$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft File: da044fca-c418-4088-8a66-0c6896769f77.mft (raw, json) Hash identifier: o/Hkhv8qunhXsYC3agxDVuKJ2j4/twMNmlLnY5v5cNc= Subject key identifier: AF:50:0D:D9:A6:A4:67:4F:CB:60:1F:4A:A6:4B:D2:A7:7A:2E:8E:97 Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 Certificate issuer: /CN=da044fca-c418-4088-8a66-0c6896769f77 Certificate serial: 010D0C9F4328584D525A78F7EAF45B67D3794B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft Manifest number: 010D0C9F4328584875513DB7F2A29634842953C2 Signing time: Sat 28 Mar 2026 20:00:03 +0000 Manifest this update: Sat 28 Mar 2026 20:00:03 +0000 Manifest next update: Tue 31 Mar 2026 20:00:00 +0000 Files and hashes: 1: 772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer (hash: O9W3ZL0F+by7Yph6dsOXXSIPaE+dYo6viV4jbfXz5qY=) 2: da044fca-c418-4088-8a66-0c6896769f77.crl (hash: JBUpwVGXxthcQF90IJ4cAfGMTu/qHqaSk1MymAnbpgA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:5a:78:f7:ea:f4:5b:67:d3:79:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77 Validity Not Before: Mar 28 20:00:03 2026 GMT Not After : Mar 31 20:00:00 2026 GMT Subject: CN=84d653a4-5c93-453c-b770-7f83506c9180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:0b:f6:d0:71:55:d9:0a:16:3f:1f:2e:75: 79:26:60:ff:59:87:89:f6:a1:82:b7:61:52:e2:20: 60:6c:81:18:88:63:d7:e9:61:31:80:2b:9d:95:e6: a8:21:f4:e4:a6:86:65:97:b9:fc:c2:04:0f:f0:9a: ac:56:31:18:2b:7c:52:8d:57:f2:f1:5f:b7:34:2e: ad:8f:5e:7c:4d:20:96:3a:0a:86:04:56:66:06:ea: 1d:b2:3b:28:22:92:34:61:90:e0:e9:58:62:c8:2f: aa:22:30:68:21:f1:11:8f:62:6a:2c:8c:e6:e9:18: a6:f0:d5:a4:43:33:ab:20:d1:0a:c0:4f:40:c6:84: 2b:e2:03:4f:4c:da:50:a4:1d:bb:76:f8:a9:7e:6d: 87:5a:95:5b:61:1d:97:1b:c8:b4:83:bb:2c:03:10: 38:d2:30:da:c9:fe:16:45:ce:e8:3c:30:36:58:6e: 6f:17:93:00:fa:73:69:20:ee:23:0c:d9:13:1a:25: 95:cf:c8:46:dc:6d:4a:57:ba:89:85:cc:dd:53:d8: 9b:99:47:50:c2:37:f3:69:4a:8d:85:1b:e4:c3:bc: 6c:5f:00:89:43:73:7b:63:21:c1:47:96:54:db:02: e7:0c:2f:be:b1:6a:8e:75:1e:fd:fc:f4:c3:37:c8: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:0D:D9:A6:A4:67:4F:CB:60:1F:4A:A6:4B:D2:A7:7A:2E:8E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl X509v3 Authority Key Identifier: keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ec:d8:3d:e7:c3:a8:0f:60:cd:8e:03:56:68:6e:d7:87:52: 33:30:2f:73:09:33:3a:fe:62:57:a6:e6:a3:ea:e6:93:6c:4e: 72:53:7b:5c:e1:56:dc:d9:3c:50:77:29:37:61:de:ca:64:3c: ff:4b:9c:2f:35:b6:ba:0c:a2:db:d3:80:02:8d:e1:b7:06:f1: d7:7b:39:63:ee:13:a3:6a:51:81:77:1d:ec:18:b0:9f:f1:6f: 46:fe:ed:02:a7:b7:c7:65:5f:9a:a2:f2:c6:bb:66:e5:36:dc: 7f:da:3d:2b:fb:f9:ce:3e:3b:5e:e7:d3:82:fb:32:fa:12:69: ea:e3:3d:42:70:08:a3:c8:0c:22:0a:0c:d7:ea:54:8c:8d:2d: ec:24:a3:a6:aa:e8:f4:df:4a:af:46:ab:17:8b:d5:dc:61:14: 9f:c0:be:72:2b:c5:5e:db:28:78:9a:67:b0:61:8d:eb:c5:05: 44:03:9c:48:5a:1b:71:13:77:f7:ad:1f:3d:f7:ff:64:44:ec: 4b:58:9e:2f:61:e3:e4:20:cf:99:fb:85:ff:d7:95:3a:a0:18: 35:26:03:68:bb:36:fb:12:a1:8b:c4:2e:d9:e2:cc:1c:de:de: 1b:15:67:7d:67:50:5a:5b:61:46:48:88:0c:33:9e:cd:76:23: d5:c8:23:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1SWnj36vRbZ9N5SyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwNDRmY2EtYzQxOC00MDg4LThhNjYtMGM2ODk2NzY5 Zjc3MB4XDTI2MDMyODIwMDAwM1oXDTI2MDMzMTIwMDAwMFowLzEtMCsGA1UEAxMk ODRkNjUzYTQtNWM5My00NTNjLWI3NzAtN2Y4MzUwNmM5MTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEkL9tBxVdkKFj8fLnV5JmD/WYeJ9qGCt2FS 4iBgbIEYiGPX6WExgCudleaoIfTkpoZll7n8wgQP8JqsVjEYK3xSjVfy8V+3NC6t j158TSCWOgqGBFZmBuodsjsoIpI0YZDg6VhiyC+qIjBoIfERj2JqLIzm6Rim8NWk QzOrINEKwE9AxoQr4gNPTNpQpB27dvipfm2HWpVbYR2XG8i0g7ssAxA40jDayf4W Rc7oPDA2WG5vF5MA+nNpIO4jDNkTGiWVz8hG3G1KV7qJhczdU9ibmUdQwjfzaUqN hRvkw7xsXwCJQ3N7YyHBR5ZU2wLnDC++sWqOdR79/PTDN8gyiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK9QDdmmpGdPy2AfSqZL0qd6Lo6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0 NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4OTY3NjlmNzcvZGEwNDRmY2EtYzQxOC00 MDg4LThhNjYtMGM2ODk2NzY5Zjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwNDRmY2EtYzQxOC00MDg4LThh NjYtMGM2ODk2NzY5Zjc3L2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2 OWY3Ny5jcmwwHwYDVR0jBBgwFoAUjcyAYfi6cVkdKmxFPIslnfWf/TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4 OTY3NjlmNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBU7Ng958OoD2DNjgNWaG7X h1IzMC9zCTM6/mJXpuaj6uaTbE5yU3tc4Vbc2TxQdyk3Yd7KZDz/S5wvNba6DKLb 04ACjeG3BvHXezlj7hOjalGBdx3sGLCf8W9G/u0Cp7fHZV+aovLGu2blNtx/2j0r +/nOPjte59OC+zL6Emnq4z1CcAijyAwiCgzX6lSMjS3sJKOmquj030qvRqsXi9Xc YRSfwL5yK8Ve2yh4mmewYY3rxQVEA5xIWhtxE3f3rR899/9kROxLWJ4vYePkIM+Z +4X/15U6oBg1JgNouzb7EqGLxC7Z4swc3t4bFWd9Z1BaW2FGSIgMM57NdiPVyCNY -----END CERTIFICATE-----Generated at Sun Mar 29 14:56:47 2026 by rpki-client