$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft File: ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft (raw, json) Hash identifier: If4HXFFhHwjZ+S+w7ZUxGBQsbwXyMkE6xg3KeL4gqg4= Subject key identifier: 95:32:E1:8E:38:6D:A5:6E:35:18:D4:6A:F7:27:1A:F3:A1:97:1A:23 Authority key identifier: 7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB Certificate issuer: /CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Certificate serial: 010D0C9F4328584D4C1267CFB5480B93CEC7B040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft Manifest number: 010D0C9F4328584ABED25002CD85F530472FFAEF Signing time: Thu 26 Mar 2026 14:00:03 +0000 Manifest this update: Thu 26 Mar 2026 14:00:03 +0000 Manifest next update: Sun 29 Mar 2026 14:00:00 +0000 Files and hashes: 1: 1a7be265-c5e9-32a9-9677-b65701a82f31.roa (hash: 2w0y5+j3n47rl+Yx3YlhaCly1SI9bHULaSpxH3lwC1E=) 2: ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl (hash: z24r5RuHvk80XWdd18Rz/cQS/W3d/OqrXp2W4dLyMJM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:12:67:cf:b5:48:0b:93:ce:c7:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Validity Not Before: Mar 26 14:00:03 2026 GMT Not After : Mar 29 14:00:00 2026 GMT Subject: CN=87d65e65-4112-441e-84ea-6203dafdbaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:7b:27:47:bc:07:cc:30:4c:7b:d5:ab:b5: 73:bb:74:0f:ed:f1:85:5f:d5:e5:1b:ca:32:74:e0: bb:79:99:3f:9f:03:66:53:00:fd:da:8e:ab:bc:1e: ef:9d:69:ae:ef:00:69:8e:66:83:37:0b:64:e3:11: 5a:3f:93:cb:db:6c:16:f0:4a:ff:0b:cb:0c:da:af: 75:61:4e:1f:e0:c3:6c:fe:17:1f:d5:77:1d:5a:0c: 8e:b7:98:3e:7f:41:03:eb:39:60:89:bf:da:3c:6b: 2b:9b:33:69:be:9a:47:6d:64:82:3d:54:f9:ea:ab: 56:96:15:b0:56:d9:de:88:b5:69:94:26:fe:c0:17: d5:bc:8e:37:86:14:33:cd:bd:2d:a4:73:da:a1:8b: ee:a9:4d:41:43:79:e4:08:b4:b3:ea:d5:f3:e3:6e: c3:51:04:c6:b0:df:a8:0d:6b:8f:1c:9f:23:34:6f: 22:04:08:04:58:91:f7:bf:8b:54:6c:86:10:cd:de: f6:01:5e:3b:9b:38:57:18:0e:c0:3b:1a:e2:0b:07: 26:34:a4:c1:00:b7:45:d8:e9:0f:53:74:06:af:be: 20:ea:fd:d1:cb:51:26:90:7c:25:06:d7:4d:75:82: 2d:c9:cc:e4:f9:4f:4f:e2:50:23:d8:b6:1a:c8:74: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:32:E1:8E:38:6D:A5:6E:35:18:D4:6A:F7:27:1A:F3:A1:97:1A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl X509v3 Authority Key Identifier: keyid:7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0e:e5:52:c5:8b:73:c4:42:4a:b5:da:f7:c9:e1:c8:c4:48: 37:a4:4c:f8:bc:13:be:65:79:bc:77:25:61:7b:0f:9f:0a:a3: aa:22:5f:a9:75:01:69:b0:c1:86:9f:9a:ee:7e:84:3f:d3:09: c1:98:6b:49:ad:63:13:6a:4b:c4:87:80:04:86:00:3b:56:0f: e0:fc:81:56:98:b5:50:3f:03:a3:15:0d:4d:f6:cd:29:d3:15: ba:72:41:99:7d:b0:84:d5:d3:13:75:fd:1e:4b:01:d7:a7:8e: 92:67:9b:7e:d8:30:84:eb:4a:5e:9b:4e:1c:e6:29:c2:a0:c1: d0:82:a8:06:ae:b9:94:2f:05:0d:77:bc:11:c6:0a:c8:3e:ac: 89:c2:aa:2c:bb:89:83:19:05:64:58:43:33:e2:20:e5:38:c6: ac:f6:e8:19:b9:88:20:21:3f:dc:5b:c5:4d:88:b0:16:90:3e: 62:e8:f5:ff:64:ac:f0:23:4b:b5:58:8a:71:e7:9e:d6:85:a2: cb:0a:80:4f:c9:cf:bc:d4:a9:51:11:74:97:cd:8a:e8:9a:64: f9:9a:d3:e6:46:44:26:a0:f1:5f:99:32:34:3b:1f:2b:44:54: 93:cd:96:a8:ce:8c:89:6d:8e:97:14:b5:d0:c7:f4:9e:0d:8b: ef:fc:1b:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MEmfPtUgLk87HsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0ZDc5YWEtZjlkZC00ZGQyLTk4ODYtNjY3NjcyNGU5 NjFmMB4XDTI2MDMyNjE0MDAwM1oXDTI2MDMyOTE0MDAwMFowLzEtMCsGA1UEAxMk ODdkNjVlNjUtNDExMi00NDFlLTg0ZWEtNjIwM2RhZmRiYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdZ7J0e8B8wwTHvVq7Vzu3QP7fGFX9XlG8oy dOC7eZk/nwNmUwD92o6rvB7vnWmu7wBpjmaDNwtk4xFaP5PL22wW8Er/C8sM2q91 YU4f4MNs/hcf1XcdWgyOt5g+f0ED6zlgib/aPGsrmzNpvppHbWSCPVT56qtWlhWw VtneiLVplCb+wBfVvI43hhQzzb0tpHPaoYvuqU1BQ3nkCLSz6tXz427DUQTGsN+o DWuPHJ8jNG8iBAgEWJH3v4tUbIYQzd72AV47mzhXGA7AOxriCwcmNKTBALdF2OkP U3QGr74g6v3Ry1EmkHwlBtdNdYItyczk+U9P4lAj2LYayHTDlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJUy4Y44baVuNRjUavcnGvOhlxojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRk NzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2NzI0ZTk2MWYvYWU0ZDc5YWEtZjlkZC00 ZGQyLTk4ODYtNjY3NjcyNGU5NjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWU0ZDc5YWEtZjlkZC00ZGQyLTk4 ODYtNjY3NjcyNGU5NjFmL2FlNGQ3OWFhLWY5ZGQtNGRkMi05ODg2LTY2NzY3MjRl OTYxZi5jcmwwHwYDVR0jBBgwFoAUeyt4m/mZhAAH/S4imKCjAK1u6cswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRkNzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2 NzI0ZTk2MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxDuVSxYtzxEJKtdr3yeHI xEg3pEz4vBO+ZXm8dyVhew+fCqOqIl+pdQFpsMGGn5rufoQ/0wnBmGtJrWMTakvE h4AEhgA7Vg/g/IFWmLVQPwOjFQ1N9s0p0xW6ckGZfbCE1dMTdf0eSwHXp46SZ5t+ 2DCE60pem04c5inCoMHQgqgGrrmULwUNd7wRxgrIPqyJwqosu4mDGQVkWEMz4iDl OMas9ugZuYggIT/cW8VNiLAWkD5i6PX/ZKzwI0u1WIpx557WhaLLCoBPyc+81KlR EXSXzYrommT5mtPmRkQmoPFfmTI0Ox8rRFSTzZaozoyJbY6XFLXQx/SeDYvv/BsP -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:49 2026 by rpki-client