$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft File: d41e310e-2b6f-4f90-9f70-bc303b64a823.mft (raw, json) Hash identifier: z+JGcgLR6u9upXK3WBbJx+LcN71m79dnBschLw5GgOk= Subject key identifier: C8:2B:5E:2C:DB:F0:86:94:11:A9:8D:25:EA:81:BB:29:6E:48:0D:DA Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 Certificate issuer: /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Certificate serial: 010D0C9F4328584D492AF0690DD4F915C8FED800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft Manifest number: 010D0C9F4328584A914D069C4B436A480CA623CB Signing time: Wed 25 Mar 2026 13:02:04 +0000 Manifest this update: Wed 25 Mar 2026 13:02:04 +0000 Manifest next update: Fri 27 Mar 2026 06:00:00 +0000 Files and hashes: 1: 14fe8f30-8678-31d1-911f-18215dcdb7b3.roa (hash: Ypj0hWKiLGfghTxB9rDVHVYdIW2cTRMPvx74HLM+654=) 2: 833210ac-a67b-3a10-82ef-cb43c989ed93.roa (hash: wIwmLACSZtbUu/RWX3THhmP5nsa5K+EPL0eETZXfdZw=) 3: 87bc001e-190b-3e44-a051-4ca709f13cec.roa (hash: kFkLvWNFhe2raMhXlPL5G8aXo1IX9AtrnHxrlwVW4Tk=) 4: d41e310e-2b6f-4f90-9f70-bc303b64a823.crl (hash: 407KPLkl429Dd8kzeRVAKIUn1JlSzKCPYgoFesJz174=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:f0:69:0d:d4:f9:15:c8:fe:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Validity Not Before: Mar 25 13:02:04 2026 GMT Not After : Mar 27 06:00:00 2026 GMT Subject: CN=4b81ccc1-a43b-41bf-b065-bd5ab0230cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:21:ff:62:d4:fa:3a:c5:63:d9:70:c4:21:e9: 57:87:87:90:95:5e:d1:79:51:01:e2:b8:e9:bf:d3: 97:da:0b:3a:79:9c:46:42:3c:27:b7:76:c6:ca:be: 40:66:94:e9:86:bd:22:04:d0:87:fa:7e:08:66:63: 70:82:66:43:34:b3:19:0e:ea:41:38:b2:b9:eb:09: 6a:d0:18:6b:be:60:57:ae:2c:f2:fe:dd:81:bf:d8: c9:7e:df:51:a7:da:18:98:c0:0d:49:b9:8e:3b:7c: f1:d2:00:28:5a:1d:0b:9e:45:9f:e4:14:a3:ce:ab: 7a:a5:3b:bc:f5:90:08:27:50:8a:ae:09:60:5b:e4: e8:b5:dd:b6:28:6f:0d:7a:37:19:66:13:af:7f:ad: e2:71:4a:4e:e1:4b:a0:39:9d:8a:fd:bf:bc:cd:c6: 87:26:53:2e:12:23:c0:ef:31:4d:32:2f:4e:47:af: ba:a9:8b:59:fc:ac:e4:0e:d0:0e:de:0b:29:f3:ea: 76:47:ad:2b:08:03:06:01:0c:88:ca:64:f6:06:2f: 6d:17:04:a2:2c:85:bf:a8:91:82:a3:1d:ed:c4:95: e9:ba:f3:67:e8:f3:42:d8:03:a0:79:0a:ec:72:e5: fd:89:52:b9:c5:df:94:58:32:dc:28:f7:88:0a:a2: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2B:5E:2C:DB:F0:86:94:11:A9:8D:25:EA:81:BB:29:6E:48:0D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl X509v3 Authority Key Identifier: keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:14:f8:56:1f:89:3f:7b:10:90:5d:2b:10:3f:c8:90:8d:77: d8:05:11:f2:98:bd:2d:74:3a:26:b6:5a:df:93:2d:77:1c:41: 8f:6d:99:6a:47:56:e9:bf:74:2c:b8:1d:9a:8b:8a:14:5e:4e: 7f:8a:ac:b1:fb:68:06:09:f2:2e:ec:69:ef:88:80:54:82:ae: 8d:87:9c:73:76:6b:3f:6d:39:e0:bd:2b:eb:e5:2c:05:d9:96: b6:1c:91:30:9d:3c:fe:e2:db:aa:72:03:b6:16:50:da:57:0d: 3c:c8:7a:05:ba:9e:50:6d:7d:80:46:e7:a0:f5:1f:81:a7:27: 67:49:27:7a:55:98:d5:e8:af:bb:9f:14:82:62:dc:2f:bd:20: 54:4f:16:3a:20:67:ee:cc:90:6c:fb:c8:a6:a4:0a:83:c0:3f: 49:eb:06:e4:ba:39:bd:f5:40:8d:be:c7:97:76:0f:24:41:a5: 60:72:ec:41:10:83:54:ed:b9:cc:34:af:aa:66:c1:e7:ba:6a: d9:37:fb:bd:59:2b:1a:da:89:3e:ce:fa:60:b4:4d:e1:22:93: 6c:e8:b1:f5:e0:37:ec:96:0a:11:ec:ec:e9:68:ac:1a:0b:aa: 8d:54:48:4a:a5:37:9e:76:85:a8:9d:27:d5:0d:90:94:ce:0a: cc:c8:e8:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKvBpDdT5Fcj+2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxZTMxMGUtMmI2Zi00ZjkwLTlmNzAtYmMzMDNiNjRh ODIzMB4XDTI2MDMyNTEzMDIwNFoXDTI2MDMyNzA2MDAwMFowLzEtMCsGA1UEAxMk NGI4MWNjYzEtYTQzYi00MWJmLWIwNjUtYmQ1YWIwMjMwY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CH/YtT6OsVj2XDEIelXh4eQlV7ReVEB4rjp v9OX2gs6eZxGQjwnt3bGyr5AZpTphr0iBNCH+n4IZmNwgmZDNLMZDupBOLK56wlq 0BhrvmBXrizy/t2Bv9jJft9Rp9oYmMANSbmOO3zx0gAoWh0LnkWf5BSjzqt6pTu8 9ZAIJ1CKrglgW+Totd22KG8NejcZZhOvf63icUpO4UugOZ2K/b+8zcaHJlMuEiPA 7zFNMi9OR6+6qYtZ/KzkDtAO3gsp8+p2R60rCAMGAQyIymT2Bi9tFwSiLIW/qJGC ox3txJXpuvNn6PNC2AOgeQrscuX9iVK5xd+UWDLcKPeICqI85wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMgrXizb8IaUEamNJeqBuyluSA3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFl MzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMwM2I2NGE4MjMvZDQxZTMxMGUtMmI2Zi00 ZjkwLTlmNzAtYmMzMDNiNjRhODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQxZTMxMGUtMmI2Zi00ZjkwLTlm NzAtYmMzMDNiNjRhODIzL2Q0MWUzMTBlLTJiNmYtNGY5MC05ZjcwLWJjMzAzYjY0 YTgyMy5jcmwwHwYDVR0jBBgwFoAU1x8CfQ7TMbr1xYDOtNKVMQcRuiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFlMzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMw M2I2NGE4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArFPhWH4k/exCQXSsQP8iQ jXfYBRHymL0tdDomtlrfky13HEGPbZlqR1bpv3QsuB2ai4oUXk5/iqyx+2gGCfIu 7GnviIBUgq6Nh5xzdms/bTngvSvr5SwF2Za2HJEwnTz+4tuqcgO2FlDaVw08yHoF up5QbX2ARueg9R+BpydnSSd6VZjV6K+7nxSCYtwvvSBUTxY6IGfuzJBs+8impAqD wD9J6wbkujm99UCNvseXdg8kQaVgcuxBEINU7bnMNK+qZsHnumrZN/u9WSsa2ok+ zvpgtE3hIpNs6LH14DfslgoR7OzpaKwaC6qNVEhKpTeedoWonSfVDZCUzgrMyOgk -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:02 2026 by rpki-client