$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft File: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft (raw, json) Hash identifier: rGsPN0cLc+bJUzTdwrppc7x1IHpFe9PlFPVx2Y6NZSo= Subject key identifier: 4D:1D:96:B9:9F:2A:E7:AF:11:07:CF:F9:A5:11:7C:5B:80:17:F9:A2 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584D4BF4B068D3581A1EB459A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft Manifest number: 010D0C9F4328584BC7EC849A397DD986C431688D Signing time: Thu 26 Mar 2026 13:00:09 +0000 Manifest this update: Thu 26 Mar 2026 13:00:09 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl (hash: OLStW6f9W/9yXTl8ozVZUSJyZ7N/IeEVkEGBvNaJpzQ=) 2: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (hash: 8R1HoNbh5dix2jjnbX4TSIGtSWSaqTDMj/JPsIjfVeo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:b0:68:d3:58:1a:1e:b4:59:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Mar 26 13:00:09 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=29713d97-22a2-4339-90fd-26f028dc816b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:8d:70:e6:1b:f1:ff:0f:32:0f:3e:97:d1: 95:7d:f5:f9:9b:c1:95:0e:02:b0:b0:09:d3:78:e0: a2:77:6e:53:06:f9:fe:fe:0f:5b:01:39:d4:c0:31: 2a:35:03:d3:9f:13:c3:f1:b2:09:20:46:05:3b:55: 05:a6:8d:02:b4:a1:a9:28:3c:1f:c0:51:cb:a7:6c: 0f:98:20:f4:52:0e:2b:7b:8e:39:73:07:8c:d8:41: d8:1e:bf:7e:76:20:54:1b:22:85:79:b0:ad:18:02: 9f:d7:fa:d2:5a:03:ec:f7:43:33:b1:34:f9:25:49: ff:3f:73:1c:6c:9b:ed:db:c0:0f:dc:61:d4:be:08: a2:d2:3d:47:05:99:8d:7e:e4:02:42:e4:8d:c6:45: 7c:45:a1:19:c2:21:bd:4b:8c:bf:ba:3c:f2:61:dc: 62:72:ea:83:83:54:a8:c3:70:f3:d9:b8:b0:34:ed: 16:5a:30:ea:1d:7a:5a:fc:6d:a5:96:9f:8a:74:68: 74:4a:05:4a:72:e2:cb:8f:c2:f4:f6:9f:39:c0:a2: 24:86:92:a9:f9:ed:22:59:ad:83:fb:31:d1:af:d6: c8:02:32:d8:2a:e7:9a:0c:e5:62:7b:b2:93:1d:06: 45:25:ef:41:bb:dc:f5:f2:07:49:c1:fa:13:43:e6: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:96:B9:9F:2A:E7:AF:11:07:CF:F9:A5:11:7C:5B:80:17:F9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e6:a7:03:c9:3d:2d:da:65:2d:27:cc:84:17:24:6b:af:e6: 21:96:cf:be:9b:b8:ff:6f:e5:42:22:e7:84:fb:51:0d:7e:46: 35:31:82:33:5e:45:d2:97:7f:bf:6e:76:3d:5a:74:f8:cd:e8: 5d:27:65:da:ad:8e:05:c7:2a:ac:d2:46:6f:a0:e5:97:78:22: 42:c9:e7:97:c1:f4:ca:10:14:fb:80:ad:de:09:78:23:47:0c: 57:fe:ab:d3:85:ad:4e:ef:a4:1e:d9:95:2a:21:ef:c3:ce:7d: a2:54:cb:55:e8:84:cc:96:db:83:ae:83:b0:e1:73:5f:7f:e3: b6:eb:3d:5b:84:19:dc:13:b3:99:6b:91:21:b8:ff:64:22:0c: f4:48:06:9e:35:8a:0f:96:09:75:1b:36:4b:b0:72:53:8d:89: 00:85:c7:43:63:7a:b7:33:73:ad:81:c7:9f:97:30:cb:83:ad: bf:aa:0e:2b:8d:3a:8b:cd:84:18:ac:7b:04:99:c9:7c:bb:6c: b1:fa:30:43:4a:37:96:4e:cf:6b:0e:98:7b:68:94:83:bc:f0: 40:10:eb:c6:ee:64:7d:e6:93:7a:9b:43:83:76:d0:48:11:1e: 77:96:b8:16:24:b7:56:ea:64:b0:e0:79:82:c7:c4:c6:81:27: 27:d6:04:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L9LBo01gaHrRZpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDMyNjEzMDAwOVoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk Mjk3MTNkOTctMjJhMi00MzM5LTkwZmQtMjZmMDI4ZGM4MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyaNcOYb8f8PMg8+l9GVffX5m8GVDgKwsAnT eOCid25TBvn+/g9bATnUwDEqNQPTnxPD8bIJIEYFO1UFpo0CtKGpKDwfwFHLp2wP mCD0Ug4re445cweM2EHYHr9+diBUGyKFebCtGAKf1/rSWgPs90MzsTT5JUn/P3Mc bJvt28AP3GHUvgii0j1HBZmNfuQCQuSNxkV8RaEZwiG9S4y/ujzyYdxicuqDg1So w3Dz2biwNO0WWjDqHXpa/G2llp+KdGh0SgVKcuLLj8L09p85wKIkhpKp+e0iWa2D +zHRr9bIAjLYKueaDOVie7KTHQZFJe9Bu9z18gdJwfoTQ+bJhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE0dlrmfKuevEQfP+aURfFuAF/miMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvNGRjZGYxZjQtNWU2MC00 MzhkLTg5MzQtMGNhMjFkMGI0NWFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB85qcDyT0t2mUtJ8yEFyRr r+Yhls++m7j/b+VCIueE+1ENfkY1MYIzXkXSl3+/bnY9WnT4zehdJ2XarY4Fxyqs 0kZvoOWXeCJCyeeXwfTKEBT7gK3eCXgjRwxX/qvTha1O76Qe2ZUqIe/Dzn2iVMtV 6ITMltuDroOw4XNff+O26z1bhBncE7OZa5EhuP9kIgz0SAaeNYoPlgl1GzZLsHJT jYkAhcdDY3q3M3OtgceflzDLg62/qg4rjTqLzYQYrHsEmcl8u2yx+jBDSjeWTs9r Dph7aJSDvPBAEOvG7mR95pN6m0ODdtBIER53lrgWJLdW6mSw4HmCx8TGgScn1gQD -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:56 2026 by rpki-client