$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: wApeWgVIvMBmiKOejFjbF5lw8uhnwnp/G+4kIzoyScc= Subject key identifier: F1:51:D6:49:39:77:7E:6B:20:34:40:27:8F:E6:32:50:8A:25:98:9B Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584D3F0B450FC0768715BBC94E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D1608E0 Signing time: Sat 21 Mar 2026 22:00:08 +0000 Manifest this update: Sat 21 Mar 2026 22:00:08 +0000 Manifest next update: Mon 23 Mar 2026 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: vXIPaOyYbomqfpaXTULUZHvK7bNqBxPT5dRjygr+bdc=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: 7nEwNkfMtIupAO+zBl07p1Abwy1SHKk2ibPOHwZIS98=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:0b:45:0f:c0:76:87:15:bb:c9:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Mar 21 22:00:08 2026 GMT Not After : Mar 23 22:00:00 2026 GMT Subject: CN=92674e2a-4803-462b-bbcf-f2650b824877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1f:0a:a2:7f:8e:c4:85:21:9b:5d:14:ea:1f: 7c:4a:01:bd:fa:cd:e8:58:80:91:d7:cb:15:15:f3: 88:e4:59:b8:68:b1:c0:ed:70:0e:ff:15:ce:a5:85: 12:23:7a:c7:8e:bf:f1:6d:f7:27:08:f6:03:b9:29: 87:11:3d:cc:6c:75:2b:c8:76:36:ab:9c:3a:48:92: bd:bf:bd:0b:b6:f2:6d:3a:d7:66:a8:ed:f7:b2:19: 2f:71:84:cb:8f:df:64:47:25:97:b8:d9:05:6c:19: 81:79:c7:4d:f3:77:20:2f:61:1e:13:96:94:df:6d: 8a:a9:71:35:6b:d5:22:dd:df:9a:12:16:04:ad:53: a2:50:3c:14:79:5e:55:0c:5d:34:0c:ee:4e:5a:23: 5c:84:39:38:6f:a3:e0:fa:5d:8e:54:37:a5:e8:17: 1a:44:a2:d8:d8:f0:5c:f9:df:60:23:d5:6f:26:65: c2:af:28:be:4c:fe:e8:8a:a3:0f:e1:40:a5:69:a1: 79:ef:46:87:93:15:57:4b:ba:b4:aa:19:df:4a:2d: 37:7f:b2:f9:bb:13:4d:35:17:77:6d:b1:bb:62:11: d6:de:57:89:e2:e4:a4:da:98:f8:7a:6b:44:08:35: 8b:12:79:de:06:f2:bb:af:17:e6:d9:dc:18:fb:8d: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:51:D6:49:39:77:7E:6B:20:34:40:27:8F:E6:32:50:8A:25:98:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:aa:ed:ab:ae:18:56:40:77:e0:f5:27:c3:d8:d1:a4:49:23: dd:a4:41:8d:91:ea:40:e4:ba:fe:29:0d:3a:1c:6c:ef:05:68: 0e:1d:4a:e1:2d:5e:9d:87:f0:96:ae:ef:dd:91:7a:f0:ed:cf: 83:d4:52:42:c0:be:67:87:7f:d2:64:5b:91:2d:c6:e7:b0:04: 7a:1f:81:23:b2:a9:31:fc:97:9c:94:39:6a:d5:31:25:1e:cd: b9:31:1b:6f:0d:5e:d3:5c:d4:35:7f:be:25:11:cc:3e:1e:4c: 51:04:82:4a:91:8f:03:2f:27:4d:35:9a:e7:7f:6c:a3:23:56: 69:ee:bc:49:b8:2b:3c:04:ea:18:b7:1a:22:d9:e2:46:75:98: 90:61:29:ab:94:48:4e:78:bb:90:a6:87:41:1e:98:af:0a:f7: f1:bf:6c:a4:16:15:f8:40:fc:1f:f7:f5:f0:29:0b:32:43:53: 6f:87:83:5c:58:69:ba:94:76:3f:86:b1:a3:f2:8c:80:d7:94: 2a:8b:21:05:ef:6e:6d:c5:c2:3d:19:9e:2d:98:09:65:49:bc: 71:9b:21:e9:d2:32:a6:5d:db:75:8a:c5:a8:a8:2a:52:3e:ec: d1:a1:89:b9:9a:9c:05:cf:ce:48:e3:49:1b:9b:aa:21:66:b5: 3b:79:19:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0/C0UPwHaHFbvJToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI2MDMyMTIyMDAwOFoXDTI2MDMyMzIyMDAwMFowLzEtMCsGA1UEAxMk OTI2NzRlMmEtNDgwMy00NjJiLWJiY2YtZjI2NTBiODI0ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B8Kon+OxIUhm10U6h98SgG9+s3oWICR18sV FfOI5Fm4aLHA7XAO/xXOpYUSI3rHjr/xbfcnCPYDuSmHET3MbHUryHY2q5w6SJK9 v70LtvJtOtdmqO33shkvcYTLj99kRyWXuNkFbBmBecdN83cgL2EeE5aU322KqXE1 a9Ui3d+aEhYErVOiUDwUeV5VDF00DO5OWiNchDk4b6Pg+l2OVDel6BcaRKLY2PBc +d9gI9VvJmXCryi+TP7oiqMP4UClaaF570aHkxVXS7q0qhnfSi03f7L5uxNNNRd3 bbG7YhHW3leJ4uSk2pj4emtECDWLEnneBvK7rxfm2dwY+435NwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPFR1kk5d35rIDRAJ4/mMlCKJZibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFqu2rrhhWQHfg9SfD2NGk SSPdpEGNkepA5Lr+KQ06HGzvBWgOHUrhLV6dh/CWru/dkXrw7c+D1FJCwL5nh3/S ZFuRLcbnsAR6H4Ejsqkx/JeclDlq1TElHs25MRtvDV7TXNQ1f74lEcw+HkxRBIJK kY8DLydNNZrnf2yjI1Zp7rxJuCs8BOoYtxoi2eJGdZiQYSmrlEhOeLuQpodBHpiv Cvfxv2ykFhX4QPwf9/XwKQsyQ1Nvh4NcWGm6lHY/hrGj8oyA15QqiyEF725txcI9 GZ4tmAllSbxxmyHp0jKmXdt1isWoqCpSPuzRoYm5mpwFz85I40kbm6ohZrU7eRkG -----END CERTIFICATE-----Generated at Sun Mar 22 08:32:48 2026 by rpki-client