$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft File: 4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft (raw, json) Hash identifier: sdJ3TtKWisREVM9qewor6MseVY8Sr1qItsZP2T1W18g= Subject key identifier: 9E:4C:35:B7:37:AA:43:2A:40:F8:78:04:D7:86:43:FF:7F:D2:9E:0F Authority key identifier: C6:E9:FD:71:4C:EE:F8:67:DA:C7:F3:9D:BD:A1:91:42:46:1C:EB:04 Certificate issuer: /CN=4a1f1870-2d18-4f29-a8d8-91987d2f683e Certificate serial: 010D0C9F4328584D54CBCD8372CFE4E9973C4A70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft Manifest number: 010D0C9F4328584D1D050C8E40A47D3D820812D5 Signing time: Sun 29 Mar 2026 17:00:03 +0000 Manifest this update: Sun 29 Mar 2026 17:00:03 +0000 Manifest next update: Wed 01 Apr 2026 17:00:00 +0000 Files and hashes: 1: 09362b02-a38b-3388-9801-18d7732c47a7.roa (hash: xL0dthV3zOML2g393BVU/xdWUMZ0Z+R/VYpS8clBZY4=) 2: 4a1f1870-2d18-4f29-a8d8-91987d2f683e.crl (hash: SSGuAXLZu1XsOdhCtNkdnJOC0RsYkLFA3x/GNr73UzA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:cb:cd:83:72:cf:e4:e9:97:3c:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1f1870-2d18-4f29-a8d8-91987d2f683e Validity Not Before: Mar 29 17:00:03 2026 GMT Not After : Apr 1 17:00:00 2026 GMT Subject: CN=77abac10-8433-42aa-b4a7-0b8543663c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:e3:11:8e:80:7c:fd:6e:30:03:59:9e:5e: de:b9:d2:a3:e8:46:bc:6b:6e:df:71:87:71:20:47: d9:1b:6a:22:54:cb:e6:3f:b1:bf:f3:b2:68:d5:d1: 0d:e0:4a:be:41:4d:05:1c:6f:04:95:f3:c5:66:70: c5:89:17:4f:be:6d:17:98:38:90:fc:59:e0:e2:55: c3:56:af:de:e3:8b:fa:ab:5c:6b:5b:41:c8:a5:e8: 35:4a:d9:bc:39:bd:d9:86:e2:03:d9:e3:42:0b:22: ce:7d:bd:4a:fd:1c:92:01:21:f4:ae:fe:86:bc:93: 18:63:a4:27:fd:8c:21:4e:32:55:20:cc:8b:44:ed: c8:ac:c0:4d:21:cb:70:85:78:e8:73:8f:7a:c1:5b: 43:4e:c2:1a:e2:26:d1:96:c8:f3:dc:5e:5b:19:06: c9:82:03:88:8b:25:f9:cf:ee:2e:ef:6e:43:93:fe: 89:ff:17:c2:eb:6a:36:7e:e5:84:0b:42:3e:86:ad: 21:cf:96:d9:28:e5:c7:b0:04:47:03:f6:8f:63:ef: c5:24:0a:0f:48:04:de:b8:82:bc:4b:ac:09:52:99: ca:b6:19:9a:9b:fb:c5:c4:3c:4f:15:25:e4:39:fc: db:dd:41:68:6e:82:a4:1e:1e:41:80:cc:91:50:99: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:35:B7:37:AA:43:2A:40:F8:78:04:D7:86:43:FF:7F:D2:9E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.crl X509v3 Authority Key Identifier: keyid:C6:E9:FD:71:4C:EE:F8:67:DA:C7:F3:9D:BD:A1:91:42:46:1C:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ea:a3:3b:09:52:42:6a:02:a0:48:ad:83:d5:02:64:8d:c3: de:40:48:9b:25:80:c6:87:1d:0b:e4:c4:b7:f0:ea:98:04:8b: 93:eb:87:27:5b:f0:8e:17:d5:ea:c1:ca:f6:b2:5b:34:ad:5f: 14:10:b2:12:52:6a:1c:68:35:77:c8:18:c8:dd:0b:68:1d:02: 10:68:c4:18:7e:11:43:35:9e:e6:cb:e6:20:4c:9a:90:a8:9d: b3:d0:08:cc:20:03:2b:13:e4:3a:24:e5:a5:a7:fc:f3:eb:6a: cb:73:7a:85:03:31:80:74:9b:72:19:b7:b1:58:8f:c3:aa:3f: 08:1e:f9:f8:06:35:c4:52:3f:1b:2f:d2:89:ca:cf:3f:d7:99: 68:94:a0:31:f7:6e:e1:88:2c:42:8b:0d:f9:3d:21:2c:d5:9e: e7:d4:69:56:1b:54:65:81:5a:30:6a:50:6f:47:31:a6:25:85: 94:df:5e:28:ad:70:ef:61:1a:f6:76:71:9a:67:2b:ee:8e:51: a9:c3:c8:30:3c:ec:da:ad:38:d2:61:59:7b:6f:38:ee:c5:50: 66:ef:56:f1:23:f1:26:f3:92:30:0d:c1:1a:a3:f2:27:40:60: ad:82:81:b4:e1:5f:b7:e7:65:7b:2b:c6:ba:4f:32:c5:56:8a: 57:f7:9d:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Uy82Dcs/k6Zc8SnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExZjE4NzAtMmQxOC00ZjI5LWE4ZDgtOTE5ODdkMmY2 ODNlMB4XDTI2MDMyOTE3MDAwM1oXDTI2MDQwMTE3MDAwMFowLzEtMCsGA1UEAxMk NzdhYmFjMTAtODQzMy00MmFhLWI0YTctMGI4NTQzNjYzYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRDjEY6AfP1uMANZnl7eudKj6Ea8a27fcYdx IEfZG2oiVMvmP7G/87Jo1dEN4Eq+QU0FHG8ElfPFZnDFiRdPvm0XmDiQ/Fng4lXD Vq/e44v6q1xrW0HIpeg1Stm8Ob3ZhuID2eNCCyLOfb1K/RySASH0rv6GvJMYY6Qn /YwhTjJVIMyLRO3IrMBNIctwhXjoc496wVtDTsIa4ibRlsjz3F5bGQbJggOIiyX5 z+4u725Dk/6J/xfC62o2fuWEC0I+hq0hz5bZKOXHsARHA/aPY+/FJAoPSATeuIK8 S6wJUpnKthmam/vFxDxPFSXkOfzb3UFoboKkHh5BgMyRUJmB9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ5MNbc3qkMqQPh4BNeGQ/9/0p4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80YTFm MTg3MC0yZDE4LTRmMjktYThkOC05MTk4N2QyZjY4M2UvNGExZjE4NzAtMmQxOC00 ZjI5LWE4ZDgtOTE5ODdkMmY2ODNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGExZjE4NzAtMmQxOC00ZjI5LWE4 ZDgtOTE5ODdkMmY2ODNlLzRhMWYxODcwLTJkMTgtNGYyOS1hOGQ4LTkxOTg3ZDJm NjgzZS5jcmwwHwYDVR0jBBgwFoAUxun9cUzu+Gfax/OdvaGRQkYc6wQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80YTFmMTg3MC0yZDE4LTRmMjktYThkOC05MTk4 N2QyZjY4M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE6qM7CVJCagKgSK2D1QJk jcPeQEibJYDGhx0L5MS38OqYBIuT64cnW/COF9Xqwcr2sls0rV8UELISUmocaDV3 yBjI3QtoHQIQaMQYfhFDNZ7my+YgTJqQqJ2z0AjMIAMrE+Q6JOWlp/zz62rLc3qF AzGAdJtyGbexWI/Dqj8IHvn4BjXEUj8bL9KJys8/15lolKAx927hiCxCiw35PSEs 1Z7n1GlWG1RlgVowalBvRzGmJYWU314orXDvYRr2dnGaZyvujlGpw8gwPOzarTjS YVl7bzjuxVBm71bxI/Em85IwDcEao/InQGCtgoG04V+352V7K8a6TzLFVopX952c -----END CERTIFICATE-----Generated at Mon Mar 30 00:44:48 2026 by rpki-client