$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft File: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft (raw, json) Hash identifier: SxMJE2G1m5o8rgha2w0L/OvISgomN7FtwUqhDnHnn/c= Subject key identifier: 70:2E:B9:BC:3C:17:0E:B6:2E:85:22:DB:25:17:40:3A:7D:18:95:F9 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584D49A10F30A72E8F13EAA76680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft Manifest number: 010D0C9F4328584073A81EA95548D8D821DD44DE Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (hash: 8U2NcLvuc1Cnuh89nu11HaBnAutDBOcfrer0NRPGgcI=) 2: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl (hash: vHAXSCwwmmQpZxibCflofQPwyv8praCMkUc/x5LSUpc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0f:30:a7:2e:8f:13:ea:a7:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=0027ffc0-366c-4cb7-9db9-d314be0f62f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:fb:0b:5d:43:f0:06:0a:45:fd:f0:e8:32: 52:ba:56:af:28:f0:b7:ab:4b:15:78:52:ee:9e:33: 90:24:0f:83:52:65:6b:c7:52:13:fc:90:6d:b1:71: fd:14:08:47:6a:8a:19:93:7a:18:8a:dd:b0:d6:47: 98:86:e7:b5:13:38:63:2b:e2:d2:4f:dc:08:13:dd: 59:11:02:1e:65:ac:2b:65:a4:fa:cc:fd:14:99:62: 56:11:db:26:4a:51:ee:c7:9b:e9:67:55:9b:e9:6f: f8:da:db:47:23:37:54:95:7c:ae:f8:a5:70:32:fc: b4:ea:fa:71:76:18:02:ee:09:bf:24:2d:a4:c4:02: 15:55:cd:28:f8:02:14:9e:a5:41:59:bc:c0:0b:15: d9:a3:3f:4d:2c:ba:7c:16:1a:81:32:1e:46:42:80: 2d:5e:e3:93:36:e9:57:ae:aa:df:8c:d4:e1:f1:bc: be:f6:fa:8a:e7:00:79:d4:98:8d:a5:9c:d7:39:a5: 34:29:57:17:7a:4e:7b:10:b4:ac:7b:a5:40:9d:33: 73:ab:f9:e7:67:ca:72:48:01:0e:45:68:fd:16:33: c9:7d:95:91:34:a8:42:30:a4:ef:20:a1:63:ea:35: 50:0b:64:5f:0b:e1:f5:d2:eb:7b:c8:0f:5f:85:1c: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2E:B9:BC:3C:17:0E:B6:2E:85:22:DB:25:17:40:3A:7D:18:95:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8f:6f:55:ef:99:8e:3f:b2:40:07:51:ba:e7:b4:b0:68:1f: 8b:58:36:35:10:36:60:f2:c0:e2:b7:00:71:2e:87:ed:25:4d: 2e:d0:84:55:dc:45:81:80:dc:dc:f0:f0:0a:45:e8:a6:5f:f9: 13:52:40:03:54:b7:d6:42:58:a0:33:63:85:3b:cf:7e:87:85: 63:67:2e:b7:90:d3:38:bf:f1:3b:39:88:e0:b9:c8:18:64:9b: ff:2b:28:5b:50:90:52:ce:ee:f3:db:14:bc:7a:da:b1:87:99: 25:bc:da:ce:f6:7e:39:3c:cf:16:31:1f:03:63:f6:63:31:26: 27:5c:5a:f1:52:8a:91:66:e3:4b:3c:6f:e8:88:96:4b:cb:3d: 66:a9:25:b3:5a:19:f4:9e:aa:ac:5e:bc:f6:b5:8e:f0:6f:46: 49:bb:fd:5d:ee:e1:ca:5e:fb:f4:1a:63:2e:f0:6a:2d:38:88: 96:11:4f:d0:2b:c0:f1:fe:51:47:81:f7:49:61:5b:de:dc:8a: ef:89:b8:a1:00:1f:54:53:70:55:36:4a:4a:8e:ca:31:53:68: f5:0a:39:5e:43:dc:6c:9a:c1:0c:f7:80:9a:27:cd:64:cc:44: bf:b5:a3:a4:ed:fb:65:43:fb:32:a0:ea:7a:cf:cf:08:08:65: d8:62:69:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ8wpy6PE+qnZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk MDAyN2ZmYzAtMzY2Yy00Y2I3LTlkYjktZDMxNGJlMGY2MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUb7C11D8AYKRf3w6DJSulavKPC3q0sVeFLu njOQJA+DUmVrx1IT/JBtsXH9FAhHaooZk3oYit2w1keYhue1EzhjK+LST9wIE91Z EQIeZawrZaT6zP0UmWJWEdsmSlHux5vpZ1Wb6W/42ttHIzdUlXyu+KVwMvy06vpx dhgC7gm/JC2kxAIVVc0o+AIUnqVBWbzACxXZoz9NLLp8FhqBMh5GQoAtXuOTNulX rqrfjNTh8by+9vqK5wB51JiNpZzXOaU0KVcXek57ELSse6VAnTNzq/nnZ8pySAEO RWj9FjPJfZWRNKhCMKTvIKFj6jVQC2RfC+H10ut7yA9fhRxZHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHAuubw8Fw62LoUi2yUXQDp9GJX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZGZmZmE1YzMtYjVjNy00 MzQ3LThkNTctOTZiYzMxMDJkZjhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtj29V75mOP7JAB1G657Sw aB+LWDY1EDZg8sDitwBxLoftJU0u0IRV3EWBgNzc8PAKReimX/kTUkADVLfWQlig M2OFO89+h4VjZy63kNM4v/E7OYjgucgYZJv/KyhbUJBSzu7z2xS8etqxh5klvNrO 9n45PM8WMR8DY/ZjMSYnXFrxUoqRZuNLPG/oiJZLyz1mqSWzWhn0nqqsXrz2tY7w b0ZJu/1d7uHKXvv0GmMu8GotOIiWEU/QK8Dx/lFHgfdJYVve3IrvibihAB9UU3BV NkpKjsoxU2j1CjleQ9xsmsEM94CaJ81kzES/taOk7ftlQ/syoOp6z88ICGXYYmnw -----END CERTIFICATE-----Generated at Thu Mar 26 06:17:51 2026 by rpki-client