$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft File: 32bd304f-79c6-4794-b428-4ea9987e033b.mft (raw, json) Hash identifier: 2ZVqozgNHPGvp3WcVtVZjkhKzMjIaVLqDo/p9hev70o= Subject key identifier: 63:E2:06:23:02:8D:7E:5B:38:F4:F9:27:1C:55:CE:8F:7C:A6:29:BF Authority key identifier: B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1 Certificate issuer: /CN=32bd304f-79c6-4794-b428-4ea9987e033b Certificate serial: 010D0C9F4328584D4F720D83916F6C6F5E30DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft Manifest number: 010D0C9F432858484E11F9C2D4251108BEC93758 Signing time: Fri 27 Mar 2026 19:00:09 +0000 Manifest this update: Fri 27 Mar 2026 19:00:09 +0000 Manifest next update: Sun 29 Mar 2026 19:00:00 +0000 Files and hashes: 1: 32bd304f-79c6-4794-b428-4ea9987e033b.crl (hash: PSfBC8lkB2bO4Fm66BxaX3qmIGQ6lo24ZwVEThTm1Hw=) 2: 38ce2567-b60f-375f-9033-a23b9b107dff.roa (hash: kXiElSZW8WX6RIaeeyhA2NME689hAGppQLE+mR806vw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:72:0d:83:91:6f:6c:6f:5e:30:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bd304f-79c6-4794-b428-4ea9987e033b Validity Not Before: Mar 27 19:00:09 2026 GMT Not After : Mar 29 19:00:00 2026 GMT Subject: CN=5df39141-33df-43b3-bb1d-da0c33433ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:0c:53:59:86:f3:6b:7b:6b:75:95:dd:56: 12:c3:ee:a0:58:67:23:6f:81:3b:73:ab:75:a4:a3: 94:60:60:3a:9e:f4:2b:14:11:db:2b:8e:55:7e:b8: f7:1b:ae:18:25:19:e4:dd:49:81:8b:71:3c:3c:23: d9:17:27:bc:7f:07:55:48:e6:1f:78:d7:5f:6c:5e: eb:98:b7:93:00:35:e0:47:48:71:b5:06:d1:4b:a3: 9d:01:35:5c:92:22:d6:18:16:10:b9:85:31:c8:c6: 5b:81:cc:e1:fa:dc:03:fa:13:ef:f2:0b:cb:8a:1e: 1b:ee:77:25:eb:3f:82:7e:48:76:2e:a7:13:4c:1e: fd:48:ce:80:82:1f:15:c4:01:c0:0f:83:b9:98:95: d4:c3:d1:12:c1:95:cc:73:8f:44:99:70:42:92:9f: cc:d2:dc:a2:bb:ae:23:c0:b6:96:a5:e9:7b:b6:c6: 43:a5:3b:74:1f:a0:b9:07:57:e8:94:33:9b:9c:68: 5b:ba:a0:f0:ea:1c:04:77:5d:c3:fb:cc:f8:da:01: be:c8:4e:16:5a:02:d8:3d:98:c6:2b:7a:8b:7b:95: f0:c5:cb:9c:1a:a9:bc:c7:72:6e:d9:1a:56:d1:56: c4:3d:a5:df:db:8f:79:d9:bc:b6:91:56:73:43:44: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E2:06:23:02:8D:7E:5B:38:F4:F9:27:1C:55:CE:8F:7C:A6:29:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl X509v3 Authority Key Identifier: keyid:B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b2:c8:b3:de:af:8f:c2:a0:de:d8:84:7d:f0:ed:39:65:8b: cb:e5:aa:5f:30:91:3d:e7:fc:f1:86:6f:35:0a:89:4c:cb:8a: b2:95:57:80:dd:5e:02:8f:10:e8:33:6f:51:04:4e:93:50:50: 03:72:f7:3f:49:48:22:2b:e1:6e:90:64:d7:20:80:a8:2b:1e: 4d:3b:18:7d:4b:2e:88:2c:97:60:92:77:21:90:fa:a7:61:95: f7:52:72:8b:bc:c2:47:60:27:61:a0:10:df:d6:aa:af:a1:82: 60:18:e1:c6:2e:38:e6:5e:91:b8:5f:d6:3f:40:7f:20:81:3a: c0:7c:73:0d:89:59:9d:8a:33:75:1b:c9:c3:42:4f:66:47:42: 3d:7d:a0:26:d0:6f:81:e0:e4:06:f8:1f:3a:66:78:a8:38:99: 15:2e:8b:0f:3f:ab:60:f5:20:0c:fa:69:af:86:b0:20:48:59: 8e:4f:d3:86:b5:73:30:19:a4:82:5f:dd:11:37:47:18:1e:27: 2f:c4:55:85:fc:45:c5:2f:77:98:1e:0c:04:62:fb:8a:d3:d7: 67:20:0c:62:ee:3e:94:76:9a:ba:10:4b:2f:b1:cb:67:bf:55: 07:4d:82:53:41:4e:8b:43:6a:1e:24:9a:69:7b:a8:8b:21:b6: 7e:f3:f3:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Pcg2DkW9sb14w3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiZDMwNGYtNzljNi00Nzk0LWI0MjgtNGVhOTk4N2Uw MzNiMB4XDTI2MDMyNzE5MDAwOVoXDTI2MDMyOTE5MDAwMFowLzEtMCsGA1UEAxMk NWRmMzkxNDEtMzNkZi00M2IzLWJiMWQtZGEwYzMzNDMzYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOsMU1mG82t7a3WV3VYSw+6gWGcjb4E7c6t1 pKOUYGA6nvQrFBHbK45Vfrj3G64YJRnk3UmBi3E8PCPZFye8fwdVSOYfeNdfbF7r mLeTADXgR0hxtQbRS6OdATVckiLWGBYQuYUxyMZbgczh+twD+hPv8gvLih4b7ncl 6z+Cfkh2LqcTTB79SM6Agh8VxAHAD4O5mJXUw9ESwZXMc49EmXBCkp/M0tyiu64j wLaWpel7tsZDpTt0H6C5B1folDObnGhbuqDw6hwEd13D+8z42gG+yE4WWgLYPZjG K3qLe5XwxcucGqm8x3Ju2RpW0VbEPaXf24952by2kVZzQ0QZuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGPiBiMCjX5bOPT5JxxVzo98pim/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmJk MzA0Zi03OWM2LTQ3OTQtYjQyOC00ZWE5OTg3ZTAzM2IvMzJiZDMwNGYtNzljNi00 Nzk0LWI0MjgtNGVhOTk4N2UwMzNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJiZDMwNGYtNzljNi00Nzk0LWI0 MjgtNGVhOTk4N2UwMzNiLzMyYmQzMDRmLTc5YzYtNDc5NC1iNDI4LTRlYTk5ODdl MDMzYi5jcmwwHwYDVR0jBBgwFoAUsG+hZTa+ExcRqlQQ5LtNUt55kaEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmJkMzA0Zi03OWM2LTQ3OTQtYjQyOC00ZWE5 OTg3ZTAzM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPssiz3q+PwqDe2IR98O05 ZYvL5apfMJE95/zxhm81ColMy4qylVeA3V4CjxDoM29RBE6TUFADcvc/SUgiK+Fu kGTXIICoKx5NOxh9Sy6ILJdgknchkPqnYZX3UnKLvMJHYCdhoBDf1qqvoYJgGOHG LjjmXpG4X9Y/QH8ggTrAfHMNiVmdijN1G8nDQk9mR0I9faAm0G+B4OQG+B86Znio OJkVLosPP6tg9SAM+mmvhrAgSFmOT9OGtXMwGaSCX90RN0cYHicvxFWF/EXFL3eY HgwEYvuK09dnIAxi7j6Udpq6EEsvsctnv1UHTYJTQU6LQ2oeJJppe6iLIbZ+8/On -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:26 2026 by rpki-client