$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft File: d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft (raw, json) Hash identifier: /JqvSpVVPmfkg0vhaQeyTBpJ1i3cwSqt0sp7a2blemY= Subject key identifier: C3:99:2A:78:1D:AD:76:B8:19:A4:5B:AA:84:F5:34:1D:90:2B:08:A3 Authority key identifier: 47:6D:66:85:16:E8:A2:72:31:7E:34:8C:F8:D6:C0:4A:C8:C1:81:62 Certificate issuer: /CN=d7de7549-2ecf-40a7-a647-522e9d5a31d5 Certificate serial: 010D0C9F4328584D49DC9D147F3D687D6D113D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft Manifest number: 010D0C9F4328584073A8245D3BF2FEEA7E633C75 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 189be362-95c5-327a-8198-88f52fcd56db.roa (hash: H0KM0w7M/1rcVNhABkfA6y6DKheyo2PCtXjNOzITfMA=) 2: d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl (hash: rvU51VBZbqIsYtwLUObo18Y6MzVJ5qo/dyDgEQUoiAg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9d:14:7f:3d:68:7d:6d:11:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7de7549-2ecf-40a7-a647-522e9d5a31d5 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=2f607301-e56c-4d3c-b925-75f01c4c775b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ff:e9:81:de:0c:b1:86:e0:93:ea:74:1e:f8: a5:ae:e0:3c:d2:f0:5d:b8:61:fa:f7:f8:52:e5:df: e1:60:f4:eb:1e:73:9b:c0:85:58:db:c1:1d:b2:63: 45:70:7b:87:3b:56:f2:c9:8e:4e:fa:eb:1f:bc:e7: c9:69:98:88:b6:ae:68:ba:82:83:c0:a0:aa:81:73: 2f:5a:54:86:b7:3d:45:87:c8:11:9a:58:aa:02:39: d5:b6:e7:e1:b1:d4:13:8a:8a:2f:c0:0d:21:11:65: c5:98:e3:57:1a:42:58:07:d4:71:a7:a2:54:5d:f3: c5:78:cb:24:a0:2c:5c:47:b4:2e:ad:c4:fc:56:91: b9:32:12:d0:25:86:3d:a5:a4:c2:e6:eb:55:ae:2d: 58:c0:2d:f9:d7:c9:bf:7b:f7:8e:c3:dd:08:b0:67: 07:a5:e1:6f:c5:a8:a0:0f:6b:a0:ea:99:3f:57:3b: 77:67:1e:f4:49:62:0f:97:54:c9:b4:c5:61:dc:6c: 5b:13:86:09:66:6b:df:5f:cf:d2:0f:9d:5b:13:5b: ed:fc:6a:42:95:1c:02:aa:a4:19:a6:55:50:eb:42: b1:d5:35:5c:ff:74:52:a3:47:cd:d5:e8:18:04:cc: 44:93:80:53:20:4e:a0:4c:fe:b2:30:73:2f:1c:c6: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:99:2A:78:1D:AD:76:B8:19:A4:5B:AA:84:F5:34:1D:90:2B:08:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl X509v3 Authority Key Identifier: keyid:47:6D:66:85:16:E8:A2:72:31:7E:34:8C:F8:D6:C0:4A:C8:C1:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:de:a4:7e:56:43:65:3e:b4:a2:2c:20:9f:4d:a6:44:24:f3: e0:15:56:e0:7a:54:08:85:2d:c5:a1:db:a1:8a:b1:68:9e:26: c8:61:2b:b3:c3:2e:09:dd:08:09:c2:40:d5:85:af:62:f0:58: 3f:95:d9:c5:65:b1:e6:03:b2:57:37:f5:9e:93:db:7f:de:34: 82:08:e3:17:41:4d:f3:63:c5:db:a3:42:3b:9c:0e:60:c3:5b: 5f:08:1e:dc:48:d0:1a:c0:ad:d4:9e:f3:70:2c:39:12:e3:a8: 71:da:13:4e:70:11:ae:11:57:d9:5f:af:0e:83:2d:4b:ca:f0: e2:bf:24:cc:ef:dd:9f:1f:65:a2:45:fd:73:2d:2d:58:fd:7a: 47:bc:b3:57:57:18:3d:7f:f4:ad:b7:9b:1a:06:2e:b8:70:60: c0:bc:36:be:8e:ed:4f:12:70:10:4b:50:fc:75:fd:c3:00:14: d9:80:d7:c7:95:62:35:e5:ab:05:b9:dd:61:29:a0:46:a2:90: 95:54:37:fb:5e:b3:7b:93:33:d6:92:d3:9c:31:96:97:06:02: 56:6f:39:4a:88:8d:ca:68:9d:30:48:ec:5c:73:91:af:e2:ce: 33:fa:0c:6b:2d:89:ee:67:eb:aa:f8:08:23:25:7e:01:27:43: 1a:ea:41:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J0Ufz1ofW0RPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZTc1NDktMmVjZi00MGE3LWE2NDctNTIyZTlkNWEz MWQ1MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk MmY2MDczMDEtZTU2Yy00ZDNjLWI5MjUtNzVmMDFjNGM3NzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv/pgd4MsYbgk+p0HvilruA80vBduGH69/hS 5d/hYPTrHnObwIVY28EdsmNFcHuHO1byyY5O+usfvOfJaZiItq5ouoKDwKCqgXMv WlSGtz1Fh8gRmliqAjnVtufhsdQTioovwA0hEWXFmONXGkJYB9Rxp6JUXfPFeMsk oCxcR7QurcT8VpG5MhLQJYY9paTC5utVri1YwC3518m/e/eOw90IsGcHpeFvxaig D2ug6pk/Vzt3Zx70SWIPl1TJtMVh3GxbE4YJZmvfX8/SD51bE1vt/GpClRwCqqQZ plVQ60Kx1TVc/3RSo0fN1egYBMxEk4BTIE6gTP6yMHMvHMaIlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMOZKngdrXa4GaRbqoT1NB2QKwijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kN2Rl NzU0OS0yZWNmLTQwYTctYTY0Ny01MjJlOWQ1YTMxZDUvZDdkZTc1NDktMmVjZi00 MGE3LWE2NDctNTIyZTlkNWEzMWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDdkZTc1NDktMmVjZi00MGE3LWE2 NDctNTIyZTlkNWEzMWQ1L2Q3ZGU3NTQ5LTJlY2YtNDBhNy1hNjQ3LTUyMmU5ZDVh MzFkNS5jcmwwHwYDVR0jBBgwFoAUR21mhRboonIxfjSM+NbASsjBgWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kN2RlNzU0OS0yZWNmLTQwYTctYTY0Ny01MjJl OWQ1YTMxZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA33qR+VkNlPrSiLCCfTaZE JPPgFVbgelQIhS3FoduhirFonibIYSuzwy4J3QgJwkDVha9i8Fg/ldnFZbHmA7JX N/Wek9t/3jSCCOMXQU3zY8Xbo0I7nA5gw1tfCB7cSNAawK3UnvNwLDkS46hx2hNO cBGuEVfZX68Ogy1LyvDivyTM792fH2WiRf1zLS1Y/XpHvLNXVxg9f/Stt5saBi64 cGDAvDa+ju1PEnAQS1D8df3DABTZgNfHlWI15asFud1hKaBGopCVVDf7XrN7kzPW ktOcMZaXBgJWbzlKiI3KaJ0wSOxcc5Gv4s4z+gxrLYnuZ+uq+AgjJX4BJ0Ma6kGF -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:44 2026 by rpki-client