$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft File: 1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft (raw, json) Hash identifier: VGGcwL2RocYTi9D2xBegy3CsPq+ki3+kEnnlmdn+Cok= Subject key identifier: FB:AD:A8:22:70:40:07:3A:9A:FF:05:5D:CC:CF:25:46:7B:B4:78:97 Authority key identifier: 19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 Certificate issuer: /CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Certificate serial: 010D0C9F4328584D4F8FD0E264EF7C52F3AD8780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft Manifest number: 010D0C9F4328584AA3B2F590EC717D4035CEDC84 Signing time: Fri 27 Mar 2026 20:00:09 +0000 Manifest this update: Fri 27 Mar 2026 20:00:09 +0000 Manifest next update: Sun 29 Mar 2026 20:00:00 +0000 Files and hashes: 1: 1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl (hash: 3MtohDpJuWE/LsazM3hYsBUCUT2tNWaQqC8zPQ+ikac=) 2: 5c61e36a-6107-3475-8f1b-e616b1350dbe.roa (hash: 8oEySdJLeAB5nPWnlOMQ5k28VLbZWoyl8aCiwfpHnEI=) 3: 62e1a76d-ff8f-3f0f-9800-cad36d4fa1fa.roa (hash: FbATYSWCONCqxYstvRwMOGKuqzSOD34OsXJHXfdtfro=) 4: 8ee9fa63-2436-3b1c-ba3e-9586b50ba310.roa (hash: Avr72eUUBHqis+As8tcyGttRVBJKRMhQTzpUfCA7GjE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:8f:d0:e2:64:ef:7c:52:f3:ad:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Validity Not Before: Mar 27 20:00:09 2026 GMT Not After : Mar 29 20:00:00 2026 GMT Subject: CN=c1e7717d-dadd-44cc-a45c-d8d92ad71d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:62:56:6d:43:67:2b:c6:c3:a7:39:f8:f2: 70:1a:21:18:48:2e:fa:96:e8:fe:75:fb:d1:49:1d: c9:d6:ee:49:84:f9:ae:73:08:9b:01:5f:18:3e:09: 60:8f:8a:11:57:75:66:1c:61:d0:0d:14:6e:80:06: ca:d5:bd:1c:1f:e4:50:84:29:ee:8f:5b:53:b0:0f: 1a:a2:09:e6:62:81:80:3a:07:ec:78:2b:71:47:e0: 4e:89:1f:c2:22:0b:e9:e7:d3:a2:6b:65:ae:9a:6a: cd:cd:d1:a9:a6:91:2a:f7:bd:9a:0e:84:7c:0b:e1: 52:24:e7:c1:1d:87:5f:9a:05:d8:82:a8:3f:34:43: e0:5c:30:53:18:20:b7:20:0a:77:44:23:da:06:1c: 2d:5b:fe:71:d1:a4:72:60:4e:81:2f:90:d1:96:34: bc:bc:2b:58:56:3d:77:44:7d:b9:12:6b:31:56:f4: e3:d7:66:4b:d9:e6:49:9e:46:04:a4:eb:37:8c:0b: 96:85:b3:06:1f:d8:d0:51:57:f1:63:86:e9:03:73: 2e:c5:fb:5b:cd:ac:f0:72:96:7a:86:8c:9f:1a:14: a2:61:2a:02:0c:7e:fb:cc:86:9a:83:af:b0:e4:c7: e6:1b:7a:ec:90:a7:91:b1:4d:fb:ae:94:90:96:a2: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AD:A8:22:70:40:07:3A:9A:FF:05:5D:CC:CF:25:46:7B:B4:78:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl X509v3 Authority Key Identifier: keyid:19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ae:31:32:3d:61:32:b6:41:b2:29:5f:70:fe:05:3b:7d:3f: cc:6f:55:a1:27:f1:a5:d4:dd:40:9e:7d:22:34:a6:37:4b:bf: 00:27:2b:f3:d2:a2:ea:02:29:fd:b4:bd:62:95:36:9a:0d:6c: 42:57:7a:1d:b0:ee:9a:6c:a4:01:ec:4e:bf:6b:b9:7c:37:dc: 0d:85:f9:c5:32:9e:de:d3:1b:33:2d:f4:8b:28:61:7d:c3:5f: 32:d2:fe:2f:26:96:4f:12:0c:9a:8f:52:43:81:79:88:27:06: 0d:42:83:59:ee:99:1f:17:81:41:56:b9:f5:e9:24:3d:ec:f8: e4:e7:b5:78:e3:17:c1:2f:ff:d6:91:0a:cc:31:ba:1a:5d:95: 74:c0:c8:95:bf:dc:77:f2:8e:c8:44:7c:39:c7:42:fc:e1:9c: 4c:36:94:b3:18:2e:8a:49:89:ab:1b:60:5a:07:5b:4b:7d:ec: 9b:fa:f2:77:75:5b:df:c5:29:c4:79:cf:b6:88:5e:85:8d:12: c8:f1:0f:c2:b0:ba:99:d8:53:6f:18:70:62:81:af:06:68:2e: 4c:0c:8b:0a:2d:0f:e8:93:ea:d6:80:44:4f:ed:2d:85:1b:f5: b8:c8:63:17:ca:a8:5e:87:aa:64:5f:0d:43:4c:03:5a:72:5a: 47:f4:2e:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Pj9DiZO98UvOth4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI0ZDk5NGMtMTk2Yi00YjRhLWEyYzAtMGYyZTRiNGFj ZjU0MB4XDTI2MDMyNzIwMDAwOVoXDTI2MDMyOTIwMDAwMFowLzEtMCsGA1UEAxMk YzFlNzcxN2QtZGFkZC00NGNjLWE0NWMtZDhkOTJhZDcxZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnONiVm1DZyvGw6c5+PJwGiEYSC76luj+dfvR SR3J1u5JhPmucwibAV8YPglgj4oRV3VmHGHQDRRugAbK1b0cH+RQhCnuj1tTsA8a ognmYoGAOgfseCtxR+BOiR/CIgvp59Oia2WummrNzdGpppEq972aDoR8C+FSJOfB HYdfmgXYgqg/NEPgXDBTGCC3IAp3RCPaBhwtW/5x0aRyYE6BL5DRljS8vCtYVj13 RH25EmsxVvTj12ZL2eZJnkYEpOs3jAuWhbMGH9jQUVfxY4bpA3MuxftbzazwcpZ6 hoyfGhSiYSoCDH77zIaag6+w5MfmG3rskKeRsU37rpSQlqLqxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPutqCJwQAc6mv8FXczPJUZ7tHiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRk OTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJlNGI0YWNmNTQvMWI0ZDk5NGMtMTk2Yi00 YjRhLWEyYzAtMGYyZTRiNGFjZjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWI0ZDk5NGMtMTk2Yi00YjRhLWEy YzAtMGYyZTRiNGFjZjU0LzFiNGQ5OTRjLTE5NmItNGI0YS1hMmMwLTBmMmU0YjRh Y2Y1NC5jcmwwHwYDVR0jBBgwFoAUGU3Xozsv0HPfJ9YW4+MgY3AlxyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRkOTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJl NGI0YWNmNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxrjEyPWEytkGyKV9w/gU7 fT/Mb1WhJ/Gl1N1Ann0iNKY3S78AJyvz0qLqAin9tL1ilTaaDWxCV3odsO6abKQB 7E6/a7l8N9wNhfnFMp7e0xszLfSLKGF9w18y0v4vJpZPEgyaj1JDgXmIJwYNQoNZ 7pkfF4FBVrn16SQ97Pjk57V44xfBL//WkQrMMboaXZV0wMiVv9x38o7IRHw5x0L8 4ZxMNpSzGC6KSYmrG2BaB1tLfeyb+vJ3dVvfxSnEec+2iF6FjRLI8Q/CsLqZ2FNv GHBiga8GaC5MDIsKLQ/ok+rWgERP7S2FG/W4yGMXyqheh6pkXw1DTANaclpH9C4U -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:05 2026 by rpki-client