$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft File: dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft (raw, json) Hash identifier: 0Yvq4j0KltZI4WGAvpxgfTosyQJdcsufCFkPoAXqjKU= Subject key identifier: FC:24:E1:C8:0D:9C:16:29:5F:75:3C:0C:1B:19:62:4F:0D:5A:36:C2 Authority key identifier: 15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98 Certificate issuer: /CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5 Certificate serial: 010D0C9F4328584D3EED80E1D5DF157B78FDA980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft Manifest number: 010D0C9F4328584D204DBEE72A4068124FEB1567 Signing time: Sat 21 Mar 2026 21:00:09 +0000 Manifest this update: Sat 21 Mar 2026 21:00:09 +0000 Manifest next update: Mon 23 Mar 2026 21:00:00 +0000 Files and hashes: 1: 92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa (hash: EeFbIF5aZWoGK5v4eYMwI8ks7ESJl//4KGsUodjm8CM=) 2: dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl (hash: nLL+YMWd1uhY4KQRZWrU7Mhj3jBGM7bnrDgvjK19ywE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:ed:80:e1:d5:df:15:7b:78:fd:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5 Validity Not Before: Mar 21 21:00:09 2026 GMT Not After : Mar 23 21:00:00 2026 GMT Subject: CN=1496647c-d74f-4f58-a86b-eae927cb03b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:ec:9e:fc:d3:9b:51:6c:46:a5:e3:08:82: 12:ef:e3:44:d6:33:4e:a7:ef:52:bc:6e:8f:b7:4b: cb:f1:19:7d:d9:30:6a:4c:26:1a:5e:90:ca:fe:cc: cf:8c:d2:22:f0:95:96:0e:26:cc:28:db:ec:d1:3b: c7:79:be:e2:9f:19:df:ad:31:78:8d:f8:83:b6:a0: 67:b0:f4:16:74:56:6d:3c:8a:45:f1:19:6b:65:84: a6:83:4e:28:89:a1:4b:b2:af:05:32:e9:88:13:9a: 60:b6:b2:ec:a0:03:6a:e8:98:ad:13:96:c1:59:aa: dc:43:a8:8f:8e:2b:d2:21:96:54:bf:21:08:3a:e5: af:5e:05:69:27:67:a8:96:4f:41:4d:af:54:d5:e2: c5:0d:9c:1e:02:76:0d:58:22:1f:ec:3f:cf:3a:6c: e8:bd:6c:b6:fb:5f:2c:a8:1f:c4:16:b5:00:cf:23: 3e:76:b7:78:01:55:7c:15:1a:e3:76:7c:37:39:71: a3:1e:c5:82:70:06:c1:e9:0c:49:4e:8d:2f:29:a8: 4e:6d:06:ac:f4:45:10:75:93:f3:5d:66:ff:fd:da: a9:20:ec:16:b8:18:0e:f3:45:25:8c:c8:ea:4e:da: 42:b5:f5:c0:84:c0:bc:35:a9:ab:1a:e6:f5:51:48: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:24:E1:C8:0D:9C:16:29:5F:75:3C:0C:1B:19:62:4F:0D:5A:36:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl X509v3 Authority Key Identifier: keyid:15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c4:e2:8b:7c:31:c6:f4:48:cd:f4:3b:d3:13:dc:9f:b7:c2: 6c:50:dc:8e:42:6c:7e:26:ed:0a:b7:32:bd:5f:dd:b9:01:03: bb:04:3b:10:ea:c8:96:a6:06:e7:88:38:b2:03:fa:9a:90:11: bf:b3:7a:a7:1c:a3:7e:9e:ca:cd:71:0a:35:9b:bb:c9:83:39: 6d:af:f1:80:f4:d7:2c:fa:96:4d:50:72:14:9b:33:d7:4f:32: 17:66:be:b9:76:91:e7:fd:72:25:3d:4e:76:2c:11:0f:07:74: ed:32:98:de:90:8a:a3:99:28:a6:46:60:47:29:e9:11:bf:c2: 18:74:07:1b:4c:88:2a:1d:ae:44:08:ed:d2:4c:58:8e:c9:fd: 25:00:33:45:27:1d:ff:00:88:cf:0a:a5:84:7b:f6:9d:ba:98: f6:74:bc:57:bd:ec:d9:d6:c3:fb:07:75:c8:16:27:cb:08:ef: 65:4b:c4:bc:07:9a:e5:ea:12:ef:ee:54:70:fb:e8:50:3a:8d: 76:7f:97:cd:3e:9e:5e:34:31:9c:a1:02:7e:bf:a2:eb:ba:be: 02:fe:15:6d:37:b9:6a:aa:0d:91:f1:a2:81:56:95:e5:07:02: 9e:ba:d4:8e:f0:5f:7d:d5:fb:ca:3f:28:ac:71:58:f0:9b:ed: d4:dc:e9:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+7YDh1d8Ve3j9qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ4YTJkNzEtZWEzZS00YTY5LWEyMTUtNWVlNzE3Y2Qy OWU1MB4XDTI2MDMyMTIxMDAwOVoXDTI2MDMyMzIxMDAwMFowLzEtMCsGA1UEAxMk MTQ5NjY0N2MtZDc0Zi00ZjU4LWE4NmItZWFlOTI3Y2IwM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnnsnvzTm1FsRqXjCIIS7+NE1jNOp+9SvG6P t0vL8Rl92TBqTCYaXpDK/szPjNIi8JWWDibMKNvs0TvHeb7inxnfrTF4jfiDtqBn sPQWdFZtPIpF8RlrZYSmg04oiaFLsq8FMumIE5pgtrLsoANq6JitE5bBWarcQ6iP jivSIZZUvyEIOuWvXgVpJ2eolk9BTa9U1eLFDZweAnYNWCIf7D/POmzovWy2+18s qB/EFrUAzyM+drd4AVV8FRrjdnw3OXGjHsWCcAbB6QxJTo0vKahObQas9EUQdZPz XWb//dqpIOwWuBgO80UljMjqTtpCtfXAhMC8NamrGub1UUh64QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPwk4cgNnBYpX3U8DBsZYk8NWjbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDhh MmQ3MS1lYTNlLTRhNjktYTIxNS01ZWU3MTdjZDI5ZTUvZGQ4YTJkNzEtZWEzZS00 YTY5LWEyMTUtNWVlNzE3Y2QyOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQ4YTJkNzEtZWEzZS00YTY5LWEy MTUtNWVlNzE3Y2QyOWU1L2RkOGEyZDcxLWVhM2UtNGE2OS1hMjE1LTVlZTcxN2Nk MjllNS5jcmwwHwYDVR0jBBgwFoAUFbjtfeFLQDrxXUJTv+cTpKcujpgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDhhMmQ3MS1lYTNlLTRhNjktYTIxNS01ZWU3 MTdjZDI5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLxOKLfDHG9EjN9DvTE9yf t8JsUNyOQmx+Ju0KtzK9X925AQO7BDsQ6siWpgbniDiyA/qakBG/s3qnHKN+nsrN cQo1m7vJgzltr/GA9Ncs+pZNUHIUmzPXTzIXZr65dpHn/XIlPU52LBEPB3TtMpje kIqjmSimRmBHKekRv8IYdAcbTIgqHa5ECO3STFiOyf0lADNFJx3/AIjPCqWEe/ad upj2dLxXvezZ1sP7B3XIFifLCO9lS8S8B5rl6hLv7lRw++hQOo12f5fNPp5eNDGc oQJ+v6Lrur4C/hVtN7lqqg2R8aKBVpXlBwKeutSO8F991fvKPyiscVjwm+3U3Olj -----END CERTIFICATE-----Generated at Sun Mar 22 08:35:42 2026 by rpki-client