$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.mft File: 22d369d5-60e3-4583-b038-ee0ce1961d35.mft (raw, json) Hash identifier: FC+LsBE/afjrTW7cjLSXetAA+snInd3Efkc0WauQGYY= Subject key identifier: 95:2A:6B:49:B1:DF:6A:00:DF:73:43:0C:59:7E:26:48:D3:C7:82:7B Authority key identifier: ED:BD:D1:11:71:5D:E2:D1:B7:0A:2F:8A:4B:4A:33:41:62:E3:6F:4D Certificate issuer: /CN=22d369d5-60e3-4583-b038-ee0ce1961d35 Certificate serial: 010D0C9F4328584D4C6BBDD50D9F4EC6EE3DF9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.mft Manifest number: 010D0C9F4328584A8A2F8A34C99766645A589584 Signing time: Thu 26 Mar 2026 17:00:04 +0000 Manifest this update: Thu 26 Mar 2026 17:00:04 +0000 Manifest next update: Sat 28 Mar 2026 17:00:00 +0000 Files and hashes: 1: 01c02a89-9ee7-3615-9d37-60a2b60660ac.roa (hash: 7jJAanOihSXxbcuG7kpXHZk8l62R5VkzRwGh80G5Mcs=) 2: 22d369d5-60e3-4583-b038-ee0ce1961d35.crl (hash: IfUZHPmUy8b71k7Jw1W+CE6RSrYPGU1puf2zuL5bpNQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:6b:bd:d5:0d:9f:4e:c6:ee:3d:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d369d5-60e3-4583-b038-ee0ce1961d35 Validity Not Before: Mar 26 17:00:04 2026 GMT Not After : Mar 28 17:00:00 2026 GMT Subject: CN=667d041b-4c24-4187-9e31-487bc8ac96d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:e4:2b:19:bc:1d:4c:d0:e0:31:ca:54:b7: 53:6a:4c:e3:da:15:cb:1e:4a:93:da:01:c3:86:11: 3d:29:5e:b1:b0:a0:da:e8:97:22:09:b5:a0:ff:de: f2:26:c2:8b:91:4c:56:ef:8b:15:90:98:91:ff:e2: bd:d5:1a:c0:35:72:f9:84:78:b6:24:0e:3c:1e:d8: d9:d1:05:e2:7a:74:00:7e:63:84:1e:47:25:46:0d: 09:e8:b2:5b:42:38:0b:d3:d9:f9:39:56:e7:cd:2c: a3:e4:77:0e:ae:39:b0:86:f4:9a:43:d9:72:5a:6d: 3a:29:c9:65:d4:5e:5c:e0:08:80:ed:df:be:b9:f7: 92:b9:7f:31:e0:f5:9e:c0:7b:92:06:17:85:9d:d1: 77:50:03:3b:f5:34:a1:59:27:69:c3:c6:82:29:9b: da:53:2b:ed:62:2a:0d:b9:0a:5d:e6:d7:fe:cd:3e: 01:88:fa:e5:03:2c:c2:b3:eb:15:b6:cf:07:a8:bb: 98:c4:22:cb:be:86:cd:27:56:83:32:cc:73:1f:81: 09:8f:c7:26:05:f8:03:aa:34:dc:49:12:dc:d8:4a: d1:dc:6d:42:ef:70:1a:d4:47:71:da:65:11:b3:3e: 23:ba:f7:46:cb:c6:28:0a:e5:a0:5d:0f:95:0b:81: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2A:6B:49:B1:DF:6A:00:DF:73:43:0C:59:7E:26:48:D3:C7:82:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.crl X509v3 Authority Key Identifier: keyid:ED:BD:D1:11:71:5D:E2:D1:B7:0A:2F:8A:4B:4A:33:41:62:E3:6F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:89:8e:22:6a:d3:0b:44:57:3d:d2:bd:7b:0d:fa:86:13:3c: bf:8e:2e:b9:dd:e5:ec:56:e0:a6:a1:89:1b:b2:35:d9:85:49: 4b:09:00:ce:33:7d:47:97:28:cd:da:5c:dc:8d:26:f8:fb:a4: a0:64:71:31:95:16:30:4d:99:8d:ae:e0:5a:6f:2b:ef:95:22: 3b:26:52:9d:7f:ec:ee:fc:d2:c5:e7:6e:b9:40:25:51:a7:0e: 0e:43:6d:1f:a4:a6:0f:5c:62:90:26:f9:bd:d1:e2:7e:81:60: 15:fe:31:8d:a1:b3:5d:64:f3:78:44:b4:9a:f7:98:74:1d:5b: be:29:6c:d5:9d:4c:6e:51:ea:59:eb:22:c5:39:e4:ec:ec:4a: 8e:83:75:76:3a:79:e3:99:e7:9d:14:54:12:b5:1e:6c:03:92: 88:8d:42:93:03:60:95:0d:19:53:9c:9a:1c:34:eb:1e:33:a3: 1f:73:a6:b0:a3:bd:c1:8e:dd:03:ef:d8:37:bb:50:cc:69:4c: 98:d8:92:c9:54:b1:d5:5e:c4:84:0a:67:63:34:3e:79:eb:9b: 24:1e:f3:fb:13:b2:2b:cc:28:9e:be:48:4f:17:2e:ad:d9:70: c5:4c:43:bc:01:10:d8:bd:87:2a:54:2d:8c:b2:9f:6f:60:c8: b7:0e:83:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ma73VDZ9Oxu49+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkMzY5ZDUtNjBlMy00NTgzLWIwMzgtZWUwY2UxOTYx ZDM1MB4XDTI2MDMyNjE3MDAwNFoXDTI2MDMyODE3MDAwMFowLzEtMCsGA1UEAxMk NjY3ZDA0MWItNGMyNC00MTg3LTllMzEtNDg3YmM4YWM5NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZXkKxm8HUzQ4DHKVLdTakzj2hXLHkqT2gHD hhE9KV6xsKDa6JciCbWg/97yJsKLkUxW74sVkJiR/+K91RrANXL5hHi2JA48HtjZ 0QXienQAfmOEHkclRg0J6LJbQjgL09n5OVbnzSyj5HcOrjmwhvSaQ9lyWm06Kcll 1F5c4AiA7d++ufeSuX8x4PWewHuSBheFndF3UAM79TShWSdpw8aCKZvaUyvtYioN uQpd5tf+zT4BiPrlAyzCs+sVts8HqLuYxCLLvobNJ1aDMsxzH4EJj8cmBfgDqjTc SRLc2ErR3G1C73Aa1Edx2mURsz4juvdGy8YoCuWgXQ+VC4E0lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJUqa0mx32oA33NDDFl+JkjTx4J7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMmQz NjlkNS02MGUzLTQ1ODMtYjAzOC1lZTBjZTE5NjFkMzUvMjJkMzY5ZDUtNjBlMy00 NTgzLWIwMzgtZWUwY2UxOTYxZDM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjJkMzY5ZDUtNjBlMy00NTgzLWIw MzgtZWUwY2UxOTYxZDM1LzIyZDM2OWQ1LTYwZTMtNDU4My1iMDM4LWVlMGNlMTk2 MWQzNS5jcmwwHwYDVR0jBBgwFoAU7b3REXFd4tG3Ci+KS0ozQWLjb00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMmQzNjlkNS02MGUzLTQ1ODMtYjAzOC1lZTBj ZTE5NjFkMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZiY4iatMLRFc90r17DfqG Ezy/ji653eXsVuCmoYkbsjXZhUlLCQDOM31HlyjN2lzcjSb4+6SgZHExlRYwTZmN ruBabyvvlSI7JlKdf+zu/NLF5265QCVRpw4OQ20fpKYPXGKQJvm90eJ+gWAV/jGN obNdZPN4RLSa95h0HVu+KWzVnUxuUepZ6yLFOeTs7EqOg3V2OnnjmeedFFQStR5s A5KIjUKTA2CVDRlTnJocNOseM6Mfc6awo73Bjt0D79g3u1DMaUyY2JLJVLHVXsSE CmdjND5565skHvP7E7IrzCievkhPFy6t2XDFTEO8ARDYvYcqVC2Msp9vYMi3DoOb -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:24 2026 by rpki-client