$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft File: d4cafeea-cee5-442f-9f6c-530abebc6186.mft (raw, json) Hash identifier: KSKodkzceRV5VPN2pBjNeux3+yUWYZzp5PNeVGfiSzk= Subject key identifier: EC:C9:FF:FB:1F:66:E5:32:A6:37:C4:B2:44:62:79:C6:4B:16:A6:11 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584D4C4DF8C1D69FD1A53BF48B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft Manifest number: 010D0C9F432858466538CFF5850836B76B5A4D8F Signing time: Thu 26 Mar 2026 16:00:04 +0000 Manifest this update: Thu 26 Mar 2026 16:00:04 +0000 Manifest next update: Sat 28 Mar 2026 16:00:00 +0000 Files and hashes: 1: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (hash: Alpzh9uzS+tkcnEW0KfStZMtxpKsLbEdj79q1y38SfU=) 2: 8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa (hash: bBLjMr8dU4yN1alasRpfYnNNiHEsuCSMSGlmSujnt8M=) 3: d4cafeea-cee5-442f-9f6c-530abebc6186.crl (hash: sVPpqeOJviRYnwpCfK6n0M+/zSN5mIzGWxGwfbw1FoQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4d:f8:c1:d6:9f:d1:a5:3b:f4:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Mar 26 16:00:04 2026 GMT Not After : Mar 28 16:00:00 2026 GMT Subject: CN=7cd7b275-cb91-40c7-8507-40a1e0d8f564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:17:62:eb:96:d3:b5:ee:56:91:b6:9b:7f: ed:f6:82:7e:08:94:47:30:1b:6e:3b:6b:32:26:f9: 06:e0:f5:74:2a:9d:bb:36:4c:d2:93:e1:5a:84:5b: 7a:a8:50:7f:82:7e:4d:5f:7c:52:b5:47:aa:e1:ea: b9:86:ac:7b:69:23:05:a6:a0:4d:08:84:02:50:00: a9:5c:74:f6:52:be:86:46:b7:04:f3:f0:31:24:26: be:cc:06:7b:79:06:9a:e0:6b:4b:79:59:d7:3c:c7: 36:16:56:92:6f:84:3f:19:7f:53:55:09:fb:91:f3: 2d:2a:eb:58:da:aa:21:aa:79:d6:3a:f7:54:a6:62: f3:e6:d9:f8:aa:68:e9:65:be:eb:9b:00:bc:3d:18: e3:6d:6c:5d:65:d0:a7:86:39:6f:7a:29:1d:dd:e3: 5f:fd:2d:49:70:9f:85:f7:3e:9d:5c:d7:cc:a7:c2: 80:41:9d:73:a7:c5:17:f7:ab:23:0c:0b:f3:32:da: ed:c3:c6:09:fb:d4:6d:64:87:cc:e0:fd:0c:8b:53: 9f:75:d6:7c:b7:6f:a8:c4:6e:f2:3e:94:6a:d7:2e: 5d:d1:55:1f:7d:58:75:70:15:50:2d:7e:53:ac:10: e2:33:42:c4:36:4c:ec:23:fe:9c:c1:a0:8e:dc:84: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:FF:FB:1F:66:E5:32:A6:37:C4:B2:44:62:79:C6:4B:16:A6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:05:0a:a8:82:cc:3a:3d:b4:5e:7d:91:45:50:17:6b:57:a6: 68:7e:4c:5f:58:9b:cc:fe:c7:01:16:a5:3b:6a:51:9e:d3:27: 97:8e:5c:63:ff:59:1c:6e:11:17:1d:1f:a7:ec:ed:e6:a9:f7: 20:bc:0d:c0:0c:69:6d:56:61:81:89:55:b3:2c:ac:54:b3:c9: 08:0e:8d:57:4f:58:d6:49:37:d0:f1:5d:25:2c:f6:43:2c:34: c9:70:42:ee:9a:de:03:1d:61:b7:3f:0c:ee:e0:9c:46:f3:d4: e2:70:37:fe:7e:c6:b8:a0:fc:59:50:99:d6:f3:52:ad:9e:c7: 3b:85:5d:c6:f9:14:1e:35:30:4b:ae:81:9a:8f:aa:70:1c:25: b7:4b:78:48:5b:c4:71:2e:40:47:f8:38:6a:65:94:3a:d0:d9: 79:0c:eb:49:1e:7c:23:27:a7:2a:b3:cb:4b:81:b8:d5:ea:8f: d9:1f:b6:8d:7d:ce:83:df:c2:70:62:b4:4d:80:fa:aa:97:da: 59:d5:0d:6d:d2:22:36:65:81:ab:94:4a:a2:83:a7:3d:fd:63: 7d:0b:ce:f6:8a:df:84:66:23:39:ef:4f:0b:ea:7b:6f:3c:a5: 38:fa:b2:b8:e5:9d:2b:d9:90:dd:17:ae:c7:77:d3:4c:e6:82: 32:65:e0:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MTfjB1p/RpTv0iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI2MDMyNjE2MDAwNFoXDTI2MDMyODE2MDAwMFowLzEtMCsGA1UEAxMk N2NkN2IyNzUtY2I5MS00MGM3LTg1MDctNDBhMWUwZDhmNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9UXYuuW07XuVpG2m3/t9oJ+CJRHMBtuO2sy JvkG4PV0Kp27NkzSk+FahFt6qFB/gn5NX3xStUeq4eq5hqx7aSMFpqBNCIQCUACp XHT2Ur6GRrcE8/AxJCa+zAZ7eQaa4GtLeVnXPMc2FlaSb4Q/GX9TVQn7kfMtKutY 2qohqnnWOvdUpmLz5tn4qmjpZb7rmwC8PRjjbWxdZdCnhjlveikd3eNf/S1JcJ+F 9z6dXNfMp8KAQZ1zp8UX96sjDAvzMtrtw8YJ+9RtZIfM4P0Mi1OfddZ8t2+oxG7y PpRq1y5d0VUffVh1cBVQLX5TrBDiM0LENkzsI/6cwaCO3IQIfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOzJ//sfZuUypjfEskRiecZLFqYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvZDRjYWZlZWEtY2VlNS00 NDJmLTlmNmMtNTMwYWJlYmM2MTg2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClBQqogsw6PbRefZFFUBdr V6ZofkxfWJvM/scBFqU7alGe0yeXjlxj/1kcbhEXHR+n7O3mqfcgvA3ADGltVmGB iVWzLKxUs8kIDo1XT1jWSTfQ8V0lLPZDLDTJcELumt4DHWG3Pwzu4JxG89TicDf+ fsa4oPxZUJnW81Ktnsc7hV3G+RQeNTBLroGaj6pwHCW3S3hIW8RxLkBH+DhqZZQ6 0Nl5DOtJHnwjJ6cqs8tLgbjV6o/ZH7aNfc6D38JwYrRNgPqql9pZ1Q1t0iI2ZYGr lEqig6c9/WN9C872it+EZiM5708L6ntvPKU4+rK45Z0r2ZDdF67Hd9NM5oIyZeDx -----END CERTIFICATE-----Generated at Thu Mar 26 18:20:35 2026 by rpki-client