$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft File: cff1a08e-9692-475a-9b04-916530111389.mft (raw, json) Hash identifier: pgf1lYyWnEgsmlstOcqWVtWXqM14W4VCwbJrCD3Zj0c= Subject key identifier: 85:40:DD:37:8F:D5:9C:0B:DF:8D:72:ED:82:F4:7B:E7:31:4A:CA:CF Authority key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Certificate issuer: /CN=cff1a08e-9692-475a-9b04-916530111389 Certificate serial: 010D0C9F4328584D49A10DE79026F8E4C86FBDFE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft Manifest number: 010D0C9F4328584CDA11893013BD4807BFFB126E Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Sat 28 Mar 2026 17:00:00 +0000 Files and hashes: 1: 5143d672-ddfc-34fe-972f-167664e29a5f.roa (hash: uhTcJ+jQ9BG9RlMacATmqpaMpZPisBBsSjhyeTFjce4=) 2: cff1a08e-9692-475a-9b04-916530111389.crl (hash: VJqEh754u6XhT6wIu4UyKV0uTiLHkVPNit3RAqs/5ZA=) 3: f23fd077-50eb-3af5-a740-69612230d97d.asa (hash: f1SXgASUEByx4lHVTIsX2MEYvJoA3xjhHkAhlPyPVAg=) 4: f71ddcd1-bad1-3544-96ec-1a572beee366.roa (hash: G9nmtK2YezYgGZJ77o7PrBy0B96fJR5D7zkN1mOU/+4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0d:e7:90:26:f8:e4:c8:6f:bd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff1a08e-9692-475a-9b04-916530111389 Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 28 17:00:00 2026 GMT Subject: CN=7b0c4362-c536-4d62-955d-8c7b7dec4d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:17:63:88:70:ef:60:ff:53:9f:93:71:6d: 12:ec:d7:ff:75:1e:88:11:60:fc:97:03:9f:f0:b5: 71:ea:bc:39:ad:42:dd:38:cb:23:df:d0:8e:b2:4a: b0:c7:b9:23:4c:db:bf:58:f7:c3:3f:d5:8c:79:d0: 4e:ae:f7:08:c1:57:43:8c:d2:8e:4f:b9:7b:86:4e: b2:8f:03:3c:fa:92:44:88:bb:aa:de:d2:b2:a8:3b: 21:6e:c8:ef:24:d7:26:c9:43:f5:45:bf:0d:2e:4a: 92:de:8a:77:8b:5c:a9:9c:00:90:70:a3:02:32:b5: b0:16:14:ab:d5:be:b8:db:59:86:f0:8f:07:bb:55: 74:63:43:39:24:5c:02:4f:76:d6:0f:19:7a:c2:f5: a8:8f:79:50:92:5b:af:72:3f:e4:31:51:89:41:87: 1f:8c:4f:36:dd:6d:0c:2e:4d:33:80:61:69:62:7b: 50:67:92:20:00:6b:d5:cf:80:9d:a6:47:32:d6:1c: f9:50:1e:da:06:4f:01:e9:69:a2:d6:5f:4c:16:15: 1b:5e:47:43:d0:25:8f:e1:11:9b:dd:e3:72:a8:63: 73:54:ab:cf:75:82:a6:76:57:5a:05:46:4a:2c:54: 4e:02:90:34:74:2a:2a:8b:ee:6d:ac:88:e6:79:c5: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:40:DD:37:8F:D5:9C:0B:DF:8D:72:ED:82:F4:7B:E7:31:4A:CA:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl X509v3 Authority Key Identifier: keyid:FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:70:81:5b:e6:bb:ae:d1:a2:00:79:20:5d:97:9a:89:30:55: 14:82:2e:96:cd:28:43:7d:1c:24:f8:8f:b1:9f:67:ca:6d:a9: 5b:e6:da:f9:96:dc:50:6e:1b:a5:e0:89:16:e6:e8:ee:9f:fb: 7f:cf:c2:97:07:5a:d2:47:2b:c8:1d:71:44:48:60:0e:a1:39: 73:4b:30:33:75:62:e0:f8:48:34:f8:87:68:52:6a:d7:91:dd: 4d:91:9f:1c:b2:4e:d3:94:c2:4c:a8:82:6d:99:af:76:76:e4: 47:97:7a:6e:b2:ad:ef:11:d7:61:29:4e:64:8d:9f:58:2e:07: 9a:1d:42:57:8c:70:b5:ea:83:c8:fc:4a:6d:02:b5:4c:d0:21: 69:45:78:23:98:5c:f1:0a:53:81:6b:54:d4:14:32:ac:66:41: 24:0c:64:a4:bc:b5:23:47:4d:dc:05:3f:1c:3e:0d:1e:72:86: c1:c4:0f:63:49:9e:31:71:b8:91:da:85:ca:aa:f5:13:cc:03: 4c:27:2a:73:e6:81:c5:63:d1:69:a9:07:01:f9:c3:e2:b3:e6: ca:46:cd:db:be:f0:a3:51:78:e8:78:2b:a8:ae:21:ff:00:b9: 4f:f3:98:70:8f:e6:2c:d6:0b:69:d4:ee:01:39:79:22:e2:c7: 1c:ca:7e:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ3nkCb45Mhvvf4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmMWEwOGUtOTY5Mi00NzVhLTliMDQtOTE2NTMwMTEx Mzg5MB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyODE3MDAwMFowLzEtMCsGA1UEAxMk N2IwYzQzNjItYzUzNi00ZDYyLTk1NWQtOGM3YjdkZWM0ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RgXY4hw72D/U5+TcW0S7Nf/dR6IEWD8lwOf 8LVx6rw5rULdOMsj39COskqwx7kjTNu/WPfDP9WMedBOrvcIwVdDjNKOT7l7hk6y jwM8+pJEiLuq3tKyqDshbsjvJNcmyUP1Rb8NLkqS3op3i1ypnACQcKMCMrWwFhSr 1b6421mG8I8Hu1V0Y0M5JFwCT3bWDxl6wvWoj3lQkluvcj/kMVGJQYcfjE823W0M Lk0zgGFpYntQZ5IgAGvVz4Cdpkcy1hz5UB7aBk8B6Wmi1l9MFhUbXkdD0CWP4RGb 3eNyqGNzVKvPdYKmdldaBUZKLFROApA0dCoqi+5trIjmecXmNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIVA3TeP1ZwL341y7YL0e+cxSsrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYx YTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAxMTEzODkvY2ZmMWEwOGUtOTY5Mi00 NzVhLTliMDQtOTE2NTMwMTExMzg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2ZmMWEwOGUtOTY5Mi00NzVhLTli MDQtOTE2NTMwMTExMzg5L2NmZjFhMDhlLTk2OTItNDc1YS05YjA0LTkxNjUzMDEx MTM4OS5jcmwwHwYDVR0jBBgwFoAU/7vAmoVMMQwbnO/bc4IcyxC59LEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1 MzAxMTEzODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1cIFb5ruu0aIAeSBdl5qJ MFUUgi6WzShDfRwk+I+xn2fKbalb5tr5ltxQbhul4IkW5ujun/t/z8KXB1rSRyvI HXFESGAOoTlzSzAzdWLg+Eg0+IdoUmrXkd1NkZ8csk7TlMJMqIJtma92duRHl3pu sq3vEddhKU5kjZ9YLgeaHUJXjHC16oPI/EptArVM0CFpRXgjmFzxClOBa1TUFDKs ZkEkDGSkvLUjR03cBT8cPg0ecobBxA9jSZ4xcbiR2oXKqvUTzANMJypz5oHFY9Fp qQcB+cPis+bKRs3bvvCjUXjoeCuoriH/ALlP85hwj+Ys1gtp1O4BOXki4sccyn4B -----END CERTIFICATE-----Generated at Wed Mar 25 23:09:11 2026 by rpki-client