$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft File: d96f592a-8fa9-4ec8-a272-b56c2537919c.mft (raw, json) Hash identifier: xpOjp6NSrF4vYIRc9vwsYLeYz3/Xv6MVYDQQxrPEL6U= Subject key identifier: 75:E8:DB:BC:AC:2C:0B:48:67:20:FB:72:DD:E8:68:5A:48:A8:60:F2 Authority key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Certificate issuer: /CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Certificate serial: 010D0C9F4328584D476B52B5C577085B33DA9980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft Manifest number: 010D0C9F4328584A1582B65E164CAB3B965D3F44 Signing time: Tue 24 Mar 2026 22:00:09 +0000 Manifest this update: Tue 24 Mar 2026 22:00:09 +0000 Manifest next update: Thu 26 Mar 2026 22:00:00 +0000 Files and hashes: 1: 4006a66d-6da1-3667-95e8-2ae868c8c68e.roa (hash: 3PudoqA3Oj4WwJRvaD1qvd9S96Nht8HJ5dwtoCxBZrc=) 2: d96f592a-8fa9-4ec8-a272-b56c2537919c.crl (hash: vAkifMpKob7ZrHhSK1+x0wNrX6dvJXIkWhhs0ub4MkM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:6b:52:b5:c5:77:08:5b:33:da:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Validity Not Before: Mar 24 22:00:09 2026 GMT Not After : Mar 26 22:00:00 2026 GMT Subject: CN=79d49a72-dbec-4835-b610-e03d2850ee34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:f7:fb:46:b5:76:f1:39:07:6a:19:43:59: c5:8f:51:76:48:de:c7:60:23:1d:e7:91:74:1e:e8: 05:16:d5:19:8e:6e:c8:cd:2b:c9:ad:c9:4b:92:18: 57:55:67:8c:91:41:52:20:33:51:d5:5b:d5:af:ba: d0:3c:4d:c6:29:67:e1:48:f0:b7:da:ea:f5:fa:67: cc:92:08:7a:c7:bb:fa:74:18:a0:8c:e7:92:0d:a5: 76:fe:65:32:a3:b1:57:82:ce:cc:4d:f7:89:6b:ee: be:76:ea:f4:a9:4f:a4:3c:59:a9:58:5f:48:3b:b8: 2e:9f:e0:30:39:a2:f2:4b:1b:04:8a:4c:5c:6c:5c: be:e9:72:a5:af:4d:68:d9:68:d0:aa:f3:f8:8a:a5: f3:d9:f9:e9:96:2e:f0:3e:0a:2d:1c:4c:4e:9f:8b: a0:11:49:8f:28:56:00:e0:78:85:bf:08:25:82:77: 2d:fd:d4:0d:54:4b:42:b2:86:f5:06:6b:20:5f:a0: 17:2c:78:25:68:d4:f0:2f:4e:fd:7b:40:b0:86:b9: 32:fa:f3:76:64:07:75:9d:8b:a3:e3:ab:98:0b:d9: 74:e9:4f:be:6f:9c:b7:76:0c:94:c5:3f:fc:a0:d4: 59:e0:3a:da:b7:09:23:7b:f1:03:53:cd:ee:f7:89: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E8:DB:BC:AC:2C:0B:48:67:20:FB:72:DD:E8:68:5A:48:A8:60:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl X509v3 Authority Key Identifier: keyid:14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:12:60:c4:97:d8:c4:01:f2:54:01:c7:a3:80:4a:f6:8b:93: 90:ee:22:8d:c9:d4:5a:e3:f6:20:13:d8:cc:e3:ec:3c:39:03: bb:c9:ca:7d:35:0d:58:e8:a8:85:1a:57:bf:57:7f:30:13:da: 2a:5a:0e:68:b8:30:c8:e4:6b:1d:e0:0a:8b:6f:8b:28:4a:d8: 84:e3:1f:09:d3:84:73:53:a8:a9:0a:88:d5:2d:28:c9:83:8e: a8:12:bf:b1:cb:8f:b1:cf:48:3a:f2:d5:a4:57:72:30:4b:ca: e2:6f:fc:82:71:08:98:21:2f:81:5d:d8:ed:19:b4:35:19:5e: c2:21:94:64:f5:11:90:a0:09:27:d5:89:1b:98:e7:b8:54:6f: 98:e1:03:a1:cd:93:0b:06:c7:c3:05:27:dc:4e:07:0f:c1:c8: e7:94:9f:9d:49:e0:5c:f2:c1:6b:80:d5:9b:7f:61:97:04:40: fc:8a:4b:c8:36:94:c4:70:3f:68:a4:d3:9f:61:d8:84:cd:66: b2:e6:7f:c9:85:e7:8b:3d:6f:3e:31:7f:a9:ba:b8:5c:93:7c: 18:49:9d:ce:7d:67:b7:75:d5:4d:67:15:35:3e:6c:01:8a:74: 1d:2b:b3:57:70:fb:71:25:3e:09:68:12:b0:b4:8f:14:88:f1: 69:75:7b:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ha1K1xXcIWzPamYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5 MTljMB4XDTI2MDMyNDIyMDAwOVoXDTI2MDMyNjIyMDAwMFowLzEtMCsGA1UEAxMk NzlkNDlhNzItZGJlYy00ODM1LWI2MTAtZTAzZDI4NTBlZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucL3+0a1dvE5B2oZQ1nFj1F2SN7HYCMd55F0 HugFFtUZjm7IzSvJrclLkhhXVWeMkUFSIDNR1VvVr7rQPE3GKWfhSPC32ur1+mfM kgh6x7v6dBigjOeSDaV2/mUyo7FXgs7MTfeJa+6+dur0qU+kPFmpWF9IO7gun+Aw OaLySxsEikxcbFy+6XKlr01o2WjQqvP4iqXz2fnpli7wPgotHExOn4ugEUmPKFYA 4HiFvwglgnct/dQNVEtCsob1BmsgX6AXLHglaNTwL079e0Cwhrky+vN2ZAd1nYuj 46uYC9l06U++b5y3dgyUxT/8oNRZ4Dratwkje/EDU83u94lWpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHXo27ysLAtIZyD7ct3oaFpIqGDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZm NTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvZDk2ZjU5MmEtOGZhOS00 ZWM4LWEyNzItYjU2YzI1Mzc5MTljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDk2ZjU5MmEtOGZhOS00ZWM4LWEy NzItYjU2YzI1Mzc5MTljL2Q5NmY1OTJhLThmYTktNGVjOC1hMjcyLWI1NmMyNTM3 OTE5Yy5jcmwwHwYDVR0jBBgwFoAUFJ7+v2rZASg6Fn5McNNjQUeAQvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZj MjUzNzkxOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXEmDEl9jEAfJUAcejgEr2 i5OQ7iKNydRa4/YgE9jM4+w8OQO7ycp9NQ1Y6KiFGle/V38wE9oqWg5ouDDI5Gsd 4AqLb4soStiE4x8J04RzU6ipCojVLSjJg46oEr+xy4+xz0g68tWkV3IwS8rib/yC cQiYIS+BXdjtGbQ1GV7CIZRk9RGQoAkn1YkbmOe4VG+Y4QOhzZMLBsfDBSfcTgcP wcjnlJ+dSeBc8sFrgNWbf2GXBED8ikvINpTEcD9opNOfYdiEzWay5n/JheeLPW8+ MX+purhck3wYSZ3OfWe3ddVNZxU1PmwBinQdK7NXcPtxJT4JaBKwtI8UiPFpdXvh -----END CERTIFICATE-----Generated at Wed Mar 25 14:03:16 2026 by rpki-client