$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft File: db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft (raw, json) Hash identifier: 1E+bdBQ20zyHwJgGgeznWgskqRkxa7Sbc7tbLRkymyI= Subject key identifier: CB:65:31:80:D3:4D:C9:42:9F:08:1B:8A:6E:44:BA:11:CC:3A:D0:13 Authority key identifier: 0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9 Certificate issuer: /CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66 Certificate serial: 010D0C9F4328584D49657FA3CF2DAD044F5C2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft Manifest number: 010D0C9F4328584B825804768CCBD33B2DABA8E7 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl (hash: ljYHyw76u0MOOj0R2X+SRMVcoXIG7WvIQa/5TvzjjTQ=) 2: ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa (hash: nUptd6U9OegUDV2GEs770lMFu/DidHxJsGdQBXTiNCA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7f:a3:cf:2d:ad:04:4f:5c:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=0586e31b-3091-4585-a436-30d219565fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:a9:2f:88:44:f8:31:f5:54:34:93:9f:a2: 78:48:cf:09:b7:16:cc:82:e7:fa:2c:a4:4d:16:76: ea:c0:93:d8:12:08:5c:eb:01:04:2a:87:12:e2:d0: 4e:18:6a:bc:41:9b:cc:da:0a:59:2b:ac:8d:b7:c0: c9:00:89:7a:de:11:21:63:de:66:11:cb:a0:63:df: f0:1f:51:64:00:8c:e0:2b:50:5a:46:82:6a:27:74: d5:ba:f8:74:9a:43:27:0e:45:29:59:79:29:cc:e6: ad:13:8a:e4:a4:b5:fa:11:b9:42:27:9a:76:4c:14: 90:d3:a1:7b:f4:5f:2e:5e:25:22:f0:6b:8e:6b:53: 62:a9:0c:3f:7e:e0:d6:43:b7:57:23:24:68:2f:d4: fb:4b:81:53:88:dd:3e:2f:cd:60:69:51:3d:ea:b2: ec:7e:a7:80:ee:c3:2f:95:12:51:a7:36:9e:b8:98: a8:c3:13:a9:0d:3b:15:5c:0a:9a:80:66:91:2b:59: 82:a9:2c:60:6a:30:54:45:33:11:9a:c7:46:3c:e3: 2c:7a:be:e8:34:b8:cf:84:16:06:7b:1f:9e:5f:e5: 7c:b7:be:bd:a3:d3:63:03:ca:6d:27:a1:02:7d:0f: 64:91:75:78:d5:80:a7:af:04:d5:a8:21:c4:55:ba: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:31:80:D3:4D:C9:42:9F:08:1B:8A:6E:44:BA:11:CC:3A:D0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl X509v3 Authority Key Identifier: keyid:0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a5:66:d4:6b:3a:5a:d1:ad:1e:d9:f8:1f:83:cc:a6:33:24: 66:a4:18:b7:6a:fa:10:20:9b:e6:66:30:b6:d2:b3:12:e3:ab: bd:b6:cd:71:07:69:fb:9f:e2:f8:28:04:9f:97:9a:7d:83:2f: 65:47:2b:50:54:16:30:bd:c8:45:64:ea:89:4b:3e:23:a2:66: 83:dd:c2:a2:7c:57:a9:ab:be:8f:c4:18:32:c0:0c:7e:da:7f: 6f:67:d2:0a:50:61:67:3c:6b:64:e1:e0:71:23:d0:e4:d2:74: a0:cb:b7:e9:f2:d5:f8:07:93:54:c2:a6:1c:d6:81:a8:c0:51: 14:7f:a4:1b:95:64:a1:00:c8:b6:d0:b8:7c:75:51:91:f7:05: ad:98:0b:1a:b7:08:83:41:41:ac:b4:9f:72:06:b0:3c:a0:3e: fa:51:17:18:32:86:5e:b3:38:42:bc:f3:f9:98:0d:a5:76:76: 44:fe:6d:63:1f:4e:3a:fc:35:f2:11:7b:db:9b:8b:1c:fa:5d: 12:74:06:3d:98:53:8b:c5:8f:9c:3b:83:c1:82:43:80:01:5a: e3:25:ba:42:a5:8e:b2:e2:db:88:35:d1:45:ec:bc:12:39:a5: ce:78:25:73:bf:32:31:eb:c6:8d:49:b7:50:2b:f2:ce:fa:cf: cd:66:c9:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX+jzy2tBE9cJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzODUyYmEtMTBhMi00ZWYzLWE5MmUtNWJiODk3MGYy YjY2MB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk MDU4NmUzMWItMzA5MS00NTg1LWE0MzYtMzBkMjE5NTY1ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8CpL4hE+DH1VDSTn6J4SM8JtxbMguf6LKRN FnbqwJPYEghc6wEEKocS4tBOGGq8QZvM2gpZK6yNt8DJAIl63hEhY95mEcugY9/w H1FkAIzgK1BaRoJqJ3TVuvh0mkMnDkUpWXkpzOatE4rkpLX6EblCJ5p2TBSQ06F7 9F8uXiUi8GuOa1NiqQw/fuDWQ7dXIyRoL9T7S4FTiN0+L81gaVE96rLsfqeA7sMv lRJRpzaeuJiowxOpDTsVXAqagGaRK1mCqSxgajBURTMRmsdGPOMser7oNLjPhBYG ex+eX+V8t769o9NjA8ptJ6ECfQ9kkXV41YCnrwTVqCHEVbqEKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMtlMYDTTclCnwgbim5EuhHMOtATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM4 NTJiYS0xMGEyLTRlZjMtYTkyZS01YmI4OTcwZjJiNjYvZGIzODUyYmEtMTBhMi00 ZWYzLWE5MmUtNWJiODk3MGYyYjY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGIzODUyYmEtMTBhMi00ZWYzLWE5 MmUtNWJiODk3MGYyYjY2L2RiMzg1MmJhLTEwYTItNGVmMy1hOTJlLTViYjg5NzBm MmI2Ni5jcmwwHwYDVR0jBBgwFoAUCrn306I9O6i+6BtxILTi0fjQ68kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM4NTJiYS0xMGEyLTRlZjMtYTkyZS01YmI4 OTcwZjJiNjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCapWbUazpa0a0e2fgfg8ym MyRmpBi3avoQIJvmZjC20rMS46u9ts1xB2n7n+L4KASfl5p9gy9lRytQVBYwvchF ZOqJSz4jomaD3cKifFepq76PxBgywAx+2n9vZ9IKUGFnPGtk4eBxI9Dk0nSgy7fp 8tX4B5NUwqYc1oGowFEUf6QblWShAMi20Lh8dVGR9wWtmAsatwiDQUGstJ9yBrA8 oD76URcYMoZeszhCvPP5mA2ldnZE/m1jH046/DXyEXvbm4sc+l0SdAY9mFOLxY+c O4PBgkOAAVrjJbpCpY6y4tuINdFF7LwSOaXOeCVzvzIx68aNSbdQK/LO+s/NZslx -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:58 2026 by rpki-client