$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: oRQ4UNuQbxZPMX7KHH986FlDwfnzC9GvMTY0UnbqYbg= Subject key identifier: 38:1C:AD:84:0C:28:BA:FB:04:84:C8:C5:85:1E:FD:16:8E:5F:C4:38 Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584D3080E7824AFEFFD50CAA7EA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C36EB Signing time: Mon 16 Mar 2026 17:00:04 +0000 Manifest this update: Mon 16 Mar 2026 17:00:04 +0000 Manifest next update: Thu 19 Mar 2026 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: Llkus5YyzWNPeQEb33bWo+EdDVttRjIfxA6uYH8x7Ug=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: YC2aX93QPZLDBylbPYq9Bvk+HMQacJ+Na1tqBXcsnP8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:80:e7:82:4a:fe:ff:d5:0c:aa:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Mar 16 17:00:04 2026 GMT Not After : Mar 19 17:00:00 2026 GMT Subject: CN=5e99cf38-4531-4f8e-a8d5-ad9b0106d31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:27:89:d3:47:ea:45:b8:6a:ce:0c:49:7e: c4:c2:4a:48:ae:7d:c7:b3:9c:3e:25:ee:66:96:61: e0:1a:62:25:ef:a5:35:97:ac:ee:4e:05:63:53:19: c8:44:02:c8:39:71:5c:85:0c:24:08:3f:ae:c2:a4: 31:d1:fa:fa:5b:2b:07:e2:d6:47:4c:b0:93:8d:ff: 80:94:2d:d4:5f:dc:f8:87:08:1d:e8:9c:19:61:73: 6b:31:2f:87:c8:13:5a:7b:bf:65:d4:35:b4:0c:37: 17:e2:f0:d0:18:09:f4:58:4e:8a:cd:8b:d4:39:a0: 03:62:45:82:1e:c8:4e:a8:c4:84:24:dd:f7:c6:d3: b5:92:47:a2:1a:48:56:b4:75:61:49:a1:45:a7:f8: 95:6c:14:4d:eb:cd:78:8c:fb:06:9a:4e:ed:b1:29: af:58:c4:03:1e:24:d6:ee:88:02:f5:53:a5:c4:7a: e9:7c:75:c4:e0:fd:c1:c0:c9:e3:4d:3a:54:0e:a4: d2:52:d6:8c:ca:06:24:e8:0a:28:68:b3:9b:ed:f8: fc:8d:6a:4c:78:19:8f:30:68:f8:3c:7f:a5:6d:4a: e3:bd:d3:15:25:cc:51:f9:02:a6:db:4e:ac:6d:6e: b1:ad:7d:51:80:0f:26:36:fa:0c:e2:3c:14:11:98: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1C:AD:84:0C:28:BA:FB:04:84:C8:C5:85:1E:FD:16:8E:5F:C4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f4:3e:b3:e5:aa:fb:9a:ca:b8:d6:68:29:ff:eb:05:47:a1: b2:92:63:04:6d:7f:15:6d:93:2f:de:7f:21:59:08:af:98:c3: 60:2e:05:7e:86:03:8b:40:a8:c1:fa:0a:40:5b:0a:59:c5:f0: 08:06:9b:2e:3b:8f:e2:db:8f:c4:2f:20:da:3f:5b:40:2a:27: 8a:b7:25:94:65:b5:a6:ed:96:e4:15:86:7d:05:d6:5e:33:2a: f8:31:04:cd:34:6a:e7:b2:d3:b5:7c:22:7d:51:31:5c:c7:e1: 46:85:f0:1e:7e:1e:47:b7:7f:bf:d3:fc:84:f2:ea:14:43:42: 36:d0:77:4c:34:84:6f:7b:79:ad:b3:72:dc:51:08:9e:ff:d4: fb:59:38:d7:2b:57:dd:b1:87:5c:0a:c2:a0:78:32:ad:19:88: 38:fd:91:2b:cf:65:ac:26:2d:68:eb:38:7a:1d:5c:eb:55:38: 73:c2:95:86:4a:7a:f3:ad:e5:f0:8a:3f:63:dd:81:99:b1:0a: dd:2f:16:98:5e:6e:5f:69:71:27:1f:3e:b3:99:91:7c:2e:dd: a0:b9:94:ed:f9:45:4b:c6:fa:3a:a4:c0:d3:29:85:91:f2:aa: e1:06:a0:fa:f2:0a:8c:67:fa:f9:47:48:81:00:41:07:df:c7: 9f:29:9e:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0wgOeCSv7/1QyqfqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI2MDMxNjE3MDAwNFoXDTI2MDMxOTE3MDAwMFowLzEtMCsGA1UEAxMk NWU5OWNmMzgtNDUzMS00ZjhlLWE4ZDUtYWQ5YjAxMDZkMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriMnidNH6kW4as4MSX7EwkpIrn3Hs5w+Je5m lmHgGmIl76U1l6zuTgVjUxnIRALIOXFchQwkCD+uwqQx0fr6WysH4tZHTLCTjf+A lC3UX9z4hwgd6JwZYXNrMS+HyBNae79l1DW0DDcX4vDQGAn0WE6KzYvUOaADYkWC HshOqMSEJN33xtO1kkeiGkhWtHVhSaFFp/iVbBRN6814jPsGmk7tsSmvWMQDHiTW 7ogC9VOlxHrpfHXE4P3BwMnjTTpUDqTSUtaMygYk6AooaLOb7fj8jWpMeBmPMGj4 PH+lbUrjvdMVJcxR+QKm206sbW6xrX1RgA8mNvoM4jwUEZgiqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDgcrYQMKLr7BITIxYUe/RaOX8Q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCA9D6z5ar7msq41mgp/+sF R6GykmMEbX8VbZMv3n8hWQivmMNgLgV+hgOLQKjB+gpAWwpZxfAIBpsuO4/i24/E LyDaP1tAKieKtyWUZbWm7ZbkFYZ9BdZeMyr4MQTNNGrnstO1fCJ9UTFcx+FGhfAe fh5Ht3+/0/yE8uoUQ0I20HdMNIRve3mts3LcUQie/9T7WTjXK1fdsYdcCsKgeDKt GYg4/ZErz2WsJi1o6zh6HVzrVThzwpWGSnrzreXwij9j3YGZsQrdLxaYXm5faXEn Hz6zmZF8Lt2guZTt+UVLxvo6pMDTKYWR8qrhBqD68gqMZ/r5R0iBAEEH38efKZ7m -----END CERTIFICATE-----Generated at Mon Mar 16 23:20:55 2026 by rpki-client