$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft File: ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft (raw, json) Hash identifier: oH+/Rcf8k+Qa026ppMJaFSF7rkEYmTu4BO8j5NpwW94= Subject key identifier: 56:4F:85:7A:84:C5:9D:CC:6C:42:91:48:2B:B7:6C:7C:DF:99:82:03 Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96 Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f Certificate serial: 010D0C9F4328584D481DEF1EA16E5464FEC483E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft Manifest number: 010D0C9F4328584073A83BDF18DD1BF4CA150987 Signing time: Wed 25 Mar 2026 04:00:04 +0000 Manifest this update: Wed 25 Mar 2026 04:00:04 +0000 Manifest next update: Sat 28 Mar 2026 04:00:00 +0000 Files and hashes: 1: 0c5eaa23-353b-3a99-b28e-0c8e96aec4ed.roa (hash: YojeQzpG/o/Di5/uRAgTslZihC47qf0mmLeT8vjEg6w=) 2: ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl (hash: u1cmqsYXnGmklwItT/xhBAAtUGxK8+oA/yug/HRcbAQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:1d:ef:1e:a1:6e:54:64:fe:c4:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f Validity Not Before: Mar 25 04:00:04 2026 GMT Not After : Mar 28 04:00:00 2026 GMT Subject: CN=3bfe467c-e308-462b-a224-c6fd6d3b60b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:61:cb:b8:e8:d5:aa:6b:76:88:b4:15:b6: f2:67:84:fb:c6:2b:8f:41:3d:1e:15:d6:fe:6a:75: 62:97:2e:92:d9:0e:16:91:07:aa:84:6d:ae:a3:fd: 85:40:df:be:6f:04:49:d7:6b:de:ab:76:8a:85:17: f5:90:d1:f3:0c:6b:c1:a5:95:04:30:1d:fa:ce:fb: ea:2e:33:ca:f6:39:5a:bb:ea:bd:10:fa:c4:18:05: 4e:74:2a:0a:43:f8:98:f6:16:6f:f1:f4:4e:ff:d6: d5:51:bf:7a:50:07:8b:ad:5a:19:40:d1:95:d1:93: f7:88:c1:53:29:76:4c:e8:4a:f5:98:09:34:2c:68: b5:ce:7b:28:d7:3c:76:fd:06:5e:79:28:dc:f7:3c: f2:0a:85:db:1e:62:94:9a:87:4a:41:a6:4a:19:c6: 55:0f:9d:50:86:f7:ba:4a:80:31:ce:d7:2e:bb:c7: 62:75:61:06:89:30:54:f5:a6:35:60:6b:9f:34:94: 5e:fb:17:89:c6:76:83:48:d1:98:78:80:d5:92:f5: 14:55:25:dd:a6:61:32:11:f5:c4:85:ef:6f:ab:e9: 0f:66:da:bf:cf:98:0c:93:05:49:3b:31:c6:a3:2d: c8:fc:00:a5:5d:c8:8a:8b:46:d2:69:40:31:08:51: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4F:85:7A:84:C5:9D:CC:6C:42:91:48:2B:B7:6C:7C:DF:99:82:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl X509v3 Authority Key Identifier: keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d4:1e:da:37:e8:41:e8:f7:0b:49:6c:91:03:f9:86:d0:35: a8:a5:3e:df:7a:cd:48:37:9b:37:8e:09:86:82:d3:bc:4b:71: b7:dc:4f:5f:ea:a2:93:13:13:e2:39:71:a9:68:35:67:dc:e4: 42:47:76:1f:2d:90:9b:42:37:ab:1f:3e:1f:39:03:d3:76:d9: 3a:9e:66:0c:d2:ce:f4:d6:88:2d:2d:19:cc:f7:53:42:38:83: 0f:ee:48:bc:77:3b:8c:55:c2:fd:28:7a:85:a1:da:16:a1:91: 02:fb:44:dc:d7:d9:6c:b3:be:35:c3:e2:ba:33:ec:1b:f5:f4: 4d:c5:14:43:a4:e9:37:b7:d5:a1:7e:d7:db:50:63:cf:c1:15: 0b:f1:7e:c7:51:09:37:70:0c:e5:d9:7b:95:a7:a0:96:60:70: 24:00:42:46:84:f8:63:f2:68:23:6f:a8:7f:a3:3d:5b:1c:b2: 23:ad:f9:c5:10:23:12:77:f4:76:4a:6f:8f:07:5e:54:3a:79: 7e:29:72:5c:b5:1f:c4:ca:9b:db:43:fa:e9:1b:ef:7f:7a:c2: 2c:53:bc:14:c1:0b:e6:02:cb:f3:d4:0b:04:bb:94:d1:f5:95: 03:7d:85:d5:99:49:74:c7:a8:04:2b:d1:04:98:78:07:83:13: 01:b1:b6:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IHe8eoW5UZP7Eg+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY5YWMxNDMtM2YyNi00YjliLTg5OTctM2QzZmJkMzEw ZjhmMB4XDTI2MDMyNTA0MDAwNFoXDTI2MDMyODA0MDAwMFowLzEtMCsGA1UEAxMk M2JmZTQ2N2MtZTMwOC00NjJiLWEyMjQtYzZmZDZkM2I2MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi5hy7jo1aprdoi0FbbyZ4T7xiuPQT0eFdb+ anVily6S2Q4WkQeqhG2uo/2FQN++bwRJ12veq3aKhRf1kNHzDGvBpZUEMB36zvvq LjPK9jlau+q9EPrEGAVOdCoKQ/iY9hZv8fRO/9bVUb96UAeLrVoZQNGV0ZP3iMFT KXZM6Er1mAk0LGi1znso1zx2/QZeeSjc9zzyCoXbHmKUmodKQaZKGcZVD51Qhve6 SoAxztcuu8didWEGiTBU9aY1YGufNJRe+xeJxnaDSNGYeIDVkvUUVSXdpmEyEfXE he9vq+kPZtq/z5gMkwVJOzHGoy3I/AClXciKi0bSaUAxCFEnEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFZPhXqExZ3MbEKRSCu3bHzfmYIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZjlh YzE0My0zZjI2LTRiOWItODk5Ny0zZDNmYmQzMTBmOGYvZWY5YWMxNDMtM2YyNi00 YjliLTg5OTctM2QzZmJkMzEwZjhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWY5YWMxNDMtM2YyNi00YjliLTg5 OTctM2QzZmJkMzEwZjhmL2VmOWFjMTQzLTNmMjYtNGI5Yi04OTk3LTNkM2ZiZDMx MGY4Zi5jcmwwHwYDVR0jBBgwFoAUCWpnLttgeYiqMKhOrI64oj1ZGJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lZjlhYzE0My0zZjI2LTRiOWItODk5Ny0zZDNm YmQzMTBmOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAy1B7aN+hB6PcLSWyRA/mG 0DWopT7fes1IN5s3jgmGgtO8S3G33E9f6qKTExPiOXGpaDVn3ORCR3YfLZCbQjer Hz4fOQPTdtk6nmYM0s701ogtLRnM91NCOIMP7ki8dzuMVcL9KHqFodoWoZEC+0Tc 19lss741w+K6M+wb9fRNxRRDpOk3t9WhftfbUGPPwRUL8X7HUQk3cAzl2XuVp6CW YHAkAEJGhPhj8mgjb6h/oz1bHLIjrfnFECMSd/R2Sm+PB15UOnl+KXJctR/Eypvb Q/rpG+9/esIsU7wUwQvmAsvz1AsEu5TR9ZUDfYXVmUl0x6gEK9EEmHgHgxMBsbbS -----END CERTIFICATE-----Generated at Thu Mar 26 00:12:30 2026 by rpki-client