$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft File: d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft (raw, json) Hash identifier: ZhN9TTyn6asXZaLrEnB587ClKspaj2yER0booi6DCLQ= Subject key identifier: 63:6A:1C:C5:F8:37:E7:93:E8:8A:FB:B9:FD:05:0A:30:C2:BE:9C:5C Authority key identifier: 20:34:56:18:D9:06:3E:0B:F7:97:4E:BF:B2:11:01:8E:9A:6C:59:F3 Certificate issuer: /CN=d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591 Certificate serial: 010D0C9F4328584D498346D4A060D6D03DFB3D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft Manifest number: 010D0C9F4328584B6972688B937C80E50E9E7F30 Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Sat 28 Mar 2026 16:00:00 +0000 Files and hashes: 1: 41a4494e-4fe2-3f0f-97f8-46f7bf8b25c2.roa (hash: aoFdMkXHWBZzfRwBpxGXv1F2EM28wd756VpMIojz1TY=) 2: d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.crl (hash: dfkbmKZggOrnVeA3GHzQh9JVF8zLDHXdu62pcY0D5MY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:46:d4:a0:60:d6:d0:3d:fb:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 28 16:00:00 2026 GMT Subject: CN=1d198cf7-ec63-4f24-9a1f-d59d7258b313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:c4:bf:64:00:16:33:98:73:aa:aa:9c:5c: c1:23:9d:c2:6d:cb:55:e5:4b:9d:35:86:c6:7c:dd: b5:c6:d0:f6:70:ea:0b:07:64:67:6f:f5:10:5b:d6: e0:77:67:bf:9e:63:dc:40:a5:2d:6f:19:0e:a2:e2: c0:09:35:75:42:14:28:b5:05:e8:1e:fe:97:ce:c7: be:79:97:de:a1:cb:9a:af:37:23:3f:22:7a:db:76: 4d:58:4f:b1:ec:72:d5:2b:19:04:fc:f3:8f:f5:65: c0:ea:fe:71:31:a2:50:30:e4:18:22:a8:85:73:1e: 2f:90:44:76:de:4c:cf:e9:d3:12:53:00:ef:e0:cf: 0f:d4:78:54:f6:bc:78:0b:99:07:56:73:e5:ad:57: 2a:50:7c:55:22:b2:e0:b5:9f:2b:1e:64:93:9a:98: bb:ce:17:ac:6e:d6:65:c2:35:8e:c2:94:ab:0e:a0: 83:5e:f5:a8:42:47:0d:4f:d9:a6:32:3f:81:0d:95: 70:d8:17:13:08:1f:e4:20:28:8c:a0:2f:47:69:73: 2a:ed:d6:e0:ed:83:b4:83:7d:61:89:0d:74:58:c6: 97:35:fe:b4:78:ca:f5:e3:74:f1:9b:19:24:75:70: 45:04:b9:60:32:e2:67:48:e1:2d:8e:dd:90:61:f2: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:1C:C5:F8:37:E7:93:E8:8A:FB:B9:FD:05:0A:30:C2:BE:9C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.crl X509v3 Authority Key Identifier: keyid:20:34:56:18:D9:06:3E:0B:F7:97:4E:BF:B2:11:01:8E:9A:6C:59:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8a:7e:93:e0:1c:83:24:d8:86:a9:10:1d:0c:7d:a3:11:2a: 84:f0:8c:2a:98:a5:ec:92:4a:51:25:bf:90:67:2e:07:36:6e: b6:e4:e3:57:31:2f:1f:0e:15:9d:2d:24:d1:82:ed:d5:af:f0: ec:1b:95:bd:94:f7:08:55:8b:04:5c:b9:29:df:59:07:b2:12: d5:0b:10:14:69:6a:77:b5:63:59:f2:ea:20:ad:4a:24:84:71: 6f:9b:a5:cc:73:06:c9:f8:6c:90:8d:89:7d:bb:f7:a2:8d:8b: a5:dd:de:4c:ea:76:7f:c8:47:81:23:e7:c6:73:2f:f4:ee:f7: cd:96:a1:ae:6e:84:4a:07:09:46:cd:5f:99:a3:a7:7a:4c:f2: 38:74:2a:91:d2:09:fa:19:c1:fb:56:77:8e:dc:39:ff:76:db: d4:13:80:7c:02:8a:b4:b4:71:b0:fa:bb:b8:bc:53:37:4b:7a: e1:36:d5:5a:c7:b1:93:b6:5e:53:ad:ed:54:51:25:e8:03:75: 0e:10:34:7d:a2:b6:87:34:61:59:b9:80:b6:26:78:b1:77:34: 73:6f:9d:30:b4:6d:6b:ed:bb:82:e7:78:f9:72:63:6f:1d:55: 2f:c0:6b:18:6d:d3:46:e9:64:02:d3:4a:60:ff:b1:d2:e3:17: cf:a7:02:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0bUoGDW0D37PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFhM2Q0Y2UtYTdmOC00ZWM5LThhM2ItZTQzNzhjNTli NTkxMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyODE2MDAwMFowLzEtMCsGA1UEAxMk MWQxOThjZjctZWM2My00ZjI0LTlhMWYtZDU5ZDcyNThiMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPEv2QAFjOYc6qqnFzBI53CbctV5UudNYbG fN21xtD2cOoLB2Rnb/UQW9bgd2e/nmPcQKUtbxkOouLACTV1QhQotQXoHv6Xzse+ eZfeocuarzcjPyJ623ZNWE+x7HLVKxkE/POP9WXA6v5xMaJQMOQYIqiFcx4vkER2 3kzP6dMSUwDv4M8P1HhU9rx4C5kHVnPlrVcqUHxVIrLgtZ8rHmSTmpi7zhesbtZl wjWOwpSrDqCDXvWoQkcNT9mmMj+BDZVw2BcTCB/kICiMoC9HaXMq7dbg7YO0g31h iQ10WMaXNf60eMr143TxmxkkdXBFBLlgMuJnSOEtjt2QYfJ2SQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGNqHMX4N+eT6Ir7uf0FCjDCvpxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWEz ZDRjZS1hN2Y4LTRlYzktOGEzYi1lNDM3OGM1OWI1OTEvZDFhM2Q0Y2UtYTdmOC00 ZWM5LThhM2ItZTQzNzhjNTliNTkxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFhM2Q0Y2UtYTdmOC00ZWM5LThh M2ItZTQzNzhjNTliNTkxL2QxYTNkNGNlLWE3ZjgtNGVjOS04YTNiLWU0Mzc4YzU5 YjU5MS5jcmwwHwYDVR0jBBgwFoAUIDRWGNkGPgv3l06/shEBjppsWfMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWEzZDRjZS1hN2Y4LTRlYzktOGEzYi1lNDM3 OGM1OWI1OTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnin6T4ByDJNiGqRAdDH2j ESqE8IwqmKXskkpRJb+QZy4HNm625ONXMS8fDhWdLSTRgu3Vr/DsG5W9lPcIVYsE XLkp31kHshLVCxAUaWp3tWNZ8uogrUokhHFvm6XMcwbJ+GyQjYl9u/eijYul3d5M 6nZ/yEeBI+fGcy/07vfNlqGuboRKBwlGzV+Zo6d6TPI4dCqR0gn6GcH7VneO3Dn/ dtvUE4B8Aoq0tHGw+ru4vFM3S3rhNtVax7GTtl5Tre1UUSXoA3UOEDR9oraHNGFZ uYC2JnixdzRzb50wtG1r7buC53j5cmNvHVUvwGsYbdNG6WQC00pg/7HS4xfPpwIr -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:45 2026 by rpki-client