$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft File: ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft (raw, json) Hash identifier: gRzY5RZNXmBog57vD9YjTh9wCNOWpWvbXR4uleoM71Y= Subject key identifier: D3:40:33:A2:17:63:91:8D:7E:55:72:7C:B6:42:80:F0:FE:07:BA:72 Authority key identifier: 9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 Certificate issuer: /CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Certificate serial: 010D0C9F4328584D4A53BA427EF11D94016FCC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft Manifest number: 010D0C9F4328584B21AA24C0C83B1A425711BDD3 Signing time: Wed 25 Mar 2026 23:00:03 +0000 Manifest this update: Wed 25 Mar 2026 23:00:03 +0000 Manifest next update: Sat 28 Mar 2026 23:00:00 +0000 Files and hashes: 1: 27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa (hash: N4F8kpGqoUT3fK9DbiJm+u9BPSAs3gApxoQ+oYDrk9c=) 2: ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl (hash: a8S1oH0/YwLKF34adfU5pctsp0yx25prt1AXtBbrBnE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:ba:42:7e:f1:1d:94:01:6f:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Validity Not Before: Mar 25 23:00:03 2026 GMT Not After : Mar 28 23:00:00 2026 GMT Subject: CN=5fbc8c3a-9414-47a4-8f3c-f8d7acce5b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:49:6d:82:8b:ea:0b:68:4f:b7:69:7d:4a: 18:bf:e9:ee:58:ff:37:53:c4:4d:b7:9d:ae:0b:58: cf:9f:69:f8:7d:9a:d0:0f:56:a9:fd:8d:95:c1:d7: 20:53:85:82:fa:45:2c:f2:06:70:77:ea:5b:95:6a: d0:d5:80:0b:11:95:e7:27:9e:56:a6:ed:fa:0f:4f: e9:76:c2:71:2a:92:d4:cc:72:a4:51:3a:30:f2:21: 6d:4e:5d:3f:40:5a:0e:b6:2a:a1:c2:3c:72:18:aa: f1:2b:5f:1a:fe:fd:29:d3:87:aa:54:95:d6:1c:3a: 27:46:46:53:51:b9:2b:01:ea:f1:5d:23:46:af:4b: a3:38:cd:33:ac:7a:02:3f:60:9d:5f:d1:d3:57:dc: c8:02:d8:13:94:ac:e8:62:06:77:3d:f3:a9:fe:9c: 0f:08:c0:f3:04:d2:2b:72:ba:ae:e3:cb:67:2e:e8: c8:f9:5e:1e:7c:27:d0:a5:2c:42:38:4d:ab:00:a2: 55:fc:ea:49:e3:94:96:cf:21:57:7b:8a:ef:27:68: 7e:14:3e:aa:67:19:6c:c6:92:e3:46:16:38:72:f3: 65:e0:b4:de:e4:5e:0c:2c:f2:8d:dd:c3:3f:57:1e: dd:6b:36:35:74:f1:d1:4f:74:03:d4:23:ad:c0:15: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:33:A2:17:63:91:8D:7E:55:72:7C:B6:42:80:F0:FE:07:BA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl X509v3 Authority Key Identifier: keyid:9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:13:61:ff:ae:45:df:3f:0b:9f:30:2f:13:10:e4:2e:fa:6c: 63:0e:44:ba:8a:4e:04:78:bc:79:cb:5c:ac:89:b3:4b:ae:ff: 29:d6:e4:54:e1:a1:86:c2:a2:7c:94:09:e2:a5:1a:cd:df:f5: 4e:33:42:83:08:59:4e:fc:1d:39:0a:32:0a:37:37:0a:cb:a5: 2a:c2:e2:58:05:a8:41:1b:80:48:40:13:da:43:eb:fd:f0:7e: c8:8d:35:f1:f9:07:82:f2:8c:c1:43:df:1b:10:6f:a7:b9:66: f5:b2:05:fb:51:b2:d6:44:0e:67:ce:3c:eb:41:8a:b5:3e:4c: 0f:47:0d:7d:b1:3f:f8:38:c5:07:7d:5b:07:cb:43:d7:d4:ec: 0b:8a:20:cb:dc:ac:9b:1d:93:ad:f8:7c:19:4f:3b:1b:84:58: c7:0c:0d:d3:f1:34:7d:26:0d:dc:31:58:c7:d0:88:c3:fc:4f: c5:b3:73:a5:9e:e5:13:f5:c0:98:c1:3a:00:3d:e1:0e:2d:ea: 04:3c:59:52:73:37:bc:ce:f4:5f:41:f3:16:42:17:be:0c:a5: a4:62:2b:38:99:88:e5:d7:2c:77:78:09:0a:b8:04:e3:cf:6b: fb:f0:50:29:3f:46:7c:f5:ee:54:91:95:4a:5e:86:4e:b5:97: c0:6f:6e:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KU7pCfvEdlAFvzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EwZjE4Y2EtNDE4OS00NWUxLTljNTgtMDlmMmRhYTgw OGZhMB4XDTI2MDMyNTIzMDAwM1oXDTI2MDMyODIzMDAwMFowLzEtMCsGA1UEAxMk NWZiYzhjM2EtOTQxNC00N2E0LThmM2MtZjhkN2FjY2U1YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmVJbYKL6gtoT7dpfUoYv+nuWP83U8RNt52u C1jPn2n4fZrQD1ap/Y2VwdcgU4WC+kUs8gZwd+pblWrQ1YALEZXnJ55Wpu36D0/p dsJxKpLUzHKkUTow8iFtTl0/QFoOtiqhwjxyGKrxK18a/v0p04eqVJXWHDonRkZT UbkrAerxXSNGr0ujOM0zrHoCP2CdX9HTV9zIAtgTlKzoYgZ3PfOp/pwPCMDzBNIr crqu48tnLujI+V4efCfQpSxCOE2rAKJV/OpJ45SWzyFXe4rvJ2h+FD6qZxlsxpLj RhY4cvNl4LTe5F4MLPKN3cM/Vx7dazY1dPHRT3QD1COtwBVXKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNNAM6IXY5GNflVyfLZCgPD+B7pyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBm MThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYyZGFhODA4ZmEvY2EwZjE4Y2EtNDE4OS00 NWUxLTljNTgtMDlmMmRhYTgwOGZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2EwZjE4Y2EtNDE4OS00NWUxLTlj NTgtMDlmMmRhYTgwOGZhL2NhMGYxOGNhLTQxODktNDVlMS05YzU4LTA5ZjJkYWE4 MDhmYS5jcmwwHwYDVR0jBBgwFoAUnz/Y9lRVQsQPIwOfwIRAbNYB38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBmMThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYy ZGFhODA4ZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWE2H/rkXfPwufMC8TEOQu +mxjDkS6ik4EeLx5y1ysibNLrv8p1uRU4aGGwqJ8lAnipRrN3/VOM0KDCFlO/B05 CjIKNzcKy6UqwuJYBahBG4BIQBPaQ+v98H7IjTXx+QeC8ozBQ98bEG+nuWb1sgX7 UbLWRA5nzjzrQYq1PkwPRw19sT/4OMUHfVsHy0PX1OwLiiDL3KybHZOt+HwZTzsb hFjHDA3T8TR9Jg3cMVjH0IjD/E/Fs3OlnuUT9cCYwToAPeEOLeoEPFlScze8zvRf QfMWQhe+DKWkYis4mYjl1yx3eAkKuATjz2v78FApP0Z89e5UkZVKXoZOtZfAb24M -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:41 2026 by rpki-client