$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft File: da61f786-99c2-4468-90f7-0b35abd168e5.mft (raw, json) Hash identifier: DU6yxi/V+gySeSkfmZIcLryhbjZXCm6k8Mt2RsECMOA= Subject key identifier: 1C:88:A6:FC:CF:20:1D:4F:B0:A3:C9:BD:FF:AC:63:82:E9:A7:F8:75 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584D4B5FBC7F814A0A93D4200280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft Manifest number: 010D0C9F4328584073A846655D9F3F36F9E9D135 Signing time: Thu 26 Mar 2026 08:00:03 +0000 Manifest this update: Thu 26 Mar 2026 08:00:03 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (hash: WUFzsSFKBzvASO+z7cp4Rjqcj6fuV9wb8L9hw5advxU=) 2: da61f786-99c2-4468-90f7-0b35abd168e5.crl (hash: p+akXM6H8qFur7vlSjG5amkT47FWsmOj1f3wM4tWnoM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:5f:bc:7f:81:4a:0a:93:d4:20:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Mar 26 08:00:03 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=5655c2ae-6a01-4033-ae2f-d9b88f40e4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:7f:a0:66:f7:bf:bb:5b:29:b5:d9:16:41: e2:18:46:6f:6b:4a:bd:d6:8d:10:c4:bd:a3:78:7a: 93:04:42:15:40:ae:d4:91:ec:82:fc:c3:1a:af:fb: bf:48:e8:c5:dd:24:65:9e:77:6a:04:ff:66:e7:f7: 3b:4f:75:10:9a:30:f4:a4:0d:8a:39:c8:1b:db:da: 00:3c:c0:e1:b1:70:9f:ab:9e:35:f9:be:52:2a:53: 78:4b:39:bc:b0:e3:bf:6b:45:3a:3e:6d:e2:49:d6: 33:6b:1a:e7:97:8c:4a:5e:a0:1c:9b:27:28:24:d7: c2:8e:65:44:e3:89:fb:87:78:46:7a:8c:1b:ae:be: b4:df:f1:10:be:8d:8e:f7:42:b8:0b:76:4f:7f:01: 5c:36:cb:9c:71:7c:1e:16:93:a5:97:e2:52:24:cc: 79:d6:dc:59:da:c7:be:97:14:0f:36:ab:28:87:87: b8:0b:50:4a:b9:c4:e3:2d:fd:fa:a8:83:33:11:9d: 30:1a:af:cd:54:e0:8e:35:61:59:a7:b0:49:67:9b: bc:7c:68:f3:69:ff:cd:61:40:81:c5:80:15:99:6c: 09:d3:bd:d7:c5:43:05:cc:aa:f6:1b:5b:0d:93:ec: 7a:7b:db:ba:dd:36:8c:ec:78:c1:d7:03:d6:ee:c9: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:A6:FC:CF:20:1D:4F:B0:A3:C9:BD:FF:AC:63:82:E9:A7:F8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d7:59:26:0b:bb:67:05:b5:29:79:89:64:5e:4b:e5:8e:d8: 2f:38:b3:12:15:0f:b8:dd:24:cc:25:71:39:49:50:18:73:67: b1:03:d8:6f:6b:95:72:70:82:f4:e7:c2:61:93:7d:a9:03:10: 2c:38:f0:f3:60:95:15:43:54:e6:cf:5e:13:2d:7e:5f:0b:3c: ea:84:0b:2b:f9:c7:37:2c:8b:18:c8:e4:e7:8d:30:bc:d0:c3: 4b:64:99:03:f8:28:83:7c:dc:a6:cf:04:7f:b8:17:68:c0:16: 9a:f3:d7:c7:24:c2:70:b4:1f:0e:8d:cb:82:eb:14:27:c6:ec: d0:18:26:ef:03:69:62:8e:2c:5a:b3:b9:fa:ba:e2:d0:57:d3: c8:a0:ad:12:1b:0c:c0:6e:12:46:fc:45:86:90:23:4f:d4:30: 63:74:01:29:d0:8f:5c:1f:3e:a1:4f:71:e8:3c:73:f3:bb:5a: 80:70:12:e7:c7:2a:35:95:e6:94:9e:1f:bb:93:dd:40:b9:15: ce:46:a5:b3:05:7d:2f:0a:04:e6:be:d7:12:00:c5:81:c9:41: 15:7d:0d:b0:d8:8b:db:8c:fb:cf:d7:30:8e:51:aa:b0:a2:58: 49:53:9d:d4:36:db:5e:ba:3c:45:92:57:e0:c9:2b:4d:6a:9c: 61:5b:b1:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LX7x/gUoKk9QgAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI2MDMyNjA4MDAwM1oXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk NTY1NWMyYWUtNmEwMS00MDMzLWFlMmYtZDliODhmNDBlNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7V/oGb3v7tbKbXZFkHiGEZva0q91o0QxL2j eHqTBEIVQK7UkeyC/MMar/u/SOjF3SRlnndqBP9m5/c7T3UQmjD0pA2KOcgb29oA PMDhsXCfq541+b5SKlN4Szm8sOO/a0U6Pm3iSdYzaxrnl4xKXqAcmycoJNfCjmVE 44n7h3hGeowbrr603/EQvo2O90K4C3ZPfwFcNsuccXweFpOll+JSJMx51txZ2se+ lxQPNqsoh4e4C1BKucTjLf36qIMzEZ0wGq/NVOCONWFZp7BJZ5u8fGjzaf/NYUCB xYAVmWwJ073XxUMFzKr2G1sNk+x6e9u63TaM7HjB1wPW7slmOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFByIpvzPIB1PsKPJvf+sY4Lpp/h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvZGE2MWY3ODYtOTljMi00 NDY4LTkwZjctMGIzNWFiZDE2OGU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz11kmC7tnBbUpeYlkXkvl jtgvOLMSFQ+43STMJXE5SVAYc2exA9hva5VycIL058Jhk32pAxAsOPDzYJUVQ1Tm z14TLX5fCzzqhAsr+cc3LIsYyOTnjTC80MNLZJkD+CiDfNymzwR/uBdowBaa89fH JMJwtB8OjcuC6xQnxuzQGCbvA2lijixas7n6uuLQV9PIoK0SGwzAbhJG/EWGkCNP 1DBjdAEp0I9cHz6hT3HoPHPzu1qAcBLnxyo1leaUnh+7k91AuRXORqWzBX0vCgTm vtcSAMWByUEVfQ2w2IvbjPvP1zCOUaqwolhJU53UNtteujxFklfgyStNapxhW7G9 -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:34 2026 by rpki-client