$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft File: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft (raw, json) Hash identifier: +Zij/5MuKOpXGl69qYlaypybb9tPSy5X57UpuxCgBxY= Subject key identifier: 82:C8:2F:9F:E0:5B:62:71:6C:AA:C9:B7:BC:F1:1C:CE:18:F7:0E:55 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584D2DB64742863DF9FF4F4FD8A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft Manifest number: 010D0C9F4328584073A81EA95548D8D821DD44D4 Signing time: Sun 15 Mar 2026 17:00:08 +0000 Manifest this update: Sun 15 Mar 2026 17:00:08 +0000 Manifest next update: Tue 17 Mar 2026 17:00:00 +0000 Files and hashes: 1: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (hash: 8U2NcLvuc1Cnuh89nu11HaBnAutDBOcfrer0NRPGgcI=) 2: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl (hash: hvKl8IWH5+Gf7YR6MDkQRCyD69kJSII1vADWY4mgtwk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:b6:47:42:86:3d:f9:ff:4f:4f:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Mar 15 17:00:08 2026 GMT Not After : Mar 17 17:00:00 2026 GMT Subject: CN=da0ec06f-f4c8-460d-a3ac-cc227cd6ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:48:7f:e0:4e:07:56:9c:b2:2c:6e:1a:fb: fc:63:59:bb:98:82:e5:39:16:24:85:14:98:88:dc: 18:47:84:a0:18:ed:9d:6b:df:cf:17:e2:17:cc:02: a4:83:89:bb:5c:4e:3e:07:d9:2c:99:35:2d:b1:45: 7e:08:59:dd:c5:cc:68:6c:72:7a:e5:0e:98:0e:45: b9:63:17:1e:d4:1d:a1:c7:dd:26:e7:ec:63:99:39: b4:49:f0:3f:68:27:0a:a6:47:91:c1:ec:ed:be:17: aa:61:3a:3f:86:e0:21:3f:66:9f:ff:69:2f:57:72: da:27:4d:68:19:52:8b:86:ad:37:c5:2f:fe:51:7c: 68:0e:2c:08:2b:8a:a0:b8:c1:bd:9e:42:55:d9:07: 98:ed:2d:60:73:e7:98:02:52:32:d3:83:9a:e9:ed: d1:0b:90:c1:e3:46:74:99:ca:c2:b9:9d:64:ec:f8: a9:31:ea:1d:ba:fb:3b:20:53:3a:ae:19:37:77:6b: e0:27:45:ac:ec:58:13:e9:27:55:b8:66:14:66:f3: d8:87:73:7f:c1:dc:70:17:75:3d:92:e9:50:d2:f5: be:e5:0d:fb:05:8d:a0:57:b9:09:1d:ab:07:2a:a9: 4c:d5:19:43:5d:61:be:5d:4d:5f:b5:e0:8d:19:cc: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C8:2F:9F:E0:5B:62:71:6C:AA:C9:B7:BC:F1:1C:CE:18:F7:0E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:76:41:44:65:a6:e6:ed:1b:82:1c:b4:9e:1d:90:a8:54:4f: 33:8c:4d:03:b2:3e:0d:1c:03:f7:5d:55:c1:4c:17:77:57:2a: 18:b4:56:b8:58:e3:71:9f:1f:61:b3:bd:6f:89:aa:15:c8:e1: 54:76:80:57:6e:6c:70:c9:5b:69:af:56:32:75:2a:ba:f9:3e: c5:83:c8:81:bf:1d:c8:d3:45:3f:44:2b:ef:40:34:a8:ed:85: 39:48:e0:9e:7e:c3:3b:89:66:35:12:f2:0f:d7:38:ee:6e:2c: dc:91:69:d2:2b:36:a3:e1:19:20:34:c7:00:d3:4f:1d:17:da: 10:94:12:ab:07:df:f5:2c:e7:be:ff:14:1c:8e:1c:ab:af:63: 9f:93:36:8e:8d:c1:b6:93:f0:fc:8c:21:13:00:e8:a4:e3:6f: 1b:54:fa:c4:fd:92:40:6f:e4:84:9c:72:df:7f:d5:e5:0c:90: 17:db:6f:4e:98:57:b5:2f:96:e0:51:1a:4b:82:51:f7:2b:c8: ad:da:3f:fd:cd:c3:01:e7:85:de:4f:f3:24:00:48:3a:df:b9: 36:36:db:4c:44:5d:a0:64:03:6b:e5:bc:84:da:b6:28:8e:5e: 28:ca:bc:76:6a:5b:cd:d8:ab:c2:14:15:f8:2f:d2:54:bf:04: 43:cc:f0:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0ttkdChj35/09P2KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI2MDMxNTE3MDAwOFoXDTI2MDMxNzE3MDAwMFowLzEtMCsGA1UEAxMk ZGEwZWMwNmYtZjRjOC00NjBkLWEzYWMtY2MyMjdjZDZhZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNhIf+BOB1acsixuGvv8Y1m7mILlORYkhRSY iNwYR4SgGO2da9/PF+IXzAKkg4m7XE4+B9ksmTUtsUV+CFndxcxobHJ65Q6YDkW5 Yxce1B2hx90m5+xjmTm0SfA/aCcKpkeRweztvheqYTo/huAhP2af/2kvV3LaJ01o GVKLhq03xS/+UXxoDiwIK4qguMG9nkJV2QeY7S1gc+eYAlIy04Oa6e3RC5DB40Z0 mcrCuZ1k7PipMeoduvs7IFM6rhk3d2vgJ0Ws7FgT6SdVuGYUZvPYh3N/wdxwF3U9 kulQ0vW+5Q37BY2gV7kJHasHKqlM1RlDXWG+XU1fteCNGcxA0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFILIL5/gW2JxbKrJt7zxHM4Y9w5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZGZmZmE1YzMtYjVjNy00 MzQ3LThkNTctOTZiYzMxMDJkZjhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOdkFEZabm7RuCHLSeHZCo VE8zjE0Dsj4NHAP3XVXBTBd3VyoYtFa4WONxnx9hs71viaoVyOFUdoBXbmxwyVtp r1YydSq6+T7Fg8iBvx3I00U/RCvvQDSo7YU5SOCefsM7iWY1EvIP1zjubizckWnS Kzaj4RkgNMcA008dF9oQlBKrB9/1LOe+/xQcjhyrr2OfkzaOjcG2k/D8jCETAOik 428bVPrE/ZJAb+SEnHLff9XlDJAX229OmFe1L5bgURpLglH3K8it2j/9zcMB54Xe T/MkAEg637k2NttMRF2gZANr5byE2rYojl4oyrx2alvN2KvCFBX4L9JUvwRDzPBd -----END CERTIFICATE-----Generated at Mon Mar 16 17:18:46 2026 by rpki-client