$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft File: cadf002a-d081-4e51-89c4-f7121259516d.mft (raw, json) Hash identifier: H+KC/dqlwBrPqqiqXNeJwizC92WM1I5pWBDcyz413Eo= Subject key identifier: 98:6E:E7:C1:89:A3:7E:35:4F:DF:7B:9E:C5:08:42:23:BC:4E:AB:81 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584D49FA74F1CBFAC3F790214140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft Manifest number: 010D0C9F43285842AD9ECC2C9997439D002F577F Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (hash: L8woD97cJtPJ96g1etlZnfvw9XLQHux5wulIcA1BRBE=) 2: 966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (hash: CeHfe/03zGe/jau/CEs5Jd7eQtos9KjJCnZ97Zo9aRM=) 3: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (hash: AbAIZOujRyvl4VrdruM8cYzgOoa4ZODNLf91I+GuWG8=) 4: cadf002a-d081-4e51-89c4-f7121259516d.crl (hash: Lf/Vx9pfNmqGhpVVaGc9iksPNsfXUG+ap2I7fK7K2sc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:74:f1:cb:fa:c3:f7:90:21:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=c4a0bd0a-f4c8-4751-9e75-45cbcfe350bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:b9:51:8f:8b:d8:22:a8:61:62:22:52:9e: 91:b6:4e:6b:7e:bf:10:81:9b:53:ab:f1:ea:a4:eb: 89:20:67:ea:e6:4a:f1:ad:ec:ed:0c:c4:41:10:05: 7c:54:35:90:c6:d4:f9:83:61:9b:c5:34:3d:0f:78: 74:c4:eb:b7:8a:a1:87:78:1b:90:97:8a:45:e0:0a: 6b:89:6c:e3:72:30:1a:9f:4a:96:1f:eb:e7:6b:9d: db:23:7a:bd:e0:9c:b9:40:83:20:df:40:44:d9:01: 6c:4e:2e:c7:6d:d4:db:19:4a:22:a0:85:f8:71:0b: b7:c7:e9:d8:6d:38:d8:17:2c:47:12:41:3f:f4:6a: 70:e9:10:98:bc:90:a3:4e:8b:ec:5f:e9:8f:23:77: 3a:98:d0:93:c5:b9:f1:c5:15:2b:09:a7:6a:77:8b: 06:03:11:4a:33:1a:82:7b:45:12:a1:ba:0b:b2:d5: e7:3b:72:c2:67:1c:f0:33:31:70:35:c1:50:d6:f0: 71:05:49:f6:b6:72:e6:8f:62:a2:ce:8f:a5:8a:15: 3e:2b:42:70:32:d0:eb:4a:0b:9a:b1:ea:fd:2d:7f: 62:9c:74:94:fb:51:2a:c4:8b:27:fd:46:a8:8d:d8: cd:bf:3f:ea:72:c8:e6:8f:24:f1:ef:51:79:3b:2c: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6E:E7:C1:89:A3:7E:35:4F:DF:7B:9E:C5:08:42:23:BC:4E:AB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:90:68:a6:79:07:d0:f9:ba:a1:e6:7c:87:f3:5f:0b:b2:be: 4c:1d:d9:d8:63:a3:65:18:a3:91:49:61:28:26:be:1a:f7:cb: ef:84:84:23:34:fa:c8:1d:f6:80:fa:bc:05:8c:26:22:89:1e: a3:eb:c2:d0:9b:b4:68:58:f7:87:3e:67:3b:41:62:88:f3:e3: 7b:20:7e:15:aa:cc:a2:0f:3c:e6:e1:cb:ac:de:3f:f6:a6:6e: de:1c:b2:19:fc:08:3f:a5:25:f4:e2:13:09:12:05:26:04:c3: 91:bc:a4:e2:97:bf:db:2c:df:66:c7:25:99:2a:4c:f0:5f:32: a5:51:85:03:aa:f5:03:b4:c9:cc:3a:06:e8:21:9f:54:7b:5b: 54:eb:40:2d:42:dc:a7:86:a7:60:a8:0c:21:6f:54:ce:24:60: 0f:36:76:ef:22:8e:9a:ea:1c:92:81:01:34:e4:4e:85:19:87: 17:dd:78:da:55:2f:67:a3:d9:d4:93:81:56:8f:36:ce:9a:c1: f4:43:0e:bd:aa:0b:20:3c:b8:d4:19:46:ef:b1:9e:c8:38:8f: 05:21:05:38:d3:ae:e5:95:09:77:16:27:be:1f:e4:4e:72:a8: c0:f7:8a:8f:7b:33:c9:02:a6:ba:6a:e1:2f:aa:dc:46:50:f3: 40:cd:4c:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nTxy/rD95AhQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk YzRhMGJkMGEtZjRjOC00NzUxLTllNzUtNDVjYmNmZTM1MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0q5UY+L2CKoYWIiUp6Rtk5rfr8QgZtTq/Hq pOuJIGfq5krxreztDMRBEAV8VDWQxtT5g2GbxTQ9D3h0xOu3iqGHeBuQl4pF4Apr iWzjcjAan0qWH+vna53bI3q94Jy5QIMg30BE2QFsTi7HbdTbGUoioIX4cQu3x+nY bTjYFyxHEkE/9Gpw6RCYvJCjTovsX+mPI3c6mNCTxbnxxRUrCadqd4sGAxFKMxqC e0USoboLstXnO3LCZxzwMzFwNcFQ1vBxBUn2tnLmj2Kizo+lihU+K0JwMtDrSgua ser9LX9inHSU+1EqxIsn/UaojdjNvz/qcsjmjyTx71F5OywbWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJhu58GJo341T997nsUIQiO8TquBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvY2FkZjAwMmEtZDA4MS00 ZTUxLTg5YzQtZjcxMjEyNTk1MTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzkGimeQfQ+bqh5nyH818L sr5MHdnYY6NlGKORSWEoJr4a98vvhIQjNPrIHfaA+rwFjCYiiR6j68LQm7RoWPeH Pmc7QWKI8+N7IH4VqsyiDzzm4cus3j/2pm7eHLIZ/Ag/pSX04hMJEgUmBMORvKTi l7/bLN9mxyWZKkzwXzKlUYUDqvUDtMnMOgboIZ9Ue1tU60AtQtynhqdgqAwhb1TO JGAPNnbvIo6a6hySgQE05E6FGYcX3XjaVS9no9nUk4FWjzbOmsH0Qw69qgsgPLjU GUbvsZ7IOI8FIQU4067llQl3Fie+H+ROcqjA94qPezPJAqa6auEvqtxGUPNAzUyF -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:02 2026 by rpki-client