:f4: 8c:06:ec:2c:c5:de:57:78:ec:bd:d1:59:f5:c9:75:50:a1:16: 89:0d:d9:e6:e6:0d:e0:2f:c2:de:eb:ef:70:1d:e2:17:d4:9a: 95:9b:c8:73:c6:ba:0a:a3:c2:96:ef:ee:f9:5c:71:b9:d8:10: e8:2a:19:53:4e:1b:31:ce:35:b2:a8:d5:9f:bc:ea:08:f9:17: 46:77:83:e1:c3:99:27:09:9c:f6:5a:f6:70:b4:ce:fa:ba:3a: 8b:ac:99:85:b1:a8:31:ff:82:e9:a9:2a:14:8e:8e:fc:7d:0c: 76:c7:4c:ed:d1:78:e0:73:6b:58:0d:5a:3d:a3:51:f4:ea:a5: 11:11:5c:55:d0:f0:a1:70:50:78:7c:93:cf:c9:d9:c6:cb:0a: fe:e4:4a:3e:26:1c:a1:58:03:11:9d:9f:50:2c:c7:09:29:78: 69:7c:c7:b8:d9:79:dd:75:07:74:f9:17:c8:e9:45:57:4c:fc: 49:76:9c:18:03:b4:d9:76:06:67:0d:e0:3e:fc:f1:04:a0:21: 6b:42:79:ea:57:5e:5f:06:7c:db:2b:de:29:36:53:68:2a:1a: 28:13:49:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LfYM6KuuloW9TOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI2MDMyNjA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk YWUwZmQ4ZDYtZDE4ZS00NzE4LWFjM2QtYTRiM2NkNDA2NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaSuSTVUjDoNDryciVrPVyaxuDgXoWjXYncq 7/4J2B/7Xzmsij6VxaS7nuMnf2p9OuXViqU3g/eb2uGu90f7qOWohiQgIH+LP5IP 2qyCZOaG/ePlS+vdY24O98BRyM5OAxzIhdlejmTCwa2vxd4RMLZg8D/YCaoKS0JP gdzaSbNsPqWoBqi3bNKOHW5yTJlFUk3QPu9NmhGJgzK00dd0CECVa2KM776gMDia V37PkDF9GIVM/tmqlJtBJI1qAzvFdhhENZuCEYuB1hmSoXr1edct2xCqeUxHK4gd Q9xwc+VyT+572Hlihjhx89x4qHhfvhTBMAOJMaXJEeWfKYUZzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAl5H+TD0aIm3qVFjqE2Vgdp4gPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMjU0MjJiZTUtNzIwYi00 MGJjLThhNGQtMDI1NzllYzFiZWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAqj62YuaKBSYpmBNiIAyJ zc6vkOULx+zygPfe9WpPKjXGH/SMBuwsxd5XeOy90Vn1yXVQoRaJDdnm5g3gL8Le 6+9wHeIX1JqVm8hzxroKo8KW7+75XHG52BDoKhlTThsxzjWyqNWfvOoI+RdGd4Ph w5knCZz2WvZwtM76ujqLrJmFsagx/4LpqSoUjo78fQx2x0zt0Xjgc2tYDVo9o1H0 6qUREVxV0PChcFB4fJPPydnGywr+5Eo+JhyhWAMRnZ9QLMcJKXhpfMe42XnddQd0 +RfI6UVXTPxJdpwYA7TZdgZnDeA+/PEEoCFrQnnqV15fBnzbK94pNlNoKhooE0ll -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:49 2026 by rpki-client