$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.mft File: 0c14a26f-a249-48dd-8320-2da501e5bef1.mft (raw, json) Hash identifier: RDQn0quIYCcvbTcCB23MmiWGGpymU/Id2NOyQYJ6XrI= Subject key identifier: 9B:BA:60:26:F7:73:CD:64:90:7A:93:8E:69:4E:1E:F0:65:11:2B:36 Authority key identifier: D6:13:A8:2D:17:14:A2:53:AC:66:88:51:78:3C:D1:E8:96:29:87:90 Certificate issuer: /CN=0c14a26f-a249-48dd-8320-2da501e5bef1 Certificate serial: 010D0C9F4328584D49FA7195797A84D67783E580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.mft Manifest number: 010D0C9F4328584CCC6A87B8E50CD60D9CF3D97E Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 0c14a26f-a249-48dd-8320-2da501e5bef1.crl (hash: CZxiJTadsRk3B2x85scGqWcACeaT4qRyvR90082vL2A=) 2: af6aca10-2975-394a-a754-8ac50b8a81a8.roa (hash: MpU3gbKprUmmUCUNOsV8P8+Lf6tDcyK+MbvJdrQh+UE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:71:95:79:7a:84:d6:77:83:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c14a26f-a249-48dd-8320-2da501e5bef1 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=44a9f68a-19f0-48e4-9f91-019e6b67d0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:07:43:51:de:86:31:ba:8a:2b:16:61:f6: e5:78:88:92:36:e3:51:89:b6:10:ea:ff:b4:f8:53: a9:5d:35:b7:9c:65:f1:c3:8f:74:f1:52:7f:50:a8: 6e:59:e7:d3:f0:7b:13:e1:4f:d0:f9:9b:8c:8e:d3: 5d:a2:f8:b2:d3:6f:e9:c6:42:f9:20:0d:33:f1:f9: 74:85:ee:5a:c5:9b:69:da:96:8b:5e:1b:39:ba:ab: be:e8:de:ac:a4:e5:b7:f5:dd:73:86:67:34:d4:86: c6:8a:85:e7:b2:08:c3:bc:81:4f:b6:86:d1:cd:90: 62:16:3c:7f:4e:94:0d:9c:1a:12:91:98:26:05:34: c7:fa:86:fc:83:54:6c:1f:eb:55:00:a1:a8:4a:2d: bc:29:87:a8:3b:bc:1d:b6:d9:fd:57:0a:71:fd:af: 12:5b:7e:d8:69:80:14:1c:f5:63:fd:df:ca:34:58: 05:ad:23:0b:14:a3:93:93:df:9f:e2:6a:38:5a:23: dd:f5:c0:62:8b:98:d7:40:2b:9b:f7:33:fd:29:39: fe:1a:f0:f5:1b:0d:64:2c:fb:b6:07:15:12:d4:4e: 16:fd:69:78:75:a1:9c:69:94:af:3f:32:0b:20:66: cd:af:7f:f2:cb:22:da:ee:89:f7:03:79:34:9d:1b: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BA:60:26:F7:73:CD:64:90:7A:93:8E:69:4E:1E:F0:65:11:2B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.crl X509v3 Authority Key Identifier: keyid:D6:13:A8:2D:17:14:A2:53:AC:66:88:51:78:3C:D1:E8:96:29:87:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a2:37:7c:2a:87:76:5e:95:84:1b:14:00:d0:9b:d2:db:f7: 14:1c:fa:92:d9:14:38:16:05:13:42:1e:b6:3e:21:e5:3e:65: 0f:d4:dd:f7:e8:3f:7e:a8:f6:7b:00:df:18:2a:55:67:e2:1b: 75:83:4e:38:fa:3b:ba:9f:85:c5:63:ac:7d:99:3a:f3:15:fc: 6c:d9:c8:73:62:ad:89:0c:16:59:28:d1:96:fa:ff:1e:3e:9b: a7:b0:5d:88:cc:1c:ac:0e:e1:e5:89:f1:9e:1c:ed:9b:be:d3: 0f:89:28:37:ac:6a:b6:2c:eb:cb:9f:a8:85:9c:2c:53:b0:14: 33:3c:df:6c:16:83:4d:7e:4f:23:28:60:10:cf:ca:66:eb:f2: 78:8a:36:34:26:c5:b4:c6:0a:5c:59:9a:53:5b:e6:23:1a:84: 49:2d:26:93:21:5f:c5:4c:d2:b4:d4:51:c9:b4:d7:15:1c:a5: df:43:f7:03:14:63:2e:d9:13:2b:46:30:9a:b5:27:f6:23:58: d6:eb:d5:e9:b9:23:ae:a4:89:83:84:f9:24:82:50:f8:dc:31: 7b:37:57:e9:39:1d:51:2a:19:09:1a:08:6e:ff:d3:93:9f:c1: 29:36:c6:f7:06:72:3d:78:95:98:7f:10:6c:cf:a7:c3:9e:c7: 9b:ee:2a:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nGVeXqE1neD5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMxNGEyNmYtYTI0OS00OGRkLTgzMjAtMmRhNTAxZTVi ZWYxMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NDRhOWY2OGEtMTlmMC00OGU0LTlmOTEtMDE5ZTZiNjdkMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfMHQ1HehjG6iisWYfbleIiSNuNRibYQ6v+0 +FOpXTW3nGXxw4908VJ/UKhuWefT8HsT4U/Q+ZuMjtNdoviy02/pxkL5IA0z8fl0 he5axZtp2paLXhs5uqu+6N6spOW39d1zhmc01IbGioXnsgjDvIFPtobRzZBiFjx/ TpQNnBoSkZgmBTTH+ob8g1RsH+tVAKGoSi28KYeoO7wdttn9Vwpx/a8SW37YaYAU HPVj/d/KNFgFrSMLFKOTk9+f4mo4WiPd9cBii5jXQCub9zP9KTn+GvD1Gw1kLPu2 BxUS1E4W/Wl4daGcaZSvPzILIGbNr3/yyyLa7on3A3k0nRu/FQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJu6YCb3c81kkHqTjmlOHvBlESs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYzE0 YTI2Zi1hMjQ5LTQ4ZGQtODMyMC0yZGE1MDFlNWJlZjEvMGMxNGEyNmYtYTI0OS00 OGRkLTgzMjAtMmRhNTAxZTViZWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGMxNGEyNmYtYTI0OS00OGRkLTgz MjAtMmRhNTAxZTViZWYxLzBjMTRhMjZmLWEyNDktNDhkZC04MzIwLTJkYTUwMWU1 YmVmMS5jcmwwHwYDVR0jBBgwFoAU1hOoLRcUolOsZohReDzR6JYph5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYzE0YTI2Zi1hMjQ5LTQ4ZGQtODMyMC0yZGE1 MDFlNWJlZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7ojd8Kod2XpWEGxQA0JvS 2/cUHPqS2RQ4FgUTQh62PiHlPmUP1N336D9+qPZ7AN8YKlVn4ht1g044+ju6n4XF Y6x9mTrzFfxs2chzYq2JDBZZKNGW+v8ePpunsF2IzBysDuHlifGeHO2bvtMPiSg3 rGq2LOvLn6iFnCxTsBQzPN9sFoNNfk8jKGAQz8pm6/J4ijY0JsW0xgpcWZpTW+Yj GoRJLSaTIV/FTNK01FHJtNcVHKXfQ/cDFGMu2RMrRjCatSf2I1jW69XpuSOupImD hPkkglD43DF7N1fpOR1RKhkJGghu/9OTn8EpNsb3BnI9eJWYfxBsz6fDnseb7iqA -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:46 2026 by rpki-client