$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft File: cd857ccf-b825-416d-8fd1-7332947e606d.mft (raw, json) Hash identifier: c6uexTWK8lyqWgwyl6F1dpX5lf8X0S4x+o6/xlmeSFA= Subject key identifier: A9:AC:3A:69:41:B4:4A:67:9E:DB:5F:D9:2D:F9:30:CB:D6:2D:54:03 Authority key identifier: AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F Certificate issuer: /CN=cd857ccf-b825-416d-8fd1-7332947e606d Certificate serial: 010D0C9F4328584D49DC9FCC8DABFA739535D780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft Manifest number: 010D0C9F4328584D200751185F467C4731F98B08 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 04c244df-9f55-3c39-a781-590ef8c8097d.roa (hash: K4NhMmhvKBbEyVrpQJTtz5Hq20AiAD6arEd8lOnpwxc=) 2: cd857ccf-b825-416d-8fd1-7332947e606d.crl (hash: KQy8hqxXx8ldXtri2pxnqNshqP9PasQ5srNjWHKPpaI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9f:cc:8d:ab:fa:73:95:35:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd857ccf-b825-416d-8fd1-7332947e606d Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=6425caf1-f3f2-489d-95ed-396985ed93a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:17:06:36:d4:4f:28:01:90:6a:6e:42:21: b2:f4:85:77:fe:0c:5b:a8:f6:c8:7e:e4:6f:e6:ee: 5b:72:62:a2:58:5a:65:4b:19:d5:c1:4a:02:e3:df: 4f:d0:70:8e:b7:ac:6d:48:33:db:1a:bb:58:90:f1: 56:b9:ee:ac:d5:07:f3:a0:1b:18:06:3f:09:0c:9a: 2c:fa:fd:83:bd:fe:a5:b7:a0:e7:ca:92:5e:48:a5: 2f:1c:48:80:d8:37:9e:bc:a2:fd:83:5e:4a:1c:db: 28:6d:21:32:54:76:2c:49:96:2e:a6:25:5c:09:63: 84:ca:c7:cb:c3:a7:79:5e:fb:51:9f:d9:56:76:6c: 6d:12:a6:10:f3:41:38:ba:57:4a:35:5c:18:b4:dd: b3:f3:c0:6e:bb:92:71:e4:8d:71:13:87:14:80:56: 5b:f4:e2:0d:ba:ff:19:98:0f:ac:2f:54:58:f3:f3: ee:89:83:e2:22:63:f8:ce:3d:1c:74:50:ca:48:89: 7e:ae:56:e1:02:1e:3b:99:92:a5:71:ef:92:c6:5e: 85:ac:16:f3:e8:64:8e:6e:22:e8:0d:a8:27:f3:c8: 4b:27:fe:2a:45:59:30:19:5a:6a:c1:5f:3c:2b:21: 5b:9a:91:80:ac:0b:78:48:a1:ec:72:36:77:be:9c: e6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:3A:69:41:B4:4A:67:9E:DB:5F:D9:2D:F9:30:CB:D6:2D:54:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl X509v3 Authority Key Identifier: keyid:AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dc:38:d1:8f:48:bd:9b:a5:3c:c0:a9:9f:5e:df:5e:9b:03: 43:a6:79:7e:4e:9d:91:a4:b7:0f:96:cc:16:10:3f:4c:5a:ba: 63:ac:7c:d4:0f:ae:c9:bc:5d:85:1d:36:d1:bd:28:bd:a5:66: 22:cc:ce:81:d1:3b:dc:85:54:e1:d3:fa:c2:32:57:a2:70:a9: c7:a8:46:e7:38:57:6e:15:12:20:f1:a8:df:f8:ef:96:6a:d9: c1:ea:5e:ea:79:ed:39:27:10:a7:fa:a4:a6:94:22:ab:37:58: ed:9b:c4:48:7d:20:6b:6e:6a:cc:b2:89:52:1e:77:86:4b:8f: 91:ca:a0:d0:ce:84:79:88:5f:c7:91:55:38:d3:95:6f:48:e3: 22:e8:1f:62:f2:f1:59:19:c6:a3:a1:3e:54:66:66:da:27:43: ab:bc:4a:ce:62:a1:82:d3:98:15:5c:a5:fb:e3:e8:32:18:25: ef:d4:01:b3:aa:9e:52:cc:95:44:56:ab:5c:66:87:76:83:a3: 31:9c:5b:ee:bb:6e:0b:99:0b:c9:5c:fe:82:07:a2:5d:78:5f: eb:9a:ba:69:27:9e:4a:9c:4d:c4:28:eb:29:54:17:ce:6f:26: 58:73:c7:46:ae:a9:bd:53:76:ad:50:b4:01:fb:14:c1:c5:95: 5c:a8:be:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J/Mjav6c5U114AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4NTdjY2YtYjgyNS00MTZkLThmZDEtNzMzMjk0N2U2 MDZkMB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk NjQyNWNhZjEtZjNmMi00ODlkLTk1ZWQtMzk2OTg1ZWQ5M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYXBjbUTygBkGpuQiGy9IV3/gxbqPbIfuRv 5u5bcmKiWFplSxnVwUoC499P0HCOt6xtSDPbGrtYkPFWue6s1QfzoBsYBj8JDJos +v2Dvf6lt6DnypJeSKUvHEiA2DeevKL9g15KHNsobSEyVHYsSZYupiVcCWOEysfL w6d5XvtRn9lWdmxtEqYQ80E4uldKNVwYtN2z88Buu5Jx5I1xE4cUgFZb9OINuv8Z mA+sL1RY8/PuiYPiImP4zj0cdFDKSIl+rlbhAh47mZKlce+Sxl6FrBbz6GSObiLo Dagn88hLJ/4qRVkwGVpqwV88KyFbmpGArAt4SKHscjZ3vpzmDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKmsOmlBtEpnnttf2S35MMvWLVQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDg1 N2NjZi1iODI1LTQxNmQtOGZkMS03MzMyOTQ3ZTYwNmQvY2Q4NTdjY2YtYjgyNS00 MTZkLThmZDEtNzMzMjk0N2U2MDZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4NTdjY2YtYjgyNS00MTZkLThm ZDEtNzMzMjk0N2U2MDZkL2NkODU3Y2NmLWI4MjUtNDE2ZC04ZmQxLTczMzI5NDdl NjA2ZC5jcmwwHwYDVR0jBBgwFoAUrSQ9QyqA5vImqMOR9s1t3yy6fY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDg1N2NjZi1iODI1LTQxNmQtOGZkMS03MzMy OTQ3ZTYwNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd3DjRj0i9m6U8wKmfXt9e mwNDpnl+Tp2RpLcPlswWED9MWrpjrHzUD67JvF2FHTbRvSi9pWYizM6B0TvchVTh 0/rCMleicKnHqEbnOFduFRIg8ajf+O+WatnB6l7qee05JxCn+qSmlCKrN1jtm8RI fSBrbmrMsolSHneGS4+RyqDQzoR5iF/HkVU405VvSOMi6B9i8vFZGcajoT5UZmba J0OrvErOYqGC05gVXKX74+gyGCXv1AGzqp5SzJVEVqtcZod2g6MxnFvuu24LmQvJ XP6CB6JdeF/rmrppJ55KnE3EKOspVBfObyZYc8dGrqm9U3atULQB+xTBxZVcqL44 -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:45 2026 by rpki-client