$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft File: cb00fdf5-e28b-4e9d-9620-9504972438e2.mft (raw, json) Hash identifier: L5Exp1o7QuQ8snKFuvK/29GVJdZaiFio9b8PSHvSfqM= Subject key identifier: A5:5B:DD:C7:F6:71:20:BC:72:6C:C0:45:3B:DD:2A:90:BF:DD:C3:2D Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584D4EDD17DA77BB8186BF9D9540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft Manifest number: 010D0C9F4328584A89D04070D903DD88600D0B84 Signing time: Fri 27 Mar 2026 14:00:04 +0000 Manifest this update: Fri 27 Mar 2026 14:00:04 +0000 Manifest next update: Mon 30 Mar 2026 14:00:00 +0000 Files and hashes: 1: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (hash: lIkk8i4+6OEo8gfesAfsXg3B0wZeai24b8iZzPyMkGI=) 2: cb00fdf5-e28b-4e9d-9620-9504972438e2.crl (hash: IoGqdQzfZP3052Y5kjsQdS9oxIaXXF0TgB0DBlOYwMc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:dd:17:da:77:bb:81:86:bf:9d:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Mar 27 14:00:04 2026 GMT Not After : Mar 30 14:00:00 2026 GMT Subject: CN=5a60ef72-4ce6-47b7-b8f9-ca8d96e23013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:55:91:c0:7f:af:93:89:3e:36:f6:5d:12: f9:b2:9f:42:3c:2f:d9:19:ae:53:a7:2a:e5:1a:0c: e5:23:82:1b:5f:d2:7b:88:5b:4f:4e:42:64:96:bc: 23:68:e8:58:62:0e:2b:29:80:ac:9b:1f:69:36:aa: 64:fa:59:15:01:8f:a0:89:b5:e3:12:10:2d:5e:6c: 01:82:32:68:25:35:f0:9c:e5:8d:ef:10:cc:4e:68: 3d:58:e3:6e:05:03:7d:7f:de:6f:fe:e0:15:39:2b: 57:dd:32:c0:1e:33:0e:04:c8:e5:70:0d:e0:02:29: 33:ab:38:5b:70:f7:ed:0c:06:fa:a2:00:ae:06:d4: 8c:b2:6f:33:46:04:7b:b0:db:fd:d1:c9:24:e3:eb: ef:78:7e:95:e0:c5:3e:46:5c:55:ad:8e:e7:00:a1: 93:62:c2:23:70:9f:08:99:40:e7:db:71:87:36:35: 77:eb:b9:c8:dc:34:9f:e8:a8:1b:91:94:7c:02:ef: 83:5d:b5:99:fd:a8:e1:79:6a:8b:9b:06:f0:62:60: 26:fd:df:01:2b:0e:25:ed:a7:e2:b9:81:4a:5b:37: 2e:02:0f:95:af:4e:84:50:73:ec:43:fb:77:ca:1d: e1:12:00:5c:49:c4:07:ad:e0:25:dc:6e:aa:f3:aa: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5B:DD:C7:F6:71:20:BC:72:6C:C0:45:3B:DD:2A:90:BF:DD:C3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ed:9b:5d:7a:71:32:0e:20:ab:71:02:89:01:77:07:9c:f9: ad:99:61:2d:27:20:8c:ca:68:11:da:88:e0:6c:94:db:6a:83: f7:d7:14:21:31:5e:34:83:94:2e:ff:d5:3d:45:64:6a:dc:a1: 18:89:4a:c6:5e:37:ea:4d:f9:ed:33:5f:67:54:b8:38:ea:eb: 96:4e:e0:4f:60:d9:e5:f1:0f:dc:a9:2e:20:9f:c1:d9:fd:b7: 38:57:a3:f4:dc:db:6f:aa:3a:df:96:34:36:8e:35:18:35:02: 28:53:ab:55:3b:05:9d:52:05:54:b4:b0:32:88:82:55:53:a6: 1c:50:9e:35:5a:4e:e3:c0:ab:de:69:58:d8:3a:dd:a0:32:7d: c9:8a:bd:82:ff:d3:49:ba:f9:45:2f:63:1c:62:f9:20:f8:8d: d4:56:b8:00:ca:7c:04:89:75:ca:79:da:b2:9b:7a:cb:cf:35: 71:2c:dd:30:a4:56:53:14:bd:38:c1:05:9f:28:cb:df:7b:fb: b7:c9:9f:15:15:7c:fc:4e:4b:26:cb:7b:1b:06:b9:e4:ff:6f: b4:db:11:b5:58:31:27:01:e8:ee:34:2d:d3:3a:85:56:37:6b: 2c:f5:00:4f:23:9d:42:01:98:80:bd:b6:e7:9a:d4:83:aa:8a: 0c:f6:a7:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1O3Rfad7uBhr+dlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI2MDMyNzE0MDAwNFoXDTI2MDMzMDE0MDAwMFowLzEtMCsGA1UEAxMk NWE2MGVmNzItNGNlNi00N2I3LWI4ZjktY2E4ZDk2ZTIzMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouhVkcB/r5OJPjb2XRL5sp9CPC/ZGa5Tpyrl GgzlI4IbX9J7iFtPTkJklrwjaOhYYg4rKYCsmx9pNqpk+lkVAY+gibXjEhAtXmwB gjJoJTXwnOWN7xDMTmg9WONuBQN9f95v/uAVOStX3TLAHjMOBMjlcA3gAikzqzhb cPftDAb6ogCuBtSMsm8zRgR7sNv90ckk4+vveH6V4MU+RlxVrY7nAKGTYsIjcJ8I mUDn23GHNjV367nI3DSf6KgbkZR8Au+DXbWZ/ajheWqLmwbwYmAm/d8BKw4l7afi uYFKWzcuAg+Vr06EUHPsQ/t3yh3hEgBcScQHreAl3G6q86o3SQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKVb3cf2cSC8cmzARTvdKpC/3cMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvY2IwMGZkZjUtZTI4Yi00 ZTlkLTk2MjAtOTUwNDk3MjQzOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE7ZtdenEyDiCrcQKJAXcH nPmtmWEtJyCMymgR2ojgbJTbaoP31xQhMV40g5Qu/9U9RWRq3KEYiUrGXjfqTfnt M19nVLg46uuWTuBPYNnl8Q/cqS4gn8HZ/bc4V6P03NtvqjrfljQ2jjUYNQIoU6tV OwWdUgVUtLAyiIJVU6YcUJ41Wk7jwKveaVjYOt2gMn3Jir2C/9NJuvlFL2McYvkg +I3UVrgAynwEiXXKedqym3rLzzVxLN0wpFZTFL04wQWfKMvfe/u3yZ8VFXz8Tksm y3sbBrnk/2+02xG1WDEnAejuNC3TOoVWN2ss9QBPI51CAZiAvbbnmtSDqooM9qfv -----END CERTIFICATE-----Generated at Sat Mar 28 10:32:08 2026 by rpki-client