$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft File: 2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft (raw, json) Hash identifier: oFx3x87yDaohE108JghQx355V1zFRykurGTVICTbM84= Subject key identifier: 68:57:7D:03:CC:3B:75:B4:F5:42:D8:19:33:A2:D8:85:5B:91:91:44 Authority key identifier: 8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40 Certificate issuer: /CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac Certificate serial: 010D0C9F4328584D4A1839FE8F9EF59E82AC9D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft Manifest number: 010D0C9F4328584A7724D73CE04227D5F6CD438A Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 1caa057a-5dd5-331e-920c-18a8bc208d96.roa (hash: GcIXgipUduWsktoPl+2ZIBF7pJwWsu4wwbmuentpM2o=) 2: 2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl (hash: aufgeIPtOu1rBfM6OA6E+n+5bxLdl+aELE8p+apxWG4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:39:fe:8f:9e:f5:9e:82:ac:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=48a6621c-81fc-4f61-bbe6-cb3275998734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:59:5c:a8:68:c4:4f:1b:55:20:d8:a8:6e:7d: cf:07:c1:c0:f0:67:47:4f:f6:b5:52:33:9e:35:f3: 83:d8:bb:20:d3:23:7b:37:b0:f2:d4:53:7f:ca:f5: 2e:7b:9c:39:72:9e:56:25:44:7b:02:73:63:75:c6: 83:f5:88:e6:72:16:54:8e:1e:f1:81:c1:b1:eb:e8: ff:7e:ad:4e:39:01:5c:6f:3a:f0:63:62:d5:18:56: 89:3c:6b:0c:88:9a:0f:ee:75:5c:e7:33:d0:32:29: 5e:34:3e:8f:81:75:bb:14:ca:2c:7f:36:e0:43:0d: a5:42:02:ff:20:f9:83:43:86:f3:c4:f0:64:5e:5f: 09:17:d8:43:9f:29:87:62:f7:8b:d2:9e:49:55:73: 0d:94:ae:6f:9b:c5:de:2c:af:d8:cb:70:1d:0d:79: 16:c4:59:b3:32:bf:3a:8e:d8:f9:16:33:6b:d2:55: 00:c1:03:b2:0a:cf:44:02:8b:34:ae:e2:b4:c0:f4: 99:56:f9:6d:29:5b:af:ec:26:be:38:68:70:d7:07: 1f:4e:1d:68:02:41:f3:64:db:68:a0:74:29:7f:bc: 57:5f:6d:44:6d:27:e8:4d:39:a2:1b:19:b7:4a:83: 63:f0:34:22:62:7e:46:51:f7:f0:c8:ca:60:14:b1: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:57:7D:03:CC:3B:75:B4:F5:42:D8:19:33:A2:D8:85:5B:91:91:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl X509v3 Authority Key Identifier: keyid:8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:74:b0:32:02:32:57:16:ab:e0:fd:e5:25:14:4b:27:8b:ba: 60:62:e6:7f:38:b8:08:20:92:37:0e:bc:43:16:f4:d8:db:c0: 1e:a8:f4:0b:cd:d7:77:5c:fd:5b:c5:12:f3:73:fb:af:8a:25: 5b:3a:de:12:c8:36:87:27:08:29:79:2f:b3:ec:23:c1:21:91: 47:5a:08:3d:b2:f8:43:ad:30:60:c7:df:c2:6b:be:5f:5b:96: 58:6e:c8:b8:5d:a2:26:10:85:7c:f5:14:e7:e9:10:60:0c:94: e3:b9:2b:45:17:64:bb:f6:42:e3:f1:af:3d:66:14:a5:c0:97: 70:5d:42:58:7b:74:fc:fe:7e:d7:1a:87:a9:f0:89:e7:cd:33: 23:a7:c9:88:a7:9a:a8:32:22:77:29:35:9c:0c:cb:9e:ef:b8: cf:af:02:f2:48:93:cb:93:31:82:35:52:a7:71:fa:cb:21:03: 96:18:09:2b:e4:e4:f7:63:32:5a:b9:a9:ba:1f:24:37:ae:9a: e9:bc:66:b0:b5:5e:fa:5d:d0:a8:ff:80:fb:51:4d:a7:55:85: c6:d7:16:ad:62:26:92:15:87:0f:5b:68:5a:ac:5f:d0:e4:12: 27:e6:c5:e1:fe:45:34:1d:d4:56:4c:64:a2:4e:7f:d9:6d:71: 09:70:a8:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDn+j571noKsnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUwOGQyZjYtNDE0OS00MTE1LWEwZjEtODFlMjRmZjU1 Y2FjMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk NDhhNjYyMWMtODFmYy00ZjYxLWJiZTYtY2IzMjc1OTk4NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFlcqGjETxtVINiobn3PB8HA8GdHT/a1UjOe NfOD2Lsg0yN7N7Dy1FN/yvUue5w5cp5WJUR7AnNjdcaD9YjmchZUjh7xgcGx6+j/ fq1OOQFcbzrwY2LVGFaJPGsMiJoP7nVc5zPQMileND6PgXW7FMosfzbgQw2lQgL/ IPmDQ4bzxPBkXl8JF9hDnymHYveL0p5JVXMNlK5vm8XeLK/Yy3AdDXkWxFmzMr86 jtj5FjNr0lUAwQOyCs9EAos0ruK0wPSZVvltKVuv7Ca+OGhw1wcfTh1oAkHzZNto oHQpf7xXX21EbSfoTTmiGxm3SoNj8DQiYn5GUffwyMpgFLGe7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGhXfQPMO3W09ULYGTOi2IVbkZFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZTA4 ZDJmNi00MTQ5LTQxMTUtYTBmMS04MWUyNGZmNTVjYWMvMmUwOGQyZjYtNDE0OS00 MTE1LWEwZjEtODFlMjRmZjU1Y2FjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmUwOGQyZjYtNDE0OS00MTE1LWEw ZjEtODFlMjRmZjU1Y2FjLzJlMDhkMmY2LTQxNDktNDExNS1hMGYxLTgxZTI0ZmY1 NWNhYy5jcmwwHwYDVR0jBBgwFoAUjX3/ztCmJuMQ6JbDsdLUVLp6KkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZTA4ZDJmNi00MTQ5LTQxMTUtYTBmMS04MWUy NGZmNTVjYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHdLAyAjJXFqvg/eUlFEsn i7pgYuZ/OLgIIJI3DrxDFvTY28AeqPQLzdd3XP1bxRLzc/uviiVbOt4SyDaHJwgp eS+z7CPBIZFHWgg9svhDrTBgx9/Ca75fW5ZYbsi4XaImEIV89RTn6RBgDJTjuStF F2S79kLj8a89ZhSlwJdwXUJYe3T8/n7XGoep8InnzTMjp8mIp5qoMiJ3KTWcDMue 77jPrwLySJPLkzGCNVKncfrLIQOWGAkr5OT3YzJauam6HyQ3rprpvGawtV76XdCo /4D7UU2nVYXG1xatYiaSFYcPW2harF/Q5BIn5sXh/kU0HdRWTGSiTn/ZbXEJcKi+ -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:10 2026 by rpki-client