$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft File: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft (raw, json) Hash identifier: UIkZ5+Ae+f6JGgvEOz/mk7kEE9HAWBDC1+f7Jz01reY= Subject key identifier: 01:0F:2A:C0:92:9A:A1:D2:B2:8B:8F:68:BB:7F:D4:CB:CA:51:B0:C3 Authority key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Certificate issuer: /CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Certificate serial: 010D0C9F4328584D4CC524559842C33B2FCE8800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft Manifest number: 010D0C9F43285843B9909726536085C0C7BE7D83 Signing time: Thu 26 Mar 2026 20:00:09 +0000 Manifest this update: Thu 26 Mar 2026 20:00:09 +0000 Manifest next update: Sun 29 Mar 2026 20:00:00 +0000 Files and hashes: 1: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl (hash: mZuloXfdVD5wWHpTZ56ns2xQSh6WoiV6RJwpwusI0dE=) 2: 5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa (hash: oCHAXcpCa5g80iIpdHivVnK1DRj1bXosXWc2gF0xLQI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:c5:24:55:98:42:c3:3b:2f:ce:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Validity Not Before: Mar 26 20:00:09 2026 GMT Not After : Mar 29 20:00:00 2026 GMT Subject: CN=72fac633-4cf3-44c2-825f-706cb332d3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:4f:7d:31:86:3e:4e:c9:d2:e4:d0:67:06: cc:f1:f6:15:40:12:68:92:ba:59:b4:b2:6d:57:1f: 0d:be:ef:c1:12:59:b4:a2:ef:77:f4:1e:60:5f:14: e3:c4:45:27:b7:83:11:bc:c0:85:a1:9d:f2:9e:05: 29:19:96:4b:bd:51:ff:9f:a0:81:b4:6e:d1:d1:6c: 1f:f7:a4:8d:25:21:c8:2f:a9:0d:94:f4:1f:83:fe: a1:16:d0:10:8a:38:04:b4:15:cc:40:8d:97:b7:81: e9:10:87:80:b1:33:12:c9:10:02:44:70:7c:f0:6d: 12:38:1c:22:58:a0:bc:3b:7f:d2:2b:d7:16:2c:2d: f7:fd:c2:97:95:49:04:39:fb:4e:f4:98:bf:bd:98: c9:f7:c2:8e:03:bc:c3:3b:27:c7:33:f1:17:f2:3a: 7e:7c:60:f8:1c:03:1d:f3:e2:1d:f3:ae:a9:31:8e: 68:4f:3d:b4:12:31:cb:04:55:a9:3d:93:d5:b2:a2: a2:31:2a:90:1b:56:57:c2:39:bf:53:82:c7:d3:7f: 36:2b:34:e5:ae:9a:ef:09:4e:cb:03:07:86:cf:59: a2:1d:37:24:bf:af:1b:5c:5f:f2:30:d8:8e:27:02: 6f:c4:9f:48:81:c4:af:a0:4a:5e:f0:f4:bd:d6:ee: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0F:2A:C0:92:9A:A1:D2:B2:8B:8F:68:BB:7F:D4:CB:CA:51:B0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl X509v3 Authority Key Identifier: keyid:04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ba:b8:34:8b:f8:19:06:77:c0:01:6c:8e:9e:1f:a6:f4:3f: 39:86:c1:a4:cf:e4:82:16:ba:36:90:c7:b1:7f:33:39:2f:73: f2:7e:77:16:34:30:d7:71:5e:ec:66:4a:bf:a4:75:99:23:14: f8:62:15:54:ac:ae:fd:2f:91:84:32:21:af:cd:00:63:ff:28: 34:86:72:ed:8a:c6:c5:ae:8e:02:bf:30:fc:37:f2:38:4b:84: 6b:f1:f1:2c:e0:de:5c:50:8f:e1:c5:18:e4:2d:07:59:8f:f9: 2f:3f:23:97:37:b8:71:de:04:66:93:eb:dc:e0:a5:79:77:0c: 52:ee:0f:e3:8a:16:a1:5c:e7:4e:07:9e:37:92:4d:1f:b4:3f: 85:f5:bf:8c:a2:c1:b9:56:64:7b:4b:2c:71:a4:2f:71:d4:d0: 20:19:9c:83:99:dd:ea:51:a0:3b:59:0e:ac:fd:3b:49:8a:63: 60:41:4a:af:fa:99:8a:7d:ea:df:40:67:9e:a4:f5:ac:24:ae: da:00:5b:e1:9e:1f:5f:cf:8e:a3:74:08:e0:63:e6:8f:9e:34: 29:23:36:04:80:2d:70:c6:53:6e:cf:23:41:5a:d6:d8:5f:70: bf:e4:c6:10:f6:c8:fd:ac:fd:55:9b:e5:e7:f5:82:b6:64:16: e6:36:23:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MxSRVmELDOy/OiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNlZmZmOTktNWRiMS00ZDA5LWIwZGMtZjdmMmYwZmVk NGZkMB4XDTI2MDMyNjIwMDAwOVoXDTI2MDMyOTIwMDAwMFowLzEtMCsGA1UEAxMk NzJmYWM2MzMtNGNmMy00NGMyLTgyNWYtNzA2Y2IzMzJkM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUZPfTGGPk7J0uTQZwbM8fYVQBJokrpZtLJt Vx8Nvu/BElm0ou939B5gXxTjxEUnt4MRvMCFoZ3yngUpGZZLvVH/n6CBtG7R0Wwf 96SNJSHIL6kNlPQfg/6hFtAQijgEtBXMQI2Xt4HpEIeAsTMSyRACRHB88G0SOBwi WKC8O3/SK9cWLC33/cKXlUkEOftO9Ji/vZjJ98KOA7zDOyfHM/EX8jp+fGD4HAMd 8+Id866pMY5oTz20EjHLBFWpPZPVsqKiMSqQG1ZXwjm/U4LH0382KzTlrprvCU7L AweGz1miHTckv68bXF/yMNiOJwJvxJ9IgcSvoEpe8PS91u5mwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAEPKsCSmqHSsouPaLt/1MvKUbDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Vm ZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBmZWQ0ZmQvMjNlZmZmOTktNWRiMS00 ZDA5LWIwZGMtZjdmMmYwZmVkNGZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNlZmZmOTktNWRiMS00ZDA5LWIw ZGMtZjdmMmYwZmVkNGZkLzIzZWZmZjk5LTVkYjEtNGQwOS1iMGRjLWY3ZjJmMGZl ZDRmZC5jcmwwHwYDVR0jBBgwFoAUBDngqWaGeSdHLJ5j8YlI34hR55IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2Yy ZjBmZWQ0ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1urg0i/gZBnfAAWyOnh+m 9D85hsGkz+SCFro2kMexfzM5L3PyfncWNDDXcV7sZkq/pHWZIxT4YhVUrK79L5GE MiGvzQBj/yg0hnLtisbFro4CvzD8N/I4S4Rr8fEs4N5cUI/hxRjkLQdZj/kvPyOX N7hx3gRmk+vc4KV5dwxS7g/jihahXOdOB543kk0ftD+F9b+MosG5VmR7SyxxpC9x 1NAgGZyDmd3qUaA7WQ6s/TtJimNgQUqv+pmKferfQGeepPWsJK7aAFvhnh9fz46j dAjgY+aPnjQpIzYEgC1wxlNuzyNBWtbYX3C/5MYQ9sj9rP1Vm+Xn9YK2ZBbmNiMs -----END CERTIFICATE-----Generated at Fri Mar 27 19:34:44 2026 by rpki-client