$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft File: 2a29d871-a08a-4114-af86-3cc6d04de0e1.mft (raw, json) Hash identifier: fSpQYzGJzcjAfQ1ymQ/IBdzBzD2kYQgzIlcslN9PPAc= Subject key identifier: 3B:CF:82:DD:94:EC:CA:6D:3C:73:FF:04:A2:AE:6A:EE:EF:9B:12:AE Authority key identifier: 36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 Certificate issuer: /CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Certificate serial: 010D0C9F4328584D4983499CE7F67D493A8CF8E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft Manifest number: 010D0C9F4328584B6106719C2859B48B53AAC538 Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 2a29d871-a08a-4114-af86-3cc6d04de0e1.crl (hash: +jluyMdQZoXqSc/dEE/8kjNfy4l/JsyQUbQguZCKMd8=) 2: 3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa (hash: lE8Tv02EHOfPQrsJdt1peByH9b1F3uzqwlBkgsEej+A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:49:9c:e7:f6:7d:49:3a:8c:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=6d40b776-5fb2-4433-8772-801d1a2b348a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:4a:8d:18:e9:2a:36:f3:09:e9:e9:ae:9f: 90:cb:d3:20:43:55:e4:90:0a:ff:d1:04:61:ad:91: 63:e9:39:2b:50:d5:e8:8f:78:92:6a:6d:49:8e:ce: db:12:fb:85:f8:19:ab:bf:d1:1f:ef:8a:7d:3d:e0: aa:1b:67:57:3a:6a:85:28:15:04:0c:24:b6:4b:bd: 15:78:79:f4:f0:91:d6:9c:0d:a3:25:91:e8:81:6b: b5:5a:e0:cc:e9:1c:cb:9b:30:36:06:97:2d:c6:f8: c2:f4:19:ad:29:bb:f3:53:9c:66:f0:3a:bf:ba:f5: db:18:3c:31:32:66:30:40:9c:e1:8e:72:ab:f2:44: 28:a2:df:aa:3e:2a:ac:95:b1:76:d7:f8:cc:16:70: 97:f0:fc:2c:7c:cc:08:a4:c2:23:b9:e3:e5:6f:6c: ad:9c:bf:52:01:df:92:f7:c5:82:79:20:7b:1a:ae: 99:49:70:09:d0:06:4a:0f:11:01:ab:1f:18:e7:36: aa:23:35:bd:0c:c6:9d:b7:80:78:d1:cc:1c:59:e4: c7:4b:49:d5:ec:80:94:6b:d4:26:9a:9e:f1:bf:64: 92:5e:b0:fd:15:9a:9a:35:e9:b6:c8:63:15:4a:67: 6e:94:c8:19:24:d9:38:2a:1a:a9:47:07:bc:b3:08: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CF:82:DD:94:EC:CA:6D:3C:73:FF:04:A2:AE:6A:EE:EF:9B:12:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl X509v3 Authority Key Identifier: keyid:36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:19:2d:cf:e7:31:e4:0f:c6:58:52:57:9e:eb:a4:b5:12:79: 42:b7:98:fa:53:46:eb:d1:e3:f5:f1:8e:98:41:0e:0b:e0:f9: 32:4b:ac:7b:5f:48:dd:0f:a5:d6:03:71:1f:17:e5:dc:5c:59: db:16:a3:25:8e:54:b2:64:27:7d:a7:84:12:36:9d:e3:29:80: 0d:cf:5f:50:9c:91:29:ac:27:0d:8c:36:7e:f4:9f:e6:f0:03: 6f:4b:4d:f5:0c:93:d3:c5:86:2f:b0:95:7c:7e:f2:b7:6f:73: 4b:60:49:45:52:52:26:53:3e:52:81:21:64:ce:ce:5a:86:0b: bf:71:60:f8:fe:80:19:ba:04:cc:0d:05:d3:43:7c:1e:2e:37: 9e:87:1c:ab:86:ed:bb:ce:a2:29:39:d4:24:0c:47:a4:1a:76: 4e:9a:c4:ef:63:15:0e:75:6f:ad:04:60:72:f7:76:3d:58:1e: ed:e5:33:ae:e8:34:f6:27:b7:41:8a:87:13:5d:bc:ad:b4:df: 72:5d:a0:2c:3d:54:44:03:43:f4:19:71:6d:b4:b5:c1:29:d1: db:33:26:6a:9d:0e:c9:04:ab:82:de:3c:9d:0a:22:41:55:e5: d6:11:37:84:fa:76:a5:29:d8:98:ce:1c:27:b1:dc:49:9a:f9: 02:ff:18:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0mc5/Z9STqM+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOWQ4NzEtYTA4YS00MTE0LWFmODYtM2NjNmQwNGRl MGUxMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk NmQ0MGI3NzYtNWZiMi00NDMzLTg3NzItODAxZDFhMmIzNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj5KjRjpKjbzCenprp+Qy9MgQ1XkkAr/0QRh rZFj6TkrUNXoj3iSam1Jjs7bEvuF+Bmrv9Ef74p9PeCqG2dXOmqFKBUEDCS2S70V eHn08JHWnA2jJZHogWu1WuDM6RzLmzA2BpctxvjC9BmtKbvzU5xm8Dq/uvXbGDwx MmYwQJzhjnKr8kQoot+qPiqslbF21/jMFnCX8PwsfMwIpMIjuePlb2ytnL9SAd+S 98WCeSB7Gq6ZSXAJ0AZKDxEBqx8Y5zaqIzW9DMadt4B40cwcWeTHS0nV7ICUa9Qm mp7xv2SSXrD9FZqaNem2yGMVSmdulMgZJNk4KhqpRwe8swiulQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDvPgt2U7MptPHP/BKKuau7vmxKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5 ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2ZDA0ZGUwZTEvMmEyOWQ4NzEtYTA4YS00 MTE0LWFmODYtM2NjNmQwNGRlMGUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmEyOWQ4NzEtYTA4YS00MTE0LWFm ODYtM2NjNmQwNGRlMGUxLzJhMjlkODcxLWEwOGEtNDExNC1hZjg2LTNjYzZkMDRk ZTBlMS5jcmwwHwYDVR0jBBgwFoAUNqECD3qHkM7KFhMPC6avuEeW9jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2 ZDA0ZGUwZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJGS3P5zHkD8ZYUlee66S1 EnlCt5j6U0br0eP18Y6YQQ4L4PkyS6x7X0jdD6XWA3EfF+XcXFnbFqMljlSyZCd9 p4QSNp3jKYANz19QnJEprCcNjDZ+9J/m8ANvS031DJPTxYYvsJV8fvK3b3NLYElF UlImUz5SgSFkzs5ahgu/cWD4/oAZugTMDQXTQ3weLjeehxyrhu27zqIpOdQkDEek GnZOmsTvYxUOdW+tBGBy93Y9WB7t5TOu6DT2J7dBiocTXbyttN9yXaAsPVREA0P0 GXFttLXBKdHbMyZqnQ7JBKuC3jydCiJBVeXWETeE+nalKdiYzhwnsdxJmvkC/xgO -----END CERTIFICATE-----Generated at Thu Mar 26 04:26:50 2026 by rpki-client