$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: rMj5q7uMviZhakaCnEXIq53o4fmezpVqK4StF6L4KyY= Subject key identifier: D3:4F:74:7D:3D:37:CA:D1:A0:BA:D7:AC:CA:C7:85:01:DF:FB:39:0E Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584D24E019D62119026988DB09A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C67 Signing time: Thu 12 Mar 2026 13:02:08 +0000 Manifest this update: Thu 12 Mar 2026 13:02:08 +0000 Manifest next update: Sat 14 Mar 2026 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: gqvk+YhyW0/E8WbWExmoduEmQd1AJKdoufVvXT0WLoE=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: 3ggJx5scmCLvwYngN5fZLHDcT5vY5Dx2It1Dbttpnbs=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: dE+L6tpJdYe5vQ5i/X8fMPIb+d1JRq4VMiXky1vuYd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:19:d6:21:19:02:69:88:db:09:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Mar 12 13:02:08 2026 GMT Not After : Mar 14 13:00:00 2026 GMT Subject: CN=657ad5e1-cf20-4eb3-9474-adb51edd5e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:43:42:c0:c6:6d:27:e6:a5:7a:2f:55:39: 2b:7e:3c:e3:2b:83:7d:ec:38:46:cc:8c:3e:0e:eb: b0:77:8e:5e:80:72:27:5e:0b:9f:62:a1:e2:ce:7d: 85:f6:af:2a:33:97:b6:47:49:1b:63:68:c2:f5:a8: cb:1e:29:06:24:4a:49:04:ea:49:32:50:c0:59:a9: fc:d0:66:d7:8c:95:d8:88:e1:a4:09:fd:7f:fa:37: 84:b1:71:f4:da:87:e3:26:f4:2a:bd:76:39:8f:f4: f7:73:22:c2:cd:9f:a7:33:ca:0b:df:a9:d3:e4:27: 8a:33:da:72:e9:e6:68:ad:55:50:26:46:e3:83:4d: 2e:64:07:c8:d3:e4:4a:e6:b3:35:25:aa:d8:41:c6: db:a8:36:3f:2a:3c:fd:d5:69:e5:3b:45:2b:71:f6: 95:d2:f3:2c:fc:49:d6:71:a0:c6:92:91:b6:04:81: 91:1a:bc:06:e4:df:c6:78:f9:99:ac:85:0f:69:dc: 1f:51:b5:f9:05:45:0c:17:c8:ba:de:58:fb:c9:4f: b1:06:17:7d:eb:44:e8:5c:fc:c9:a8:3d:a4:3e:72: b9:11:22:c8:d8:b1:98:44:3a:86:18:fc:39:0e:b5: 98:4d:55:45:29:52:be:dc:58:75:ae:14:b8:e6:c5: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4F:74:7D:3D:37:CA:D1:A0:BA:D7:AC:CA:C7:85:01:DF:FB:39:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:81:ac:db:fd:dd:59:96:b9:35:96:02:e8:bf:80:0d:30:bf: 28:40:c0:19:53:85:69:a4:e7:92:c8:87:c3:f8:2e:f0:97:33: 12:3c:56:c9:6d:f8:ce:23:9e:d8:16:6d:71:64:2d:2c:3e:35: b0:3b:3f:f5:29:bf:aa:d1:af:9d:96:50:03:80:40:33:0e:f0: b4:e4:e5:5a:f5:fd:6b:7d:26:4b:e7:49:83:45:f9:e5:17:dd: 9f:d4:03:7a:58:84:93:5c:58:7d:05:9f:c7:7d:3d:d0:91:7e: 15:86:55:d7:1b:a3:cb:05:5e:55:6f:31:6a:ce:08:c2:d8:5e: f3:84:d4:00:d0:c6:d8:f8:32:ee:b6:24:f5:05:db:96:f3:ef: 36:83:0c:42:fd:5c:03:fb:fc:8b:20:16:81:0d:f0:f9:56:c5: 60:db:c1:e4:f3:96:96:ee:b9:19:28:33:bd:45:33:19:8d:8a: 95:f2:c5:ab:a7:07:10:d7:6f:b2:34:8f:e8:d8:55:4a:4d:01: ba:46:5c:c0:cb:4a:61:b1:14:c7:7d:5f:61:4b:99:70:2a:b2: 68:69:c7:4b:a5:b7:e2:38:07:92:cf:e1:d4:fa:09:b6:8a:28: a8:51:80:60:6c:f9:b0:87:1e:8f:ce:d8:75:a8:01:6c:9e:44: 94:2f:96:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0k4BnWIRkCaYjbCagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDMxMjEzMDIwOFoXDTI2MDMxNDEzMDAwMFowLzEtMCsGA1UEAxMk NjU3YWQ1ZTEtY2YyMC00ZWIzLTk0NzQtYWRiNTFlZGQ1ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmctDQsDGbSfmpXovVTkrfjzjK4N97DhGzIw+ Duuwd45egHInXgufYqHizn2F9q8qM5e2R0kbY2jC9ajLHikGJEpJBOpJMlDAWan8 0GbXjJXYiOGkCf1/+jeEsXH02ofjJvQqvXY5j/T3cyLCzZ+nM8oL36nT5CeKM9py 6eZorVVQJkbjg00uZAfI0+RK5rM1JarYQcbbqDY/Kjz91WnlO0UrcfaV0vMs/EnW caDGkpG2BIGRGrwG5N/GePmZrIUPadwfUbX5BUUMF8i63lj7yU+xBhd960ToXPzJ qD2kPnK5ESLI2LGYRDqGGPw5DrWYTVVFKVK+3Fh1rhS45sUqrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNNPdH09N8rRoLrXrMrHhQHf+zkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2gazb/d1Zlrk1lgLov4AN ML8oQMAZU4VppOeSyIfD+C7wlzMSPFbJbfjOI57YFm1xZC0sPjWwOz/1Kb+q0a+d llADgEAzDvC05OVa9f1rfSZL50mDRfnlF92f1AN6WISTXFh9BZ/HfT3QkX4VhlXX G6PLBV5VbzFqzgjC2F7zhNQA0MbY+DLutiT1BduW8+82gwxC/VwD+/yLIBaBDfD5 VsVg28Hk85aW7rkZKDO9RTMZjYqV8sWrpwcQ12+yNI/o2FVKTQG6RlzAy0phsRTH fV9hS5lwKrJoacdLpbfiOAeSz+HU+gm2iiioUYBgbPmwhx6Pzth1qAFsnkSUL5YJ -----END CERTIFICATE-----Generated at Fri Mar 13 08:41:06 2026 by rpki-client