$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: Q+kRRUeNVqKIiqRPV2KwNGrXw+x8arNfy7eryCi1MUo= Subject key identifier: AC:40:70:C3:E7:4F:6E:F0:4A:6D:34:D4:09:2A:D9:34:BD:06:A7:45 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584D4A718DCC4E8168AF2D918C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACE04 Signing time: Thu 26 Mar 2026 00:00:09 +0000 Manifest this update: Thu 26 Mar 2026 00:00:09 +0000 Manifest next update: Sat 28 Mar 2026 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: Dd1osWpiaDpjzY8Pg9FlomIGZ6eNK4kuVTl1A1KbCa4=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: Nkaqhi6a2ty1RxWNciKzN4T0yTni0094RZhyatdY/v8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:71:8d:cc:4e:81:68:af:2d:91:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Mar 26 00:00:09 2026 GMT Not After : Mar 28 00:00:00 2026 GMT Subject: CN=3f6538e0-89c6-4c57-aee5-aaf73998111d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:29:10:90:98:87:d1:62:63:f4:3e:b6:3b: 1f:78:14:b7:9d:fe:b8:35:ea:9f:66:fa:d5:d2:10: 0e:9f:09:2f:10:45:56:70:12:a5:fa:1d:be:8c:c6: 8a:c9:71:82:2b:8f:3c:8a:47:2d:65:63:d5:31:32: b7:b5:d6:75:40:a4:04:88:ad:3c:8a:d1:55:a1:3b: f6:ef:de:ee:e2:f1:fd:40:03:fb:86:50:ec:d3:f4: 4a:52:72:4e:c0:43:36:28:29:d3:48:07:17:d9:b7: 23:41:6a:e0:13:16:39:30:73:e0:d8:53:8e:5f:97: df:b0:d2:12:01:bb:15:7c:d3:dd:ca:cb:a9:22:64: 7d:82:2d:ed:07:36:3c:db:9b:57:ed:8f:a6:86:f2: c3:c8:8c:ad:d4:95:b4:15:9f:81:c9:30:66:b6:1a: ce:8e:46:d9:36:c9:bc:36:80:ac:b5:fc:c9:18:55: c2:f3:66:46:45:1c:9d:05:ab:f2:a2:18:39:bc:56: 35:f1:ac:7d:d7:7a:eb:e5:20:e9:53:cc:79:1d:46: 9b:3b:04:e6:28:af:32:bb:da:80:3a:82:b4:6e:01: d7:31:e3:46:5d:44:aa:0c:e6:5e:f4:5e:17:71:0c: 15:cd:45:af:fd:92:48:88:c6:cf:94:77:be:b1:f5: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:70:C3:E7:4F:6E:F0:4A:6D:34:D4:09:2A:D9:34:BD:06:A7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:07:65:45:71:cf:a1:ce:8f:e3:75:70:02:9e:21:0a:51:4f: 07:4e:64:74:62:b6:d4:44:e1:1a:86:5d:ce:1e:46:3c:4f:19: 6a:f1:c6:b1:4d:4f:0a:bb:59:9f:26:f1:36:18:4b:35:21:c8: 5c:4e:cf:1e:cd:10:06:82:5f:8c:b7:3d:91:eb:71:21:5f:ab: 56:2e:c1:df:de:ef:5f:93:2b:e3:aa:45:cf:09:b6:1a:5e:63: 0e:f7:32:75:fa:95:34:44:b3:73:cc:a6:23:f1:fd:a7:66:6c: 07:03:fb:df:b2:67:74:64:29:fa:81:bc:b5:f6:3a:19:5c:93: 71:21:c6:fd:96:40:98:52:b7:ce:44:49:98:68:2a:4e:b2:44: 51:74:82:e5:6a:6a:93:83:aa:db:4a:6b:78:77:c1:c2:da:ec: bf:d1:df:ba:a9:4b:8e:56:50:b5:ea:26:18:74:43:74:43:70: 60:d6:2a:2a:4b:ac:e2:89:b4:7d:e5:35:44:57:3f:21:8e:cd: 14:bd:a9:92:2b:d2:23:fe:bc:43:26:06:83:76:81:d7:23:27: f6:d4:9f:e6:7e:54:07:9a:4e:40:e4:13:02:ef:a7:f5:db:eb: 53:1c:71:f2:23:73:ed:64:f8:56:d3:1b:0d:e2:bc:63:eb:3c: ab:3a:09:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KcY3MToFory2RjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI2MDMyNjAwMDAwOVoXDTI2MDMyODAwMDAwMFowLzEtMCsGA1UEAxMk M2Y2NTM4ZTAtODljNi00YzU3LWFlZTUtYWFmNzM5OTgxMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FopEJCYh9FiY/Q+tjsfeBS3nf64NeqfZvrV 0hAOnwkvEEVWcBKl+h2+jMaKyXGCK488ikctZWPVMTK3tdZ1QKQEiK08itFVoTv2 797u4vH9QAP7hlDs0/RKUnJOwEM2KCnTSAcX2bcjQWrgExY5MHPg2FOOX5ffsNIS AbsVfNPdysupImR9gi3tBzY825tX7Y+mhvLDyIyt1JW0FZ+ByTBmthrOjkbZNsm8 NoCstfzJGFXC82ZGRRydBavyohg5vFY18ax913rr5SDpU8x5HUabOwTmKK8yu9qA OoK0bgHXMeNGXUSqDOZe9F4XcQwVzUWv/ZJIiMbPlHe+sfUOYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKxAcMPnT27wSm001Akq2TS9BqdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXB2VFcc+hzo/jdXACniEK UU8HTmR0YrbUROEahl3OHkY8Txlq8caxTU8Ku1mfJvE2GEs1IchcTs8ezRAGgl+M tz2R63EhX6tWLsHf3u9fkyvjqkXPCbYaXmMO9zJ1+pU0RLNzzKYj8f2nZmwHA/vf smd0ZCn6gby19joZXJNxIcb9lkCYUrfOREmYaCpOskRRdILlamqTg6rbSmt4d8HC 2uy/0d+6qUuOVlC16iYYdEN0Q3Bg1ioqS6ziibR95TVEVz8hjs0UvamSK9Ij/rxD JgaDdoHXIyf21J/mflQHmk5A5BMC76f12+tTHHHyI3PtZPhW0xsN4rxj6zyrOgnm -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:03 2026 by rpki-client