$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft File: 4af28314-8fe0-47ff-83fe-2ca111b759a7.mft (raw, json) Hash identifier: weujPYj9Egrh9QiNWiYGAroLe6XixhIfdbS+gZgwCls= Subject key identifier: E4:43:BD:C4:C5:F4:56:7C:C9:6E:29:FC:F7:10:D8:FF:46:B1:21:7B Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21 Certificate issuer: /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7 Certificate serial: 010D0C9F4328584D4D5A092FFDC8110470589600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft Manifest number: 010D0C9F4328584073A835573EF608B3E9C7F180 Signing time: Fri 27 Mar 2026 01:00:10 +0000 Manifest this update: Fri 27 Mar 2026 01:00:10 +0000 Manifest next update: Mon 30 Mar 2026 01:00:00 +0000 Files and hashes: 1: 4af28314-8fe0-47ff-83fe-2ca111b759a7.crl (hash: P+mFps9BXecP91TLlzhlPMCcEWCQJdrD9m1+zlypVeI=) 2: 5920a85d-f3d3-380a-b369-162ca959096d.roa (hash: X0QEwZT4jnWeMZxH6EsDvz1UXTnXG4YknCH6tW4QEV4=) 3: 5cc512a3-818f-303a-8c08-f103201a9ab0.roa (hash: 7nGGSZ6MdpyHkwc3wOza808HGXJhPI3NQXv3mQY1FR8=) 4: c6492204-28f2-37fd-b247-ea6f897ad2f3.roa (hash: SW0VE7z4lJbg3I0/E07rhFoBPeoDoZ7IjXQ+C3V6hls=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:09:2f:fd:c8:11:04:70:58:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7 Validity Not Before: Mar 27 01:00:10 2026 GMT Not After : Mar 30 01:00:00 2026 GMT Subject: CN=d0b59ea2-8cd4-46e4-bfa3-dd439c4f5279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:f9:c7:6f:bf:8c:f0:bd:04:dd:37:17:78: 8f:89:a7:87:40:f2:63:dd:d9:02:6f:f3:42:69:2b: 61:ec:95:87:c3:70:5f:8d:7b:b0:be:13:e0:01:65: 42:56:1d:c6:c5:60:75:76:18:fc:83:7f:2a:65:da: 6a:1d:60:74:8c:11:e9:ef:5c:c8:a5:eb:d6:5e:bc: 64:be:ab:d8:fa:3e:2a:7d:a3:c7:bf:2e:0e:41:b9: 33:17:cb:fa:47:d5:03:e4:95:c6:fa:7c:b1:91:e9: 04:22:1c:bb:20:f1:33:28:9b:cb:30:fa:85:5e:14: 5b:7d:14:3a:e2:93:5a:b0:14:a5:5f:f2:78:a2:a4: 08:3d:3d:88:0c:7b:3c:c2:44:00:2f:4f:df:fd:7d: ab:73:b6:06:64:9f:6a:87:60:e4:b7:ed:8b:70:3c: 74:fb:b9:d0:60:ca:7c:9b:e9:6c:ea:7d:88:a5:d1: 3f:d7:26:b4:fb:05:a2:53:f0:4c:75:91:84:0f:c5: 20:08:a5:19:dc:5e:ab:f6:9f:d4:6d:33:b0:d3:3c: 36:0c:98:54:ef:c3:82:ba:0c:ab:dc:c8:a1:72:67: 36:e3:aa:46:db:66:5f:6e:f1:a5:05:86:a2:69:3b: f9:6d:9a:56:b7:ed:01:d0:e9:5a:c5:42:68:70:a5: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:BD:C4:C5:F4:56:7C:C9:6E:29:FC:F7:10:D8:FF:46:B1:21:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl X509v3 Authority Key Identifier: keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:33:37:fc:39:0d:7c:f5:cd:3b:23:22:fc:bf:53:92:24:ab: a2:33:74:6d:d4:29:a5:5d:19:92:b8:6b:fd:a0:89:6e:a9:c3: 45:a8:31:da:70:6d:bf:d4:c9:a9:03:22:36:bb:b6:4c:ce:78: 9b:c6:69:61:e3:31:a2:0b:e7:9d:96:21:89:d2:e5:7d:e5:10: 4b:b9:f2:33:62:aa:ff:13:c0:92:04:e9:68:dc:54:ca:54:14: 1a:12:3d:4e:8b:8f:59:24:6e:c9:71:ad:c7:15:0b:af:b2:de: eb:89:54:ea:91:ec:23:03:3d:a9:15:f0:30:43:02:f9:0b:3c: 1d:35:59:4a:ce:fb:4a:1e:a3:eb:8f:f1:f6:00:be:ad:9e:85: 89:d9:b7:66:f4:c0:17:00:9d:e4:96:23:60:ce:82:9c:57:9f: 21:56:15:5f:d2:a2:32:b3:8a:59:69:d3:32:fc:4d:f4:30:5b: 0d:80:65:85:4a:74:3d:53:84:3a:68:9b:a8:ff:bc:3e:ed:ae: 21:58:53:60:31:44:23:3e:18:fc:f7:d4:b4:54:58:e3:44:b1: aa:57:eb:91:d9:39:ea:5d:83:c1:b4:b6:ff:b8:3c:fb:76:98: d7:7b:51:89:6b:19:36:ff:b4:24:55:3e:5c:7e:a6:b8:f7:cd: 7c:3c:b7:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1NWgkv/cgRBHBYlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmMjgzMTQtOGZlMC00N2ZmLTgzZmUtMmNhMTExYjc1 OWE3MB4XDTI2MDMyNzAxMDAxMFoXDTI2MDMzMDAxMDAwMFowLzEtMCsGA1UEAxMk ZDBiNTllYTItOGNkNC00NmU0LWJmYTMtZGQ0MzljNGY1Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9b5x2+/jPC9BN03F3iPiaeHQPJj3dkCb/NC aSth7JWHw3BfjXuwvhPgAWVCVh3GxWB1dhj8g38qZdpqHWB0jBHp71zIpevWXrxk vqvY+j4qfaPHvy4OQbkzF8v6R9UD5JXG+nyxkekEIhy7IPEzKJvLMPqFXhRbfRQ6 4pNasBSlX/J4oqQIPT2IDHs8wkQAL0/f/X2rc7YGZJ9qh2Dkt+2LcDx0+7nQYMp8 m+ls6n2IpdE/1ya0+wWiU/BMdZGED8UgCKUZ3F6r9p/UbTOw0zw2DJhU78OCugyr 3Mihcmc246pG22ZfbvGlBYaiaTv5bZpWt+0B0OlaxUJocKVL/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFORDvcTF9FZ8yW4p/PcQ2P9GsSF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YWYy ODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2ExMTFiNzU5YTcvNGFmMjgzMTQtOGZlMC00 N2ZmLTgzZmUtMmNhMTExYjc1OWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGFmMjgzMTQtOGZlMC00N2ZmLTgz ZmUtMmNhMTExYjc1OWE3LzRhZjI4MzE0LThmZTAtNDdmZi04M2ZlLTJjYTExMWI3 NTlhNy5jcmwwHwYDVR0jBBgwFoAUAzaiNX4YMREjjb6wYqpgCuXMPCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YWYyODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2Ex MTFiNzU5YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQMzf8OQ189c07IyL8v1OS JKuiM3Rt1CmlXRmSuGv9oIluqcNFqDHacG2/1MmpAyI2u7ZMznibxmlh4zGiC+ed liGJ0uV95RBLufIzYqr/E8CSBOlo3FTKVBQaEj1Oi49ZJG7Jca3HFQuvst7riVTq kewjAz2pFfAwQwL5CzwdNVlKzvtKHqPrj/H2AL6tnoWJ2bdm9MAXAJ3kliNgzoKc V58hVhVf0qIys4pZadMy/E30MFsNgGWFSnQ9U4Q6aJuo/7w+7a4hWFNgMUQjPhj8 99S0VFjjRLGqV+uR2TnqXYPBtLb/uDz7dpjXe1GJaxk2/7QkVT5cfqa49818PLef -----END CERTIFICATE-----Generated at Fri Mar 27 08:31:36 2026 by rpki-client