$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft File: a4c09862-33b2-4c17-b018-07f7502c45f6.mft (raw, json) Hash identifier: 6m2qlTmlizuxdqJi48o6umdDzZkh6Qz6vgeTo62kJO4= Subject key identifier: EC:9A:65:11:A9:EE:AD:79:59:0A:50:2C:D8:75:B9:CB:20:C1:B4:D3 Authority key identifier: B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21 Certificate issuer: /CN=a4c09862-33b2-4c17-b018-07f7502c45f6 Certificate serial: 010D0C9F4328584D4ACAD6F2334183524237B0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft Manifest number: 010D0C9F4328584073A839BCA7E81AA2D08999E0 Signing time: Thu 26 Mar 2026 03:00:04 +0000 Manifest this update: Thu 26 Mar 2026 03:00:04 +0000 Manifest next update: Sat 28 Mar 2026 03:00:00 +0000 Files and hashes: 1: a4c09862-33b2-4c17-b018-07f7502c45f6.crl (hash: pePQ2zpG28qZsAs4AG0W2seCloakmOIbsdwddLtNsAk=) 2: d41a9226-82f4-32dd-ace0-fbefdd1601a3.roa (hash: 730dC5aHVfZyDHzMsRxiFfSXy0T8FG43tD8VGBqGOjg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ca:d6:f2:33:41:83:52:42:37:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c09862-33b2-4c17-b018-07f7502c45f6 Validity Not Before: Mar 26 03:00:04 2026 GMT Not After : Mar 28 03:00:00 2026 GMT Subject: CN=99af5f48-4941-4e24-9612-d99b997dc4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:ef:11:92:59:92:41:35:9f:5a:5e:37:6f: 2c:8d:0e:6c:dc:91:18:f7:f6:db:4e:ff:53:4a:62: d1:f6:5d:89:59:db:2a:bd:9b:04:34:c3:11:f7:58: 6e:29:83:44:90:74:88:dd:4b:ca:f9:ad:28:b2:fa: da:1f:34:e7:53:f8:5f:35:43:2f:19:7d:a0:63:0b: fd:d1:fe:d9:66:83:87:45:43:2e:12:df:92:8b:a3: cb:cb:2a:ed:ee:c6:b7:2d:40:fa:17:83:55:ea:08: 98:f8:be:53:6f:a3:32:74:c0:98:3a:3c:ce:87:9c: 6c:aa:01:d7:2d:b5:17:71:47:df:f5:4e:3a:2b:72: 68:4d:22:25:b5:9e:0b:af:b4:89:75:c4:9e:54:51: a9:2c:09:e4:2c:dd:f0:f0:c1:09:b0:79:18:f6:f1: 30:22:2f:e4:2e:8e:7f:07:75:7d:2c:55:ba:5f:4f: 96:bb:ed:95:7b:8c:07:4d:c9:a1:59:9a:72:07:e8: 85:b2:8d:80:92:6c:f3:0d:4c:19:e1:a7:38:5a:a5: bf:a9:e3:c3:70:df:fa:17:78:f8:79:3b:05:11:3a: a5:1e:93:f0:3d:2a:32:e5:68:af:9a:8a:74:34:78: 32:a1:e5:c9:da:7c:81:26:59:97:46:4a:09:6c:53: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9A:65:11:A9:EE:AD:79:59:0A:50:2C:D8:75:B9:CB:20:C1:B4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.crl X509v3 Authority Key Identifier: keyid:B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6f:a7:f5:97:fa:15:5d:f1:ee:b4:ef:24:5d:ff:94:b7:09: 43:af:41:87:4e:32:b7:f1:b2:7b:b0:43:87:e4:33:66:ff:90: b6:a8:5e:73:02:e5:8c:04:b9:d1:55:21:07:56:8b:0b:4f:46: df:61:85:2f:96:2c:05:e4:31:37:ed:7d:8f:e8:a1:49:9c:4e: 37:e5:d0:45:cf:36:18:96:f9:ea:34:ca:3b:2c:ff:c0:ee:96: 6b:1e:1e:ff:a0:79:27:4c:41:a2:b6:5c:cc:ed:58:25:85:99: 74:fb:f0:cf:cb:4b:33:07:95:ee:5a:10:00:5d:b4:e0:6e:42: 92:9a:6a:37:36:ed:a8:60:98:98:dc:84:45:e5:55:6d:1d:c3: b6:c1:cb:5a:ad:f6:90:5a:c1:27:e0:d5:80:e5:6b:8f:5b:4f: 52:3a:ea:be:12:57:83:13:ba:fb:df:02:fd:1f:19:38:de:d9: 94:4f:9b:e3:d8:c7:89:95:c1:27:69:2c:6d:d1:54:02:24:8a: 42:2c:94:b3:30:0d:f8:b3:d0:a7:da:cd:4f:ca:2e:6e:7e:4d: 84:6e:47:ab:3e:9c:46:0f:be:95:bb:0b:7d:83:bc:7b:98:f6: 8e:2e:8c:da:30:64:d9:50:d8:f7:9d:c2:54:1c:8f:90:72:2e: f9:17:e3:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KytbyM0GDUkI3sMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRjMDk4NjItMzNiMi00YzE3LWIwMTgtMDdmNzUwMmM0 NWY2MB4XDTI2MDMyNjAzMDAwNFoXDTI2MDMyODAzMDAwMFowLzEtMCsGA1UEAxMk OTlhZjVmNDgtNDk0MS00ZTI0LTk2MTItZDk5Yjk5N2RjNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDrvEZJZkkE1n1peN28sjQ5s3JEY9/bbTv9T SmLR9l2JWdsqvZsENMMR91huKYNEkHSI3UvK+a0osvraHzTnU/hfNUMvGX2gYwv9 0f7ZZoOHRUMuEt+Si6PLyyrt7sa3LUD6F4NV6giY+L5Tb6MydMCYOjzOh5xsqgHX LbUXcUff9U46K3JoTSIltZ4Lr7SJdcSeVFGpLAnkLN3w8MEJsHkY9vEwIi/kLo5/ B3V9LFW6X0+Wu+2Ve4wHTcmhWZpyB+iFso2AkmzzDUwZ4ac4WqW/qePDcN/6F3j4 eTsFETqlHpPwPSoy5Wivmop0NHgyoeXJ2nyBJlmXRkoJbFNRdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOyaZRGp7q15WQpQLNh1ucsgwbTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNGMw OTg2Mi0zM2IyLTRjMTctYjAxOC0wN2Y3NTAyYzQ1ZjYvYTRjMDk4NjItMzNiMi00 YzE3LWIwMTgtMDdmNzUwMmM0NWY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTRjMDk4NjItMzNiMi00YzE3LWIw MTgtMDdmNzUwMmM0NWY2L2E0YzA5ODYyLTMzYjItNGMxNy1iMDE4LTA3Zjc1MDJj NDVmNi5jcmwwHwYDVR0jBBgwFoAUsexrPsWON0jmMhNF/05jkcScCiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNGMwOTg2Mi0zM2IyLTRjMTctYjAxOC0wN2Y3 NTAyYzQ1ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVb6f1l/oVXfHutO8kXf+U twlDr0GHTjK38bJ7sEOH5DNm/5C2qF5zAuWMBLnRVSEHVosLT0bfYYUvliwF5DE3 7X2P6KFJnE435dBFzzYYlvnqNMo7LP/A7pZrHh7/oHknTEGitlzM7VglhZl0+/DP y0szB5XuWhAAXbTgbkKSmmo3Nu2oYJiY3IRF5VVtHcO2wctarfaQWsEn4NWA5WuP W09SOuq+EleDE7r73wL9Hxk43tmUT5vj2MeJlcEnaSxt0VQCJIpCLJSzMA34s9Cn 2s1Pyi5ufk2EbkerPpxGD76Vuwt9g7x7mPaOLozaMGTZUNj3ncJUHI+Qci75F+OM -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:43 2026 by rpki-client