$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft File: 432c4e45-9934-4a21-b56f-b27d7aa21e49.mft (raw, json) Hash identifier: MxcgJB5MFeAqztKQzkM7AnUDpeBYpCcUA3+5g7JCUB0= Subject key identifier: 59:1C:77:3F:E6:81:76:FB:9C:F3:87:23:56:A7:2F:25:63:9F:DD:CF Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584D4ACAD7B10945664BBC9A2D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft Manifest number: 010D0C9F4328584528435719157927FE2C784C7D Signing time: Thu 26 Mar 2026 03:00:04 +0000 Manifest this update: Thu 26 Mar 2026 03:00:04 +0000 Manifest next update: Sun 29 Mar 2026 03:00:00 +0000 Files and hashes: 1: 432c4e45-9934-4a21-b56f-b27d7aa21e49.crl (hash: pO5AChulO4nMh2he7rmZd4OksjiqEE9PPzE/Cm+z4Y0=) 2: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (hash: qNMRNR1jH0i9xjYTy3jnziu6Ytt7RuqTuPk3HdU6IM0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ca:d7:b1:09:45:66:4b:bc:9a:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Mar 26 03:00:04 2026 GMT Not After : Mar 29 03:00:00 2026 GMT Subject: CN=49899fc8-e3f0-4ef7-a50c-e03ff630fcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:78:96:1c:0d:ee:af:dd:71:68:f6:f7:ad: b3:b5:a5:e3:1a:77:31:37:c3:cd:50:0c:05:7d:5b: c9:b8:ac:45:cf:a0:24:78:3a:31:1b:6d:ae:fa:26: 58:15:e8:92:93:d5:8c:46:6e:55:02:be:3b:37:17: 41:5d:47:57:4f:9a:1c:64:60:c9:97:15:71:1c:55: 20:ce:7c:2f:48:eb:3b:c6:01:e0:2f:29:d2:16:d7: b3:57:52:8d:15:7d:50:50:d9:e8:7b:41:02:56:0f: 99:e5:57:f2:86:9f:95:82:70:25:db:b3:c8:ff:c8: 49:b9:21:57:05:dd:8c:67:bc:14:af:cc:c9:f5:5c: 34:b0:0d:15:ae:38:9f:91:36:d3:fd:4c:89:74:cf: 38:1c:9a:6e:ad:35:54:22:92:e0:09:91:f8:65:f9: 95:ff:9d:4c:51:3f:d9:00:11:c2:31:0a:8f:f6:9e: f2:8a:29:99:f3:c3:3b:13:27:ab:41:c6:e0:29:55: 0a:32:3f:26:9f:7e:d2:e1:e5:6c:36:65:cf:3c:65: 49:1b:60:a8:6b:0c:6d:1f:33:69:38:93:d1:94:31: 56:ff:55:f8:29:88:a0:9f:8a:40:b3:ec:28:21:41: af:15:07:a7:f8:d2:6a:f9:7b:6f:e1:c5:94:24:a5: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:77:3F:E6:81:76:FB:9C:F3:87:23:56:A7:2F:25:63:9F:DD:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d5:4d:cc:44:27:6b:4d:69:fb:c3:16:b9:56:d5:19:92:d5: 53:9e:8d:a1:a4:2e:86:f2:2b:34:b8:4a:d3:bc:91:db:94:19: 10:06:ba:c6:be:38:c9:6a:1d:68:92:34:5d:5c:e6:49:d6:fe: 9d:4a:38:a7:74:7c:53:ad:28:9a:77:20:99:19:ff:96:cf:68: 58:af:fa:58:27:69:15:c3:f0:f9:97:ab:3f:69:19:63:eb:42: 40:28:4f:7c:24:45:cb:4e:20:2b:36:19:7b:94:7d:ac:a3:df: bf:62:a3:ef:d4:e6:ea:49:a4:ec:a5:02:60:9b:9a:92:bd:9e: 9c:b9:28:ef:bd:81:7a:7a:78:f9:f6:5e:6b:14:90:24:c9:7c: 68:18:77:67:97:e4:3e:03:f4:06:e9:ae:74:8b:40:c5:f7:7c: 7e:9e:e6:18:13:0a:5b:af:31:84:2a:83:e3:4f:9f:a2:93:04: 09:fe:d8:84:64:d6:2e:d7:c6:80:66:19:b3:c7:13:d5:77:de: f2:c9:32:f4:7d:88:8b:0c:94:e7:87:90:51:ed:5e:8b:14:05: 40:44:ad:6a:c4:ce:62:32:b0:17:43:9b:43:77:5c:ff:87:ab: 8d:5f:c3:88:36:37:af:78:8f:e4:88:a4:ee:b3:81:d2:5b:27: 6d:ba:0f:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KytexCUVmS7yaLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI2MDMyNjAzMDAwNFoXDTI2MDMyOTAzMDAwMFowLzEtMCsGA1UEAxMk NDk4OTlmYzgtZTNmMC00ZWY3LWE1MGMtZTAzZmY2MzBmY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKl4lhwN7q/dcWj2962ztaXjGncxN8PNUAwF fVvJuKxFz6AkeDoxG22u+iZYFeiSk9WMRm5VAr47NxdBXUdXT5ocZGDJlxVxHFUg znwvSOs7xgHgLynSFtezV1KNFX1QUNnoe0ECVg+Z5Vfyhp+VgnAl27PI/8hJuSFX Bd2MZ7wUr8zJ9Vw0sA0VrjifkTbT/UyJdM84HJpurTVUIpLgCZH4ZfmV/51MUT/Z ABHCMQqP9p7yiimZ88M7EyerQcbgKVUKMj8mn37S4eVsNmXPPGVJG2CoawxtHzNp OJPRlDFW/1X4KYign4pAs+woIUGvFQen+NJq+Xtv4cWUJKUDMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFkcdz/mgXb7nPOHI1anLyVjn93PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNDMyYzRlNDUtOTkzNC00 YTIxLWI1NmYtYjI3ZDdhYTIxZTQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCs1U3MRCdrTWn7wxa5VtUZ ktVTno2hpC6G8is0uErTvJHblBkQBrrGvjjJah1okjRdXOZJ1v6dSjindHxTrSia dyCZGf+Wz2hYr/pYJ2kVw/D5l6s/aRlj60JAKE98JEXLTiArNhl7lH2so9+/YqPv 1ObqSaTspQJgm5qSvZ6cuSjvvYF6enj59l5rFJAkyXxoGHdnl+Q+A/QG6a50i0DF 93x+nuYYEwpbrzGEKoPjT5+ikwQJ/tiEZNYu18aAZhmzxxPVd97yyTL0fYiLDJTn h5BR7V6LFAVARK1qxM5iMrAXQ5tDd1z/h6uNX8OINjeveI/kiKTus4HSWydtug/W -----END CERTIFICATE-----Generated at Thu Mar 26 06:58:12 2026 by rpki-client