$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: Kti5rxOYJHrIXvCkyoUHi7S9Clymzb2B4UKR+NYABrA= Subject key identifier: 8F:A6:88:DC:29:CB:00:2D:D4:03:C2:9D:F7:12:A6:C9:57:A2:D3:DF Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584D47E25F90B271E5E3F14DDA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D3236 Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: CqqfifgZfHzY7oc1U36nm/9p0FT95dcmXNFopIy9Un0=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:5f:90:b2:71:e5:e3:f1:4d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=e863feb0-70b6-4cd2-808e-d778d715d8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:ef:7a:11:09:8c:61:8f:99:43:e0:fb:8b: de:61:9d:67:e6:d1:29:7a:0c:1b:dd:78:9f:c4:c2: a2:45:fa:3a:fc:18:02:54:b3:4e:b1:ef:bc:b3:b7: cc:e4:7d:b9:bc:10:3a:de:a8:1e:82:ca:b3:e8:c2: d9:b1:65:31:fb:c6:2b:12:8e:bc:73:20:21:b2:19: 93:18:b3:a4:4a:e6:d3:20:88:8f:3d:ac:23:4d:3d: d2:8b:92:b5:94:a1:55:10:25:d8:8f:f4:b3:63:3e: d6:30:00:1f:91:13:c5:aa:e7:d8:7b:dc:a6:10:22: b0:aa:07:32:cf:07:95:e4:4f:6d:87:3f:1e:42:9e: 05:4a:0d:b4:e7:7e:07:28:71:59:db:ed:c3:aa:cb: 21:85:cb:8b:b0:65:1e:92:a7:be:b0:a4:69:8f:2f: 74:b6:8a:ca:01:ce:f8:b0:d6:4d:d3:35:28:6a:06: df:13:ae:48:9f:da:a2:3c:0a:3a:cf:17:b5:d9:d7: 9d:5c:5e:04:d2:81:4b:c4:24:ee:e2:d6:27:ea:a3: 86:59:7a:1f:de:b1:85:8c:f7:b3:03:ff:30:d2:2c: 0b:2b:de:e8:7b:df:04:11:d5:59:21:d8:c3:c1:0f: cb:23:e4:a3:d9:df:99:40:59:13:c9:5f:5d:93:2d: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A6:88:DC:29:CB:00:2D:D4:03:C2:9D:F7:12:A6:C9:57:A2:D3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:72:32:8d:28:50:0a:54:ca:84:25:a3:23:f7:15:dc:b3:22: 8e:1f:24:04:64:f5:7e:2b:75:71:76:ff:16:e4:70:d2:58:45: dd:bd:df:fc:fb:db:4f:1b:df:9e:58:3d:a7:7a:85:1e:67:0b: 3b:18:00:2f:e3:8e:6e:48:55:e1:40:c2:c0:9e:05:1e:ea:df: f5:6c:ee:c3:8c:e1:64:fd:79:a8:32:8c:69:ad:39:7c:45:ba: a8:6b:c6:0f:30:b3:db:e9:a4:e2:19:2f:4d:42:da:ae:ae:56: 61:4b:05:b1:9a:b5:e9:a1:f8:2e:4b:d8:7c:ad:7d:bf:3a:63: ac:98:5f:0d:73:d9:47:95:42:1d:d6:c9:f1:de:b1:90:ff:8b: 77:c3:4e:57:52:6d:ad:04:b9:a4:14:2f:6e:b5:c2:11:dc:ec: b5:1a:ab:07:72:00:8d:69:c6:51:27:be:d3:5b:af:c3:9c:26: bb:39:93:53:8f:eb:8b:80:e6:3b:e1:21:6b:d4:93:aa:b7:e6: 6a:6a:69:b2:d5:6f:47:01:f8:e4:cd:c3:6b:8e:de:db:1c:22: 95:90:87:08:cb:94:4b:05:33:c9:13:68:1d:6b:91:ff:60:be: df:cc:74:79:cb:ec:cf:82:3a:ef:19:14:55:66:c4:34:69:98: 52:ee:5c:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4l+QsnHl4/FN2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk ZTg2M2ZlYjAtNzBiNi00Y2QyLTgwOGUtZDc3OGQ3MTVkOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXvvehEJjGGPmUPg+4veYZ1n5tEpegwb3Xif xMKiRfo6/BgCVLNOse+8s7fM5H25vBA63qgegsqz6MLZsWUx+8YrEo68cyAhshmT GLOkSubTIIiPPawjTT3Si5K1lKFVECXYj/SzYz7WMAAfkRPFqufYe9ymECKwqgcy zweV5E9thz8eQp4FSg20534HKHFZ2+3DqsshhcuLsGUekqe+sKRpjy90torKAc74 sNZN0zUoagbfE65In9qiPAo6zxe12dedXF4E0oFLxCTu4tYn6qOGWXof3rGFjPez A/8w0iwLK97oe98EEdVZIdjDwQ/LI+Sj2d+ZQFkTyV9dky0CGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+miNwpywAt1APCnfcSpslXotPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkcjKNKFAKVMqEJaMj9xXc syKOHyQEZPV+K3Vxdv8W5HDSWEXdvd/8+9tPG9+eWD2neoUeZws7GAAv445uSFXh QMLAngUe6t/1bO7DjOFk/XmoMoxprTl8Rbqoa8YPMLPb6aTiGS9NQtqurlZhSwWx mrXpofguS9h8rX2/OmOsmF8Nc9lHlUId1snx3rGQ/4t3w05XUm2tBLmkFC9utcIR 3Oy1GqsHcgCNacZRJ77TW6/DnCa7OZNTj+uLgOY74SFr1JOqt+Zqammy1W9HAfjk zcNrjt7bHCKVkIcIy5RLBTPJE2gda5H/YL7fzHR5y+zPgjrvGRRVZsQ0aZhS7lwN -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:08 2026 by rpki-client