$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft File: 0b689f43-cae9-48ce-aef4-680ca5613c03.mft (raw, json) Hash identifier: xYDd2/NswMwOV+X5cvv0JAXKxz/ROlytl7C/wHVWYc4= Subject key identifier: 69:68:23:C8:C4:28:FB:CE:A9:44:95:33:E0:9B:19:51:A5:4D:B3:DF Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 Certificate issuer: /CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Certificate serial: 010D0C9F4328584D3E1CFDF703C8A9559D57C180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft Manifest number: 010D0C9F43285841822CFCCF87820EC23EBD426F Signing time: Sat 21 Mar 2026 14:00:04 +0000 Manifest this update: Sat 21 Mar 2026 14:00:04 +0000 Manifest next update: Tue 24 Mar 2026 14:00:00 +0000 Files and hashes: 1: 0b689f43-cae9-48ce-aef4-680ca5613c03.crl (hash: WSMi0kAk4pC8zGRhbsCPbNNdC5H8zzLUw2wYx2zQKLg=) 2: e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa (hash: XtUUi+wK/EvCAwQo1JmYfdH+CYn/3x1Q2bCdkCq/yT4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:1c:fd:f7:03:c8:a9:55:9d:57:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Validity Not Before: Mar 21 14:00:04 2026 GMT Not After : Mar 24 14:00:00 2026 GMT Subject: CN=051770be-5fab-4947-be3c-f64470fef8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:25:f9:df:75:b6:f3:0a:e3:a6:d9:83:fe: 17:65:94:1a:a1:c1:a3:6e:5e:97:73:80:91:dc:bc: e7:56:84:01:5e:e0:fd:f0:71:8a:16:fd:56:bd:1a: 92:ee:41:b3:2b:f4:c7:d0:d6:8e:8d:8f:be:b1:c8: 69:da:47:72:3d:8c:97:cc:1c:c6:48:9a:ee:3e:80: 1d:b1:7f:4c:a6:c0:e1:13:21:86:ad:4f:78:19:7a: 26:08:6c:ce:24:cf:13:ee:81:b2:07:1b:65:65:84: 96:7b:01:7e:ed:66:2e:fc:ed:c2:c4:d0:d5:4e:ce: 3e:cb:16:87:cf:96:b3:d1:a0:0d:eb:a7:df:3d:4e: 52:20:2c:1b:f0:7a:d7:b1:2b:35:77:a7:fb:77:44: e5:c6:21:f8:75:bc:d8:34:1e:6f:da:f0:4c:a2:1a: 96:94:3b:b8:ff:a6:4c:fa:e9:f3:7e:e1:de:30:0c: 28:9c:38:5f:e2:67:0f:b2:8e:44:fe:1e:5f:90:b6: f1:32:9a:1e:96:53:d7:91:a1:dc:c6:92:80:da:0c: 2b:fa:e6:ea:a5:20:92:92:9e:a9:66:01:2a:50:1a: de:a2:e8:be:14:8d:fb:93:3d:41:31:96:40:64:94: 31:1f:9a:4e:06:5a:72:ff:f8:c1:7a:f0:cd:e6:86: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:23:C8:C4:28:FB:CE:A9:44:95:33:E0:9B:19:51:A5:4D:B3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl X509v3 Authority Key Identifier: keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c2:03:e7:bc:3e:88:aa:6c:23:28:db:3e:42:32:b8:f9:59: 65:3b:e6:e2:de:bc:b8:4d:85:31:36:53:7f:8b:2c:cf:59:4a: 59:86:89:8b:4b:c5:ea:1c:33:e5:52:50:80:7e:a0:a2:3e:1d: 13:cf:01:28:05:eb:0a:79:c2:7d:e5:40:3c:f8:ba:ff:58:82: 0d:26:1c:3c:39:f5:b7:f5:8e:f7:d0:76:c1:bd:af:0e:48:7c: 03:b4:c7:16:7a:47:7f:92:8d:93:d6:f2:f6:cc:08:8c:5a:08: 9e:ac:33:6a:59:46:56:e3:50:1d:1f:dd:fe:b1:1e:e3:d8:74: a8:5a:c7:6f:22:63:54:2d:fc:00:c4:89:1a:01:63:72:7f:ba: 79:d3:72:e9:5c:bb:dd:1e:bc:20:fe:96:22:8b:e2:71:87:a8: ff:04:aa:f2:21:09:7a:83:1d:ce:cd:91:2b:8c:2e:88:5f:0e: 17:5e:5f:d5:50:aa:02:1d:ab:a3:83:e0:39:5b:9c:11:c6:67: f1:da:df:a7:9c:88:d2:40:a5:85:37:43:50:a1:79:12:5e:3c: c1:84:5e:b3:b7:22:35:0f:c9:30:21:58:ac:e1:99:72:84:0f: f0:37:be:42:41:fa:3d:d0:0d:03:3d:d3:dd:8f:1f:98:f8:52: c5:82:2b:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+HP33A8ipVZ1XwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2ODlmNDMtY2FlOS00OGNlLWFlZjQtNjgwY2E1NjEz YzAzMB4XDTI2MDMyMTE0MDAwNFoXDTI2MDMyNDE0MDAwMFowLzEtMCsGA1UEAxMk MDUxNzcwYmUtNWZhYi00OTQ3LWJlM2MtZjY0NDcwZmVmOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTMl+d91tvMK46bZg/4XZZQaocGjbl6Xc4CR 3LznVoQBXuD98HGKFv1WvRqS7kGzK/TH0NaOjY++schp2kdyPYyXzBzGSJruPoAd sX9MpsDhEyGGrU94GXomCGzOJM8T7oGyBxtlZYSWewF+7WYu/O3CxNDVTs4+yxaH z5az0aAN66ffPU5SICwb8HrXsSs1d6f7d0TlxiH4dbzYNB5v2vBMohqWlDu4/6ZM +unzfuHeMAwonDhf4mcPso5E/h5fkLbxMpoellPXkaHcxpKA2gwr+ubqpSCSkp6p ZgEqUBreoui+FI37kz1BMZZAZJQxH5pOBlpy//jBevDN5oYM3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGloI8jEKPvOqUSVM+CbGVGlTbPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4 OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBjYTU2MTNjMDMvMGI2ODlmNDMtY2FlOS00 OGNlLWFlZjQtNjgwY2E1NjEzYzAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGI2ODlmNDMtY2FlOS00OGNlLWFl ZjQtNjgwY2E1NjEzYzAzLzBiNjg5ZjQzLWNhZTktNDhjZS1hZWY0LTY4MGNhNTYx M2MwMy5jcmwwHwYDVR0jBBgwFoAUzRRR5j5SiuodyrEPvWB0YXZZsaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBj YTU2MTNjMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNwgPnvD6IqmwjKNs+QjK4 +VllO+bi3ry4TYUxNlN/iyzPWUpZhomLS8XqHDPlUlCAfqCiPh0TzwEoBesKecJ9 5UA8+Lr/WIINJhw8OfW39Y730HbBva8OSHwDtMcWekd/ko2T1vL2zAiMWgierDNq WUZW41AdH93+sR7j2HSoWsdvImNULfwAxIkaAWNyf7p503LpXLvdHrwg/pYii+Jx h6j/BKryIQl6gx3OzZErjC6IXw4XXl/VUKoCHaujg+A5W5wRxmfx2t+nnIjSQKWF N0NQoXkSXjzBhF6ztyI1D8kwIVis4ZlyhA/wN75CQfo90A0DPdPdjx+Y+FLFgitm -----END CERTIFICATE-----Generated at Sun Mar 22 08:31:32 2026 by rpki-client