$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: R7Fw77Iflv64b7LjnOeALSa1mceni5cSvc5s7eceVSA= Subject key identifier: A9:B6:6D:9E:B6:66:8E:03:AF:6D:A7:34:58:5E:45:E9:5F:A9:C3:BB Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584D481DEFE6AA6C71EC34964920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA9533731 Signing time: Wed 25 Mar 2026 04:00:04 +0000 Manifest this update: Wed 25 Mar 2026 04:00:04 +0000 Manifest next update: Sat 28 Mar 2026 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: XslhchhLIQD41WBcZoFgPCEc4gmLQ8JjRbvVhexaeEs=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: rYz9jOnIjPRIYqcYIsqi0t9BoaKwAtHEvn8tWASFHVQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:1d:ef:e6:aa:6c:71:ec:34:96:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Mar 25 04:00:04 2026 GMT Not After : Mar 28 04:00:00 2026 GMT Subject: CN=22f5d527-35fe-4967-88a6-7851a8863416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:7d:30:e6:75:ca:24:2d:2c:58:21:70:52: c6:d6:2a:45:1d:e6:22:0e:27:06:06:88:7e:2b:a7: a4:c0:55:18:5d:c1:f5:23:8b:0d:74:0e:5a:d5:c4: 3f:04:af:8c:f5:95:a4:30:eb:09:ea:88:ae:34:ef: 84:ad:6c:3f:8d:b8:58:d3:c9:c6:b0:fd:a3:d6:ea: 0a:ff:43:c7:95:ab:ed:b0:f1:ea:4d:22:1f:ea:ed: f8:0a:e0:f5:70:33:39:44:8c:3e:e9:6c:1b:15:0c: ef:85:c4:e4:55:9f:dd:e6:00:5c:5e:df:bb:53:88: b5:51:67:e3:9e:c8:fe:91:87:76:dc:6b:01:23:d0: fa:15:39:17:a5:4a:d8:7f:49:b6:50:78:86:e2:5c: 9a:9f:66:de:8a:5e:58:54:76:61:b0:bf:98:d1:4f: 66:17:43:89:be:68:e9:e8:60:ca:d1:b5:01:72:5a: ed:2a:83:17:48:e3:50:c6:39:08:9b:4a:19:21:d3: 65:7f:d8:ab:02:99:b3:4f:f3:40:3e:df:05:3d:3b: a4:97:cf:96:ad:fd:cd:bb:60:1c:8a:84:fa:a5:35: 29:59:03:d6:b6:d8:de:bb:73:0f:18:a6:ee:10:62: e5:18:ed:02:9c:32:d6:20:4a:e2:15:6d:14:95:68: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:6D:9E:B6:66:8E:03:AF:6D:A7:34:58:5E:45:E9:5F:A9:C3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ee:43:8a:34:14:e1:14:6e:b0:18:b7:06:94:38:c0:03:a7: b1:fe:8b:d0:4f:8f:c9:27:7f:76:34:39:63:58:c4:73:ad:fb: b3:41:f2:92:92:77:8b:cf:71:88:9b:1e:21:28:dc:99:3a:8e: 0f:ee:5e:59:bc:c7:7b:24:77:a7:a7:ba:68:62:eb:8d:40:ad: d5:a0:02:e0:67:2e:61:f6:82:eb:dd:77:52:51:b1:32:a9:43: a1:86:ac:d4:4e:50:6a:77:ea:93:d5:28:82:fa:96:ee:26:40: 65:d2:83:09:b4:db:2f:6c:a0:3f:8b:3f:fe:5b:2a:81:2e:0d: 1a:7e:15:16:99:6e:d6:23:31:99:3d:e7:0f:45:fd:26:0c:58: 45:0d:a9:98:39:24:6c:02:9c:0c:44:d6:80:40:e3:11:ce:7c: 89:d2:36:ce:c9:b8:4e:31:65:f5:9c:c7:3c:b0:fa:31:b4:d7: 67:16:2d:2c:8f:11:fd:29:26:89:66:a8:9d:77:34:e8:53:4a: 21:5c:d0:8c:e7:b2:8f:b7:59:c3:af:bc:25:2f:2c:cf:e7:26: b0:a4:59:95:a2:2d:f2:8d:57:8b:f7:25:99:87:f7:6c:79:a9: c8:d9:5f:0a:1c:6c:63:09:ca:9b:db:60:ba:42:ce:72:d1:c3: 23:55:e8:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IHe/mqmxx7DSWSSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI2MDMyNTA0MDAwNFoXDTI2MDMyODA0MDAwMFowLzEtMCsGA1UEAxMk MjJmNWQ1MjctMzVmZS00OTY3LTg4YTYtNzg1MWE4ODYzNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJJ9MOZ1yiQtLFghcFLG1ipFHeYiDicGBoh+ K6ekwFUYXcH1I4sNdA5a1cQ/BK+M9ZWkMOsJ6oiuNO+ErWw/jbhY08nGsP2j1uoK /0PHlavtsPHqTSIf6u34CuD1cDM5RIw+6WwbFQzvhcTkVZ/d5gBcXt+7U4i1UWfj nsj+kYd23GsBI9D6FTkXpUrYf0m2UHiG4lyan2beil5YVHZhsL+Y0U9mF0OJvmjp 6GDK0bUBclrtKoMXSONQxjkIm0oZIdNlf9irApmzT/NAPt8FPTukl8+Wrf3Nu2Ac ioT6pTUpWQPWttjeu3MPGKbuEGLlGO0CnDLWIEriFW0UlWgimQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKm2bZ62Zo4Dr22nNFheRelfqcO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO7kOKNBThFG6wGLcGlDjA A6ex/ovQT4/JJ392NDljWMRzrfuzQfKSkneLz3GImx4hKNyZOo4P7l5ZvMd7JHen p7poYuuNQK3VoALgZy5h9oLr3XdSUbEyqUOhhqzUTlBqd+qT1SiC+pbuJkBl0oMJ tNsvbKA/iz/+WyqBLg0afhUWmW7WIzGZPecPRf0mDFhFDamYOSRsApwMRNaAQOMR znyJ0jbOybhOMWX1nMc8sPoxtNdnFi0sjxH9KSaJZqiddzToU0ohXNCM57KPt1nD r7wlLyzP5yawpFmVoi3yjVeL9yWZh/dseanI2V8KHGxjCcqb22C6Qs5y0cMjVeif -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:58 2026 by rpki-client