$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: 7vMQHvec4Lc6VX+R5YTgiVNBRD5k0tVOG7MIxyYL9v4= Subject key identifier: 6F:57:CE:26:A5:6E:4B:57:77:9B:38:49:C1:A5:8E:AD:B9:3D:3F:DE Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584D4F366BF285697D0C4362B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D702B Signing time: Fri 27 Mar 2026 17:00:04 +0000 Manifest this update: Fri 27 Mar 2026 17:00:04 +0000 Manifest next update: Mon 30 Mar 2026 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: u+7Do7tGHdgyZWSmpOsyWLenIGntJdnx5O20GJmm3BU=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: 4Y4nZMTx0NCxHf4UFrM/KPmNl1RHYmPmnneihFB+jrk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:36:6b:f2:85:69:7d:0c:43:62:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Mar 27 17:00:04 2026 GMT Not After : Mar 30 17:00:00 2026 GMT Subject: CN=1a26ee0b-0c1d-428d-9049-ab85ee5c6036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:de:b7:f5:28:ee:7d:04:dd:03:97:62:b1: 7d:80:04:0b:b5:3b:1a:8d:cb:64:35:73:3a:87:8d: aa:0c:6f:de:fa:f6:96:4b:58:a3:dc:d1:76:6f:cc: 73:b0:ca:94:ae:05:fe:3e:d3:be:f4:4a:57:50:39: 9e:38:1d:4c:f1:d7:c7:92:91:75:d6:6b:cf:1e:18: bb:4d:49:72:ec:23:5a:b9:d4:8f:42:8a:97:da:1b: 63:b6:dc:8e:1c:62:8c:12:8b:70:80:20:f2:c9:1f: ef:96:ec:09:42:a1:c8:22:9a:6f:66:87:8f:60:40: 53:da:59:c8:bf:ec:55:82:95:b6:82:9c:06:c2:3e: a2:c8:31:ae:e7:05:87:1b:35:cd:28:6c:8f:78:da: d4:61:12:18:cc:25:5f:f3:d0:e1:24:26:37:37:fd: f6:6d:1d:e5:40:ec:f0:d4:b3:b0:f1:a4:e0:6d:b6: c7:cd:68:61:5e:c5:c7:32:3a:3e:6b:69:f2:2b:e4: 52:74:57:93:24:5e:36:6b:49:29:80:9d:fe:b0:13: ce:52:6f:44:55:f2:bf:39:39:24:75:27:c2:35:6a: 23:6e:e6:de:7c:82:4a:03:69:e8:4d:a8:bd:8d:90: 23:c0:c9:32:d0:f5:11:21:89:b6:65:2c:01:7f:06: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:57:CE:26:A5:6E:4B:57:77:9B:38:49:C1:A5:8E:AD:B9:3D:3F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2a:5c:2b:0a:60:24:52:3f:0e:45:63:c3:34:ea:89:cf:be: 7d:4d:38:c1:9d:86:9e:0a:46:5b:0d:13:a1:dd:59:9e:52:16: 13:ee:97:ea:bf:fe:bf:ba:7d:49:15:d7:25:73:e9:d0:5e:dc: 17:9f:5a:47:dd:cd:db:2e:80:5d:33:c7:ff:ee:f0:40:9a:37: af:6d:ed:04:6c:d5:e0:7d:b0:76:ab:5f:07:ca:62:4e:91:36: ec:e9:50:04:7a:03:f2:71:11:01:ad:f7:2c:51:6e:63:f9:c9: ec:6a:1d:c6:ac:46:55:99:4e:ba:dc:1e:72:29:98:69:40:9e: 7e:b8:47:b9:a8:dd:b6:e4:33:a1:eb:95:88:ac:de:75:a3:99: 87:a8:73:95:0b:e8:4a:88:c1:b7:b0:3a:8f:14:b9:a8:10:4e: d6:66:6a:a4:87:13:14:3f:27:1e:9a:97:a4:1d:88:a2:72:eb: 80:c9:11:3a:56:b9:3c:9d:ca:e5:84:a0:66:81:f1:1b:34:65: 48:0a:fd:6c:29:17:8f:b0:bd:b2:66:c9:e1:8e:87:b2:63:80: d8:79:16:28:61:ce:fc:8c:1e:d0:5d:46:72:21:d3:0c:50:5b: 0f:9e:d3:a8:42:9e:29:bc:3d:b6:91:8d:f0:31:90:8f:b6:c0: 72:a2:fa:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PNmvyhWl9DENitYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI2MDMyNzE3MDAwNFoXDTI2MDMzMDE3MDAwMFowLzEtMCsGA1UEAxMk MWEyNmVlMGItMGMxZC00MjhkLTkwNDktYWI4NWVlNWM2MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuPet/Uo7n0E3QOXYrF9gAQLtTsajctkNXM6 h42qDG/e+vaWS1ij3NF2b8xzsMqUrgX+PtO+9EpXUDmeOB1M8dfHkpF11mvPHhi7 TUly7CNaudSPQoqX2htjttyOHGKMEotwgCDyyR/vluwJQqHIIppvZoePYEBT2lnI v+xVgpW2gpwGwj6iyDGu5wWHGzXNKGyPeNrUYRIYzCVf89DhJCY3N/32bR3lQOzw 1LOw8aTgbbbHzWhhXsXHMjo+a2nyK+RSdFeTJF42a0kpgJ3+sBPOUm9EVfK/OTkk dSfCNWojbubefIJKA2noTai9jZAjwMky0PURIYm2ZSwBfwYVUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG9XzialbktXd5s4ScGljq25PT/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFKlwrCmAkUj8ORWPDNOqJ z759TTjBnYaeCkZbDROh3VmeUhYT7pfqv/6/un1JFdclc+nQXtwXn1pH3c3bLoBd M8f/7vBAmjevbe0EbNXgfbB2q18HymJOkTbs6VAEegPycREBrfcsUW5j+cnsah3G rEZVmU663B5yKZhpQJ5+uEe5qN225DOh65WIrN51o5mHqHOVC+hKiMG3sDqPFLmo EE7WZmqkhxMUPycempekHYiicuuAyRE6Vrk8ncrlhKBmgfEbNGVICv1sKRePsL2y ZsnhjoeyY4DYeRYoYc78jB7QXUZyIdMMUFsPntOoQp4pvD22kY3wMZCPtsByovru -----END CERTIFICATE-----Generated at Fri Mar 27 19:34:44 2026 by rpki-client