$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft File: 2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft (raw, json) Hash identifier: 63G9Ld9RRM34tLlLZZPkahI8iMtveC+/J9NzE0S1K28= Subject key identifier: 9B:C3:81:44:BF:25:94:A3:78:8B:2F:55:60:EF:2F:FF:95:C7:1D:43 Authority key identifier: 64:06:22:A7:EE:D9:DE:63:88:95:7E:22:A7:88:90:DD:B8:3D:41:17 Certificate issuer: /CN=2a53afad-1629-4fa1-ac19-e8eb64b1e823 Certificate serial: 010D0C9F4328584D49657F7F735A693B96C04760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft Manifest number: 010D0C9F4328584B60ECAD892088CAAF5EC6EFB3 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 2a53afad-1629-4fa1-ac19-e8eb64b1e823.crl (hash: GbMEovQ7F40UqYfb0PHBpr24eLNIKH8yXRLLEalkCvo=) 2: 34d2b1c6-ca94-3c9d-bee8-f9cb20344ebf.roa (hash: wmiqAAA/CZw0DLaIEI6A4GGfJlOFYSclqRXrojKeXj4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7f:7f:73:5a:69:3b:96:c0:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53afad-1629-4fa1-ac19-e8eb64b1e823 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=8a21f5fb-56f7-4748-b2e1-ac055d55d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7c:66:10:2f:d7:83:3c:65:c8:b0:ed:b4:5d: da:80:a7:2c:ee:29:33:3a:8c:ef:95:bb:31:55:e6: a3:fa:81:ed:6e:17:56:e7:e9:6c:19:17:bd:8d:f7: 05:8f:1c:b9:0b:43:ac:ac:53:fb:98:6e:39:25:75: 5a:9e:17:22:b1:0e:57:83:c9:15:eb:cd:20:4a:e1: 4d:53:ef:ec:6f:9e:2e:1e:fb:ec:75:92:fc:a2:60: 69:14:63:85:20:ee:56:8c:89:ee:f4:30:b7:c4:d9: 03:84:f7:9b:d0:45:78:ba:90:b5:53:0d:70:ef:a2: 5d:76:e0:ce:b5:50:d3:6a:cf:3d:87:79:87:60:c2: 73:89:79:2e:a3:be:90:ee:0f:f5:57:ce:32:ab:e8: 20:ec:01:60:91:3c:6d:94:f3:d3:a6:6a:af:ba:fc: dd:66:19:39:e2:d8:f7:4a:e4:2b:06:85:c9:d2:d7: 13:56:d1:06:60:41:75:56:2f:31:4a:17:4d:3c:a0: 64:3a:eb:0c:40:c2:ab:54:82:e8:99:37:ae:5f:7c: 2c:04:f6:29:81:a6:f3:03:96:ae:b2:5c:90:7f:d0: 18:04:f8:fe:ef:4b:4a:b2:7a:af:83:3c:12:62:97: 63:cf:8c:a5:f8:46:cf:68:d4:ab:ed:90:09:7e:2e: c2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C3:81:44:BF:25:94:A3:78:8B:2F:55:60:EF:2F:FF:95:C7:1D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.crl X509v3 Authority Key Identifier: keyid:64:06:22:A7:EE:D9:DE:63:88:95:7E:22:A7:88:90:DD:B8:3D:41:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:36:59:56:c3:0f:50:f6:ea:c5:f5:d6:7d:d7:5b:c5:77:73: 60:e2:ad:d4:c3:47:fd:a4:46:ac:78:70:06:9a:49:2c:a0:18: 43:86:57:9a:a3:fb:3a:35:fd:7e:79:66:44:67:e6:fd:54:cb: c8:e6:8c:9e:83:f0:84:01:68:54:59:2b:9b:d1:5f:48:30:5e: 59:eb:13:e7:24:77:b6:e4:b8:85:b1:41:91:6c:1f:4e:3d:1b: 0f:8a:3f:2e:fe:c0:de:f6:49:5b:e1:88:f9:50:4a:4e:49:24: e1:47:a4:be:9f:77:5c:b4:b3:67:77:e9:bd:de:6b:a4:12:e0: 61:fc:8c:46:66:52:5f:bb:e6:d4:1a:60:88:71:79:09:f0:d2: a3:71:b8:6c:b7:fe:9a:ee:0a:f4:f9:fb:e1:76:57:96:ff:d3: 6b:58:a9:f8:65:ff:90:db:51:53:8f:95:e1:a6:8d:5a:ab:48: ca:7b:bd:c9:30:4a:37:dc:bd:86:e9:34:78:c3:d3:5e:5d:a5: 7a:a5:c2:48:cd:b8:5a:db:a9:64:cd:69:0e:fb:80:e8:b3:3c: 39:36:4b:52:c7:eb:63:4f:71:6a:55:76:1b:fd:d2:6a:10:12: 37:1f:0f:6c:cf:3f:85:10:71:62:cc:c1:8d:de:b4:ad:fe:d7: a4:34:c5:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX9/c1ppO5bAR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1M2FmYWQtMTYyOS00ZmExLWFjMTktZThlYjY0YjFl ODIzMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk OGEyMWY1ZmItNTZmNy00NzQ4LWIyZTEtYWMwNTVkNTVkOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnxmEC/XgzxlyLDttF3agKcs7ikzOozvlbsx Veaj+oHtbhdW5+lsGRe9jfcFjxy5C0OsrFP7mG45JXVanhcisQ5Xg8kV680gSuFN U+/sb54uHvvsdZL8omBpFGOFIO5WjInu9DC3xNkDhPeb0EV4upC1Uw1w76JdduDO tVDTas89h3mHYMJziXkuo76Q7g/1V84yq+gg7AFgkTxtlPPTpmqvuvzdZhk54tj3 SuQrBoXJ0tcTVtEGYEF1Vi8xShdNPKBkOusMQMKrVILomTeuX3wsBPYpgabzA5au slyQf9AYBPj+70tKsnqvgzwSYpdjz4yl+EbPaNSr7ZAJfi7CCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJvDgUS/JZSjeIsvVWDvL/+Vxx1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYTUz YWZhZC0xNjI5LTRmYTEtYWMxOS1lOGViNjRiMWU4MjMvMmE1M2FmYWQtMTYyOS00 ZmExLWFjMTktZThlYjY0YjFlODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmE1M2FmYWQtMTYyOS00ZmExLWFj MTktZThlYjY0YjFlODIzLzJhNTNhZmFkLTE2MjktNGZhMS1hYzE5LWU4ZWI2NGIx ZTgyMy5jcmwwHwYDVR0jBBgwFoAUZAYip+7Z3mOIlX4ip4iQ3bg9QRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYTUzYWZhZC0xNjI5LTRmYTEtYWMxOS1lOGVi NjRiMWU4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0NllWww9Q9urF9dZ911vF d3Ng4q3Uw0f9pEaseHAGmkksoBhDhleao/s6Nf1+eWZEZ+b9VMvI5oyeg/CEAWhU WSub0V9IMF5Z6xPnJHe25LiFsUGRbB9OPRsPij8u/sDe9klb4Yj5UEpOSSThR6S+ n3dctLNnd+m93mukEuBh/IxGZlJfu+bUGmCIcXkJ8NKjcbhst/6a7gr0+fvhdleW /9NrWKn4Zf+Q21FTj5Xhpo1aq0jKe73JMEo33L2G6TR4w9NeXaV6pcJIzbha26lk zWkO+4Doszw5NktSx+tjT3FqVXYb/dJqEBI3Hw9szz+FEHFizMGN3rSt/tekNMVE -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:35 2026 by rpki-client