$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft File: 5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft (raw, json) Hash identifier: /Hd3NQ+cG4jQsdnM0a+DH0PuvC8N3UXF16UjmZeMAF0= Subject key identifier: 47:47:E1:4A:9C:55:43:65:5A:9F:DA:00:B9:B3:83:6E:97:8D:4D:AD Authority key identifier: B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A Certificate issuer: /CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Certificate serial: 010D0C9F4328584D4AE89EE59C77CFF97196EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft Manifest number: 010D0C9F4328584B75FA95FD17C9A91A7358E16D Signing time: Thu 26 Mar 2026 04:00:03 +0000 Manifest this update: Thu 26 Mar 2026 04:00:03 +0000 Manifest next update: Sun 29 Mar 2026 04:00:00 +0000 Files and hashes: 1: 5370d318-ff79-3160-88d0-fc2272824d2f.roa (hash: 3tsPsIppgnkZlriHN1pLWZNdgZQ5GYzQY8ny8N65UrY=) 2: 5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl (hash: UEwq3ZVKm4PhdoynFe5Cmkr/r7JvzouQsLqjPaxruX4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:e8:9e:e5:9c:77:cf:f9:71:96:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Validity Not Before: Mar 26 04:00:03 2026 GMT Not After : Mar 29 04:00:00 2026 GMT Subject: CN=4df84dfe-1e78-40b1-9929-1f92e7c97493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:27:fd:82:b4:f9:8f:a3:51:43:63:ec:89: f2:8b:b6:5a:a9:98:89:3a:82:7c:e2:af:4c:f2:da: c3:cd:3c:94:40:13:9d:03:c6:74:89:4a:07:50:61: 4b:f1:6a:12:8f:fe:8d:15:5f:12:18:ec:b3:f7:db: be:b2:66:d6:01:f2:b0:93:43:95:57:e5:a1:f8:2a: 0c:5f:a2:c3:2e:bd:a5:71:08:c6:7e:d5:a3:d9:29: f7:e3:70:3c:a1:d4:83:47:22:3a:35:13:58:b1:a6: 0a:dc:51:81:cf:82:63:8a:12:ee:08:91:c4:ac:0e: ea:6a:1b:0b:5f:8a:df:da:37:8b:90:c0:ff:9e:29: 54:e5:98:5d:66:2e:c1:00:b8:85:3c:28:37:e1:d8: 2e:ed:3b:aa:b2:b4:20:b2:95:b5:4d:78:97:42:bc: 7e:fb:ab:33:ab:b8:e8:93:64:c3:04:08:da:ab:79: 04:5c:c0:59:96:84:73:d3:6b:42:0c:ca:4d:6d:3b: 38:c5:a9:55:81:34:a8:19:56:2d:35:1e:4d:dc:5a: 2c:3f:67:d4:4c:b6:96:bb:bd:c8:d3:56:8a:f4:2c: d7:6b:3b:c2:ed:8f:05:6d:a0:69:86:0d:de:8a:c7: 35:71:43:cf:fa:22:b7:cc:76:93:2f:b3:91:ba:db: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:E1:4A:9C:55:43:65:5A:9F:DA:00:B9:B3:83:6E:97:8D:4D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl X509v3 Authority Key Identifier: keyid:B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:34:bf:2c:4c:bc:c0:54:97:42:f8:b5:2b:a5:48:f9:22:4b: 56:9a:c6:e4:f9:1d:d3:bc:91:af:10:99:0d:d1:98:6f:0f:52: 69:d3:bf:cc:df:21:dd:a8:14:39:2d:65:55:2f:15:86:f3:d6: b1:4b:da:fa:9c:24:c3:cd:99:a4:c7:4c:06:6c:57:cb:a9:53: 1d:38:81:fa:b2:99:88:9e:02:be:07:69:40:2e:81:b9:81:b7: 0f:41:9b:61:46:8a:51:9a:da:92:98:dc:f8:8a:f3:e3:ec:5a: 10:56:5e:44:9d:2d:e6:69:d8:95:3d:23:b2:00:f8:01:7e:f4: 0a:14:d1:55:01:6c:2f:90:67:30:f1:24:22:a3:32:ca:34:ba: 40:09:f3:43:20:69:be:0a:2e:23:98:27:ad:b4:f1:34:91:9a: c0:9d:aa:86:8f:d6:b9:a0:4c:c9:f7:f4:36:52:74:be:86:8c: 9f:cc:31:2e:94:a9:9a:cc:ca:90:e9:38:a0:2c:aa:3c:06:53: 27:27:e6:e1:10:42:a3:20:c7:84:0b:2d:22:1b:6d:c9:7a:83: 45:63:30:c0:85:67:7c:b5:36:eb:f4:3f:f8:e4:1e:b5:5b:da: 91:ca:95:7d:29:de:d9:36:64:48:2e:ac:17:91:90:ff:ff:6b: a8:44:3e:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1K6J7lnHfP+XGW6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViMjViNmItOGZkZi00OWFhLThiODMtNTk1YTk0ZjQ0 ZjdlMB4XDTI2MDMyNjA0MDAwM1oXDTI2MDMyOTA0MDAwMFowLzEtMCsGA1UEAxMk NGRmODRkZmUtMWU3OC00MGIxLTk5MjktMWY5MmU3Yzk3NDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ion/YK0+Y+jUUNj7Inyi7ZaqZiJOoJ84q9M 8trDzTyUQBOdA8Z0iUoHUGFL8WoSj/6NFV8SGOyz99u+smbWAfKwk0OVV+Wh+CoM X6LDLr2lcQjGftWj2Sn343A8odSDRyI6NRNYsaYK3FGBz4JjihLuCJHErA7qahsL X4rf2jeLkMD/nilU5ZhdZi7BALiFPCg34dgu7TuqsrQgspW1TXiXQrx++6szq7jo k2TDBAjaq3kEXMBZloRz02tCDMpNbTs4xalVgTSoGVYtNR5N3FosP2fUTLaWu73I 01aK9CzXazvC7Y8FbaBphg3eisc1cUPP+iK3zHaTL7ORutvp/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEdH4UqcVUNlWp/aALmzg26XjU2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIy NWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVhOTRmNDRmN2UvNWViMjViNmItOGZkZi00 OWFhLThiODMtNTk1YTk0ZjQ0ZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWViMjViNmItOGZkZi00OWFhLThi ODMtNTk1YTk0ZjQ0ZjdlLzVlYjI1YjZiLThmZGYtNDlhYS04YjgzLTU5NWE5NGY0 NGY3ZS5jcmwwHwYDVR0jBBgwFoAUs7NzOmM6yq38yGjeXShecKySNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIyNWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVh OTRmNDRmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNNL8sTLzAVJdC+LUrpUj5 IktWmsbk+R3TvJGvEJkN0ZhvD1Jp07/M3yHdqBQ5LWVVLxWG89axS9r6nCTDzZmk x0wGbFfLqVMdOIH6spmIngK+B2lALoG5gbcPQZthRopRmtqSmNz4ivPj7FoQVl5E nS3madiVPSOyAPgBfvQKFNFVAWwvkGcw8SQiozLKNLpACfNDIGm+Ci4jmCettPE0 kZrAnaqGj9a5oEzJ9/Q2UnS+hoyfzDEulKmazMqQ6TigLKo8BlMnJ+bhEEKjIMeE Cy0iG23JeoNFYzDAhWd8tTbr9D/45B61W9qRypV9Kd7ZNmRILqwXkZD//2uoRD7A -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:59 2026 by rpki-client