$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft File: da61f786-99c2-4468-90f7-0b35abd168e5.mft (raw, json) Hash identifier: 98P2jS9fd+sNN/bpOkoSmLxbp69z05+flAsqc/xrH/8= Subject key identifier: 3E:ED:94:DC:1A:84:C9:E6:93:CD:9E:1C:87:71:FA:77:FD:67:B7:77 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584D48950DB380DFD7FF7374389C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft Manifest number: 010D0C9F4328584073A846655D9F3F36F9E9D134 Signing time: Wed 25 Mar 2026 08:00:04 +0000 Manifest this update: Wed 25 Mar 2026 08:00:04 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (hash: WUFzsSFKBzvASO+z7cp4Rjqcj6fuV9wb8L9hw5advxU=) 2: da61f786-99c2-4468-90f7-0b35abd168e5.crl (hash: Va+WE+Kmn2Ig/RezO7LXH2/x6uleX1O9Fn/gm8yemOY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:95:0d:b3:80:df:d7:ff:73:74:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Mar 25 08:00:04 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=9135917c-36dd-4936-81c6-5c62e1ec5ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:18:7d:2f:94:b9:6f:9c:cd:a2:ed:9d:e0: 51:65:a0:25:c5:8f:76:32:75:7c:e2:33:09:8d:28: 0c:25:0a:2d:0b:b2:86:23:44:af:a6:5e:b0:27:66: de:30:38:47:e1:71:81:35:59:7c:be:ec:65:99:36: d6:e8:21:a5:a0:79:20:52:86:04:0e:bf:f9:19:6a: 34:46:ae:2a:bc:bc:ee:b9:78:3c:3a:e2:3a:81:d5: 20:c8:8f:5a:18:9c:91:28:94:90:83:2f:88:4c:5b: f8:36:dd:03:eb:7b:42:e9:aa:a0:5f:7a:5c:2e:3e: 9b:50:f3:81:0e:d3:c5:46:d8:12:7b:6a:a0:26:ce: b5:6c:44:17:20:bc:58:6a:06:42:d3:25:d4:1a:32: 47:bb:ac:45:d7:69:6a:5b:d5:92:be:3b:51:72:d5: 27:d9:f1:64:2c:6e:0c:92:89:74:7f:21:ed:be:1d: 25:1e:e5:1d:57:c2:6a:fc:b6:58:cd:9f:13:89:6e: 82:d3:ac:4b:29:a7:b4:8f:d8:a5:3d:66:c9:25:34: 6d:70:b5:15:56:80:41:bf:ca:db:b1:e4:35:24:df: ba:3c:25:26:64:d0:97:f9:a3:ca:9d:0e:36:50:e2: 63:c4:b0:6c:d2:fd:6f:47:d2:4f:16:5f:82:4f:a4: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:ED:94:DC:1A:84:C9:E6:93:CD:9E:1C:87:71:FA:77:FD:67:B7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:84:49:87:03:93:34:68:63:14:48:4c:35:17:78:60:97:9b: f3:7c:fa:98:f3:0c:52:e2:5c:d9:48:fe:95:44:86:3e:84:99: b0:49:75:9a:97:ba:6b:8e:48:a6:b6:5c:0c:1e:5c:8a:d0:64: 13:8b:74:c3:e9:a6:0e:8a:50:c9:b9:04:c4:36:df:9a:ce:21: ba:d4:79:32:2e:69:10:6e:50:94:85:1c:65:6d:47:e4:f5:a0: 84:0a:b8:cb:55:75:fa:de:b3:41:a8:d8:2d:7b:87:0a:c4:23: 21:4c:93:ed:cd:fa:47:17:b2:a4:a6:dc:73:0a:2b:20:8c:96: 98:1c:a2:44:35:ff:28:8d:ac:2b:67:a4:1a:d7:5d:b6:7f:31: 47:b7:ad:f2:99:39:b8:ea:d8:2f:16:5c:40:3e:c3:19:fa:be: c0:dc:1c:1f:5d:f0:9b:76:cb:52:f4:be:52:5c:fb:5a:be:85: 1a:ac:cf:e2:40:66:4c:83:c5:a2:1a:d5:c8:50:51:b4:7c:f2: bc:7d:d4:b5:54:52:0e:d2:b8:bf:d3:ae:5a:77:d5:42:c9:99: f3:0d:50:4a:94:56:ff:7e:23:a5:37:bd:21:31:b1:a3:d7:4d: f1:1d:9c:81:c6:8b:a3:fc:ab:5f:41:e2:5b:e7:2a:47:fc:ff: b3:ec:fa:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IlQ2zgN/X/3N0OJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI2MDMyNTA4MDAwNFoXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk OTEzNTkxN2MtMzZkZC00OTM2LTgxYzYtNWM2MmUxZWM1ZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JAYfS+UuW+czaLtneBRZaAlxY92MnV84jMJ jSgMJQotC7KGI0Svpl6wJ2beMDhH4XGBNVl8vuxlmTbW6CGloHkgUoYEDr/5GWo0 Rq4qvLzuuXg8OuI6gdUgyI9aGJyRKJSQgy+ITFv4Nt0D63tC6aqgX3pcLj6bUPOB DtPFRtgSe2qgJs61bEQXILxYagZC0yXUGjJHu6xF12lqW9WSvjtRctUn2fFkLG4M kol0fyHtvh0lHuUdV8Jq/LZYzZ8TiW6C06xLKae0j9ilPWbJJTRtcLUVVoBBv8rb seQ1JN+6PCUmZNCX+aPKnQ42UOJjxLBs0v1vR9JPFl+CT6TV6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD7tlNwahMnmk82eHIdx+nf9Z7d3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvZGE2MWY3ODYtOTljMi00 NDY4LTkwZjctMGIzNWFiZDE2OGU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAhEmHA5M0aGMUSEw1F3hg l5vzfPqY8wxS4lzZSP6VRIY+hJmwSXWal7prjkimtlwMHlyK0GQTi3TD6aYOilDJ uQTENt+aziG61HkyLmkQblCUhRxlbUfk9aCECrjLVXX63rNBqNgte4cKxCMhTJPt zfpHF7KkptxzCisgjJaYHKJENf8ojawrZ6Qa1122fzFHt63ymTm46tgvFlxAPsMZ +r7A3BwfXfCbdstS9L5SXPtavoUarM/iQGZMg8WiGtXIUFG0fPK8fdS1VFIO0ri/ 065ad9VCyZnzDVBKlFb/fiOlN70hMbGj103xHZyBxouj/KtfQeJb5ypH/P+z7Ppa -----END CERTIFICATE-----Generated at Thu Mar 26 02:51:20 2026 by rpki-client