$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft File: caf392a1-07e9-49f4-9a03-df5005333708.mft (raw, json) Hash identifier: iCepW0WMi8GLtDX/RHtzc7p8SjJfHJO7oruXJzgfeac= Subject key identifier: AA:84:33:77:0A:D6:1E:91:16:A7:6D:ED:84:53:F1:E9:90:AB:98:8B Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584D4C6BBDFB084E264CD30EC800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft Manifest number: 010D0C9F4328584073A81D24A42B9B6EA14ECBE2 Signing time: Thu 26 Mar 2026 17:00:04 +0000 Manifest this update: Thu 26 Mar 2026 17:00:04 +0000 Manifest next update: Sun 29 Mar 2026 17:00:00 +0000 Files and hashes: 1: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (hash: pp5xH3tKJPKL31ddNsLAIj5tiWNeAUvksnF/AUYTX+w=) 2: 2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (hash: 7mmoVZ5+w0JGhRJbikbX042HspFAfw4trw333Dx7Y1U=) 3: caf392a1-07e9-49f4-9a03-df5005333708.crl (hash: /LE9N+jS2TaOJvkTzl541/60k+miLVI/edXHLGeyKB0=) 4: ed736123-206e-3c09-903f-778ec4f8e6f5.asa (hash: TFGSolUiy87zX4Dvc/s/9Kmsy01uB8O+EXPiLYXHeTI=) 5: fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa (hash: 7tHmh04ySWfHNKhE+H4rgF8e66YVyfhMMembJmUyA5k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:6b:bd:fb:08:4e:26:4c:d3:0e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Mar 26 17:00:04 2026 GMT Not After : Mar 29 17:00:00 2026 GMT Subject: CN=4b1d3743-bb79-4810-8792-7b07b2b5806c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:60:03:da:a0:fe:51:66:48:26:68:bc:68: 12:42:f9:ce:3d:78:5f:31:de:2b:64:f7:6d:d5:e5: f4:1b:90:df:fe:19:cb:71:33:c1:b3:91:71:b2:5b: 5e:af:c8:87:3f:e2:00:80:94:6d:54:30:e3:47:93: 3f:7f:2d:6d:cb:05:97:02:89:17:82:81:17:c4:28: 51:21:84:90:28:ea:f8:c4:40:29:1a:8c:fe:bd:12: f4:77:a0:04:5c:32:9b:61:db:b5:b0:f8:5a:ac:43: 4d:91:c5:90:28:9e:e4:2e:cf:f8:20:16:e9:f7:16: 6b:9b:b1:10:05:01:d8:c1:8b:99:31:7a:3c:1b:cd: fa:a3:10:21:e5:d7:ce:8e:c4:98:a2:15:8d:5a:f3: ad:15:43:bb:c6:8b:53:fc:53:a5:5c:3a:ab:fa:88: df:71:f5:18:9d:c7:6e:b9:3c:0c:25:ba:dd:e2:ab: d3:41:f0:b7:dc:82:f7:99:ad:5e:35:22:88:d6:ba: f6:7e:e4:13:9f:e7:aa:51:e1:82:4e:be:b5:5e:7d: e6:5e:be:13:a2:b4:1f:b3:58:ca:c4:a0:e5:c5:56: ce:27:d6:19:ac:2d:79:3f:ca:3a:f4:a4:34:b4:6e: 4a:5e:ff:51:ed:9e:19:a3:1e:cd:26:54:fe:95:d2: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:33:77:0A:D6:1E:91:16:A7:6D:ED:84:53:F1:E9:90:AB:98:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3d:dd:82:30:65:a4:21:b4:aa:81:2e:88:da:1e:bc:a4:35: 68:36:da:81:01:25:e1:6f:93:ff:30:94:fe:7e:aa:d2:fd:07: e9:e7:15:73:b7:05:15:26:87:72:b6:1d:03:ce:a8:a7:23:38: 53:c4:a2:13:e3:f7:57:58:b0:89:c5:5c:01:a0:f2:77:34:11: 81:eb:b9:06:18:be:f2:37:6d:e0:38:fa:27:6c:4a:f3:cf:55: 4b:23:c4:95:3e:a1:e6:c8:41:f8:63:23:ef:42:53:cb:c5:7a: e1:ca:d4:38:42:61:04:61:bd:cb:9a:61:30:aa:45:d3:fc:d0: dd:f6:d2:c6:42:04:15:09:a1:7b:31:95:0e:d3:0b:38:4b:24: a1:2a:c3:4b:d4:31:ed:18:54:f4:6b:59:8f:34:83:2f:b1:5b: e9:65:71:19:2a:fe:51:43:38:95:8d:8d:43:eb:e1:0d:2b:ce: 0b:af:3b:97:cf:cc:62:fb:d5:53:a8:7a:ac:34:41:41:05:f0: d6:64:a4:87:2c:2b:bb:07:9a:46:01:5a:48:d0:c1:e7:e5:ed: 6f:40:ef:80:71:c9:36:ba:5b:ab:89:b5:fb:d9:da:6f:62:b5: 14:80:56:a4:22:53:e8:fe:4c:f5:2f:cd:5d:31:99:33:3f:64: 31:ae:9b:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ma737CE4mTNMOyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI2MDMyNjE3MDAwNFoXDTI2MDMyOTE3MDAwMFowLzEtMCsGA1UEAxMk NGIxZDM3NDMtYmI3OS00ODEwLTg3OTItN2IwN2IyYjU4MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCtgA9qg/lFmSCZovGgSQvnOPXhfMd4rZPdt 1eX0G5Df/hnLcTPBs5Fxslter8iHP+IAgJRtVDDjR5M/fy1tywWXAokXgoEXxChR IYSQKOr4xEApGoz+vRL0d6AEXDKbYdu1sPharENNkcWQKJ7kLs/4IBbp9xZrm7EQ BQHYwYuZMXo8G836oxAh5dfOjsSYohWNWvOtFUO7xotT/FOlXDqr+ojfcfUYncdu uTwMJbrd4qvTQfC33IL3ma1eNSKI1rr2fuQTn+eqUeGCTr61Xn3mXr4TorQfs1jK xKDlxVbOJ9YZrC15P8o69KQ0tG5KXv9R7Z4Zox7NJlT+ldLETwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKqEM3cK1h6RFqdt7YRT8emQq5iLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvY2FmMzkyYTEtMDdlOS00 OWY0LTlhMDMtZGY1MDA1MzMzNzA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJPd2CMGWkIbSqgS6I2h68 pDVoNtqBASXhb5P/MJT+fqrS/Qfp5xVztwUVJodyth0DzqinIzhTxKIT4/dXWLCJ xVwBoPJ3NBGB67kGGL7yN23gOPonbErzz1VLI8SVPqHmyEH4YyPvQlPLxXrhytQ4 QmEEYb3LmmEwqkXT/NDd9tLGQgQVCaF7MZUO0ws4SyShKsNL1DHtGFT0a1mPNIMv sVvpZXEZKv5RQziVjY1D6+ENK84LrzuXz8xi+9VTqHqsNEFBBfDWZKSHLCu7B5pG AVpI0MHn5e1vQO+Acck2uluribX72dpvYrUUgFakIlPo/kz1L81dMZkzP2Qxrptn -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:56 2026 by rpki-client