$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft File: d4cafeea-cee5-442f-9f6c-530abebc6186.mft (raw, json) Hash identifier: erk/CeqKLbqO32+6kh639s+dRPDK+Ll2Pi135vB7wwM= Subject key identifier: E2:6B:21:AB:36:FA:7B:34:83:E0:F7:63:8E:6F:CF:34:5C:C7:34:D7 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584D498347B13BA3428B4C899500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft Manifest number: 010D0C9F432858466538CFF5850836B76B5A4D8E Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Sat 28 Mar 2026 16:00:00 +0000 Files and hashes: 1: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (hash: Alpzh9uzS+tkcnEW0KfStZMtxpKsLbEdj79q1y38SfU=) 2: 8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa (hash: bBLjMr8dU4yN1alasRpfYnNNiHEsuCSMSGlmSujnt8M=) 3: d4cafeea-cee5-442f-9f6c-530abebc6186.crl (hash: mirksoH+JKWKBwEgRutyllhJJIXFYlOnWTvECWL9sVM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:47:b1:3b:a3:42:8b:4c:89:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 28 16:00:00 2026 GMT Subject: CN=bd164e29-53b9-4286-b5fb-4d87ce4154de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:eb:0f:64:bb:40:10:c5:d6:d0:22:14:38: 81:07:f5:d0:43:e6:70:37:91:20:c7:49:df:41:4d: 2e:0e:0e:2e:75:ab:29:0d:6c:d7:2a:03:45:e3:3b: bd:d1:03:1c:18:cb:9a:0e:06:26:4a:66:25:87:f5: a1:ca:52:65:70:95:43:b1:d9:b8:2c:5e:9b:52:52: 69:52:83:fb:66:51:38:d1:8c:82:97:90:3a:05:91: fb:f2:27:44:1c:e8:d5:b3:de:2a:34:91:66:d0:f7: 82:1e:c1:5d:85:fe:5c:f4:21:7f:c0:52:de:3c:92: f8:e7:06:09:79:62:0f:8b:57:4e:ec:59:d0:1a:af: 15:4e:13:98:27:4e:d5:79:c8:f6:f6:6d:b0:8d:ab: 85:43:a8:69:54:98:0c:8a:f2:1e:59:85:8d:f3:7e: cc:d0:41:0c:5c:9d:ed:4b:78:6e:b7:6e:31:30:b2: 33:02:f6:39:48:ae:5f:f2:b3:b2:3f:36:66:25:2a: 19:68:e3:c5:20:23:e8:a0:e0:4c:0d:b8:09:42:2c: 3f:28:9c:48:c9:79:10:e8:29:cd:73:cd:9a:b1:20: 59:9d:31:a7:eb:7c:e7:4f:f9:c5:64:a1:58:84:63: 1d:46:5b:5c:2e:fe:fd:e0:bf:14:8b:a4:a0:3c:e7: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:21:AB:36:FA:7B:34:83:E0:F7:63:8E:6F:CF:34:5C:C7:34:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9b:37:12:ae:cd:8e:b2:d8:ff:14:14:7d:a2:eb:bc:e5:6e: 0a:14:38:f9:1a:0e:26:c3:ec:a2:95:25:c6:7e:27:a7:7e:ef: 31:ff:23:f5:72:b7:97:e7:10:0c:1f:2c:33:3b:40:cc:64:82: fe:a8:30:d0:6d:24:be:c5:2e:a7:dc:cb:80:fe:e1:c0:c3:9f: 5f:44:61:18:d1:fb:aa:e9:f1:fb:b7:3f:92:79:30:00:e3:d5: 9f:82:84:70:49:0e:ff:96:ad:05:f1:64:db:84:d1:1c:ac:88: c3:75:3e:9b:55:ac:78:0d:76:84:8d:53:d8:a8:49:b8:fa:90: fb:46:6d:2b:d3:5a:05:31:f3:3f:9d:1c:8a:e3:5b:14:94:3a: 6d:1f:0a:28:53:bb:47:76:ea:b6:c9:cd:d9:27:ba:ba:a6:1b: e4:7f:a9:ff:8d:bf:8a:29:7e:d9:1d:d6:44:44:32:23:5d:54: 2e:52:bc:38:51:18:86:2d:72:7b:c9:d1:66:d3:d5:16:a8:a5: e6:c0:03:13:23:de:f1:e8:f4:e0:19:43:5c:ec:44:a5:31:c6: cf:e8:5b:3b:b1:d7:c3:46:0c:82:32:95:ea:61:2a:52:27:19: 7c:46:96:ab:3c:c1:e4:1e:47:03:d2:1a:99:70:77:84:f6:9f: fd:66:8c:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0exO6NCi0yJlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyODE2MDAwMFowLzEtMCsGA1UEAxMk YmQxNjRlMjktNTNiOS00Mjg2LWI1ZmItNGQ4N2NlNDE1NGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjDrD2S7QBDF1tAiFDiBB/XQQ+ZwN5Egx0nf QU0uDg4udaspDWzXKgNF4zu90QMcGMuaDgYmSmYlh/WhylJlcJVDsdm4LF6bUlJp UoP7ZlE40YyCl5A6BZH78idEHOjVs94qNJFm0PeCHsFdhf5c9CF/wFLePJL45wYJ eWIPi1dO7FnQGq8VThOYJ07Vecj29m2wjauFQ6hpVJgMivIeWYWN837M0EEMXJ3t S3hut24xMLIzAvY5SK5f8rOyPzZmJSoZaOPFICPooOBMDbgJQiw/KJxIyXkQ6CnN c82asSBZnTGn63znT/nFZKFYhGMdRltcLv794L8Ui6SgPOfFpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOJrIas2+ns0g+D3Y45vzzRcxzTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvZDRjYWZlZWEtY2VlNS00 NDJmLTlmNmMtNTMwYWJlYmM2MTg2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlmzcSrs2Ostj/FBR9ouu8 5W4KFDj5Gg4mw+yilSXGfienfu8x/yP1creX5xAMHywzO0DMZIL+qDDQbSS+xS6n 3MuA/uHAw59fRGEY0fuq6fH7tz+SeTAA49WfgoRwSQ7/lq0F8WTbhNEcrIjDdT6b Vax4DXaEjVPYqEm4+pD7Rm0r01oFMfM/nRyK41sUlDptHwooU7tHduq2yc3ZJ7q6 phvkf6n/jb+KKX7ZHdZERDIjXVQuUrw4URiGLXJ7ydFm09UWqKXmwAMTI97x6PTg GUNc7ESlMcbP6Fs7sdfDRgyCMpXqYSpSJxl8RparPMHkHkcD0hqZcHeE9p/9ZowP -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:23 2026 by rpki-client