$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft File: bdd46844-e081-4813-bfe2-0cfbeac92e08.mft (raw, json) Hash identifier: 464CTk5r0aT9fYnJ+sZyM+BziV3woClxOKbXHrR++og= Subject key identifier: 87:28:E4:E8:06:D7:33:29:11:75:B4:8D:89:F3:3B:BE:3C:F5:F7:D0 Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F4328584D50F5280118B0D6D7CF7E1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft Manifest number: 010D0C9F43285847DD1E0E87BACD33374237B8A1 Signing time: Sat 28 Mar 2026 08:00:09 +0000 Manifest this update: Sat 28 Mar 2026 08:00:09 +0000 Manifest next update: Tue 31 Mar 2026 08:00:00 +0000 Files and hashes: 1: bdd46844-e081-4813-bfe2-0cfbeac92e08.crl (hash: IaAczUw2iuw68fscOvfWHng6vj9Ra8tchRG0xhlJLEA=) 2: ca4eafff-9365-3068-b787-140215783a30.roa (hash: ITKzzhGW2REBY+9XHlCLBfrQ2W2ko7tjJ6NJ+yP/YVw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:f5:28:01:18:b0:d6:d7:cf:7e:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Mar 28 08:00:09 2026 GMT Not After : Mar 31 08:00:00 2026 GMT Subject: CN=b8e8e9a6-931a-42d1-a73f-76430eeee1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:52:31:1b:88:3a:2c:5e:76:68:91:ee:b2:37: df:0a:84:3f:51:3f:a6:aa:10:f4:70:64:8e:e7:a6: 4a:15:3e:71:8c:25:6f:b7:1f:78:fa:37:07:9e:1b: 79:65:5b:bc:39:6c:23:a6:ea:3b:24:7f:c3:8b:cf: 11:9f:73:03:3f:ec:3a:ef:16:57:b8:26:37:dc:d1: 75:3e:19:d2:94:46:33:c0:0a:cd:17:46:e9:f0:0f: 13:99:a8:f0:2c:d9:2c:8c:21:ca:3e:dc:de:8d:78: 1e:80:e9:c6:50:d3:a4:ca:60:35:c4:67:14:cd:2a: 55:a1:b7:10:3a:8c:82:57:79:af:c5:95:c6:08:67: 5c:c3:d3:33:55:c9:42:f9:99:fd:89:e5:ea:04:c1: 11:46:eb:ab:01:3a:40:37:fc:50:56:f2:0e:a8:b8: b2:7b:5f:03:a2:5f:70:18:01:15:20:e8:9a:7a:c8: 86:6e:ed:c4:9c:cc:7f:b5:5e:ff:1b:8c:b6:93:84: 17:e7:61:8c:38:7d:86:78:89:7c:3d:ba:9a:c4:06: 09:ac:57:c0:6b:c4:4b:7c:2b:ca:cb:d3:e1:f6:78: 4e:c7:e3:a1:5f:0d:5c:fa:1d:0b:cd:73:2f:ce:16: 47:73:0d:39:6d:e5:ef:51:d4:f5:bb:94:ce:b4:ed: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:E4:E8:06:D7:33:29:11:75:B4:8D:89:F3:3B:BE:3C:F5:F7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:75:83:07:65:08:03:13:5b:0c:4d:60:f5:e9:da:3e:6a:aa: b6:ff:89:15:58:70:10:44:71:a4:49:c0:87:03:40:92:40:2c: 28:76:38:e9:86:d7:f8:f5:77:a9:b0:d7:15:51:35:9b:f9:90: 76:68:f7:5d:5d:31:70:21:ae:24:8f:fa:9d:87:6c:80:0b:5d: 0b:ee:2e:08:eb:ce:23:ae:ee:d8:aa:52:17:20:63:ce:21:ab: 37:2a:5a:74:5b:a0:cd:2d:17:53:93:1d:39:33:de:a6:9f:88: 6a:7a:5b:46:78:c8:72:81:4c:8c:b1:fa:c7:e0:9a:0e:0a:0c: 29:80:35:e3:71:dc:94:4c:2f:dd:ce:94:6b:da:b0:5a:16:ca: 53:d6:3a:10:89:64:59:ac:c5:76:df:25:94:7c:86:63:1f:0a: e3:60:19:71:53:c6:eb:8b:ce:91:ec:df:aa:61:15:8c:76:5a: 2a:a1:bb:0f:13:f5:7b:19:61:b3:52:f0:21:11:50:06:d0:0b: 40:6b:75:5a:6a:0c:00:d7:fa:6c:6e:7f:13:f0:14:59:b8:f5: 4c:f5:94:18:1b:63:ba:82:f4:36:db:93:64:a6:61:13:50:18: 01:92:19:6e:dd:20:6c:6e:92:0f:d9:a8:d0:4d:8e:b8:c1:e1: bb:d1:2a:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Q9SgBGLDW189+HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI2MDMyODA4MDAwOVoXDTI2MDMzMTA4MDAwMFowLzEtMCsGA1UEAxMk YjhlOGU5YTYtOTMxYS00MmQxLWE3M2YtNzY0MzBlZWVlMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVIxG4g6LF52aJHusjffCoQ/UT+mqhD0cGSO 56ZKFT5xjCVvtx94+jcHnht5ZVu8OWwjpuo7JH/Di88Rn3MDP+w67xZXuCY33NF1 PhnSlEYzwArNF0bp8A8TmajwLNksjCHKPtzejXgegOnGUNOkymA1xGcUzSpVobcQ OoyCV3mvxZXGCGdcw9MzVclC+Zn9ieXqBMERRuurATpAN/xQVvIOqLiye18Dol9w GAEVIOiaesiGbu3EnMx/tV7/G4y2k4QX52GMOH2GeIl8PbqaxAYJrFfAa8RLfCvK y9Ph9nhOx+OhXw1c+h0LzXMvzhZHcw05beXvUdT1u5TOtO3EIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIco5OgG1zMpEXW0jYnzO7489ffQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvYmRkNDY4NDQtZTA4MS00 ODEzLWJmZTItMGNmYmVhYzkyZTA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAudYMHZQgDE1sMTWD16do+ aqq2/4kVWHAQRHGkScCHA0CSQCwodjjphtf49XepsNcVUTWb+ZB2aPddXTFwIa4k j/qdh2yAC10L7i4I684jru7YqlIXIGPOIas3Klp0W6DNLRdTkx05M96mn4hqeltG eMhygUyMsfrH4JoOCgwpgDXjcdyUTC/dzpRr2rBaFspT1joQiWRZrMV23yWUfIZj HwrjYBlxU8bri86R7N+qYRWMdloqobsPE/V7GWGzUvAhEVAG0AtAa3VaagwA1/ps bn8T8BRZuPVM9ZQYG2O6gvQ225NkpmETUBgBkhlu3SBsbpIP2ajQTY64weG70Sp2 -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:08 2026 by rpki-client