$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft File: f08438f2-f343-4b2c-b0be-ac56b734d48d.mft (raw, json) Hash identifier: 9DEuryrcBDOEJcwO/yb1YuCgm5N3oR4aHIouw3g3aic= Subject key identifier: 48:A6:F8:F1:23:CF:DF:D5:90:5F:1B:62:3F:E2:F0:D0:69:E5:52:5C Authority key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 Certificate issuer: /CN=f08438f2-f343-4b2c-b0be-ac56b734d48d Certificate serial: 010D0C9F4328584D3E588CD2932C85D78DFA0FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft Manifest number: 010D0C9F432858477987AEF3BFC91110A12AE39F Signing time: Sat 21 Mar 2026 16:00:03 +0000 Manifest this update: Sat 21 Mar 2026 16:00:03 +0000 Manifest next update: Mon 23 Mar 2026 16:00:00 +0000 Files and hashes: 1: 5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa (hash: nne/8dIicoUcxT1vzbAqpHYLBRwgoEscti5TJJejwKs=) 2: f08438f2-f343-4b2c-b0be-ac56b734d48d.crl (hash: OfCWI50yzCnUYfjMhwDX2tkmDbsys0bJGqbVPkuKUFA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:58:8c:d2:93:2c:85:d7:8d:fa:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d Validity Not Before: Mar 21 16:00:03 2026 GMT Not After : Mar 23 16:00:00 2026 GMT Subject: CN=a245729e-7268-489b-93c3-f2ccac5dd4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:25:36:74:ce:c0:ed:b1:20:12:db:1a:8d: 46:ce:a7:ac:c6:b0:20:e6:fc:b7:d6:c1:02:ea:52: e8:fc:93:0a:2d:4a:6c:74:b3:34:98:88:90:bb:3e: 85:2e:41:3d:fb:4b:d9:96:98:5f:87:9e:3b:29:83: 51:19:9f:71:65:5f:a2:e1:95:ba:28:e9:83:a9:28: 63:ff:e0:11:c9:60:13:0d:af:c0:4b:d4:7b:43:8d: b2:6a:2b:18:14:fd:70:ac:47:42:aa:27:47:8e:a0: f4:bd:37:c2:56:3e:37:76:d4:ea:f0:dc:01:cc:2f: 69:61:af:a6:a4:79:3b:02:91:30:25:70:43:a4:bf: 5b:f5:18:89:84:29:df:7c:03:4c:ca:38:9e:b1:0d: 56:40:1c:23:08:0d:e2:2f:97:dd:35:a6:f5:77:f9: 7b:14:e4:86:ab:c4:64:fe:e9:9a:cd:6b:90:e3:32: 41:b8:89:cb:2c:b7:ae:36:0b:22:c7:23:5a:2e:d8: a8:47:99:51:6e:84:10:0c:fb:cb:34:6a:49:e1:c5: 00:31:53:00:c5:2f:12:3e:20:e7:eb:82:b4:4a:31: 78:29:bc:1a:16:a8:c4:37:b4:38:68:45:78:da:70: 9a:b2:03:bd:09:75:83:60:25:73:2f:04:58:d1:3d: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A6:F8:F1:23:CF:DF:D5:90:5F:1B:62:3F:E2:F0:D0:69:E5:52:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl X509v3 Authority Key Identifier: keyid:0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:89:75:9c:b2:38:f8:0d:07:e9:59:ba:b3:51:71:f1:e9:f9: d5:dc:0c:b6:7e:a1:2a:cd:d9:0a:50:4d:4e:f5:ee:40:c7:a8: 8d:ce:1a:e8:0a:81:e2:b9:21:65:c6:23:a1:ea:b6:3d:86:75: e6:17:4d:71:ec:fc:99:4c:e1:c6:81:22:84:3e:b4:0f:9d:f3: a7:e8:da:b3:f4:b5:7a:74:d3:0f:5b:ce:92:ab:62:cf:d8:84: 52:4b:27:f1:61:d9:2b:ea:92:c7:eb:58:ba:bf:39:db:49:ff: 03:60:70:21:d9:1c:6e:ad:4e:a4:39:2a:67:ab:a9:87:52:12: 21:86:90:4d:31:a4:5c:9c:b9:af:1a:af:e1:48:68:9d:4b:06: 86:9f:4e:e5:b2:02:fd:bb:d6:c5:69:97:06:49:89:44:78:f3: 70:ba:c5:13:be:33:c9:91:1e:a5:ef:30:f2:a8:a8:cf:0f:20: be:32:28:13:b3:8a:68:f2:eb:8f:a1:56:4c:af:73:12:18:be: 04:47:ca:08:04:c5:00:99:0c:2e:d2:c4:59:65:8a:3d:ec:53: 91:8c:17:7e:52:3d:cf:36:b9:c7:77:3c:84:e2:cf:e8:7a:18: e6:24:d5:f3:c5:eb:87:19:9a:6e:d1:82:3a:25:fb:aa:2a:b3: ec:66:4a:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+WIzSkyyF1436D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4NDM4ZjItZjM0My00YjJjLWIwYmUtYWM1NmI3MzRk NDhkMB4XDTI2MDMyMTE2MDAwM1oXDTI2MDMyMzE2MDAwMFowLzEtMCsGA1UEAxMk YTI0NTcyOWUtNzI2OC00ODliLTkzYzMtZjJjY2FjNWRkNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OElNnTOwO2xIBLbGo1GzqesxrAg5vy31sEC 6lLo/JMKLUpsdLM0mIiQuz6FLkE9+0vZlphfh547KYNRGZ9xZV+i4ZW6KOmDqShj /+ARyWATDa/AS9R7Q42yaisYFP1wrEdCqidHjqD0vTfCVj43dtTq8NwBzC9pYa+m pHk7ApEwJXBDpL9b9RiJhCnffANMyjiesQ1WQBwjCA3iL5fdNab1d/l7FOSGq8Rk /umazWuQ4zJBuInLLLeuNgsixyNaLtioR5lRboQQDPvLNGpJ4cUAMVMAxS8SPiDn 64K0SjF4KbwaFqjEN7Q4aEV42nCasgO9CXWDYCVzLwRY0T32+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEim+PEjz9/VkF8bYj/i8NBp5VJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDg0 MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2YjczNGQ0OGQvZjA4NDM4ZjItZjM0My00 YjJjLWIwYmUtYWM1NmI3MzRkNDhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4NDM4ZjItZjM0My00YjJjLWIw YmUtYWM1NmI3MzRkNDhkL2YwODQzOGYyLWYzNDMtNGIyYy1iMGJlLWFjNTZiNzM0 ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUDBm5BxbOG/gkR+AFnALAMJamF2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDg0MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2 YjczNGQ0OGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0iXWcsjj4DQfpWbqzUXHx 6fnV3Ay2fqEqzdkKUE1O9e5Ax6iNzhroCoHiuSFlxiOh6rY9hnXmF01x7PyZTOHG gSKEPrQPnfOn6Nqz9LV6dNMPW86Sq2LP2IRSSyfxYdkr6pLH61i6vznbSf8DYHAh 2RxurU6kOSpnq6mHUhIhhpBNMaRcnLmvGq/hSGidSwaGn07lsgL9u9bFaZcGSYlE ePNwusUTvjPJkR6l7zDyqKjPDyC+MigTs4po8uuPoVZMr3MSGL4ER8oIBMUAmQwu 0sRZZYo97FORjBd+Uj3PNrnHdzyE4s/oehjmJNXzxeuHGZpu0YI6JfuqKrPsZkqS -----END CERTIFICATE-----Generated at Sun Mar 22 08:34:40 2026 by rpki-client