$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft File: dd638a66-157d-4b37-b487-c2b5f4dbe940.mft (raw, json) Hash identifier: vb6YIU2Xb2g6Y9vbQQ+6v4175XEq96triqsc2Y0RsBM= Subject key identifier: 28:73:5B:7B:CB:EC:89:36:25:B6:41:75:56:0D:D4:05:19:E4:C8:4D Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584D4B9B496BA2D44DD94F942980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft Manifest number: 010D0C9F4328584073A84D50659089CBD4B360B7 Signing time: Thu 26 Mar 2026 10:00:03 +0000 Manifest this update: Thu 26 Mar 2026 10:00:03 +0000 Manifest next update: Sat 28 Mar 2026 10:00:00 +0000 Files and hashes: 1: 0a3f164c-5f88-301b-adde-657863805f1c.roa (hash: BzsoQQ8cixhovHAsJtOyhpbKWTvs1tcCA2c8mLgFJ7s=) 2: 129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (hash: kQroQ1zLz7a/UwUvgkBA57PD+rN8kXtKo+EXKI88yW4=) 3: 32bae387-9a90-39b8-b5de-920b138b534b.roa (hash: Tag9tLu6b3k9hNO1ehJcRVLQGglSIUhnE/hJ/NlcXkQ=) 4: dd638a66-157d-4b37-b487-c2b5f4dbe940.crl (hash: 51jR0TGQTEJVwc527cE0O8v2B+FdzBBjwRmmzh82c5k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:9b:49:6b:a2:d4:4d:d9:4f:94:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Mar 26 10:00:03 2026 GMT Not After : Mar 28 10:00:00 2026 GMT Subject: CN=2337e380-6237-4183-ab0f-f0083ef3fa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:40:5a:09:10:a7:90:41:2c:6d:46:84:31: 66:f4:21:ab:d4:e5:f4:be:92:65:2d:cb:42:06:8f: 83:2e:88:3d:e1:81:12:87:86:b1:84:cd:0d:30:c9: 15:10:da:af:66:d8:ea:c1:10:59:fe:89:8d:a6:1c: b8:bb:33:81:4e:2c:49:9e:45:1a:fa:f9:f8:40:94: 5c:0e:d4:30:e0:03:dc:9c:f3:c7:b0:21:c1:49:fd: 69:1f:da:15:fb:e9:1c:51:79:ec:58:73:80:3c:34: 40:5d:3d:c2:b7:30:cc:26:0e:1d:60:2d:11:fd:53: 30:9b:ac:83:f1:9e:d0:b7:62:c1:a0:0e:48:e6:38: 94:9c:01:58:17:68:bd:53:25:5b:db:d5:98:e4:9b: 2e:23:2e:fc:a5:dd:13:a4:10:32:70:00:11:9f:15: 2f:8d:11:ea:65:b7:28:fc:5a:26:1a:4b:90:93:d0: e4:e9:20:99:b1:2a:23:2b:49:0a:ac:b8:30:b8:ed: 3d:c5:f5:a0:84:be:c9:56:03:ba:56:10:7b:0d:c0: dd:6d:af:fc:76:7a:e3:54:ef:ae:5f:fe:75:92:91: 82:fe:e5:0a:fa:f5:d0:61:ab:dd:8c:e8:e0:4b:13: 0a:c2:dd:10:86:fc:47:53:a1:bb:f1:53:9b:d8:2c: bb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:73:5B:7B:CB:EC:89:36:25:B6:41:75:56:0D:D4:05:19:E4:C8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e6:8e:5b:8d:a3:9a:0e:6e:ec:20:de:d3:e6:40:bb:d8:ea: d0:15:64:e5:de:01:29:e9:22:5e:6e:34:88:8b:98:7c:da:d0: 6b:b6:b3:81:ca:57:b8:24:6b:8b:25:80:82:d4:64:28:d5:6c: ec:2c:e6:5a:cb:84:5e:4a:64:b6:dc:88:9f:58:cb:e5:0a:03: 1e:a8:dc:46:26:83:88:af:f4:63:aa:31:d1:43:18:78:4c:05: 9a:1e:34:19:36:6b:5c:8c:8c:93:ac:28:1b:7c:d8:1a:a7:4a: 01:45:63:1a:95:bc:28:93:92:fe:b1:90:06:90:6c:12:fc:6e: 0e:b2:ec:d1:39:28:33:63:47:12:b6:e4:90:af:c3:60:0d:10: 72:3f:0c:b9:eb:72:d2:69:33:8f:b9:85:b4:53:a9:36:11:fb: 78:d5:ca:c1:c1:0b:68:3f:5e:71:ba:12:d1:97:eb:07:24:40: ff:29:51:bb:84:5c:56:df:c9:d9:20:ad:11:65:c5:d2:be:f4: e0:41:9d:59:74:ce:69:ec:3f:fc:2f:1e:38:cd:8d:8b:5b:51: 24:d3:a5:bc:3e:6a:51:c1:8f:36:ca:27:dd:e6:8d:9c:f5:b1: 04:12:41:eb:58:15:b8:75:96:38:d6:19:89:f2:05:32:03:d2: d2:ec:d1:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Lm0lrotRN2U+UKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI2MDMyNjEwMDAwM1oXDTI2MDMyODEwMDAwMFowLzEtMCsGA1UEAxMk MjMzN2UzODAtNjIzNy00MTgzLWFiMGYtZjAwODNlZjNmYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj69AWgkQp5BBLG1GhDFm9CGr1OX0vpJlLctC Bo+DLog94YESh4axhM0NMMkVENqvZtjqwRBZ/omNphy4uzOBTixJnkUa+vn4QJRc DtQw4APcnPPHsCHBSf1pH9oV++kcUXnsWHOAPDRAXT3CtzDMJg4dYC0R/VMwm6yD 8Z7Qt2LBoA5I5jiUnAFYF2i9UyVb29WY5JsuIy78pd0TpBAycAARnxUvjRHqZbco /FomGkuQk9Dk6SCZsSojK0kKrLgwuO09xfWghL7JVgO6VhB7DcDdba/8dnrjVO+u X/51kpGC/uUK+vXQYavdjOjgSxMKwt0QhvxHU6G78VOb2Cy7MQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFChzW3vL7Ik2JbZBdVYN1AUZ5MhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvZGQ2MzhhNjYtMTU3ZC00 YjM3LWI0ODctYzJiNWY0ZGJlOTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAO5o5bjaOaDm7sIN7T5kC7 2OrQFWTl3gEp6SJebjSIi5h82tBrtrOByle4JGuLJYCC1GQo1WzsLOZay4ReSmS2 3IifWMvlCgMeqNxGJoOIr/RjqjHRQxh4TAWaHjQZNmtcjIyTrCgbfNgap0oBRWMa lbwok5L+sZAGkGwS/G4OsuzROSgzY0cStuSQr8NgDRByPwy563LSaTOPuYW0U6k2 Eft41crBwQtoP15xuhLRl+sHJED/KVG7hFxW38nZIK0RZcXSvvTgQZ1ZdM5p7D/8 Lx44zY2LW1Ek06W8PmpRwY82yifd5o2c9bEEEkHrWBW4dZY41hmJ8gUyA9LS7NHz -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:45 2026 by rpki-client