$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft File: ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft (raw, json) Hash identifier: HUXMF6tNQhRHEv/p8wXt0usoUD0GL73ypdNfWWsiN20= Subject key identifier: A1:7D:36:35:CF:91:88:F6:2A:BC:DA:40:70:6C:B1:D8:38:B9:8D:54 Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584D49657FC2B095D71F467AB980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft Manifest number: 010D0C9F4328584A2AF8D6A86D21A3E42E10A1A0 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (hash: oCjbsCTrE14rEzOpCy0cyC2HTyLVLLoPAdSbo04qfug=) 2: 9dca4ab6-05a9-3fec-a108-a009b99cd415.roa (hash: 8eZ1BPhYlVbA5RcpSHC0B6sSWpI8bPZ7RWCLeqHkkr8=) 3: bd668f92-776c-355d-9660-3354ba68dbd0.roa (hash: TyhgvmNc6HN+yDr3hfrAe6T1ix6OCjJhBI7OMwCV7Ss=) 4: ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl (hash: jCvCadZZ/uz28FWvysEvT2KCcbNsRzlo3EN4sQrMmSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7f:c2:b0:95:d7:1f:46:7a:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=a453eec5-9afd-455f-9ae5-bf6270bd4030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:00:9c:a0:57:77:86:64:d1:ba:c1:11:00: 7d:9c:5d:15:1c:2e:a0:60:ab:cf:fd:5b:38:3b:e3: 6b:63:91:47:29:d0:ba:1c:c0:bc:bf:0c:17:9b:ed: 71:68:33:1b:34:3b:cc:b3:84:82:df:fa:68:28:1d: 99:19:06:e8:b3:df:e5:38:80:6f:74:fd:a2:a4:81: 8d:cb:59:5d:07:cb:75:45:fc:7d:2d:36:58:e1:86: 3b:f6:c2:c1:2d:03:4a:72:05:08:13:51:98:6f:34: 51:59:9f:bd:76:e3:1f:4f:da:74:2e:87:ba:b1:6b: 14:ff:f2:bc:a8:bc:75:9b:1f:6a:63:f9:4d:6e:8e: ca:87:cd:39:77:d0:63:f7:09:36:76:69:db:05:dd: 93:60:48:62:20:65:ca:84:d1:2e:a1:d5:4d:a4:50: fd:dd:32:a9:6d:86:6d:41:2f:b4:83:a1:89:79:4c: e2:f2:07:a3:92:81:ed:97:f1:28:2b:73:6f:ed:5e: 5d:fb:fe:38:56:a4:c5:45:5f:ef:af:69:8f:35:b4: dc:4a:ac:71:6c:66:f9:90:e3:4f:61:d7:64:0a:0f: ac:9b:02:1b:21:b0:17:fd:5f:04:68:fc:4f:f7:6b: e9:a9:8c:f1:e8:02:99:bd:25:89:fd:5b:b3:bf:ad: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7D:36:35:CF:91:88:F6:2A:BC:DA:40:70:6C:B1:D8:38:B9:8D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:bf:70:58:b1:e0:99:3f:af:df:f3:bb:66:82:20:77:17:10: ed:ed:7d:84:f1:93:61:67:8e:b8:2c:7e:6f:3b:e6:2d:ad:fa: 75:a0:7f:f3:c3:71:72:e7:85:b3:47:d4:de:9a:49:0e:66:6d: e8:9c:58:79:00:aa:75:0c:66:24:2d:08:26:c1:06:c4:54:2a: 99:ea:02:9d:4a:7a:64:2a:78:12:f7:13:a8:e7:d3:46:c8:d6: b9:a2:11:22:12:d4:0a:4b:3a:74:d1:0d:d7:f3:fb:78:5a:06: 49:f2:75:37:d6:69:80:21:92:a7:16:b3:d1:f4:40:c7:46:1f: 1c:ea:c5:40:13:dd:35:a9:dd:ea:8b:c4:5d:eb:2a:a1:a9:a5: 2e:8b:94:55:ed:f7:97:7c:57:8d:a0:9f:95:2b:14:33:84:b2: 52:cd:3e:79:cb:58:7f:6e:58:f2:36:f7:07:5f:b1:3e:4d:69: 3d:f4:21:95:be:d9:74:80:28:a7:03:ea:4d:ce:93:db:b3:ea: ee:98:d1:4c:fe:fa:9e:81:2b:ae:5a:2c:92:6c:1e:a1:ed:9e: 83:75:5e:38:29:df:c8:b2:59:bf:63:9d:ce:02:fa:8c:5c:c8: d0:5f:80:0d:6c:46:89:2a:af:9c:c8:18:90:ad:bf:f5:62:1e: c2:13:f1:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX/CsJXXH0Z6uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk YTQ1M2VlYzUtOWFmZC00NTVmLTlhZTUtYmY2MjcwYmQ0MDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XAAnKBXd4Zk0brBEQB9nF0VHC6gYKvP/Vs4 O+NrY5FHKdC6HMC8vwwXm+1xaDMbNDvMs4SC3/poKB2ZGQbos9/lOIBvdP2ipIGN y1ldB8t1Rfx9LTZY4YY79sLBLQNKcgUIE1GYbzRRWZ+9duMfT9p0Loe6sWsU//K8 qLx1mx9qY/lNbo7Kh805d9Bj9wk2dmnbBd2TYEhiIGXKhNEuodVNpFD93TKpbYZt QS+0g6GJeUzi8gejkoHtl/EoK3Nv7V5d+/44VqTFRV/vr2mPNbTcSqxxbGb5kONP YddkCg+smwIbIbAX/V8EaPxP92vpqYzx6AKZvSWJ/Vuzv62iIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKF9NjXPkYj2KrzaQHBssdg4uY1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvZGVkODRhNGItOTc5MC00 YTE4LWJjYTktNDNlNDllMmYwYjcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiv3BYseCZP6/f87tmgiB3 FxDt7X2E8ZNhZ464LH5vO+Ytrfp1oH/zw3Fy54WzR9TemkkOZm3onFh5AKp1DGYk LQgmwQbEVCqZ6gKdSnpkKngS9xOo59NGyNa5ohEiEtQKSzp00Q3X8/t4WgZJ8nU3 1mmAIZKnFrPR9EDHRh8c6sVAE901qd3qi8Rd6yqhqaUui5RV7feXfFeNoJ+VKxQz hLJSzT55y1h/bljyNvcHX7E+TWk99CGVvtl0gCinA+pNzpPbs+rumNFM/vqegSuu WiySbB6h7Z6DdV44Kd/Islm/Y53OAvqMXMjQX4ANbEaJKq+cyBiQrb/1Yh7CE/G0 -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:37 2026 by rpki-client