$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft File: 7afbb48a-7a41-422c-a27b-4b92e0907153.mft (raw, json) Hash identifier: 12Uu71PmbTSq2kbO8rHAd48ZqQAhceZBIwWyqdN8OII= Subject key identifier: 0B:70:61:46:F5:B6:34:D9:3C:C2:59:5C:B2:C1:CE:73:E5:95:D5:20 Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E Certificate issuer: /CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Certificate serial: 010D0C9F4328584D3CF333C7A509F7180C3DE300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft Manifest number: 010D0C9F432858496EA47549D85836F893509725 Signing time: Sat 21 Mar 2026 04:00:04 +0000 Manifest this update: Sat 21 Mar 2026 04:00:04 +0000 Manifest next update: Mon 23 Mar 2026 04:00:00 +0000 Files and hashes: 1: 309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (hash: C07WgfqT9r7BP6RGc62jo6j5aiac9J3X6oKustInT9s=) 2: 7afbb48a-7a41-422c-a27b-4b92e0907153.crl (hash: VbADwsm0P6vmV8Q8CG7Fc5hta7hkjPZVX0azJcJPk0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:f3:33:c7:a5:09:f7:18:0c:3d:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Validity Not Before: Mar 21 04:00:04 2026 GMT Not After : Mar 23 04:00:00 2026 GMT Subject: CN=a0beb881-c780-42d4-9552-1e8b1ad21973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:10:f6:a2:3d:58:12:9b:4f:51:79:2b:26:ca: b2:04:38:d1:fc:a4:42:ac:05:db:9e:dd:a0:6a:df: 7e:90:5e:41:7c:fa:44:34:b6:00:ce:89:1b:f3:02: 22:9e:dd:2c:e6:24:a7:85:05:b2:f7:13:1c:ef:41: 1d:2f:9c:e9:1e:e9:c3:14:3f:f2:8a:a2:4a:f8:da: cf:ee:33:74:19:2f:80:3b:0f:df:d9:c8:3c:18:25: 00:e5:7b:2d:a2:79:cb:a2:15:a4:49:18:3b:4f:36: ff:91:6d:ce:d5:1b:dd:18:d4:78:5a:2e:53:92:20: a0:8f:7f:05:dd:b2:73:da:83:c6:8b:5d:4f:b8:44: 11:7d:45:a8:7e:7a:6c:a9:63:ed:2e:55:71:fa:38: 9b:0c:43:40:1d:81:29:e5:cc:fa:59:17:fd:59:b0: 0b:7c:e3:59:21:c3:19:5e:ac:8f:88:de:5e:5c:f9: fc:ac:b4:ee:55:2a:27:bb:97:23:8d:3d:85:2d:6e: 37:53:3b:f5:7c:69:2d:2d:62:7d:00:2e:22:29:f6: 05:89:c7:a9:86:f4:4c:13:67:e2:a8:c9:eb:f4:d4: a6:b8:6e:c2:16:6f:8a:0e:00:ae:a5:54:dc:26:ef: bd:5f:40:f6:16:ac:87:60:6f:e3:29:f5:ce:9a:4a: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:70:61:46:F5:B6:34:D9:3C:C2:59:5C:B2:C1:CE:73:E5:95:D5:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl X509v3 Authority Key Identifier: keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9e:ea:c0:7e:29:66:ab:61:6b:08:e9:25:f2:f2:1c:13:ce: 74:22:ca:2e:16:af:62:29:8b:c8:a3:ea:84:49:94:2f:02:05: 56:3c:34:18:76:e8:50:34:59:5c:37:54:26:a2:b1:92:96:bd: f9:53:72:ea:a6:f7:16:f5:85:f8:2e:64:79:93:58:60:6b:65: c0:11:6b:e2:dc:0f:b7:46:47:37:74:6c:af:6a:05:ae:b8:0c: cc:6f:1e:be:a7:bb:71:04:d0:9c:ae:92:d7:b4:1b:54:5e:b8: 3b:51:57:e0:fd:94:a8:7b:bf:7e:bd:02:55:7b:de:68:4f:c3: eb:a7:5f:bd:62:70:c8:96:6c:d3:b5:32:d2:c3:c7:e6:82:46: b7:56:ad:c5:9d:09:06:c6:94:af:e7:79:87:20:8f:05:57:03: 51:16:73:5e:e6:b0:1b:19:04:88:7e:8c:7e:54:76:3a:fe:90: fc:bd:d5:25:60:7d:2e:d9:2e:8b:ac:c0:47:b6:32:fd:82:a6: 70:07:44:4c:01:93:f5:b7:1c:4f:ad:1a:d1:c1:e2:92:46:8c: a0:cb:6c:ae:11:d3:3d:f8:17:b8:97:31:f5:38:81:37:65:1a: 59:ba:75:c7:14:99:23:f8:ef:b2:58:c6:71:a5:64:cc:3c:72: c5:70:08:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE088zPHpQn3GAw94wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYmI0OGEtN2E0MS00MjJjLWEyN2ItNGI5MmUwOTA3 MTUzMB4XDTI2MDMyMTA0MDAwNFoXDTI2MDMyMzA0MDAwMFowLzEtMCsGA1UEAxMk YTBiZWI4ODEtYzc4MC00MmQ0LTk1NTItMWU4YjFhZDIxOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRD2oj1YEptPUXkrJsqyBDjR/KRCrAXbnt2g at9+kF5BfPpENLYAzokb8wIint0s5iSnhQWy9xMc70EdL5zpHunDFD/yiqJK+NrP 7jN0GS+AOw/f2cg8GCUA5XstonnLohWkSRg7Tzb/kW3O1RvdGNR4Wi5TkiCgj38F 3bJz2oPGi11PuEQRfUWofnpsqWPtLlVx+jibDENAHYEp5cz6WRf9WbALfONZIcMZ XqyPiN5eXPn8rLTuVSonu5cjjT2FLW43Uzv1fGktLWJ9AC4iKfYFicephvRME2fi qMnr9NSmuG7CFm+KDgCupVTcJu+9X0D2FqyHYG/jKfXOmkqQUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAtwYUb1tjTZPMJZXLLBznPlldUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83YWZi YjQ4YS03YTQxLTQyMmMtYTI3Yi00YjkyZTA5MDcxNTMvN2FmYmI0OGEtN2E0MS00 MjJjLWEyN2ItNGI5MmUwOTA3MTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2FmYmI0OGEtN2E0MS00MjJjLWEy N2ItNGI5MmUwOTA3MTUzLzdhZmJiNDhhLTdhNDEtNDIyYy1hMjdiLTRiOTJlMDkw NzE1My5jcmwwHwYDVR0jBBgwFoAUIzJ1MrQ9OnACvnyh5vqZeNyLeY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83YWZiYjQ4YS03YTQxLTQyMmMtYTI3Yi00Yjky ZTA5MDcxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBenurAfilmq2FrCOkl8vIc E850IsouFq9iKYvIo+qESZQvAgVWPDQYduhQNFlcN1QmorGSlr35U3LqpvcW9YX4 LmR5k1hga2XAEWvi3A+3Rkc3dGyvagWuuAzMbx6+p7txBNCcrpLXtBtUXrg7UVfg /ZSoe79+vQJVe95oT8Prp1+9YnDIlmzTtTLSw8fmgka3Vq3FnQkGxpSv53mHII8F VwNRFnNe5rAbGQSIfox+VHY6/pD8vdUlYH0u2S6LrMBHtjL9gqZwB0RMAZP1txxP rRrRweKSRoygy2yuEdM9+Be4lzH1OIE3ZRpZunXHFJkj+O+yWMZxpWTMPHLFcAjE -----END CERTIFICATE-----Generated at Sun Mar 22 05:45:18 2026 by rpki-client