$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft File: 511ed25c-3ac7-4d86-9290-879e3813322e.mft (raw, json) Hash identifier: EPSnADll2w56VJr95g4F7j6xWGQfrW1wOPi7pvND4OA= Subject key identifier: 8A:8D:7F:FD:20:68:35:F3:AB:87:FF:82:0C:86:66:5C:9E:A2:61:61 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584D3EED7E11EBAF622E913B2280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft Manifest number: 010D0C9F43285841EFE6102B086F82254ED04846 Signing time: Sat 21 Mar 2026 21:00:09 +0000 Manifest this update: Sat 21 Mar 2026 21:00:09 +0000 Manifest next update: Mon 23 Mar 2026 21:00:00 +0000 Files and hashes: 1: 511ed25c-3ac7-4d86-9290-879e3813322e.crl (hash: 9py/GM2uWs/mHRXt1t5LwiKUyL7BY4XGfeodQZBgB3o=) 2: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (hash: jz45kCo2mOae1jY9XicgBLoaq2RMtmHN4fnnO9ZCbkU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:ed:7e:11:eb:af:62:2e:91:3b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Mar 21 21:00:09 2026 GMT Not After : Mar 23 21:00:00 2026 GMT Subject: CN=c2adf9cb-f7ba-4a54-8a4f-facb2941ca5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:54:11:16:32:0f:98:1c:46:f9:fc:9e:0b: a0:7e:92:4c:af:18:2d:1b:e3:40:4d:a5:51:ee:36: 40:43:e7:80:c6:4a:43:ec:73:38:b8:ba:31:b9:73: a6:5c:7d:26:40:d4:37:3e:22:31:d2:f3:18:0c:89: 2c:40:2b:db:92:77:d7:87:7a:a4:0c:72:c3:32:13: 05:ec:c8:bd:f5:bb:00:0b:79:08:db:79:a5:f9:da: 1e:d1:1f:8c:58:66:1e:05:ca:8e:92:b5:0c:2b:02: fc:94:df:3a:9b:9d:6d:d1:9e:26:8e:2f:9c:22:c1: f6:ce:5f:48:ea:bb:1a:ae:50:a1:35:56:5c:79:77: 01:e3:c9:19:2c:47:25:24:96:6b:12:80:b9:a5:5c: 10:15:0a:aa:a3:70:d1:81:50:c5:80:0e:91:f5:44: 30:fe:2a:b5:5a:67:fc:58:c3:58:a2:a4:71:2f:e4: 7a:bc:8a:4b:b5:a2:7d:bd:d4:d6:e5:10:c5:de:c9: 6b:0d:e6:e5:e1:99:42:e9:ef:a1:a4:fa:f6:59:f1: 08:06:85:64:0c:6a:6a:7e:d3:0d:67:7d:e1:00:79: 0f:61:07:1e:77:46:5d:d2:48:ea:cb:d6:1d:f2:15: db:ec:26:d2:32:c9:53:47:61:df:ec:3d:7c:47:3f: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:7F:FD:20:68:35:F3:AB:87:FF:82:0C:86:66:5C:9E:A2:61:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7b:d1:2f:e8:ba:b1:77:4b:d9:fd:3e:c3:b6:a3:29:99:e8: d1:c1:c8:98:6d:d3:2e:40:d7:a8:31:f3:69:55:23:3b:95:7d: 90:40:3d:d7:6e:24:da:33:0f:c2:f4:78:5d:a1:34:c8:70:e9: 76:93:ba:eb:03:05:bf:ed:ca:92:41:55:de:99:f4:1b:39:dd: 7d:24:42:5c:90:79:fb:5f:f6:ad:cf:20:77:51:ec:24:f0:60: 8b:ef:56:a6:bc:c1:8f:d1:35:11:e7:52:39:ba:83:67:ea:3e: c0:1d:a3:ed:ad:a7:e5:83:da:30:bb:f7:48:d4:69:3d:34:97: 68:bc:d5:f3:bf:33:b7:3c:2b:b6:b1:ed:46:f2:f0:cc:37:c7: 70:fd:56:9f:58:bf:40:bd:ca:71:c9:5a:5d:66:fd:e3:8a:01: 5f:df:b5:a8:ca:62:9a:fb:b0:60:eb:c9:c6:b7:53:86:8c:63: eb:54:60:03:30:7f:3c:48:38:ba:ac:ad:aa:6d:e2:65:4c:93: 94:3d:8e:6c:3b:b9:73:33:db:9c:00:1e:21:e5:5e:54:b4:8e: 3a:fe:1f:be:be:a3:6b:10:7d:d7:7a:82:28:96:99:63:7b:71: 86:a2:fb:05:05:89:35:3a:53:76:e5:e7:22:af:bb:d4:24:c0: c1:67:c5:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+7X4R669iLpE7IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI2MDMyMTIxMDAwOVoXDTI2MDMyMzIxMDAwMFowLzEtMCsGA1UEAxMk YzJhZGY5Y2ItZjdiYS00YTU0LThhNGYtZmFjYjI5NDFjYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6tUERYyD5gcRvn8ngugfpJMrxgtG+NATaVR 7jZAQ+eAxkpD7HM4uLoxuXOmXH0mQNQ3PiIx0vMYDIksQCvbknfXh3qkDHLDMhMF 7Mi99bsAC3kI23ml+doe0R+MWGYeBcqOkrUMKwL8lN86m51t0Z4mji+cIsH2zl9I 6rsarlChNVZceXcB48kZLEclJJZrEoC5pVwQFQqqo3DRgVDFgA6R9UQw/iq1Wmf8 WMNYoqRxL+R6vIpLtaJ9vdTW5RDF3slrDebl4ZlC6e+hpPr2WfEIBoVkDGpqftMN Z33hAHkPYQced0Zd0kjqy9Yd8hXb7CbSMslTR2Hf7D18Rz+j5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIqNf/0gaDXzq4f/ggyGZlyeomFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvNTExZWQyNWMtM2FjNy00 ZDg2LTkyOTAtODc5ZTM4MTMzMjJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIe9Ev6Lqxd0vZ/T7DtqMp mejRwciYbdMuQNeoMfNpVSM7lX2QQD3XbiTaMw/C9HhdoTTIcOl2k7rrAwW/7cqS QVXemfQbOd19JEJckHn7X/atzyB3Uewk8GCL71amvMGP0TUR51I5uoNn6j7AHaPt raflg9owu/dI1Gk9NJdovNXzvzO3PCu2se1G8vDMN8dw/VafWL9AvcpxyVpdZv3j igFf37WoymKa+7Bg68nGt1OGjGPrVGADMH88SDi6rK2qbeJlTJOUPY5sO7lzM9uc AB4h5V5UtI46/h++vqNrEH3XeoIolplje3GGovsFBYk1OlN25ecir7vUJMDBZ8UP -----END CERTIFICATE-----Generated at Sun Mar 22 08:28:52 2026 by rpki-client