$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft File: 0638a41c-1a08-44d2-a17c-c5272b5171a2.mft (raw, json) Hash identifier: ZZ6FPWaq761bj91rmSU47cxWjBHJSOffE7esfOFlIZ0= Subject key identifier: F0:0C:13:4F:00:D8:F7:3A:05:CA:A9:68:EA:3A:38:67:47:DB:83:CC Authority key identifier: C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 Certificate issuer: /CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Certificate serial: 010D0C9F4328584D49A10ECC561666EA3E093C70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft Manifest number: 010D0C9F4328584CBB5019137B0BA11639FA06F4 Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 0638a41c-1a08-44d2-a17c-c5272b5171a2.crl (hash: xVlkgkJzWr29dUXN4z1AvI/RRe62Y1TUhwaBmKkImeQ=) 2: bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa (hash: A/IyjIDkgJYHjd03t5hyTA2G0anGzaLlTDp3mkPCU0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0e:cc:56:16:66:ea:3e:09:3c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=e4c3a3b1-d692-4d6f-a60f-4f7f616004b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:e1:f5:7b:ab:f8:ea:65:80:2c:e2:38:3d: e5:bc:dc:ba:0e:e0:f5:e5:71:a8:3e:95:6c:8c:08: 45:fa:36:10:a3:b1:a6:ae:35:32:90:66:e1:ff:40: 91:47:3f:37:54:22:e3:85:af:74:41:28:d4:0e:3f: be:44:90:e1:7f:5e:0a:d6:0a:cb:55:1a:e2:e4:4f: 0e:21:c6:5d:fa:97:d8:97:30:42:ff:60:24:19:ef: f4:b6:b8:fc:17:29:14:66:8d:de:32:67:33:a5:f7: 58:23:36:56:a9:d0:a7:58:3d:33:cc:38:40:7a:e3: e5:84:d6:94:52:b2:15:78:6d:2f:cb:cf:30:e3:41: d8:53:0e:04:17:25:96:d4:6e:9a:8a:1f:9e:5f:e1: 42:3f:f3:da:d1:39:41:d6:ef:df:88:5b:8a:b7:df: ff:39:d1:30:cd:4c:75:85:e2:37:97:a5:50:e5:3d: 07:1c:8f:3b:63:d8:07:d8:ca:a5:56:dd:b5:25:93: 23:14:28:13:7e:63:72:be:5a:37:0c:2d:35:c3:22: 5c:a4:bd:9e:26:0e:43:39:04:88:7d:43:80:7e:e8: 2c:e7:03:a0:b8:ad:f6:66:ab:52:18:84:23:4d:2a: 0d:73:90:cd:2a:17:bf:9d:85:44:20:26:43:3f:21: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0C:13:4F:00:D8:F7:3A:05:CA:A9:68:EA:3A:38:67:47:DB:83:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl X509v3 Authority Key Identifier: keyid:C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f3:3b:4f:58:52:64:ca:4c:01:46:30:67:ac:41:45:f4:05: 2e:1b:e1:3f:8a:2e:f7:e7:b1:74:97:cd:f2:62:87:77:b5:63: c6:ae:30:da:2c:b1:57:eb:eb:3a:82:7f:3f:e1:c2:9b:a3:b6: 9b:1e:87:10:bf:e6:2d:ed:3a:5f:fb:8d:ab:0f:0e:7a:5c:71: 22:3a:90:b1:5f:aa:3e:cb:18:d0:0f:ac:58:82:db:9d:95:e7: dd:6f:58:a1:7a:86:84:c8:9b:0b:d1:a6:97:2b:dd:0d:5f:fe: f0:65:1e:64:9e:8c:75:08:c1:b0:ac:db:d5:e1:4e:ec:31:e7: 69:98:4e:8d:aa:a3:63:06:10:ff:6e:c1:cb:31:81:71:01:53: c2:5e:f1:73:6e:21:20:04:30:a0:2f:e2:2a:04:4a:9d:8e:40: 92:3e:c0:c4:03:fa:f5:7e:5e:44:ff:91:35:6a:ad:6b:61:91: 58:ef:3d:f8:7f:6e:a8:da:c3:cf:30:79:5a:94:61:dc:95:c3: 41:5c:96:93:d7:2e:16:81:4a:aa:4b:36:1e:73:8a:c0:f8:f2: 50:59:ce:b2:87:5c:9b:78:3a:9f:1d:d4:65:d5:3f:aa:d7:fd: cf:ec:1b:0c:4d:4c:cb:f7:ef:2b:9b:a2:0e:4d:3d:2d:54:44: 59:34:a2:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ7MVhZm6j4JPHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzOGE0MWMtMWEwOC00NGQyLWExN2MtYzUyNzJiNTE3 MWEyMB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk ZTRjM2EzYjEtZDY5Mi00ZDZmLWE2MGYtNGY3ZjYxNjAwNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnLh9Xur+OplgCziOD3lvNy6DuD15XGoPpVs jAhF+jYQo7GmrjUykGbh/0CRRz83VCLjha90QSjUDj++RJDhf14K1grLVRri5E8O IcZd+pfYlzBC/2AkGe/0trj8FykUZo3eMmczpfdYIzZWqdCnWD0zzDhAeuPlhNaU UrIVeG0vy88w40HYUw4EFyWW1G6aih+eX+FCP/Pa0TlB1u/fiFuKt9//OdEwzUx1 heI3l6VQ5T0HHI87Y9gH2MqlVt21JZMjFCgTfmNyvlo3DC01wyJcpL2eJg5DOQSI fUOAfugs5wOguK32ZqtSGIQjTSoNc5DNKhe/nYVEICZDPyEbxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPAME08A2Pc6BcqpaOo6OGdH24PMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4 YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3MmI1MTcxYTIvMDYzOGE0MWMtMWEwOC00 NGQyLWExN2MtYzUyNzJiNTE3MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDYzOGE0MWMtMWEwOC00NGQyLWEx N2MtYzUyNzJiNTE3MWEyLzA2MzhhNDFjLTFhMDgtNDRkMi1hMTdjLWM1MjcyYjUx NzFhMi5jcmwwHwYDVR0jBBgwFoAUwfc/0nXM3+n/BxsH4IvsBm8o0pAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3 MmI1MTcxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAy8ztPWFJkykwBRjBnrEFF 9AUuG+E/ii7357F0l83yYod3tWPGrjDaLLFX6+s6gn8/4cKbo7abHocQv+Yt7Tpf +42rDw56XHEiOpCxX6o+yxjQD6xYgtudlefdb1iheoaEyJsL0aaXK90NX/7wZR5k nox1CMGwrNvV4U7sMedpmE6NqqNjBhD/bsHLMYFxAVPCXvFzbiEgBDCgL+IqBEqd jkCSPsDEA/r1fl5E/5E1aq1rYZFY7z34f26o2sPPMHlalGHclcNBXJaT1y4WgUqq SzYec4rA+PJQWc6yh1ybeDqfHdRl1T+q1/3P7BsMTUzL9+8rm6IOTT0tVERZNKIf -----END CERTIFICATE-----Generated at Thu Mar 26 00:10:56 2026 by rpki-client