$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: aegQ1z3aTZJ01dd3sNwydgs0pF+wpv0yIAgQWiYtJVA= Subject key identifier: 1D:93:9C:62:80:86:77:10:FE:FA:78:DF:12:AF:49:CD:F0:33:9E:4A Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584D4CE2DB2E778F67F3AA738C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079A99 Signing time: Thu 26 Mar 2026 21:00:04 +0000 Manifest this update: Thu 26 Mar 2026 21:00:04 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: x/NyMAPL3Hvboyty+O5d++vrK2U8nd02u2iD3P3IP+0=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: jKC27pyMI/3aDf82xfTsk5FPxXSQsYlEaHhsl553p0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:e2:db:2e:77:8f:67:f3:aa:73:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Mar 26 21:00:04 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=31323fd0-5ec6-47ea-8820-0c497d14b782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:1b:d2:c4:46:b8:dc:9e:53:86:24:06:e2: b8:df:5d:29:0e:fc:c7:8b:fe:c2:70:4b:5d:77:e8: ee:9c:3d:43:06:94:8e:76:b1:39:9e:fd:c7:66:34: 0d:e6:96:29:45:6f:79:46:45:bf:a7:d2:50:16:6d: 83:97:7a:a7:f5:ac:6b:bb:f2:5b:98:23:5a:d8:55: 70:4e:97:0d:1e:34:5e:08:1d:d6:7a:ea:bb:a4:49: 9a:7e:a2:bd:ca:3c:cd:a7:6e:a5:1a:9b:68:12:27: 05:2f:48:61:5c:30:bb:6a:b9:35:00:83:9c:7b:5c: d5:a5:d3:bb:97:b7:a5:06:24:7d:b1:a7:3b:bf:12: e2:3f:21:c8:c9:a8:c3:5d:a7:3e:9c:45:b8:fe:31: 2d:de:65:27:8b:29:7b:3a:0a:20:d8:de:ef:38:99: 18:1d:75:41:06:8d:66:74:59:49:f5:c0:6e:2b:a9: e5:35:09:05:eb:32:63:96:db:93:12:90:1e:3c:fa: 28:bc:54:1f:35:d4:75:45:59:d0:73:fe:13:69:c3: 33:4d:d4:09:b6:b7:7c:d1:dd:67:fe:b9:3f:26:ad: 79:25:1d:33:a7:5c:91:70:8e:11:ae:7f:66:44:29: 60:11:2f:04:67:93:0b:25:da:1f:f1:87:0a:b9:cf: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:93:9C:62:80:86:77:10:FE:FA:78:DF:12:AF:49:CD:F0:33:9E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ab:2a:5f:da:b0:3d:8d:51:d9:b5:00:47:be:6e:97:7c:8e: 19:d0:81:37:03:6f:6d:e5:b9:02:9e:9e:19:23:d8:d6:cd:ce: a1:8e:d0:17:35:17:0b:b1:c1:13:7f:1c:b7:be:9d:59:99:63: 81:0a:02:38:17:63:44:24:1c:24:91:e5:2e:3b:a8:79:f9:c7: 9e:a3:33:c9:01:48:50:53:6e:9a:bc:4a:51:83:24:b4:be:04: 6a:9d:c5:ce:53:ad:ad:77:15:42:2c:7b:38:29:ee:5a:d8:c1: 7f:f6:72:dc:36:91:46:66:3f:c3:26:b4:8c:6e:0c:b9:a4:39: 96:85:d8:b1:e0:61:ae:c2:d6:f9:b6:df:46:fb:f7:c0:b4:c9: e9:98:04:01:e6:b4:56:bc:0d:3f:5b:5d:4f:0f:ba:a2:ba:77: 96:b9:e1:77:86:2a:c7:9d:c3:1c:5f:b5:80:67:56:e7:39:41: c4:52:0c:91:f2:c6:3b:86:f8:9e:dc:cd:ba:16:07:7e:40:67: 49:ec:16:86:d5:fd:32:39:c3:6f:d0:c8:e2:5d:4b:20:20:ad: db:83:84:81:c1:be:4e:85:93:7f:5e:fb:a0:89:67:c6:62:91: 51:9e:a5:bd:4c:97:7a:39:04:89:02:41:56:a5:0b:d8:1b:1c: 84:94:93:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1M4tsud49n86pzjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDMyNjIxMDAwNFoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk MzEzMjNmZDAtNWVjNi00N2VhLTg4MjAtMGM0OTdkMTRiNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBgb0sRGuNyeU4YkBuK4310pDvzHi/7CcEtd d+junD1DBpSOdrE5nv3HZjQN5pYpRW95RkW/p9JQFm2Dl3qn9axru/JbmCNa2FVw TpcNHjReCB3Weuq7pEmafqK9yjzNp26lGptoEicFL0hhXDC7ark1AIOce1zVpdO7 l7elBiR9sac7vxLiPyHIyajDXac+nEW4/jEt3mUniyl7Ogog2N7vOJkYHXVBBo1m dFlJ9cBuK6nlNQkF6zJjltuTEpAePPoovFQfNdR1RVnQc/4TacMzTdQJtrd80d1n /rk/Jq15JR0zp1yRcI4Rrn9mRClgES8EZ5MLJdof8YcKuc+MOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB2TnGKAhncQ/vp43xKvSc3wM55KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaqypf2rA9jVHZtQBHvm6X fI4Z0IE3A29t5bkCnp4ZI9jWzc6hjtAXNRcLscETfxy3vp1ZmWOBCgI4F2NEJBwk keUuO6h5+ceeozPJAUhQU26avEpRgyS0vgRqncXOU62tdxVCLHs4Ke5a2MF/9nLc NpFGZj/DJrSMbgy5pDmWhdix4GGuwtb5tt9G+/fAtMnpmAQB5rRWvA0/W11PD7qi uneWueF3hirHncMcX7WAZ1bnOUHEUgyR8sY7hvie3M26Fgd+QGdJ7BaG1f0yOcNv 0MjiXUsgIK3bg4SBwb5OhZN/XvugiWfGYpFRnqW9TJd6OQSJAkFWpQvYGxyElJMY -----END CERTIFICATE-----Generated at Fri Mar 27 20:35:14 2026 by rpki-client