$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: 4vlejdpWTLSZox0ERtQdQOlw+DpTeKxUs/Z5OI6N8as= Subject key identifier: F7:5B:27:BB:97:BC:A8:80:35:5E:53:2C:A8:16:36:71:A2:CF:DA:B5 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584D47E2619E84E5E184FF36B1F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BEA34 Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: 5uwoeP1qZhGYZi9TUPNF+tkgktH67jROGOZsvchrYWM=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: 1hc1vbvCUGOr3apCkZo5wzyZK4lfA4tu4AVyfb0hOpo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:61:9e:84:e5:e1:84:ff:36:b1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=512901cc-e031-414d-84c8-988649f92006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b1:ef:0a:f2:7d:ce:a5:50:9c:10:52:6b:22: f1:7a:0e:f0:53:35:09:ae:6e:ba:a8:98:55:59:f8: 02:c4:fc:32:b5:ad:45:92:3c:16:40:03:5a:dc:55: db:4a:ff:88:5e:cb:4c:26:dd:09:54:04:9f:2a:ae: ad:3c:1b:38:d1:22:58:53:92:af:ba:19:b1:dd:ab: d0:b6:93:09:0f:64:a4:98:a0:e6:c0:55:b2:a5:d0: 66:b9:78:d2:ee:76:8a:70:5c:84:da:69:65:c8:59: 3a:ed:38:79:07:7a:c4:b7:e9:73:7c:48:1f:2a:83: 3e:f0:e2:41:c1:30:35:a5:36:60:4f:27:5c:59:a5: de:6b:ce:02:4c:58:b9:f2:cb:6c:47:58:ea:87:46: 73:5f:45:6f:cf:5b:53:d8:3a:c5:39:45:98:68:ec: df:75:a8:34:b2:80:c6:5c:03:5a:f0:32:9a:5f:1b: af:ea:22:8c:66:ed:3d:d4:db:1a:c0:56:f9:0d:55: 70:40:4b:23:c0:3b:a4:ac:f7:17:0c:6f:4c:07:0d: 20:49:68:bd:27:de:a1:d7:6a:21:2d:f6:dc:e7:1b: f6:32:f9:07:fb:fe:8f:27:b0:01:fe:c3:43:6b:55: b6:b0:2c:c9:37:16:57:05:ec:14:79:4a:61:5e:6d: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5B:27:BB:97:BC:A8:80:35:5E:53:2C:A8:16:36:71:A2:CF:DA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a9:db:de:18:57:8f:a1:f4:ce:62:1d:3a:61:a8:34:23:a7: 53:27:21:43:d7:fb:3e:71:f8:ef:13:cf:f0:37:9c:83:0e:98: 37:9d:69:7c:0b:74:0c:a3:e1:4b:9d:52:b5:3f:72:b5:16:4b: d5:b5:ef:04:e9:65:c1:c7:9f:08:7a:9b:62:a0:df:8c:c4:57: 72:42:76:77:70:a7:8c:a0:29:0e:dd:84:6a:27:5c:63:d1:a2: 78:6d:56:21:2e:9c:7c:fb:76:42:36:a2:5d:29:bc:6c:ba:c6: 63:77:23:02:47:c3:3c:ad:56:77:16:d1:8d:4b:0c:6e:a8:62: 8c:8f:73:dd:2b:c6:36:7c:4b:32:4f:1d:bb:c8:0c:9f:30:f6: e6:c3:4c:3c:1f:4f:3c:3f:96:10:72:a6:2e:3d:0b:27:5d:56: 45:4d:a6:dc:c4:54:3a:bd:8b:36:34:7f:00:cf:47:04:e2:ca: 7d:d9:20:5a:ce:ca:de:ae:c9:a0:4d:e4:ac:52:9a:6e:af:62: 6e:cd:54:42:eb:7a:25:c3:ff:62:24:a3:d3:4c:f0:b0:14:6c: 53:52:e7:f9:db:b2:78:c7:eb:66:ff:a2:8a:57:b2:54:38:0d: 0d:57:4a:74:aa:f1:b7:8e:c9:3e:5c:55:57:e3:6d:9f:b7:85: 8b:6d:d1:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4mGehOXhhP82sfIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk NTEyOTAxY2MtZTAzMS00MTRkLTg0YzgtOTg4NjQ5ZjkyMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7HvCvJ9zqVQnBBSayLxeg7wUzUJrm66qJhV WfgCxPwyta1FkjwWQANa3FXbSv+IXstMJt0JVASfKq6tPBs40SJYU5Kvuhmx3avQ tpMJD2SkmKDmwFWypdBmuXjS7naKcFyE2mllyFk67Th5B3rEt+lzfEgfKoM+8OJB wTA1pTZgTydcWaXea84CTFi58stsR1jqh0ZzX0Vvz1tT2DrFOUWYaOzfdag0soDG XANa8DKaXxuv6iKMZu091NsawFb5DVVwQEsjwDukrPcXDG9MBw0gSWi9J96h12oh Lfbc5xv2MvkH+/6PJ7AB/sNDa1W2sCzJNxZXBewUeUphXm2VJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPdbJ7uXvKiANV5TLKgWNnGiz9q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeqdveGFePofTOYh06Yag0 I6dTJyFD1/s+cfjvE8/wN5yDDpg3nWl8C3QMo+FLnVK1P3K1FkvVte8E6WXBx58I eptioN+MxFdyQnZ3cKeMoCkO3YRqJ1xj0aJ4bVYhLpx8+3ZCNqJdKbxsusZjdyMC R8M8rVZ3FtGNSwxuqGKMj3PdK8Y2fEsyTx27yAyfMPbmw0w8H088P5YQcqYuPQsn XVZFTabcxFQ6vYs2NH8Az0cE4sp92SBazsrersmgTeSsUppur2JuzVRC63olw/9i JKPTTPCwFGxTUuf527J4x+tm/6KKV7JUOA0NV0p0qvG3jsk+XFVX422ft4WLbdGW -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:32 2026 by rpki-client