$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: vASe07wegAfBKcOZy9y4HkXOfZAfRZeE/30Hb58iAio= Subject key identifier: A4:D3:41:50:DD:C1:E2:69:28:51:12:5F:86:C0:DD:93:86:B0:C2:CD Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584D498348CD514ACD78A8EDE880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02F74 Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: U35zeeQxL/Lq3O20LrLXmnhTBHF6bx6TuCx+l++8G3o=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: d265fQHelul9TREOyZONN/w31g2IrTQhH3DeYGvf+ds=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:48:cd:51:4a:cd:78:a8:ed:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=12e5e22b-728b-4e3b-96c7-437cbf5ba07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2b:85:21:c7:0e:79:5c:7e:8e:8d:be:b5:1a: 32:e4:dc:4d:35:06:18:f2:ac:4b:e0:a6:36:6b:9c: 12:94:77:21:0b:73:15:ad:c2:b6:3b:fc:55:d2:00: b8:2a:a7:15:b0:56:2a:34:84:69:c3:3a:0e:ee:bb: 9f:8e:c5:c2:68:f2:04:ce:64:78:45:39:27:92:9a: d4:67:54:23:f5:01:50:dd:f2:e1:fe:50:07:54:87: ea:f5:c5:c8:5c:77:e1:a5:5c:fd:c2:00:a3:9c:aa: 0a:a8:9c:a4:68:4a:28:93:29:c2:9f:8a:da:a7:5e: 59:ad:5c:4d:94:94:95:4d:13:cf:5a:5d:12:a7:09: 1b:8e:ae:dd:79:22:c0:d1:8e:19:b5:bc:b9:59:28: 8b:9f:20:ec:49:e7:ac:ba:73:32:18:a4:f8:82:08: fa:e0:61:5b:d1:1b:f6:0e:a1:d0:b1:6e:a4:34:0a: 2b:23:35:00:ed:4a:42:45:3a:7b:7f:d4:ff:b1:98: 59:3c:07:f8:93:fb:bd:70:51:e7:3c:6f:a4:19:8d: 97:3e:9b:e7:6a:7c:b9:a0:92:23:04:fc:82:2c:db: 70:00:6d:30:0b:f6:85:21:b0:33:93:18:67:b9:fd: 63:1d:89:d8:38:a0:a4:d6:0f:cc:43:d4:40:e1:95: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D3:41:50:DD:C1:E2:69:28:51:12:5F:86:C0:DD:93:86:B0:C2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:78:e3:9e:5c:75:41:0e:6e:18:74:97:f8:ed:ec:67:50:bc: f0:f8:cb:16:e6:5a:8f:76:4d:c6:4d:0d:67:d7:a7:e1:f2:2b: 95:5c:ac:53:dd:bd:37:da:1d:40:26:dd:1d:73:24:65:81:29: fd:35:5e:b6:7c:27:b0:ed:a4:54:b0:32:12:93:c8:6f:83:87: 0b:b7:32:2f:37:76:c1:07:f1:ab:17:3d:ba:db:52:d6:2d:c9: c1:a6:fc:c0:1c:78:0f:0d:65:78:b4:e1:03:97:31:4a:80:5c: 77:55:74:87:fc:6f:fc:95:b9:4f:b3:03:2b:ec:31:82:0a:c2: 61:3c:b5:60:99:f7:b8:90:4b:57:d2:a7:5a:22:43:c6:20:70: 14:62:2b:03:cd:31:5d:d0:2e:ca:3d:7f:c6:91:27:3b:f1:f1: 8c:94:87:11:f4:26:57:bb:8e:1e:16:55:09:83:7d:85:67:4d: a3:1b:4c:e0:0b:35:55:fa:30:3a:1e:96:af:d1:ec:b0:0c:9d: af:5b:55:eb:0b:1e:d9:77:6b:da:23:2d:91:ca:62:0c:a1:7f: ef:8f:70:51:d4:bf:79:03:39:93:3e:b0:db:f5:24:8e:7c:ab: c1:a9:14:6b:a1:bd:e7:dd:e5:8f:4f:76:a1:ff:73:31:a8:a1: 7c:fb:5e:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0jNUUrNeKjt6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk MTJlNWUyMmItNzI4Yi00ZTNiLTk2YzctNDM3Y2JmNWJhMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSuFIccOeVx+jo2+tRoy5NxNNQYY8qxL4KY2 a5wSlHchC3MVrcK2O/xV0gC4KqcVsFYqNIRpwzoO7rufjsXCaPIEzmR4RTknkprU Z1Qj9QFQ3fLh/lAHVIfq9cXIXHfhpVz9wgCjnKoKqJykaEookynCn4rap15ZrVxN lJSVTRPPWl0Spwkbjq7deSLA0Y4Ztby5WSiLnyDsSeesunMyGKT4ggj64GFb0Rv2 DqHQsW6kNAorIzUA7UpCRTp7f9T/sZhZPAf4k/u9cFHnPG+kGY2XPpvnany5oJIj BPyCLNtwAG0wC/aFIbAzkxhnuf1jHYnYOKCk1g/MQ9RA4ZXklwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKTTQVDdweJpKFESX4bA3ZOGsMLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXeOOeXHVBDm4YdJf47exn ULzw+MsW5lqPdk3GTQ1n16fh8iuVXKxT3b032h1AJt0dcyRlgSn9NV62fCew7aRU sDISk8hvg4cLtzIvN3bBB/GrFz2621LWLcnBpvzAHHgPDWV4tOEDlzFKgFx3VXSH /G/8lblPswMr7DGCCsJhPLVgmfe4kEtX0qdaIkPGIHAUYisDzTFd0C7KPX/GkSc7 8fGMlIcR9CZXu44eFlUJg32FZ02jG0zgCzVV+jA6Hpav0eywDJ2vW1XrCx7Zd2va Iy2RymIMoX/vj3BR1L95AzmTPrDb9SSOfKvBqRRrob3n3eWPT3ah/3MxqKF8+14L -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:23 2026 by rpki-client