$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a/19fef227-2de9-42b5-abf3-e38b89caa96a.mft File: 19fef227-2de9-42b5-abf3-e38b89caa96a.mft (raw, json) Hash identifier: MMGvsAkxUTPoJbpv0+v2o1F6juLidjZfFXAM+Couwq0= Subject key identifier: 1E:63:5D:85:05:52:C6:01:45:A1:C8:C8:C0:93:29:85:91:4E:30:E9 Authority key identifier: A3:CE:67:D2:0D:A0:17:7E:4F:88:4B:7C:91:E7:0F:2C:86:A2:BC:0A Certificate issuer: /CN=19fef227-2de9-42b5-abf3-e38b89caa96a Certificate serial: 010D0C9F4328584D3E3AC587BF24D90C5EBDBFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a/19fef227-2de9-42b5-abf3-e38b89caa96a.mft Manifest number: 010D0C9F43285841F216E290AB8DADD94F2B138F Signing time: Sat 21 Mar 2026 15:00:04 +0000 Manifest this update: Sat 21 Mar 2026 15:00:04 +0000 Manifest next update: Tue 24 Mar 2026 15:00:00 +0000 Files and hashes: 1: 19fef227-2de9-42b5-abf3-e38b89caa96a.crl (hash: Hv1tOLfQwI4oSzuG5D95AGE8WmW2Nq+DCtT6HiiGxws=) 2: c6feb5a2-28e0-3513-9b54-0f88399fdb46.roa (hash: g3lOslvyWiC5n9pBUcGBTA+fC5obag36/2qDadx9pLQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a/19fef227-2de9-42b5-abf3-e38b89caa96a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a/19fef227-2de9-42b5-abf3-e38b89caa96a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:3a:c5:87:bf:24:d9:0c:5e:bd:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19fef227-2de9-42b5-abf3-e38b89caa96a Validity Not Before: Mar 21 15:00:04 2026 GMT Not After : Mar 24 15:00:00 2026 GMT Subject: CN=407cfb77-25ca-41d3-a5ee-20974460717c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:e9:32:01:a2:c6:d4:c9:ef:34:9b:29:0f: d4:8c:21:66:22:e3:a2:6a:96:99:c7:5d:c1:71:57: e1:85:e0:3d:5b:b0:96:bb:ed:2d:5e:7b:d9:04:44: 0e:de:83:c7:3c:79:18:99:5e:2d:6c:35:56:54:12: 43:69:78:81:e4:a3:f2:c7:63:0c:d1:f8:86:e3:5b: 37:42:4f:4f:42:20:0c:43:51:7c:da:14:f9:be:12: ea:1b:b2:f2:7b:a1:84:01:25:1a:4e:46:e1:e3:c9: 08:62:45:25:b9:b1:82:1c:98:2a:f9:a6:75:1c:46: 17:21:ac:70:f5:6f:a9:92:e3:2b:f8:7f:80:82:57: 12:5b:9b:25:bd:3e:21:dd:9e:5a:4d:91:7b:19:d9: 17:0a:2e:3a:a9:d0:f9:cb:56:18:2e:e9:0e:a9:60: 31:0e:d9:b8:21:3a:9b:11:ec:30:a2:18:8c:e5:5e: e9:4b:96:49:ef:f4:27:95:bb:94:ec:c8:e8:50:ef: 9c:73:a9:fe:1f:63:23:68:39:5a:97:e6:d7:c8:29: 20:e9:5b:e5:c5:0c:01:32:4a:3e:b5:40:d4:94:19: f1:7f:45:85:44:16:49:b0:03:28:48:31:02:fe:25: bd:b8:86:fe:b2:6c:e6:c3:42:89:59:fc:88:46:ba: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:63:5D:85:05:52:C6:01:45:A1:C8:C8:C0:93:29:85:91:4E:30:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a/19fef227-2de9-42b5-abf3-e38b89caa96a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a/19fef227-2de9-42b5-abf3-e38b89caa96a.crl X509v3 Authority Key Identifier: keyid:A3:CE:67:D2:0D:A0:17:7E:4F:88:4B:7C:91:E7:0F:2C:86:A2:BC:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/19fef227-2de9-42b5-abf3-e38b89caa96a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:33:6d:18:b0:ec:e1:59:31:99:63:c1:e1:82:9b:9e:cc:80: 62:71:fc:27:33:a6:8a:34:cd:99:f4:7a:29:f2:d5:1d:88:d9: aa:21:c7:2a:2f:af:f7:ec:47:69:bf:92:5a:4a:b3:08:55:f1: 7b:fc:cd:f0:fb:26:c5:e6:1c:8f:ef:af:4f:b7:a4:bc:ad:5e: f5:7b:41:56:1a:c1:18:72:aa:da:3c:3f:2b:02:e7:18:98:e2: eb:07:6e:ec:1e:19:49:3f:c7:33:8e:02:32:1a:1b:5a:41:ab: a7:1c:dd:dd:a9:a2:2e:f4:bb:4f:f4:2a:55:fb:ea:18:c9:22: ed:fb:06:56:16:7c:28:fb:04:04:f2:1b:de:b7:c6:da:fa:27: 02:73:a2:90:fc:b3:ce:d1:52:56:d6:2e:c4:71:c3:8d:29:04: 73:fc:ab:ca:3a:06:47:f7:8e:01:32:12:65:17:01:5e:35:30: 7b:c7:e5:2d:9e:01:a3:7a:0b:ca:b0:32:14:b1:3e:0e:1d:72: 61:7f:a6:2a:16:fc:97:6e:e3:c3:5a:ac:dd:e8:0b:9f:f0:99: 79:cd:47:ba:73:0c:10:11:7b:c4:42:74:ea:b6:1c:74:59:49: bf:6c:c7:c8:78:30:03:1f:45:b2:b5:00:06:9c:e5:43:46:44: 7f:48:6a:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+OsWHvyTZDF69v8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTlmZWYyMjctMmRlOS00MmI1LWFiZjMtZTM4Yjg5Y2Fh OTZhMB4XDTI2MDMyMTE1MDAwNFoXDTI2MDMyNDE1MDAwMFowLzEtMCsGA1UEAxMk NDA3Y2ZiNzctMjVjYS00MWQzLWE1ZWUtMjA5NzQ0NjA3MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN/pMgGixtTJ7zSbKQ/UjCFmIuOiapaZx13B cVfhheA9W7CWu+0tXnvZBEQO3oPHPHkYmV4tbDVWVBJDaXiB5KPyx2MM0fiG41s3 Qk9PQiAMQ1F82hT5vhLqG7Lye6GEASUaTkbh48kIYkUlubGCHJgq+aZ1HEYXIaxw 9W+pkuMr+H+AglcSW5slvT4h3Z5aTZF7GdkXCi46qdD5y1YYLukOqWAxDtm4ITqb EewwohiM5V7pS5ZJ7/QnlbuU7MjoUO+cc6n+H2MjaDlal+bXyCkg6VvlxQwBMko+ tUDUlBnxf0WFRBZJsAMoSDEC/iW9uIb+smzmw0KJWfyIRrqWeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB5jXYUFUsYBRaHIyMCTKYWRTjDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xOWZl ZjIyNy0yZGU5LTQyYjUtYWJmMy1lMzhiODljYWE5NmEvMTlmZWYyMjctMmRlOS00 MmI1LWFiZjMtZTM4Yjg5Y2FhOTZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTlmZWYyMjctMmRlOS00MmI1LWFi ZjMtZTM4Yjg5Y2FhOTZhLzE5ZmVmMjI3LTJkZTktNDJiNS1hYmYzLWUzOGI4OWNh YTk2YS5jcmwwHwYDVR0jBBgwFoAUo85n0g2gF35PiEt8kecPLIaivAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xOWZlZjIyNy0yZGU5LTQyYjUtYWJmMy1lMzhi ODljYWE5NmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQM20YsOzhWTGZY8Hhgpue zIBicfwnM6aKNM2Z9Hop8tUdiNmqIccqL6/37Edpv5JaSrMIVfF7/M3w+ybF5hyP 769Pt6S8rV71e0FWGsEYcqraPD8rAucYmOLrB27sHhlJP8czjgIyGhtaQaunHN3d qaIu9LtP9CpV++oYySLt+wZWFnwo+wQE8hvet8ba+icCc6KQ/LPO0VJW1i7EccON KQRz/KvKOgZH944BMhJlFwFeNTB7x+UtngGjegvKsDIUsT4OHXJhf6YqFvyXbuPD Wqzd6Auf8Jl5zUe6cwwQEXvEQnTqthx0WUm/bMfIeDADH0WytQAGnOVDRkR/SGr9 -----END CERTIFICATE-----Generated at Sun Mar 22 08:36:04 2026 by rpki-client