$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft File: dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft (raw, json) Hash identifier: d6EjhWJ+fT5TuuVo5/havGYMUHRNDhRhqKnBVuBK22k= Subject key identifier: AC:40:86:27:D7:89:5B:32:3D:84:95:0A:0F:AD:A2:D8:F3:E1:30:2A Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 Certificate issuer: /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Certificate serial: 010D0C9F4328584D4983464A5F3174B47B5B3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft Manifest number: 010D0C9F432858413C6ECA503DB5BF15E31FEDEE Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 381aa0d8-0713-3628-808e-2235213b6efc.roa (hash: XumHjyjXPPz58gsVKKlvr+edo4xPQjIbXu6/c0ktUcA=) 2: dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl (hash: humLz7BVxhw/JSqRChM0Qm2Cx5GwS8OmOcAoN1TmjtY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:46:4a:5f:31:74:b4:7b:5b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=8853db5a-c266-4771-a5f5-9339f21c7ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:db:c7:ea:29:27:3b:04:6a:23:f5:22:c6: 56:fe:0e:da:84:58:db:77:2c:60:64:64:48:3d:4b: a1:88:7d:c0:01:a9:3a:34:fa:58:be:2b:9d:5a:a9: ef:f2:39:35:2e:76:07:79:5c:db:e8:d0:48:74:c8: 83:e5:5d:2a:92:07:6b:f5:92:14:30:6a:bc:7b:81: 0c:00:77:18:5d:e8:ce:74:85:6b:fb:dc:fb:09:6e: e0:d5:36:0f:0a:f6:17:80:80:f0:ba:ef:73:b1:b2: b8:97:a0:c3:f0:7c:f8:cf:ca:c8:22:95:5f:03:99: 44:82:68:f6:d3:61:a3:45:51:52:31:39:08:2a:fb: 00:75:73:0c:cf:22:44:22:e0:c6:aa:b2:43:82:82: 54:2b:dd:b3:95:04:33:1f:9d:f3:c3:34:7c:53:63: e0:5f:f6:37:47:5b:7b:fd:02:c4:e9:80:34:81:e5: ce:c0:90:e4:12:06:d7:a9:36:bd:33:54:fe:dc:11: 1f:0d:5a:84:c4:6e:4d:e8:8a:13:0e:7a:6a:8b:10: 89:86:b6:80:a5:14:39:82:f1:21:71:2c:56:3f:bd: a6:76:b8:cb:08:2c:d5:63:c2:8b:84:52:f0:46:90: a8:08:35:0a:02:13:99:21:6e:4e:c0:fb:79:7e:d1: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:86:27:D7:89:5B:32:3D:84:95:0A:0F:AD:A2:D8:F3:E1:30:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl X509v3 Authority Key Identifier: keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:80:80:f5:06:1a:3f:ef:67:89:91:9e:b5:92:3f:f3:9e:16: 43:e6:e9:1f:5f:ba:f4:90:da:48:c3:1d:d4:c0:3f:37:97:2d: 5f:81:44:74:c4:ba:34:53:ae:ac:d0:a5:62:d2:b3:96:e5:a4: b3:7f:52:37:b7:ed:9c:99:78:2e:5b:ec:0a:a7:51:1c:a2:a8: 4a:c9:2e:8f:db:b0:64:9e:4c:f8:49:15:f4:72:0d:a8:11:1f: 72:f3:e4:31:dc:71:49:6f:12:fd:2d:c3:09:53:e9:32:20:24: 92:b9:f3:c0:58:47:5b:f6:57:8d:de:97:c4:4c:ae:7e:4b:57: ff:8f:c0:76:b1:ae:d0:84:8d:91:4c:a8:9f:36:ec:25:02:4d: 63:49:88:4b:1a:5e:e1:48:03:a6:4b:e7:9e:f4:e4:ee:01:1c: bc:57:40:0c:b0:5b:05:46:01:d5:d7:be:31:87:19:e1:25:70: a2:74:56:81:fa:b5:15:9f:74:5a:18:0a:c1:11:54:fb:95:69: 41:ec:7c:d8:7c:72:45:e6:20:b9:1b:76:7c:d1:45:0f:fa:7e: be:fd:22:18:ff:a5:7c:ca:f1:f4:f3:3e:e2:36:47:86:3c:90: 58:13:86:bc:f3:d1:c9:a7:bc:51:36:05:37:97:76:64:de:a8: ef:66:e8:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0ZKXzF0tHtbM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4M2UyOGEtZDM3Zi00YjdmLWJlNDktM2MyZTM1NTcw N2U3MB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk ODg1M2RiNWEtYzI2Ni00NzcxLWE1ZjUtOTMzOWYyMWM3ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqnbx+opJzsEaiP1IsZW/g7ahFjbdyxgZGRI PUuhiH3AAak6NPpYviudWqnv8jk1LnYHeVzb6NBIdMiD5V0qkgdr9ZIUMGq8e4EM AHcYXejOdIVr+9z7CW7g1TYPCvYXgIDwuu9zsbK4l6DD8Hz4z8rIIpVfA5lEgmj2 02GjRVFSMTkIKvsAdXMMzyJEIuDGqrJDgoJUK92zlQQzH53zwzR8U2PgX/Y3R1t7 /QLE6YA0geXOwJDkEgbXqTa9M1T+3BEfDVqExG5N6IoTDnpqixCJhraApRQ5gvEh cSxWP72mdrjLCCzVY8KLhFLwRpCoCDUKAhOZIW5OwPt5ftGxfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKxAhifXiVsyPYSVCg+totjz4TAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYzgz ZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJlMzU1NzA3ZTcvZGM4M2UyOGEtZDM3Zi00 YjdmLWJlNDktM2MyZTM1NTcwN2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGM4M2UyOGEtZDM3Zi00YjdmLWJl NDktM2MyZTM1NTcwN2U3L2RjODNlMjhhLWQzN2YtNGI3Zi1iZTQ5LTNjMmUzNTU3 MDdlNy5jcmwwHwYDVR0jBBgwFoAUVoA8g5cCkprdAA37bl0MJQG6mBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYzgzZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJl MzU1NzA3ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLgID1Bho/72eJkZ61kj/z nhZD5ukfX7r0kNpIwx3UwD83ly1fgUR0xLo0U66s0KVi0rOW5aSzf1I3t+2cmXgu W+wKp1EcoqhKyS6P27Bknkz4SRX0cg2oER9y8+Qx3HFJbxL9LcMJU+kyICSSufPA WEdb9leN3pfETK5+S1f/j8B2sa7QhI2RTKifNuwlAk1jSYhLGl7hSAOmS+ee9OTu ARy8V0AMsFsFRgHV174xhxnhJXCidFaB+rUVn3RaGArBEVT7lWlB7HzYfHJF5iC5 G3Z80UUP+n6+/SIY/6V8yvH08z7iNkeGPJBYE4a889HJp7xRNgU3l3Zk3qjvZuh1 -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:26 2026 by rpki-client