$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft File: ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft (raw, json) Hash identifier: q71UJKe3mVaUslM/gFfwsvMq5bYSqt8nOP7fBWKa+Kg= Subject key identifier: 50:9D:76:2A:C4:A9:C2:8C:78:5A:30:DE:09:81:43:31:1B:8E:27:6A Authority key identifier: 95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 Certificate issuer: /CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Certificate serial: 010D0C9F4328584D49BED79CF90C60869953ED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft Manifest number: 010D0C9F4328584877E05E5E7F92E9C33E7537C4 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa (hash: 7TGJzLiHVEw52xkmdqmlSwdl+x0RMhjhoC8uTkYjy3I=) 2: ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl (hash: Gh3StBtNiKFv7pXyYPifEtK8H5mO+DIskKeN0aysm7c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d7:9c:f9:0c:60:86:99:53:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=407a6566-180d-47a0-9124-9b36f026ee4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:5a:a2:ec:4a:66:80:2b:a1:63:78:36:c9: fa:05:80:34:c8:ec:31:04:92:93:87:f4:fd:13:ab: 60:cd:8e:f3:ec:5b:b0:1e:67:a9:89:68:24:96:56: 48:0a:8d:cf:87:c5:ad:11:60:74:b7:d4:dd:8d:63: da:7a:2c:87:6e:bd:38:e9:38:33:ee:bb:6c:7a:03: aa:8a:c8:18:29:43:d8:69:07:de:67:d9:c2:a7:13: d3:d0:f0:b8:40:f2:69:e9:fc:f2:18:f5:8d:15:5d: 9e:d0:57:82:a6:aa:df:f9:7e:e6:44:ed:ba:69:ad: cd:02:f5:09:99:99:49:f0:96:cc:9c:b3:0c:aa:a0: 50:90:70:cf:54:94:b4:ac:2a:fd:aa:be:42:87:3e: ff:28:9d:25:ea:52:65:32:c7:dd:7d:c5:b0:fd:0e: 31:18:f8:6f:49:bb:7b:a0:60:6b:04:78:a0:8a:4c: 61:d3:fb:bf:9d:ee:3c:05:0b:71:47:50:bf:27:bd: 3b:e9:98:68:34:a4:14:18:56:17:67:12:6c:d4:39: 94:85:47:f1:24:07:93:30:e9:56:54:31:92:29:e7: ad:6f:1f:60:68:25:16:ec:e5:a2:36:18:60:ed:ae: 6c:91:ba:cd:bd:c7:16:aa:a4:9d:06:f7:8b:79:df: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9D:76:2A:C4:A9:C2:8C:78:5A:30:DE:09:81:43:31:1B:8E:27:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl X509v3 Authority Key Identifier: keyid:95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:95:e9:12:47:7d:27:85:f2:b5:c5:21:9e:73:c7:af:00:c6: 4f:73:b1:31:a6:26:20:7e:90:ee:0a:be:f8:8b:e2:a8:a5:a5: ce:77:a3:b3:cc:b5:f1:19:b9:d6:b4:0d:e3:40:c1:4b:a2:6c: 43:cd:c3:63:ea:70:9d:b7:03:a0:53:7c:71:13:61:52:26:16: f1:97:1e:e7:ac:de:8a:05:64:81:12:f3:60:d5:bb:b2:f4:c3: 4a:dc:43:cf:f8:d1:6c:6f:bf:17:5c:c5:56:b2:85:8f:19:16: f3:a9:d0:f5:57:c2:14:3b:5c:ee:d5:df:b8:c4:af:97:c6:c0: dc:59:c1:e0:31:73:5e:e3:c3:c8:d0:a4:e0:58:ff:0f:17:84: 51:cb:62:80:f5:9a:d6:b9:2a:e1:6a:cf:dc:05:fd:a5:0c:9c: 12:64:f6:af:b5:a4:d3:1f:1e:07:3f:95:ca:ed:45:e6:49:11: b5:52:90:fa:2d:66:01:fe:9e:da:e6:4c:35:98:89:5a:58:ca: 71:10:de:51:73:bd:78:58:76:4d:bf:52:04:d1:68:fc:cf:50: 5e:35:f9:42:bd:af:25:15:c3:3c:80:df:40:9c:d3:20:70:21: 21:75:bd:2d:46:6e:c8:d0:3f:59:1f:34:02:f8:f0:91:23:72: ff:d5:ac:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jvtec+QxghplT7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UzZjFjYWItNWE4Ny00YmUzLThhMmUtZmMxMmU1ZWU2 MzE5MB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk NDA3YTY1NjYtMTgwZC00N2EwLTkxMjQtOWIzNmYwMjZlZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12ZaouxKZoAroWN4Nsn6BYA0yOwxBJKTh/T9 E6tgzY7z7FuwHmepiWgkllZICo3Ph8WtEWB0t9TdjWPaeiyHbr046Tgz7rtsegOq isgYKUPYaQfeZ9nCpxPT0PC4QPJp6fzyGPWNFV2e0FeCpqrf+X7mRO26aa3NAvUJ mZlJ8JbMnLMMqqBQkHDPVJS0rCr9qr5Chz7/KJ0l6lJlMsfdfcWw/Q4xGPhvSbt7 oGBrBHigikxh0/u/ne48BQtxR1C/J7076ZhoNKQUGFYXZxJs1DmUhUfxJAeTMOlW VDGSKeetbx9gaCUW7OWiNhhg7a5skbrNvccWqqSdBveLed9yvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFCddirEqcKMeFow3gmBQzEbjidqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNm MWNhYi01YTg3LTRiZTMtOGEyZS1mYzEyZTVlZTYzMTkvY2UzZjFjYWItNWE4Ny00 YmUzLThhMmUtZmMxMmU1ZWU2MzE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2UzZjFjYWItNWE4Ny00YmUzLThh MmUtZmMxMmU1ZWU2MzE5L2NlM2YxY2FiLTVhODctNGJlMy04YTJlLWZjMTJlNWVl NjMxOS5jcmwwHwYDVR0jBBgwFoAUlVYp3TTTAXVjbvc3B+yLPG6zcjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNmMWNhYi01YTg3LTRiZTMtOGEyZS1mYzEy ZTVlZTYzMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYlekSR30nhfK1xSGec8ev AMZPc7ExpiYgfpDuCr74i+KopaXOd6OzzLXxGbnWtA3jQMFLomxDzcNj6nCdtwOg U3xxE2FSJhbxlx7nrN6KBWSBEvNg1buy9MNK3EPP+NFsb78XXMVWsoWPGRbzqdD1 V8IUO1zu1d+4xK+XxsDcWcHgMXNe48PI0KTgWP8PF4RRy2KA9ZrWuSrhas/cBf2l DJwSZPavtaTTHx4HP5XK7UXmSRG1UpD6LWYB/p7a5kw1mIlaWMpxEN5Rc714WHZN v1IE0Wj8z1BeNflCva8lFcM8gN9AnNMgcCEhdb0tRm7I0D9ZHzQC+PCRI3L/1awU -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:31 2026 by rpki-client