$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: jy0KjNqLbpe6FiRHL7tmwGBVCrHp/3CHq5ppjC1GlAc= Subject key identifier: 97:FA:FF:95:A4:4A:1E:B4:A5:CC:C5:CA:8F:CC:68:71:01:8F:3B:29 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584D507DFDAFEC1AC1DB22422280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF564476 Signing time: Sat 28 Mar 2026 04:00:04 +0000 Manifest this update: Sat 28 Mar 2026 04:00:04 +0000 Manifest next update: Mon 30 Mar 2026 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: ROvcVUNgClHio/oIXuQyw4YERBkjMWoLzLrnPeV7u48=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: F/HpWy6fDFbbusoxHqj6UQxLvCMQZJBW945nvdHvL+Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:7d:fd:af:ec:1a:c1:db:22:42:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Mar 28 04:00:04 2026 GMT Not After : Mar 30 04:00:00 2026 GMT Subject: CN=902dfb90-5739-40dd-95af-2a8f6269517d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:89:bb:e2:42:d9:e7:61:22:b4:df:22:6c:f7: ac:4a:0c:c6:d1:80:48:b3:df:99:ff:50:81:62:2d: 36:6a:26:15:e5:52:4e:2f:e9:c0:7a:42:cd:05:66: 5a:ed:c8:70:52:1e:6d:91:80:ec:02:87:3f:23:93: de:b6:01:72:81:07:cc:4e:6d:92:97:61:3c:7b:0e: 8e:ef:c8:cb:03:0e:2d:c9:40:3a:69:6d:fe:af:60: a6:09:c9:ab:9d:7a:b2:cc:fc:43:34:76:99:2b:b0: 67:e3:5f:d9:a8:91:e8:cf:bb:dc:c3:7f:0a:21:88: 1d:f3:64:a6:f3:fc:0f:83:63:0b:b1:47:0a:17:cd: be:d4:37:64:b9:1b:63:bc:5f:3b:76:99:0d:a0:42: 8d:43:61:51:11:97:93:22:ca:9f:3c:24:14:fa:d3: e0:76:99:b7:32:83:75:f9:16:ad:d2:22:4b:86:4f: eb:28:a1:07:8e:47:fc:67:96:d4:e8:2c:c0:a8:4b: eb:e7:d9:2f:ba:d0:31:43:7c:8f:15:b3:44:99:94: d8:f6:55:d6:29:15:b3:41:fd:9b:32:cd:39:61:26: 16:da:2d:7f:82:98:f4:45:75:f2:ba:38:41:18:de: 66:5a:f1:df:bb:aa:2b:c9:5d:6b:3c:46:75:01:c3: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FA:FF:95:A4:4A:1E:B4:A5:CC:C5:CA:8F:CC:68:71:01:8F:3B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:58:e5:9c:00:82:3b:24:26:ad:2d:50:7f:21:e9:fd:7b:0d: c8:b1:e3:fc:51:f8:a7:85:a2:1a:08:17:38:06:d2:8f:23:66: 64:d7:37:fe:3e:5a:a1:05:28:b7:32:d9:0c:f0:6d:e9:f9:49: d3:b3:be:0c:39:93:c6:03:b9:0c:5e:00:1f:60:d0:57:ee:bc: ff:72:1b:21:e6:b3:2b:2d:81:ea:3a:a4:e0:1e:92:06:bb:e3: 48:53:5c:3c:0c:e8:7c:ae:20:6f:a1:f9:c9:a3:88:97:f6:db: cf:cc:b5:d3:f7:b2:13:be:95:4d:bb:4e:99:f3:5f:64:54:ea: d1:8d:80:f3:8f:b7:d3:74:d8:b8:55:db:c9:f0:95:15:77:33: 50:c5:79:b5:ba:a1:d1:06:26:dc:16:4d:e3:cd:6b:db:52:b4: 5e:74:0c:cc:63:d6:51:54:0c:52:32:6a:85:cb:da:12:45:f4: 40:08:59:fc:8b:15:70:9c:2b:55:02:ba:12:91:0b:bc:90:3c: fe:b3:96:f3:11:e1:4b:1e:38:fa:d9:87:b8:67:ce:a2:80:d9: 69:e6:cd:6c:1b:84:27:8b:d3:c1:07:78:f6:c1:16:e6:ae:97: da:4f:9f:2f:bf:c0:dc:3f:1b:a5:83:b3:af:76:1f:d0:90:19: 3a:ab:82:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Qff2v7BrB2yJCIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDMyODA0MDAwNFoXDTI2MDMzMDA0MDAwMFowLzEtMCsGA1UEAxMk OTAyZGZiOTAtNTczOS00MGRkLTk1YWYtMmE4ZjYyNjk1MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4m74kLZ52EitN8ibPesSgzG0YBIs9+Z/1CB Yi02aiYV5VJOL+nAekLNBWZa7chwUh5tkYDsAoc/I5PetgFygQfMTm2Sl2E8ew6O 78jLAw4tyUA6aW3+r2CmCcmrnXqyzPxDNHaZK7Bn41/ZqJHoz7vcw38KIYgd82Sm 8/wPg2MLsUcKF82+1DdkuRtjvF87dpkNoEKNQ2FREZeTIsqfPCQU+tPgdpm3MoN1 +Rat0iJLhk/rKKEHjkf8Z5bU6CzAqEvr59kvutAxQ3yPFbNEmZTY9lXWKRWzQf2b Ms05YSYW2i1/gpj0RXXyujhBGN5mWvHfu6oryV1rPEZ1AcMp+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJf6/5WkSh60pczFyo/MaHEBjzspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuWOWcAII7JCatLVB/Ien9 ew3IseP8UfinhaIaCBc4BtKPI2Zk1zf+PlqhBSi3MtkM8G3p+UnTs74MOZPGA7kM XgAfYNBX7rz/chsh5rMrLYHqOqTgHpIGu+NIU1w8DOh8riBvofnJo4iX9tvPzLXT 97ITvpVNu06Z819kVOrRjYDzj7fTdNi4VdvJ8JUVdzNQxXm1uqHRBibcFk3jzWvb UrRedAzMY9ZRVAxSMmqFy9oSRfRACFn8ixVwnCtVAroSkQu8kDz+s5bzEeFLHjj6 2Ye4Z86igNlp5s1sG4Qni9PBB3j2wRbmrpfaT58vv8DcPxulg7Ovdh/QkBk6q4IP -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:58 2026 by rpki-client