$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft File: 41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft (raw, json) Hash identifier: OM4R5Ko5ThALhYAY/OF82Zr6YDx4LMkCrTmD6O/COhw= Subject key identifier: D9:D0:30:2B:96:BF:56:97:F4:21:0B:32:D2:21:86:CD:A6:E1:6A:54 Authority key identifier: D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6 Certificate issuer: /CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b Certificate serial: 010D0C9F4328584D3E3AC351CA95BF110F673C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft Manifest number: 010D0C9F43285841B1CA5299FA9C311840C1F1B4 Signing time: Sat 21 Mar 2026 15:00:04 +0000 Manifest this update: Sat 21 Mar 2026 15:00:04 +0000 Manifest next update: Mon 23 Mar 2026 15:00:00 +0000 Files and hashes: 1: 41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl (hash: 0eDJb5XcPThw+9wVEUAXkmapudqwT3UupbRiPdkgNZc=) 2: db334f3d-45ff-3147-8b7b-0e824caf304f.roa (hash: 4lNpiQbyOLQvQksEqSZ9bqY3MByU+SLTkWOYci3BtVY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:3a:c3:51:ca:95:bf:11:0f:67:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b Validity Not Before: Mar 21 15:00:04 2026 GMT Not After : Mar 23 15:00:00 2026 GMT Subject: CN=40dcab02-491d-4a37-a88b-4b03896dbb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:8d:bc:40:42:b2:db:9a:8f:6e:56:e7:26: 43:99:4a:58:98:c6:ff:38:ad:15:7c:9c:54:74:ca: 90:a6:50:b4:ca:50:01:2d:b6:c9:5d:81:a5:e5:b8: 9b:18:f3:1a:4d:5f:21:7d:1d:a9:99:7e:fa:67:dc: 82:27:dc:12:20:48:21:1c:68:c0:df:55:10:2b:9a: fe:a4:83:53:fe:bf:a9:4c:7d:ce:fc:b6:0d:ca:75: e9:88:c7:17:d4:a0:e6:58:9a:0d:ec:e7:3d:0b:00: 3b:24:6e:4c:c7:23:0c:ab:cf:fe:69:01:14:95:c9: d7:5a:61:3c:5c:ff:9a:26:1a:84:52:81:68:36:ec: ef:a0:fe:60:8e:b7:a4:dd:15:6e:31:a5:6b:05:ee: c5:36:e9:31:71:27:26:0d:bc:21:2a:23:2a:3e:d6: 6c:2f:58:63:75:50:06:f2:35:a0:17:dd:a7:55:23: 0c:ad:43:0c:35:45:2d:4e:65:7d:b9:72:dc:21:ee: 39:54:a0:59:cd:df:3a:1e:80:d7:03:cd:06:3f:32: a4:ed:c4:2c:1a:97:5d:d5:af:20:2d:c0:73:a4:6d: 81:b6:16:99:36:55:7b:d2:20:8c:0e:1c:83:3f:80: 44:62:b5:ea:85:ae:b1:74:9c:15:09:41:ab:d2:e3: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:30:2B:96:BF:56:97:F4:21:0B:32:D2:21:86:CD:A6:E1:6A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl X509v3 Authority Key Identifier: keyid:D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d2:b3:98:72:a7:71:2c:9f:2b:44:36:45:b5:95:49:4c:4e: e6:54:23:ab:aa:ac:bd:c8:8e:0c:5c:a3:3a:4d:9a:7f:2c:a4: 5c:86:6f:5c:f1:a6:b7:16:1c:a7:e2:f7:e5:01:43:87:7a:22: db:14:5d:cb:3e:6e:6f:7c:54:51:e1:d9:95:34:e7:6d:2f:3f: fb:cf:2d:38:66:82:e4:a2:2c:97:de:a2:f7:33:4a:bd:94:af: af:9e:3a:e5:3a:00:20:7d:63:da:5e:ab:8c:4f:5a:11:e2:98: 17:c4:8d:23:de:c2:a4:0a:a6:63:96:4c:11:6c:07:50:8a:3e: 32:16:28:3b:a9:e3:92:bd:33:97:08:6a:88:b9:85:cb:32:fa: 34:ae:c8:e0:1b:6d:58:70:24:b0:b8:40:67:c9:32:d2:bc:3c: cd:a3:81:8e:6f:08:8b:73:cf:7c:a4:8b:54:1a:e2:27:86:46: 67:8c:fa:d3:0f:ba:d2:2d:49:19:65:8e:25:da:9b:3d:41:88: df:78:9e:21:fb:1d:9e:34:d1:ad:4d:83:e8:8c:e5:3b:7b:d1: 6e:bb:3b:a3:b5:0b:a0:d6:99:ac:fe:b1:58:8d:d8:75:5d:9c: 98:ef:94:f3:e7:d5:b4:fe:27:48:4d:6c:c0:42:2c:58:4a:b2: bf:73:f9:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+OsNRypW/EQ9nPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiNWY0ZDEtMWY0YS00MjVlLWJkNzYtMDkyYzVjZmM2 NzhiMB4XDTI2MDMyMTE1MDAwNFoXDTI2MDMyMzE1MDAwMFowLzEtMCsGA1UEAxMk NDBkY2FiMDItNDkxZC00YTM3LWE4OGItNGIwMzg5NmRiYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX6NvEBCstuaj25W5yZDmUpYmMb/OK0VfJxU dMqQplC0ylABLbbJXYGl5bibGPMaTV8hfR2pmX76Z9yCJ9wSIEghHGjA31UQK5r+ pINT/r+pTH3O/LYNynXpiMcX1KDmWJoN7Oc9CwA7JG5MxyMMq8/+aQEUlcnXWmE8 XP+aJhqEUoFoNuzvoP5gjrek3RVuMaVrBe7FNukxcScmDbwhKiMqPtZsL1hjdVAG 8jWgF92nVSMMrUMMNUUtTmV9uXLcIe45VKBZzd86HoDXA80GPzKk7cQsGpdd1a8g LcBzpG2BthaZNlV70iCMDhyDP4BEYrXqha6xdJwVCUGr0uMykQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNnQMCuWv1aX9CELMtIhhs2m4WpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWI1 ZjRkMS0xZjRhLTQyNWUtYmQ3Ni0wOTJjNWNmYzY3OGIvNDFiNWY0ZDEtMWY0YS00 MjVlLWJkNzYtMDkyYzVjZmM2NzhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFiNWY0ZDEtMWY0YS00MjVlLWJk NzYtMDkyYzVjZmM2NzhiLzQxYjVmNGQxLTFmNGEtNDI1ZS1iZDc2LTA5MmM1Y2Zj Njc4Yi5jcmwwHwYDVR0jBBgwFoAU0rtMeISo5gSsR/Ow/yr4n7JmTqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWI1ZjRkMS0xZjRhLTQyNWUtYmQ3Ni0wOTJj NWNmYzY3OGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBU0rOYcqdxLJ8rRDZFtZVJ TE7mVCOrqqy9yI4MXKM6TZp/LKRchm9c8aa3Fhyn4vflAUOHeiLbFF3LPm5vfFRR 4dmVNOdtLz/7zy04ZoLkoiyX3qL3M0q9lK+vnjrlOgAgfWPaXquMT1oR4pgXxI0j 3sKkCqZjlkwRbAdQij4yFig7qeOSvTOXCGqIuYXLMvo0rsjgG21YcCSwuEBnyTLS vDzNo4GObwiLc898pItUGuInhkZnjPrTD7rSLUkZZY4l2ps9QYjfeJ4h+x2eNNGt TYPojOU7e9FuuzujtQug1pms/rFYjdh1XZyY75Tz59W0/idITWzAQixYSrK/c/mz -----END CERTIFICATE-----Generated at Sat Mar 21 22:09:10 2026 by rpki-client