$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft File: ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft (raw, json) Hash identifier: o2e10VfEWMcO6JlDUTXncdyUYJ1txn7Q9Ei40+MLirY= Subject key identifier: B3:1C:2D:E7:00:00:CA:34:B9:CE:B3:63:F0:1D:57:42:AD:F4:6D:54 Authority key identifier: F0:AD:F0:FF:0C:E7:C1:48:F4:80:21:C2:AC:2D:90:87:7D:0E:16:00 Certificate issuer: /CN=ff23475a-9e1e-4026-8e3c-0d65d40abca5 Certificate serial: 010D0C9F4328584D4F366C9FFE32BA8413B83180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft Manifest number: 010D0C9F4328584073A8202BE01C1A656D2DB59B Signing time: Fri 27 Mar 2026 17:00:04 +0000 Manifest this update: Fri 27 Mar 2026 17:00:04 +0000 Manifest next update: Sun 29 Mar 2026 17:00:00 +0000 Files and hashes: 1: ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl (hash: 9rsVI5HA1O4x2S1kWcy3N5SAnR06AugbiWAIDWq8CJI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:36:6c:9f:fe:32:ba:84:13:b8:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff23475a-9e1e-4026-8e3c-0d65d40abca5 Validity Not Before: Mar 27 17:00:04 2026 GMT Not After : Mar 29 17:00:00 2026 GMT Subject: CN=5728c0d0-d4d4-49f8-8438-ed7a153ba48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:94:5a:0b:ff:47:7e:95:7f:8d:dd:67:6f: 02:5a:eb:33:1b:d3:41:f5:d7:10:15:0b:23:1f:5e: 1d:4e:34:3e:0c:12:c6:31:39:60:56:41:68:e6:42: e8:73:49:8a:d8:99:3c:d0:0f:1d:26:a0:4b:86:80: d6:ad:ce:8e:8e:9a:ea:0e:20:17:98:fc:ae:f9:02: fd:63:65:c6:8a:20:42:31:ca:f6:9e:12:92:b2:eb: 50:b2:cf:e1:db:f5:a7:07:3d:0a:bb:92:46:ab:f8: b2:8d:a0:72:d6:cd:99:3a:56:b9:61:a2:64:11:7d: 8a:a8:49:ee:b6:99:f8:05:b4:12:4f:36:27:f1:18: 58:bb:f0:46:88:e3:5f:98:f1:03:cc:e9:c9:30:59: 61:00:c2:9d:4c:73:c2:ae:73:a7:1d:51:8a:9a:a0: 2a:b0:04:5a:a6:c9:21:06:cc:59:1c:70:50:4d:37: ea:6a:fe:2e:f6:30:f5:46:8d:94:e6:f6:5b:7d:21: 5c:0c:b1:08:73:6b:13:9e:5b:c0:1c:c1:38:a0:ad: 94:1f:0d:a6:fc:40:97:3c:61:fe:3d:4c:19:5e:83: 78:97:66:73:ff:a8:ef:99:b0:36:54:1c:48:76:9b: bb:76:a6:ff:fe:19:03:44:0b:b1:61:a7:c6:e3:50: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:2D:E7:00:00:CA:34:B9:CE:B3:63:F0:1D:57:42:AD:F4:6D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl X509v3 Authority Key Identifier: keyid:F0:AD:F0:FF:0C:E7:C1:48:F4:80:21:C2:AC:2D:90:87:7D:0E:16:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b5:e1:9c:a0:ea:d0:e5:1a:9b:37:48:73:85:d9:91:ef:80: a2:40:33:c9:8d:95:42:0b:52:16:37:fa:b5:ac:2f:1e:6b:eb: 80:92:92:95:ad:2d:72:5b:4a:e1:41:85:b5:e1:f8:5f:83:08: 6f:0f:d1:72:4f:8c:7c:70:8d:b6:77:ab:f4:db:58:9b:3f:cd: 57:37:a0:cb:d4:33:f3:56:c8:dc:54:8f:31:09:dc:91:68:a9: 77:f7:67:6a:28:1f:ad:2c:5b:71:31:f9:d3:38:47:23:4f:dc: a5:de:4d:6e:7c:fd:29:40:69:8a:44:53:0a:e3:95:4e:f2:8d: a2:14:cd:ef:10:91:78:e3:7a:98:2c:6d:bf:2b:a0:44:21:f2: fc:18:28:c4:ab:09:98:3f:a4:0b:b4:97:5c:ef:88:3e:73:9b: 2b:23:b8:35:35:db:b2:27:07:ed:28:79:c3:ab:e0:b9:c3:b8: 08:13:04:49:b6:89:c6:31:4a:09:c6:9c:73:b5:c3:2b:46:04: ac:a7:3d:da:00:51:2f:1e:28:d1:1c:7b:f6:de:82:99:df:c1: 82:f5:87:62:46:57:c1:05:44:df:57:b4:af:87:8f:76:9f:6b: f7:3a:17:9c:e3:5b:5b:e8:92:17:71:df:98:f6:72:c5:c9:c0: 3c:15:d1:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PNmyf/jK6hBO4MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMzQ3NWEtOWUxZS00MDI2LThlM2MtMGQ2NWQ0MGFi Y2E1MB4XDTI2MDMyNzE3MDAwNFoXDTI2MDMyOTE3MDAwMFowLzEtMCsGA1UEAxMk NTcyOGMwZDAtZDRkNC00OWY4LTg0MzgtZWQ3YTE1M2JhNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUqUWgv/R36Vf43dZ28CWuszG9NB9dcQFQsj H14dTjQ+DBLGMTlgVkFo5kLoc0mK2Jk80A8dJqBLhoDWrc6OjprqDiAXmPyu+QL9 Y2XGiiBCMcr2nhKSsutQss/h2/WnBz0Ku5JGq/iyjaBy1s2ZOla5YaJkEX2KqEnu tpn4BbQSTzYn8RhYu/BGiONfmPEDzOnJMFlhAMKdTHPCrnOnHVGKmqAqsARapskh BsxZHHBQTTfqav4u9jD1Ro2U5vZbfSFcDLEIc2sTnlvAHME4oK2UHw2m/ECXPGH+ PUwZXoN4l2Zz/6jvmbA2VBxIdpu7dqb//hkDRAuxYafG41D7uwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMcLecAAMo0uc6zY/AdV0Kt9G1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIz NDc1YS05ZTFlLTQwMjYtOGUzYy0wZDY1ZDQwYWJjYTUvZmYyMzQ3NWEtOWUxZS00 MDI2LThlM2MtMGQ2NWQ0MGFiY2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMzQ3NWEtOWUxZS00MDI2LThl M2MtMGQ2NWQ0MGFiY2E1L2ZmMjM0NzVhLTllMWUtNDAyNi04ZTNjLTBkNjVkNDBh YmNhNS5jcmwwHwYDVR0jBBgwFoAU8K3w/wznwUj0gCHCrC2Qh30OFgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIzNDc1YS05ZTFlLTQwMjYtOGUzYy0wZDY1 ZDQwYWJjYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyteGcoOrQ5RqbN0hzhdmR 74CiQDPJjZVCC1IWN/q1rC8ea+uAkpKVrS1yW0rhQYW14fhfgwhvD9FyT4x8cI22 d6v021ibP81XN6DL1DPzVsjcVI8xCdyRaKl392dqKB+tLFtxMfnTOEcjT9yl3k1u fP0pQGmKRFMK45VO8o2iFM3vEJF443qYLG2/K6BEIfL8GCjEqwmYP6QLtJdc74g+ c5srI7g1NduyJwftKHnDq+C5w7gIEwRJtonGMUoJxpxztcMrRgSspz3aAFEvHijR HHv23oKZ38GC9YdiRlfBBUTfV7Svh492n2v3Ohec41tb6JIXcd+Y9nLFycA8FdGH -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:41 2026 by rpki-client