$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft File: c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft (raw, json) Hash identifier: ldK9Xkn2ZBzvEsapCdF0s9o+9IdYCO3gVIrNccWlru0= Subject key identifier: 1D:72:59:92:8B:90:F4:89:BB:FB:35:38:EC:0E:19:BB:A3:C8:54:56 Authority key identifier: D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C Certificate issuer: /CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Certificate serial: 010D0C9F4328584D4983493B5805735AAF3E7700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft Manifest number: 010D0C9F4328584073A81CB12D51632932675C05 Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 950d8c36-ddb0-3620-b235-c13e150e45f1.roa (hash: 3dhlb4vklpi0SM/5bE1124EYZOX79y6RmbpAdPWW7pg=) 2: c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl (hash: KqhEN5+jJ7RzqZHOzjpv4uwPe2JonZvRHfVCE3qnCJE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:49:3b:58:05:73:5a:af:3e:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=cc7afb12-90b8-4455-8238-173ad722bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:32:17:f8:85:a9:bc:c2:9b:0b:8d:30:38: 53:5d:88:88:47:31:45:4a:78:6c:ee:4f:86:e2:e4: e7:55:87:af:55:f3:cd:e8:34:0b:3c:be:6e:12:ae: ab:79:16:ca:d7:56:35:71:71:ea:af:96:d8:43:4b: 6a:9d:e2:9c:0c:e4:23:37:43:34:f2:cd:eb:d4:ed: cd:a6:74:75:b6:c0:df:d4:1c:47:a3:f1:63:b5:45: 9c:7c:7e:cb:48:c6:80:37:d8:d3:79:1c:dc:f4:61: d3:18:ac:c0:28:56:93:87:a7:bb:10:9d:0c:54:f1: d7:42:2c:91:51:55:69:d5:b2:d8:da:c2:8b:b2:0d: 6a:4f:d5:b7:ec:8f:c5:3b:36:84:af:64:2b:39:ca: b9:ad:ea:25:b5:6f:08:c7:a4:37:ed:27:98:2b:96: 19:d3:30:5d:74:4b:7d:2e:8e:1a:df:87:cb:80:ae: fe:d5:dd:d9:7e:fa:94:37:04:e5:27:12:b5:09:34: 95:b7:c3:16:c7:64:dc:aa:9f:d5:cb:43:eb:01:93: 42:e7:43:b4:71:ab:53:3b:e7:ee:1d:8f:02:96:df: 2c:85:cc:23:2f:f8:24:4b:a8:45:83:cb:4b:2a:82: 96:e5:6d:51:f0:35:58:c4:fc:90:03:2d:3b:9c:d2: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:72:59:92:8B:90:F4:89:BB:FB:35:38:EC:0E:19:BB:A3:C8:54:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl X509v3 Authority Key Identifier: keyid:D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:73:f1:06:b3:2c:c3:13:71:16:e4:f7:94:73:3d:6b:e6:03: 08:33:6e:8c:8f:15:01:9b:27:64:49:ab:79:59:7e:67:e2:bd: 3c:87:90:84:c5:1e:39:00:f4:0b:47:54:80:bd:51:91:3a:53: b9:21:2d:4a:1a:89:84:69:a3:c2:ff:a0:24:c5:e6:a6:49:8f: 6f:b0:24:6a:5d:6b:bc:2e:2c:c9:02:2c:f0:d3:07:02:dc:d0: bf:cc:c0:75:27:e3:91:fd:8d:81:8f:d6:27:24:a8:1d:ff:d0: ef:38:e8:15:3d:d4:5a:65:7c:81:85:7f:f2:5f:ca:08:4d:ed: 04:38:51:77:16:74:18:ea:6c:91:ba:9e:cf:59:a6:c5:41:2c: 4d:11:14:37:1c:d6:6c:49:1e:b3:4e:17:bf:a9:75:4d:25:d8: d4:b5:b9:ff:02:4a:b7:4f:30:81:58:db:11:82:84:34:e0:7b: e3:23:94:10:4d:40:30:98:d1:61:b2:a8:59:e4:d8:b7:51:cf: 6a:c8:f2:e7:3b:71:30:16:ac:4a:25:83:47:08:7d:84:ed:ee: 41:7f:be:34:dd:23:97:f7:77:cf:50:9e:02:df:fc:f8:99:46: 33:de:1f:bf:7c:58:1d:98:47:87:f7:76:0d:10:de:b7:c3:6c: 49:ec:23:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0k7WAVzWq8+dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcxYjZhNzYtOGY3Ni00NjM1LWI2ZmQtZmRhYWQ2ZjIx NTA0MB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk Y2M3YWZiMTItOTBiOC00NDU1LTgyMzgtMTczYWQ3MjJiZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R4yF/iFqbzCmwuNMDhTXYiIRzFFSnhs7k+G 4uTnVYevVfPN6DQLPL5uEq6reRbK11Y1cXHqr5bYQ0tqneKcDOQjN0M08s3r1O3N pnR1tsDf1BxHo/FjtUWcfH7LSMaAN9jTeRzc9GHTGKzAKFaTh6e7EJ0MVPHXQiyR UVVp1bLY2sKLsg1qT9W37I/FOzaEr2QrOcq5reoltW8Ix6Q37SeYK5YZ0zBddEt9 Lo4a34fLgK7+1d3ZfvqUNwTlJxK1CTSVt8MWx2Tcqp/Vy0PrAZNC50O0catTO+fu HY8Clt8shcwjL/gkS6hFg8tLKoKW5W1R8DVYxPyQAy07nNIkDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB1yWZKLkPSJu/s1OOwOGbujyFRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFi NmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFhZDZmMjE1MDQvYzcxYjZhNzYtOGY3Ni00 NjM1LWI2ZmQtZmRhYWQ2ZjIxNTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzcxYjZhNzYtOGY3Ni00NjM1LWI2 ZmQtZmRhYWQ2ZjIxNTA0L2M3MWI2YTc2LThmNzYtNDYzNS1iNmZkLWZkYWFkNmYy MTUwNC5jcmwwHwYDVR0jBBgwFoAU2Y6s/TWDQKtPQkUnIXqRhyDVBFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFiNmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFh ZDZmMjE1MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/c/EGsyzDE3EW5PeUcz1r 5gMIM26MjxUBmydkSat5WX5n4r08h5CExR45APQLR1SAvVGROlO5IS1KGomEaaPC /6AkxeamSY9vsCRqXWu8LizJAizw0wcC3NC/zMB1J+OR/Y2Bj9YnJKgd/9DvOOgV PdRaZXyBhX/yX8oITe0EOFF3FnQY6myRup7PWabFQSxNERQ3HNZsSR6zThe/qXVN JdjUtbn/Akq3TzCBWNsRgoQ04HvjI5QQTUAwmNFhsqhZ5Ni3Uc9qyPLnO3EwFqxK JYNHCH2E7e5Bf7403SOX93fPUJ4C3/z4mUYz3h+/fFgdmEeH93YNEN63w2xJ7CMj -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:28 2026 by rpki-client