$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.mft File: 2baf1904-1ea5-4310-80f0-f2a38cbeb95d.mft (raw, json) Hash identifier: Pa5nPZAXD2X2aknIB1VynCva5exe3wQTKRBrFGLpLVw= Subject key identifier: 3F:69:67:B7:91:7D:1E:A3:BE:05:5A:4E:92:9C:7B:8B:33:CC:91:47 Authority key identifier: 90:92:C8:7A:EC:60:67:D0:2F:96:70:AE:13:97:47:F4:22:AB:BC:F1 Certificate issuer: /CN=2baf1904-1ea5-4310-80f0-f2a38cbeb95d Certificate serial: 010D0C9F4328584D4AAD1D0EDE1D38E9D4FA77E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.mft Manifest number: 010D0C9F4328584C65C8FA16EFC286B8E0B08156 Signing time: Thu 26 Mar 2026 02:00:09 +0000 Manifest this update: Thu 26 Mar 2026 02:00:09 +0000 Manifest next update: Sun 29 Mar 2026 02:00:00 +0000 Files and hashes: 1: 2baf1904-1ea5-4310-80f0-f2a38cbeb95d.crl (hash: KdCSUrbKvGlyIKByeNnnCVBFWyZrllyDwlJbVnnXBOo=) 2: 7ab7669b-7c44-35e1-a081-fcafc8f8d797.roa (hash: 4X/mHU55x/Z+irXrMga955b4oerovAgclYLIRyYiLSo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ad:1d:0e:de:1d:38:e9:d4:fa:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2baf1904-1ea5-4310-80f0-f2a38cbeb95d Validity Not Before: Mar 26 02:00:09 2026 GMT Not After : Mar 29 02:00:00 2026 GMT Subject: CN=307d566b-b690-4548-9ba2-6a58ef8e1bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:a4:02:46:3b:45:0c:2f:9a:fb:cd:d5:34: 3b:91:df:93:ab:c5:16:9b:48:46:e9:8f:fc:b6:16: f6:13:01:3a:82:9b:62:4f:fc:7d:d5:d4:40:4f:53: 34:69:58:81:d1:3e:2f:df:c7:d2:0d:65:fa:1e:a7: 42:f9:e9:8e:d8:3f:09:b9:fd:3d:6f:3b:dc:b1:28: a0:5a:fd:a0:e8:8c:a6:78:67:0d:1a:35:59:65:e3: 98:59:f8:9a:6c:23:5e:0c:85:14:be:9a:de:27:81: 5d:02:4a:64:87:40:b2:6d:cd:b8:1d:f5:4c:23:1b: 94:ec:3c:1f:c5:aa:a7:7e:f6:ca:0b:06:3d:d6:62: ae:14:a9:8e:44:3a:cc:84:99:78:d9:97:67:56:1e: a8:bb:4c:c7:d2:40:55:72:3a:a9:98:81:16:ef:ef: d6:a3:51:38:1a:69:5f:3b:9c:e9:e8:e4:f0:ad:a3: 7c:e6:63:f1:6b:1a:2d:8e:fe:61:49:14:d0:18:72: d3:60:37:46:94:5a:25:b5:23:4b:e1:4a:7d:1d:f5: f0:ba:39:51:11:55:b7:bf:de:c2:ad:12:4c:57:1a: bd:ab:76:26:df:07:6a:57:dd:16:3f:94:1b:89:17: 30:75:f2:6f:93:be:2f:fc:e0:7c:2b:6c:41:27:bc: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:69:67:B7:91:7D:1E:A3:BE:05:5A:4E:92:9C:7B:8B:33:CC:91:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.crl X509v3 Authority Key Identifier: keyid:90:92:C8:7A:EC:60:67:D0:2F:96:70:AE:13:97:47:F4:22:AB:BC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:10:4b:ca:1c:0e:19:9c:91:4e:09:32:0b:33:79:04:24:c5: dc:b7:aa:b0:2b:f1:5f:cd:e1:4d:8e:db:50:6d:d9:61:0c:cc: 1c:75:5d:f8:e9:1c:ff:4e:b1:c7:e0:5d:46:3b:30:08:45:0a: c7:19:24:64:d8:02:bd:03:40:d0:91:37:51:64:75:a6:8a:d4: cd:57:7f:ea:fa:79:f1:f8:93:ac:39:58:c2:d4:f4:db:57:c1: a6:40:ba:dd:f2:97:6b:6c:d2:8f:51:06:06:db:07:99:d7:5e: 4d:36:ed:99:49:f8:04:21:a8:46:ec:09:5f:8d:b4:d3:58:46: 49:ab:83:67:54:e6:3c:f5:b5:2b:92:ae:91:7b:1f:dd:59:21: 84:cf:95:fe:01:c4:c5:07:8e:17:40:ea:be:11:d3:0c:2f:1d: 22:d2:5c:87:bf:02:3f:fb:84:03:d1:13:97:84:91:e9:ec:ea: 8b:50:28:8f:c0:91:2b:45:d5:76:72:27:f6:65:36:73:57:1d: f1:47:ba:09:f9:df:9a:57:79:33:ae:51:a9:e5:b6:43:ef:b9: 99:21:78:63:ad:c5:09:fd:d9:d9:20:00:4e:10:31:1f:d1:78: 1f:a1:cb:51:92:6a:d2:06:5a:9e:30:7f:c6:a9:f8:a3:95:b4: f1:38:b4:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KrR0O3h046dT6d+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJhZjE5MDQtMWVhNS00MzEwLTgwZjAtZjJhMzhjYmVi OTVkMB4XDTI2MDMyNjAyMDAwOVoXDTI2MDMyOTAyMDAwMFowLzEtMCsGA1UEAxMk MzA3ZDU2NmItYjY5MC00NTQ4LTliYTItNmE1OGVmOGUxYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY6kAkY7RQwvmvvN1TQ7kd+Tq8UWm0hG6Y/8 thb2EwE6gptiT/x91dRAT1M0aViB0T4v38fSDWX6HqdC+emO2D8Juf09bzvcsSig Wv2g6IymeGcNGjVZZeOYWfiabCNeDIUUvpreJ4FdAkpkh0Cybc24HfVMIxuU7Dwf xaqnfvbKCwY91mKuFKmORDrMhJl42ZdnVh6ou0zH0kBVcjqpmIEW7+/Wo1E4Gmlf O5zp6OTwraN85mPxaxotjv5hSRTQGHLTYDdGlFoltSNL4Up9HfXwujlREVW3v97C rRJMVxq9q3Ym3wdqV90WP5QbiRcwdfJvk74v/OB8K2xBJ7xk+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD9pZ7eRfR6jvgVaTpKce4szzJFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYmFm MTkwNC0xZWE1LTQzMTAtODBmMC1mMmEzOGNiZWI5NWQvMmJhZjE5MDQtMWVhNS00 MzEwLTgwZjAtZjJhMzhjYmViOTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmJhZjE5MDQtMWVhNS00MzEwLTgw ZjAtZjJhMzhjYmViOTVkLzJiYWYxOTA0LTFlYTUtNDMxMC04MGYwLWYyYTM4Y2Jl Yjk1ZC5jcmwwHwYDVR0jBBgwFoAUkJLIeuxgZ9AvlnCuE5dH9CKrvPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYmFmMTkwNC0xZWE1LTQzMTAtODBmMC1mMmEz OGNiZWI5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC9EEvKHA4ZnJFOCTILM3kE JMXct6qwK/FfzeFNjttQbdlhDMwcdV346Rz/TrHH4F1GOzAIRQrHGSRk2AK9A0DQ kTdRZHWmitTNV3/q+nnx+JOsOVjC1PTbV8GmQLrd8pdrbNKPUQYG2weZ115NNu2Z SfgEIahG7AlfjbTTWEZJq4NnVOY89bUrkq6Rex/dWSGEz5X+AcTFB44XQOq+EdMM Lx0i0lyHvwI/+4QD0ROXhJHp7OqLUCiPwJErRdV2cif2ZTZzVx3xR7oJ+d+aV3kz rlGp5bZD77mZIXhjrcUJ/dnZIABOEDEf0XgfoctRkmrSBlqeMH/GqfijlbTxOLQP -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:56 2026 by rpki-client