$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: zAdNzxaDip8tw1O1fp+TrtYWYCG6iqtMIwvi2/fkcsE= Subject key identifier: A5:26:F1:A6:CA:98:61:8E:33:31:2C:FC:D9:1B:73:6E:B3:83:00:A5 Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584D49A10ED47B0BEF85DB0B5180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D7029 Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Sat 28 Mar 2026 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: u+7Do7tGHdgyZWSmpOsyWLenIGntJdnx5O20GJmm3BU=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: 7A91bIuF1zmMgdnzv/6r3cAbg8Y1AIcvXqvPpnJGhzQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0e:d4:7b:0b:ef:85:db:0b:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 28 17:00:00 2026 GMT Subject: CN=99bfa5ef-6609-48ef-b339-ab4bb969bc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:80:dc:c4:fc:2c:4d:55:8b:12:5f:79:16: f6:24:0a:48:50:55:0d:75:ed:62:25:7b:9a:af:7d: 15:97:e1:33:f2:a3:7e:f8:38:69:23:36:5b:6f:42: 57:70:88:e3:8d:8a:fa:16:2f:f8:84:34:67:21:7c: 1d:02:2a:86:68:60:3c:ba:ab:6b:47:5a:31:76:91: e3:76:1b:b9:e9:12:f2:3b:50:45:80:a6:d4:63:06: 8a:14:af:32:f3:58:42:89:26:b8:82:28:2f:c7:ff: 9c:bd:1b:98:51:0a:fe:05:e7:59:20:b3:1b:61:f0: 9a:37:0b:a4:5c:43:76:b7:0e:6b:93:15:1d:6a:af: f8:3d:1d:a8:91:5c:7d:c4:4c:d7:ba:7d:e5:d1:d7: 6d:6f:53:07:d6:db:28:7d:54:7d:7f:57:25:81:7c: ff:5e:3a:30:a3:ac:0f:5c:79:dd:9f:e3:7d:50:cd: 86:ee:aa:3d:47:6a:5f:19:45:58:ca:da:e0:28:b4: 40:aa:02:b2:a2:dd:46:e8:9f:2b:f3:66:7b:67:0e: d8:d4:5f:c0:6a:6e:e9:20:0e:74:ed:46:09:87:48: b8:55:09:b6:43:7c:75:93:cd:e7:7c:61:28:73:ff: 82:bd:1c:08:a3:28:45:c6:ee:d0:b4:35:c7:3e:38: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:26:F1:A6:CA:98:61:8E:33:31:2C:FC:D9:1B:73:6E:B3:83:00:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bc:28:32:34:f9:a6:9b:6a:be:10:7f:80:58:05:8f:09:c9: 71:9b:c8:d4:63:69:5a:2a:68:ca:59:5d:36:bf:30:ca:bc:00: 45:28:8c:46:c6:e1:1d:dd:14:6a:25:cc:13:65:77:56:9b:05: c6:2e:74:9d:b3:96:72:63:fe:3b:62:ad:b5:ac:8c:0c:45:cf: 8b:e7:06:ca:ea:d0:89:eb:8c:9f:df:0a:e2:f8:66:73:f5:a9: 01:ae:5f:82:1a:af:f8:d7:41:62:02:e7:df:42:49:42:2c:3e: d8:f5:e1:30:66:19:f3:f7:b2:27:a5:cd:54:3c:6e:58:1c:69: 1f:0e:f5:e8:6d:a2:ed:74:65:21:38:9c:d2:9f:85:d9:7b:0e: f9:09:c1:ce:90:7c:18:a8:7d:fe:b7:ff:ad:26:78:20:27:6d: 1b:a6:e7:e9:c5:6a:6c:c7:ad:9a:31:03:8c:70:63:8d:66:cb: d9:d5:2e:aa:16:b5:cb:12:95:f1:67:c5:d9:56:5d:6f:24:98: 94:49:4c:c7:5d:11:cb:2c:26:c9:c2:8e:b1:e0:38:38:e3:c5: 06:08:1b:04:f8:a2:15:eb:86:c9:b0:cf:d9:87:7d:e3:ee:12: 16:7c:7d:b9:3b:46:76:a2:ce:fb:67:e4:fb:29:9c:6e:a6:7f: 6e:1d:eb:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ7UewvvhdsLUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyODE3MDAwMFowLzEtMCsGA1UEAxMk OTliZmE1ZWYtNjYwOS00OGVmLWIzMzktYWI0YmI5NjliYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIiA3MT8LE1VixJfeRb2JApIUFUNde1iJXua r30Vl+Ez8qN++DhpIzZbb0JXcIjjjYr6Fi/4hDRnIXwdAiqGaGA8uqtrR1oxdpHj dhu56RLyO1BFgKbUYwaKFK8y81hCiSa4gigvx/+cvRuYUQr+BedZILMbYfCaNwuk XEN2tw5rkxUdaq/4PR2okVx9xEzXun3l0ddtb1MH1tsofVR9f1clgXz/Xjowo6wP XHndn+N9UM2G7qo9R2pfGUVYytrgKLRAqgKyot1G6J8r82Z7Zw7Y1F/Aam7pIA50 7UYJh0i4VQm2Q3x1k83nfGEoc/+CvRwIoyhFxu7QtDXHPjgH2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKUm8abKmGGOMzEs/Nkbc26zgwClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAevCgyNPmmm2q+EH+AWAWP Cclxm8jUY2laKmjKWV02vzDKvABFKIxGxuEd3RRqJcwTZXdWmwXGLnSds5ZyY/47 Yq21rIwMRc+L5wbK6tCJ64yf3wri+GZz9akBrl+CGq/410FiAuffQklCLD7Y9eEw Zhnz97Inpc1UPG5YHGkfDvXobaLtdGUhOJzSn4XZew75CcHOkHwYqH3+t/+tJngg J20bpufpxWpsx62aMQOMcGONZsvZ1S6qFrXLEpXxZ8XZVl1vJJiUSUzHXRHLLCbJ wo6x4Dg448UGCBsE+KIV64bJsM/Zh33j7hIWfH25O0Z2os77Z+T7KZxupn9uHevL -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:32 2026 by rpki-client