$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft File: 249f7a2c-0438-4d20-8f0b-095a38d1046f.mft (raw, json) Hash identifier: j+wiRuS63rNr1nkeozebz1vKQF4dGodajZf8Ktb0Yuc= Subject key identifier: 0A:07:54:CC:D1:0E:E4:29:37:D4:DE:DF:96:25:80:7A:AF:52:5A:8E Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Certificate serial: 010D0C9F4328584D4ACAD79CFE24C18A81E6C800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft Manifest number: 010D0C9F4328584BEB0FA66CD497B3C1B8891C02 Signing time: Thu 26 Mar 2026 03:00:04 +0000 Manifest this update: Thu 26 Mar 2026 03:00:04 +0000 Manifest next update: Sun 29 Mar 2026 03:00:00 +0000 Files and hashes: 1: 249f7a2c-0438-4d20-8f0b-095a38d1046f.crl (hash: AyCogbfY8JDmYnVNPLMOH19v4UvZIdRIVDhF35k4mzM=) 2: fa929d22-5b04-3656-bfd5-92174907d027.roa (hash: dOaReEJUssfj8+0694OJs9+IhBSUrTBLSyh6r6JR1kQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ca:d7:9c:fe:24:c1:8a:81:e6:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Validity Not Before: Mar 26 03:00:04 2026 GMT Not After : Mar 29 03:00:00 2026 GMT Subject: CN=56db2584-e26d-46b0-a9b4-d162ab4cb37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:55:7d:e7:0a:b7:b2:e4:5c:e2:13:ed:17: 91:ca:fb:1f:18:f9:11:fe:14:17:bc:2f:17:ca:7b: 77:85:d3:6d:a0:f4:3a:f5:b5:6c:48:a1:02:7c:cb: e1:c4:d1:66:e6:5b:7f:c2:02:c6:5c:4a:a1:c8:83: 2d:9d:c9:64:d3:da:82:d4:94:46:31:39:c3:38:b0: 94:23:0e:bf:40:18:b9:9e:77:37:e3:77:14:75:83: 20:10:e6:ff:8d:cd:a6:75:39:3e:f5:dc:1e:7a:01: b4:f6:59:ad:ae:80:5d:b7:cf:03:69:a2:13:45:a5: 93:58:d4:9b:ee:b7:f1:28:9d:aa:1b:6e:24:4a:1a: b7:29:9b:4f:57:0c:b2:85:27:f7:21:e6:e3:e1:a4: be:46:02:67:81:ba:69:61:06:38:38:7b:d6:c9:9d: 96:bf:68:ca:f9:36:33:b4:09:86:df:9c:4a:41:4c: d6:cc:f5:37:e4:d5:34:f8:1e:11:1a:65:78:a8:32: a8:50:be:87:69:06:73:ae:e4:87:1d:8b:d0:b0:18: 1f:bb:d3:50:97:99:f8:ab:58:6c:0c:b9:06:9d:da: 72:8c:9b:6c:50:d5:64:c8:dd:a7:97:81:f1:d9:39: 50:71:74:ef:31:03:19:c8:20:fd:32:2e:c3:5c:ac: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:07:54:CC:D1:0E:E4:29:37:D4:DE:DF:96:25:80:7A:AF:52:5A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl X509v3 Authority Key Identifier: keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:a3:8c:b2:33:12:7b:b6:31:c1:4a:bc:35:ad:8a:72:5a: aa:13:a2:48:20:44:1e:63:9a:ba:17:81:83:c7:0c:ec:36:77: ec:28:5e:b6:a2:d0:9b:79:8f:07:e5:1d:be:d4:a9:11:e3:63: ef:f2:a6:fb:4f:64:6c:0b:fb:1b:fd:91:68:33:4c:2e:43:4d: 6e:5f:0c:49:b7:63:9e:0e:40:16:c6:b3:f7:f5:4a:b5:29:9d: 3a:8e:f9:68:31:de:f2:eb:2d:39:6c:95:47:6a:74:71:e7:8f: 40:66:76:82:91:54:fd:07:47:44:1e:ea:ce:e0:04:4a:9f:1b: f2:8d:96:62:b6:1a:ad:d4:46:24:29:b3:1a:79:c2:40:d9:27: 2f:b2:73:3b:b7:b2:fe:c2:e2:88:e9:5f:6c:c2:30:d5:63:4c: bb:88:b5:79:a6:86:20:6d:10:27:92:00:eb:96:79:89:48:44: 24:96:b5:8f:2e:05:c5:9d:82:4c:7d:a8:df:4e:78:74:b5:f6: 4c:e3:2c:64:03:4b:e2:a9:b4:0e:9d:94:bb:d4:1b:0e:93:3f: 87:27:51:17:64:45:bd:83:b9:23:3e:e0:ee:1b:ac:f3:c0:e9: 85:a2:e0:32:88:0a:44:c5:42:a4:77:6d:8e:15:cb:31:52:dc: 76:51:e5:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Kytec/iTBioHmyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEw NDZmMB4XDTI2MDMyNjAzMDAwNFoXDTI2MDMyOTAzMDAwMFowLzEtMCsGA1UEAxMk NTZkYjI1ODQtZTI2ZC00NmIwLWE5YjQtZDE2MmFiNGNiMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwZVfecKt7LkXOIT7ReRyvsfGPkR/hQXvC8X ynt3hdNtoPQ69bVsSKECfMvhxNFm5lt/wgLGXEqhyIMtnclk09qC1JRGMTnDOLCU Iw6/QBi5nnc343cUdYMgEOb/jc2mdTk+9dweegG09lmtroBdt88DaaITRaWTWNSb 7rfxKJ2qG24kShq3KZtPVwyyhSf3Iebj4aS+RgJngbppYQY4OHvWyZ2Wv2jK+TYz tAmG35xKQUzWzPU35NU0+B4RGmV4qDKoUL6HaQZzruSHHYvQsBgfu9NQl5n4q1hs DLkGndpyjJtsUNVkyN2nl4Hx2TlQcXTvMQMZyCD9Mi7DXKwKxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAoHVMzRDuQpN9Te35YlgHqvUlqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlm N2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvMjQ5ZjdhMmMtMDQzOC00 ZDIwLThmMGItMDk1YTM4ZDEwNDZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjQ5ZjdhMmMtMDQzOC00ZDIwLThm MGItMDk1YTM4ZDEwNDZmLzI0OWY3YTJjLTA0MzgtNGQyMC04ZjBiLTA5NWEzOGQx MDQ2Zi5jcmwwHwYDVR0jBBgwFoAUNY2F6KzHAj/AIloDXSktnY57TSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVh MzhkMTA0NmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzR6OMsjMSe7YxwUq8Na2K clqqE6JIIEQeY5q6F4GDxwzsNnfsKF62otCbeY8H5R2+1KkR42Pv8qb7T2RsC/sb /ZFoM0wuQ01uXwxJt2OeDkAWxrP39Uq1KZ06jvloMd7y6y05bJVHanRx549AZnaC kVT9B0dEHurO4ARKnxvyjZZithqt1EYkKbMaecJA2ScvsnM7t7L+wuKI6V9swjDV Y0y7iLV5poYgbRAnkgDrlnmJSEQklrWPLgXFnYJMfajfTnh0tfZM4yxkA0viqbQO nZS71BsOkz+HJ1EXZEW9g7kjPuDuG6zzwOmFouAyiApExUKkd22OFcsxUtx2UeWk -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:23 2026 by rpki-client