$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft File: 42b354ac-9561-4685-881b-1a696a6082f3.mft (raw, json) Hash identifier: 92yf5Zd+OKdIDEU2A/wrTtkASCSpYy29rcsLKH16g6I= Subject key identifier: 3F:93:F5:D9:FA:31:1B:EE:D9:D4:60:37:75:02:4F:4F:A4:26:41:8C Authority key identifier: 36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96 Certificate issuer: /CN=42b354ac-9561-4685-881b-1a696a6082f3 Certificate serial: 010D0C9F4328584D3E3AC562DD09A3FC778E9730 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft Manifest number: 010D0C9F4328584198BD05E46ADB497A865B2248 Signing time: Sat 21 Mar 2026 15:00:04 +0000 Manifest this update: Sat 21 Mar 2026 15:00:04 +0000 Manifest next update: Tue 24 Mar 2026 15:00:00 +0000 Files and hashes: 1: 42b354ac-9561-4685-881b-1a696a6082f3.crl (hash: 02YvoLv9cNwOSv+1o3BMksnwyjnZFrlf/0Ce06AuWfE=) 2: cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa (hash: JENjs2DMA36Ifc2+/9HoDiXN5556A0LxfWf3CQNu/Co=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:3a:c5:62:dd:09:a3:fc:77:8e:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b354ac-9561-4685-881b-1a696a6082f3 Validity Not Before: Mar 21 15:00:04 2026 GMT Not After : Mar 24 15:00:00 2026 GMT Subject: CN=f0a315b6-ddc3-4be7-b427-9e65b7bc86d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:b2:23:44:b6:1f:6b:72:0b:c0:d2:26:cf: bf:6e:15:6f:18:41:f6:cc:79:d8:45:2d:8a:aa:72: df:c4:8d:b1:12:2f:f9:8a:dd:7b:ba:88:d7:48:40: 43:43:26:94:8c:61:d5:2b:60:be:94:83:e8:98:5e: 04:2b:8e:27:11:16:91:b8:51:51:11:7d:41:8b:59: d7:19:78:2f:84:5f:92:13:d2:c2:52:cd:d9:4c:f2: 1c:54:13:b3:71:11:2e:6e:06:f1:2f:99:69:0d:f0: c1:56:c9:48:9f:26:d1:5a:b8:ed:20:55:06:c6:1f: a3:84:30:c3:1f:cc:1e:d3:01:e4:7d:8a:c6:db:8c: e4:b3:e7:86:5f:7c:ba:ee:bc:96:7a:fe:18:de:d0: d6:ed:12:79:a4:a3:48:9a:f1:2e:e3:4d:cd:15:b7: f5:14:90:a0:b2:85:51:b6:60:b9:66:3e:c9:04:45: bb:e3:6e:95:d3:f5:84:aa:62:91:bf:c7:3d:95:8f: cb:8b:90:9b:71:5e:03:9a:18:53:b3:2b:ae:77:df: fc:4a:3c:2b:8b:04:3f:90:98:de:1b:3a:02:70:56: 0f:20:d9:40:bd:ae:0a:d4:d9:06:66:87:6c:ed:db: d9:43:62:f3:ba:c9:f4:83:49:e9:94:ce:ee:8c:26: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:93:F5:D9:FA:31:1B:EE:D9:D4:60:37:75:02:4F:4F:A4:26:41:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl X509v3 Authority Key Identifier: keyid:36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ce:95:70:81:6a:1a:de:a9:fb:7b:da:53:f2:e3:61:d4:00: a3:00:a4:96:ae:d8:63:c4:e6:b2:3e:d0:92:0d:93:b2:a9:ac: f6:6c:08:18:2c:7e:f7:db:2c:0e:1a:b2:85:35:79:e8:d9:d1: 7c:eb:80:3d:44:18:52:5d:1a:bf:8c:09:ee:64:70:6e:6b:a6: 4f:ea:dc:ec:be:83:29:18:2c:f6:e6:3a:b7:1d:b0:71:06:83: 70:46:e3:d8:7f:84:bd:e3:c9:d6:9e:6f:e0:27:33:d8:58:c0: dd:02:71:92:38:02:48:b9:ec:d0:52:ee:25:93:cb:fc:11:22: ed:86:ab:a7:01:3d:cf:34:48:2d:32:36:a9:f9:22:3e:14:13: dd:f7:e4:8a:7e:8c:60:d7:44:24:6b:0a:c0:2c:f5:80:a9:dd: 07:67:8f:a7:7d:5e:50:8e:d9:27:8d:ba:4e:3a:97:62:22:87: e7:c3:e7:ee:bb:b4:b5:c9:18:6f:4c:85:37:a8:b1:21:90:9a: 2f:51:34:51:7d:ea:8a:dc:c8:49:f2:a8:2f:00:de:63:92:b7: c7:c2:81:c4:1a:85:ad:93:08:2a:10:18:af:f6:cd:3a:09:4a: a6:9d:8a:eb:22:8e:11:e9:dc:40:fa:97:0a:23:e3:b5:cb:52: bb:b9:7e:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+OsVi3Qmj/HeOlzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiMzU0YWMtOTU2MS00Njg1LTg4MWItMWE2OTZhNjA4 MmYzMB4XDTI2MDMyMTE1MDAwNFoXDTI2MDMyNDE1MDAwMFowLzEtMCsGA1UEAxMk ZjBhMzE1YjYtZGRjMy00YmU3LWI0MjctOWU2NWI3YmM4NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMiyI0S2H2tyC8DSJs+/bhVvGEH2zHnYRS2K qnLfxI2xEi/5it17uojXSEBDQyaUjGHVK2C+lIPomF4EK44nERaRuFFREX1Bi1nX GXgvhF+SE9LCUs3ZTPIcVBOzcREubgbxL5lpDfDBVslInybRWrjtIFUGxh+jhDDD H8we0wHkfYrG24zks+eGX3y67ryWev4Y3tDW7RJ5pKNImvEu403NFbf1FJCgsoVR tmC5Zj7JBEW7426V0/WEqmKRv8c9lY/Li5CbcV4DmhhTsyuud9/8SjwriwQ/kJje GzoCcFYPINlAva4K1NkGZods7dvZQ2Lzusn0g0nplM7ujCbXqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+T9dn6MRvu2dRgN3UCT0+kJkGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MmIz NTRhYy05NTYxLTQ2ODUtODgxYi0xYTY5NmE2MDgyZjMvNDJiMzU0YWMtOTU2MS00 Njg1LTg4MWItMWE2OTZhNjA4MmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDJiMzU0YWMtOTU2MS00Njg1LTg4 MWItMWE2OTZhNjA4MmYzLzQyYjM1NGFjLTk1NjEtNDY4NS04ODFiLTFhNjk2YTYw ODJmMy5jcmwwHwYDVR0jBBgwFoAUNmBHyQndmfgWTddrp4PWnIw8i5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MmIzNTRhYy05NTYxLTQ2ODUtODgxYi0xYTY5 NmE2MDgyZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgzpVwgWoa3qn7e9pT8uNh 1ACjAKSWrthjxOayPtCSDZOyqaz2bAgYLH732ywOGrKFNXno2dF864A9RBhSXRq/ jAnuZHBua6ZP6tzsvoMpGCz25jq3HbBxBoNwRuPYf4S948nWnm/gJzPYWMDdAnGS OAJIuezQUu4lk8v8ESLthqunAT3PNEgtMjap+SI+FBPd9+SKfoxg10QkawrALPWA qd0HZ4+nfV5QjtknjbpOOpdiIofnw+fuu7S1yRhvTIU3qLEhkJovUTRRfeqK3MhJ 8qgvAN5jkrfHwoHEGoWtkwgqEBiv9s06CUqmnYrrIo4R6dxA+pcKI+O1y1K7uX6o -----END CERTIFICATE-----Generated at Sun Mar 22 08:34:40 2026 by rpki-client