$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft File: ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft (raw, json) Hash identifier: 7KavstgOCULB/NT0eioe1cZ+bGJdKaqCgjBN4BAzk90= Subject key identifier: 87:47:4A:58:CB:FF:B8:67:86:4A:BE:19:C5:6E:F2:50:89:52:CA:9D Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A Certificate issuer: /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Certificate serial: 010D0C9F4328584D4B242C7FB98B3BB7B15CC570 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft Manifest number: 010D0C9F4328584073A842806CA64F1F24EF0FC2 Signing time: Thu 26 Mar 2026 06:00:04 +0000 Manifest this update: Thu 26 Mar 2026 06:00:04 +0000 Manifest next update: Sat 28 Mar 2026 06:00:00 +0000 Files and hashes: 1: ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl (hash: gAAJg3krWJEh2wUq3GCkdUGP6DRAh+5GYXPsJplaSME=) 2: de58c588-4488-3729-a7e1-98130f91c66c.roa (hash: OOFEnCPLPaxwXAkEWMk6jXo5KlstlFKMBVZJ0MOMZlA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:24:2c:7f:b9:8b:3b:b7:b1:5c:c5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Validity Not Before: Mar 26 06:00:04 2026 GMT Not After : Mar 28 06:00:00 2026 GMT Subject: CN=ee86f981-280d-4878-b6f5-71d989d4065c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:1f:67:f2:54:e6:29:f6:99:f8:44:06:a2: 57:e4:e8:03:82:bd:53:25:4f:e4:a9:ed:74:2c:7d: d8:0b:1d:0a:bb:46:bc:c0:83:11:41:1a:b9:62:2c: 34:cb:53:6e:68:63:1d:b6:71:0a:9e:0e:a1:6a:03: 09:05:fc:26:59:e6:46:6a:8d:84:9d:24:6e:d2:66: ac:ab:a1:77:3e:3c:3d:7d:10:3d:89:c4:88:95:10: f4:99:a4:66:5a:36:da:46:98:70:8b:ca:9e:f8:30: 8a:f5:3a:05:6b:25:8c:3f:a8:dd:48:6d:f0:54:93: 51:2f:ef:72:0e:61:0c:bc:59:ab:83:3c:b3:bf:af: 17:a9:8a:b5:d5:cc:75:f9:d5:5c:12:91:b9:8d:1a: fe:5e:90:3a:d6:5f:86:fb:bf:08:0a:20:38:9a:05: 40:eb:13:06:e3:20:6b:67:ae:0a:cc:66:b7:04:eb: cb:ba:19:93:95:a0:c6:00:8b:cb:b9:59:c8:03:ac: fe:27:e4:c5:28:65:5d:33:12:80:0e:27:f7:c5:9f: 04:38:a1:8d:8e:bb:46:f8:23:77:aa:71:f7:f3:18: 0c:43:00:c5:e8:98:9f:01:3e:4d:63:96:6e:78:00: 5b:b7:6e:7f:2e:d9:bb:93:85:35:69:27:b0:a0:7e: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:47:4A:58:CB:FF:B8:67:86:4A:BE:19:C5:6E:F2:50:89:52:CA:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl X509v3 Authority Key Identifier: keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:90:3b:3a:86:2f:1d:04:a8:e5:9d:90:e2:f5:b7:44:da:49: fa:df:d5:ed:d7:ec:b3:1b:9e:38:dc:4a:1a:ed:e8:7f:b8:f7: 16:de:8a:fa:17:aa:a6:5a:d5:1b:16:9f:b2:b4:ef:07:08:37: 52:f0:63:e0:a3:92:76:b1:7a:b0:ad:02:35:93:80:cf:12:9c: b5:a0:ec:8c:8b:ea:8b:b1:f5:66:62:66:a6:4a:ff:a0:83:28: b3:eb:4d:ad:fb:23:f9:11:09:ba:4b:ae:c6:bc:48:e8:36:09: da:3e:ec:e8:ed:c8:1c:33:04:1a:cb:77:c5:f7:a1:2f:34:86: 85:b3:78:5e:b4:6e:02:ba:cf:41:50:fe:04:c7:28:a1:6e:91: ff:64:66:a5:a4:4e:d3:c6:d7:b8:60:43:a9:85:53:78:93:c3: 7e:ba:07:b2:c7:97:0d:86:e6:95:6a:b2:f5:ea:70:db:b3:7f: 68:70:0a:cc:8c:78:14:a7:cd:09:d8:c4:2b:47:8b:f3:d0:e6: 17:02:d7:0f:07:22:8a:70:41:ca:0c:cc:ed:f4:cc:69:2f:7e: 1e:d5:75:35:91:25:43:8f:a0:c0:2e:f7:4c:d2:54:7b:51:03: a0:04:92:1e:01:2e:e5:b9:71:91:4e:01:f7:f9:43:46:e8:33: 4f:94:9f:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LJCx/uYs7t7FcxXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EyYzBlNzMtZjdmNy00MDcwLTk4YWEtYzc4ZWYxNzUy ODQ5MB4XDTI2MDMyNjA2MDAwNFoXDTI2MDMyODA2MDAwMFowLzEtMCsGA1UEAxMk ZWU4NmY5ODEtMjgwZC00ODc4LWI2ZjUtNzFkOTg5ZDQwNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneIfZ/JU5in2mfhEBqJX5OgDgr1TJU/kqe10 LH3YCx0Ku0a8wIMRQRq5Yiw0y1NuaGMdtnEKng6hagMJBfwmWeZGao2EnSRu0mas q6F3Pjw9fRA9icSIlRD0maRmWjbaRphwi8qe+DCK9ToFayWMP6jdSG3wVJNRL+9y DmEMvFmrgzyzv68XqYq11cx1+dVcEpG5jRr+XpA61l+G+78ICiA4mgVA6xMG4yBr Z64KzGa3BOvLuhmTlaDGAIvLuVnIA6z+J+TFKGVdMxKADif3xZ8EOKGNjrtG+CN3 qnH38xgMQwDF6JifAT5NY5ZueABbt25/Ltm7k4U1aSewoH5uKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIdHSljL/7hnhkq+GcVu8lCJUsqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJj MGU3My1mN2Y3LTQwNzAtOThhYS1jNzhlZjE3NTI4NDkvY2EyYzBlNzMtZjdmNy00 MDcwLTk4YWEtYzc4ZWYxNzUyODQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2EyYzBlNzMtZjdmNy00MDcwLTk4 YWEtYzc4ZWYxNzUyODQ5L2NhMmMwZTczLWY3ZjctNDA3MC05OGFhLWM3OGVmMTc1 Mjg0OS5jcmwwHwYDVR0jBBgwFoAUds6Q8pqYDL3BWHTiHFhZt1MKTmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJjMGU3My1mN2Y3LTQwNzAtOThhYS1jNzhl ZjE3NTI4NDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKkDs6hi8dBKjlnZDi9bdE 2kn639Xt1+yzG5443Eoa7eh/uPcW3or6F6qmWtUbFp+ytO8HCDdS8GPgo5J2sXqw rQI1k4DPEpy1oOyMi+qLsfVmYmamSv+ggyiz602t+yP5EQm6S67GvEjoNgnaPuzo 7cgcMwQay3fF96EvNIaFs3hetG4Cus9BUP4ExyihbpH/ZGalpE7Txte4YEOphVN4 k8N+ugeyx5cNhuaVarL16nDbs39ocArMjHgUp80J2MQrR4vz0OYXAtcPByKKcEHK DMzt9MxpL34e1XU1kSVDj6DALvdM0lR7UQOgBJIeAS7luXGRTgH3+UNG6DNPlJ9U -----END CERTIFICATE-----Generated at Thu Mar 26 19:51:10 2026 by rpki-client