$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.mft File: 235d7f84-9186-4dd5-a197-87e823c53ed5.mft (raw, json) Hash identifier: KPY5En9w/lbpeARl3uDejPdzH89FylXH4Y2HcVvSNfE= Subject key identifier: 23:47:4C:A2:82:6A:06:73:87:49:2B:CC:92:A6:56:25:E8:ED:CD:CF Authority key identifier: 22:A3:C5:EF:AA:7F:64:D8:F4:34:E5:44:1C:7E:96:34:5D:6E:A8:11 Certificate issuer: /CN=235d7f84-9186-4dd5-a197-87e823c53ed5 Certificate serial: 010D0C9F4328584D3F0B43C8E1D22F400812F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.mft Manifest number: 010D0C9F43285841EA4ABB55FC5E0440521F0D40 Signing time: Sat 21 Mar 2026 22:00:08 +0000 Manifest this update: Sat 21 Mar 2026 22:00:08 +0000 Manifest next update: Mon 23 Mar 2026 22:00:00 +0000 Files and hashes: 1: 235d7f84-9186-4dd5-a197-87e823c53ed5.crl (hash: +lhRjup/o4dawx65ejWt2+ml2SKWb2UEzumDxxL7oiw=) 2: 4d0bd089-c98c-3c40-972c-b453018b73d7.roa (hash: K0MGTGL2MErFgrLH7F3PpyzsNjJLCXXMC4xMxPTUzdA=) 3: 8885c493-c406-3330-9b8b-7f99624801a0.roa (hash: FJuG0up1Onq8759jTyALly1+bnhHumTM2Y9oM71e9Mo=) 4: b07bf949-79c7-3a74-a3ef-e5569af453ef.roa (hash: kf+TOWI+2ylJ1TtmB7BzGkrdrMBwtiBUV5W8SL934ro=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:0b:43:c8:e1:d2:2f:40:08:12:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235d7f84-9186-4dd5-a197-87e823c53ed5 Validity Not Before: Mar 21 22:00:08 2026 GMT Not After : Mar 23 22:00:00 2026 GMT Subject: CN=0f4cfaec-6d72-42c7-8787-132bbb71300a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:0b:20:a9:08:a2:d2:13:66:05:26:b6:13: 80:05:6f:c1:50:bf:c6:14:e1:00:36:31:61:17:d8: 1d:e5:e1:b3:64:fc:d5:e1:d1:3d:0d:ca:4c:d5:ac: 5f:7d:bb:83:2a:0f:05:77:b8:10:6d:0d:90:10:9b: 93:95:16:26:49:d1:05:31:85:72:15:68:4e:5e:ba: 3b:f0:fb:23:0c:aa:39:57:06:12:ca:36:3c:2e:70: 66:22:94:5d:02:d4:90:46:25:ee:d7:62:cc:0a:66: b5:a4:36:44:8d:af:52:2a:19:59:2c:fc:d3:94:f6: 5a:cf:ec:3c:47:59:3b:18:89:90:11:a3:fb:4e:79: 13:e5:1b:3a:e2:7c:43:1b:b8:9d:86:49:3d:12:b2: 02:69:79:fa:90:fb:39:e9:b1:89:90:fe:aa:19:e7: 4f:4c:21:2e:31:e6:16:ef:c1:52:38:8d:9d:9f:ae: b3:be:62:1b:b9:a4:c5:75:6e:f2:ec:a7:e9:f3:41: bd:72:5f:58:2e:6d:b4:82:c4:12:b1:d8:03:00:e6: bb:81:d6:07:55:29:5f:a9:a1:c3:e2:76:75:ca:2d: 95:a9:4b:72:f1:40:c8:3a:b3:6e:8c:b1:db:d0:24: 49:9a:71:a3:e9:7a:a4:b0:de:2e:af:e1:ea:04:dd: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:4C:A2:82:6A:06:73:87:49:2B:CC:92:A6:56:25:E8:ED:CD:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.crl X509v3 Authority Key Identifier: keyid:22:A3:C5:EF:AA:7F:64:D8:F4:34:E5:44:1C:7E:96:34:5D:6E:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3f:b7:56:af:cd:9c:a5:64:76:14:73:b9:53:8f:d5:ad:de: 2f:f9:8e:a4:8b:7d:c7:a6:4d:7e:73:57:14:d4:82:3c:5b:5e: e3:70:cd:48:96:ba:d1:13:95:38:9f:43:8a:bc:6f:59:ff:6d: ec:62:0e:7b:72:4a:5f:28:0b:e0:77:ab:2e:74:0a:11:5f:f6: 8e:49:01:83:1f:26:da:03:8d:ff:0c:91:7e:74:4d:a0:88:9a: e8:9d:90:ce:39:0f:fc:97:dd:3a:f2:f8:f6:2f:f2:30:c5:8e: bf:71:2d:0f:f4:dd:65:3d:a0:c9:c7:91:6f:0e:6b:64:2f:73: 38:98:79:e8:54:44:95:2a:44:57:e9:51:bc:83:5d:55:7b:0a: cf:ad:2c:53:96:ca:91:b2:ad:a1:ec:7e:af:bf:3e:a0:5c:b1: 02:78:a6:a3:fe:92:6f:7e:50:3b:53:bd:ad:80:27:ab:22:fe: c8:87:44:5a:7d:40:ec:ee:17:26:dd:ff:66:d0:7c:18:e3:3e: b2:6d:bc:34:d6:0e:15:10:86:93:3a:45:a0:64:98:52:6a:e2: 4a:94:d8:40:56:26:cb:b8:d3:9f:34:c5:80:c3:2c:f2:01:b5: 94:a2:92:e8:4f:c4:c8:ef:43:c6:15:6e:1a:f8:ef:d4:76:69: aa:40:2d:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0/C0PI4dIvQAgS8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM1ZDdmODQtOTE4Ni00ZGQ1LWExOTctODdlODIzYzUz ZWQ1MB4XDTI2MDMyMTIyMDAwOFoXDTI2MDMyMzIyMDAwMFowLzEtMCsGA1UEAxMk MGY0Y2ZhZWMtNmQ3Mi00MmM3LTg3ODctMTMyYmJiNzEzMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEkLIKkIotITZgUmthOABW/BUL/GFOEANjFh F9gd5eGzZPzV4dE9DcpM1axffbuDKg8Fd7gQbQ2QEJuTlRYmSdEFMYVyFWhOXro7 8PsjDKo5VwYSyjY8LnBmIpRdAtSQRiXu12LMCma1pDZEja9SKhlZLPzTlPZaz+w8 R1k7GImQEaP7TnkT5Rs64nxDG7idhkk9ErICaXn6kPs56bGJkP6qGedPTCEuMeYW 78FSOI2dn66zvmIbuaTFdW7y7Kfp80G9cl9YLm20gsQSsdgDAOa7gdYHVSlfqaHD 4nZ1yi2VqUty8UDIOrNujLHb0CRJmnGj6XqksN4ur+HqBN26zQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNHTKKCagZzh0krzJKmViXo7c3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMzVk N2Y4NC05MTg2LTRkZDUtYTE5Ny04N2U4MjNjNTNlZDUvMjM1ZDdmODQtOTE4Ni00 ZGQ1LWExOTctODdlODIzYzUzZWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjM1ZDdmODQtOTE4Ni00ZGQ1LWEx OTctODdlODIzYzUzZWQ1LzIzNWQ3Zjg0LTkxODYtNGRkNS1hMTk3LTg3ZTgyM2M1 M2VkNS5jcmwwHwYDVR0jBBgwFoAUIqPF76p/ZNj0NOVEHH6WNF1uqBEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMzVkN2Y4NC05MTg2LTRkZDUtYTE5Ny04N2U4 MjNjNTNlZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZP7dWr82cpWR2FHO5U4/V rd4v+Y6ki33Hpk1+c1cU1II8W17jcM1IlrrRE5U4n0OKvG9Z/23sYg57ckpfKAvg d6sudAoRX/aOSQGDHybaA43/DJF+dE2giJronZDOOQ/8l9068vj2L/IwxY6/cS0P 9N1lPaDJx5FvDmtkL3M4mHnoVESVKkRX6VG8g11VewrPrSxTlsqRsq2h7H6vvz6g XLECeKaj/pJvflA7U72tgCerIv7Ih0RafUDs7hcm3f9m0HwY4z6ybbw01g4VEIaT OkWgZJhSauJKlNhAVibLuNOfNMWAwyzyAbWUopLoT8TI70PGFW4a+O/UdmmqQC2i -----END CERTIFICATE-----Generated at Sun Mar 22 08:27:45 2026 by rpki-client