$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft File: 00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft (raw, json) Hash identifier: Vyh9hUQCJKgWOcU40JV/rh6w5g8qHLO7D7klV+CJ814= Subject key identifier: 39:E1:FF:5E:44:37:BD:84:5C:D1:C2:29:87:35:E0:9D:4E:04:30:9A Authority key identifier: FF:C4:90:5F:CA:F4:B3:3A:69:E9:56:DA:D4:CD:1A:C5:FC:7A:66:F5 Certificate issuer: /CN=00cffc7d-f9dd-4e0e-8d5c-9570a317b596 Certificate serial: 010D0C9F4328584D48B2D4D7513E66BD0262AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft Manifest number: 010D0C9F4328584BFF5DFFA8EC3CD7BDCD625D39 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 00cffc7d-f9dd-4e0e-8d5c-9570a317b596.crl (hash: MwMcWf+3z3mR8ls8ionhi+Ls6swR7UnmNFxfWCqD2CA=) 2: a4f8bf34-a312-37a5-90cb-8bb65297ac04.roa (hash: cFbmxiggq74aT5aUolaxRHHJdPxFIhbdG7p+cAqJP34=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d4:d7:51:3e:66:bd:02:62:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cffc7d-f9dd-4e0e-8d5c-9570a317b596 Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=20549ad6-b6b0-49ac-bbd1-d8768dd3991d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:37:7e:75:b5:5b:ab:1b:4b:5e:0f:3b:3e: cd:aa:d7:f0:95:e0:26:3e:a4:06:6d:ba:2f:db:30: 43:60:cb:b0:f9:ba:d3:ef:71:bf:19:86:67:09:86: c4:54:eb:62:c2:76:b7:e5:f9:d3:11:b4:50:b2:01: 38:fb:b1:99:ab:3d:01:13:cf:24:6c:d5:29:1f:c9: 2d:3d:e4:33:c3:98:59:35:c8:73:c9:78:e0:fd:f7: b4:a7:16:b1:62:48:3f:f4:78:a4:27:eb:2b:0f:ea: f2:cd:29:ab:81:30:fd:1b:74:75:c5:ad:14:30:c1: e9:55:d3:66:ef:45:19:3b:2c:13:29:7e:6b:9d:04: 17:71:d0:cc:a2:87:76:96:9d:d4:a7:c9:9f:cc:d0: 61:fc:08:e3:2f:be:79:5f:1e:ca:ba:b2:18:72:cf: 1d:0c:79:de:0f:2f:04:f9:da:c5:43:0e:a0:3e:dd: bf:fc:7e:80:91:ca:cf:91:00:2d:27:26:fd:2d:bc: 0d:a9:0e:c1:fb:fe:cf:77:03:f7:56:8a:28:97:f0: a5:3b:15:65:cb:95:a6:94:83:a6:e2:7f:f4:43:24: 94:b3:08:3e:20:46:ab:81:c6:8c:07:03:bb:b3:d7: 22:4e:4d:0b:45:a3:8e:34:99:59:15:ab:7f:e7:15: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E1:FF:5E:44:37:BD:84:5C:D1:C2:29:87:35:E0:9D:4E:04:30:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.crl X509v3 Authority Key Identifier: keyid:FF:C4:90:5F:CA:F4:B3:3A:69:E9:56:DA:D4:CD:1A:C5:FC:7A:66:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9f:92:ab:7f:1c:2a:4a:1b:ac:85:47:dd:38:60:ef:e1:42: b6:f9:e6:26:22:e5:8f:38:73:a2:a1:64:04:e2:78:06:b9:ce: 08:bf:6f:59:a6:aa:17:56:75:91:a6:d2:dc:8e:54:4e:48:4b: 98:8f:07:92:0c:5f:4e:f0:d3:86:bd:c8:14:1b:a5:04:85:b3: 03:58:8c:ac:11:fa:ff:6d:be:41:f5:5e:09:86:1e:ee:d5:e6: 67:5c:22:22:6f:1c:80:0e:e5:eb:52:1b:1b:f5:6b:1a:9e:19: c8:d2:5a:19:8b:c0:cc:c1:8e:b9:94:87:ff:c4:72:df:47:a8: 92:7d:29:d3:3d:a6:cc:66:fd:83:5f:40:2c:fb:95:3f:37:93: e7:10:dc:61:59:05:03:ad:06:4e:6d:6b:dd:e5:a9:e1:56:cf: d7:2f:ff:8e:1a:2b:e5:93:cb:21:21:62:66:e1:ca:c3:1b:02: 49:17:7b:be:fe:5b:69:6b:e0:c5:25:e2:ba:90:38:08:a2:c1: 94:a4:2d:04:d0:d0:a8:f0:65:1d:bd:74:aa:c7:de:72:b7:c0: af:c6:60:36:80:46:12:65:e7:d6:92:77:6f:eb:91:17:cb:07: 01:73:d4:ec:f5:45:3b:62:cc:bc:18:f9:20:05:a7:ed:1f:28: 28:cd:01:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstTXUT5mvQJiqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBjZmZjN2QtZjlkZC00ZTBlLThkNWMtOTU3MGEzMTdi NTk2MB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk MjA1NDlhZDYtYjZiMC00OWFjLWJiZDEtZDg3NjhkZDM5OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5s3fnW1W6sbS14POz7NqtfwleAmPqQGbbov 2zBDYMuw+brT73G/GYZnCYbEVOtiwna35fnTEbRQsgE4+7GZqz0BE88kbNUpH8kt PeQzw5hZNchzyXjg/fe0pxaxYkg/9HikJ+srD+ryzSmrgTD9G3R1xa0UMMHpVdNm 70UZOywTKX5rnQQXcdDMood2lp3Up8mfzNBh/AjjL755Xx7KurIYcs8dDHneDy8E +drFQw6gPt2//H6AkcrPkQAtJyb9LbwNqQ7B+/7PdwP3Voool/ClOxVly5WmlIOm 4n/0QySUswg+IEargcaMBwO7s9ciTk0LRaOONJlZFat/5xUt2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDnh/15EN72EXNHCKYc14J1OBDCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMGNm ZmM3ZC1mOWRkLTRlMGUtOGQ1Yy05NTcwYTMxN2I1OTYvMDBjZmZjN2QtZjlkZC00 ZTBlLThkNWMtOTU3MGEzMTdiNTk2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDBjZmZjN2QtZjlkZC00ZTBlLThk NWMtOTU3MGEzMTdiNTk2LzAwY2ZmYzdkLWY5ZGQtNGUwZS04ZDVjLTk1NzBhMzE3 YjU5Ni5jcmwwHwYDVR0jBBgwFoAU/8SQX8r0szpp6Vba1M0axfx6ZvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMGNmZmM3ZC1mOWRkLTRlMGUtOGQ1Yy05NTcw YTMxN2I1OTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLn5KrfxwqShushUfdOGDv 4UK2+eYmIuWPOHOioWQE4ngGuc4Iv29ZpqoXVnWRptLcjlROSEuYjweSDF9O8NOG vcgUG6UEhbMDWIysEfr/bb5B9V4Jhh7u1eZnXCIibxyADuXrUhsb9WsanhnI0loZ i8DMwY65lIf/xHLfR6iSfSnTPabMZv2DX0As+5U/N5PnENxhWQUDrQZObWvd5anh Vs/XL/+OGivlk8shIWJm4crDGwJJF3u+/ltpa+DFJeK6kDgIosGUpC0E0NCo8GUd vXSqx95yt8CvxmA2gEYSZefWkndv65EXywcBc9Ts9UU7Ysy8GPkgBaftHygozQGZ -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:13 2026 by rpki-client