$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft File: ff45396e-5aed-48af-b337-95d4dc567afb.mft (raw, json) Hash identifier: kNX4saBwxJQbeQaUWE47tvWWiCBRQGk7kNOe+ERhIDc= Subject key identifier: 4F:3E:F8:01:EC:E7:AC:45:5A:13:52:56:13:DF:33:BC:D9:95:C2:EF Authority key identifier: 6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB Certificate issuer: /CN=ff45396e-5aed-48af-b337-95d4dc567afb Certificate serial: 010D0C9F4328584D3E76609E84E02AB5EE513900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft Manifest number: 010D0C9F432858413A15436F02ADD97193B8BC6B Signing time: Sat 21 Mar 2026 17:00:09 +0000 Manifest this update: Sat 21 Mar 2026 17:00:09 +0000 Manifest next update: Tue 24 Mar 2026 17:00:00 +0000 Files and hashes: 1: 065f485a-2efe-31d5-8788-a9a1e337735d.roa (hash: x8RCNfohodenukDL3WrJ/pXsS7nZzlh+KB4qE7/4HCo=) 2: ff45396e-5aed-48af-b337-95d4dc567afb.crl (hash: XpglPSPbXxJ00dwB9UVXIcZdopGlFVEwjIeHt9OffHg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:76:60:9e:84:e0:2a:b5:ee:51:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff45396e-5aed-48af-b337-95d4dc567afb Validity Not Before: Mar 21 17:00:09 2026 GMT Not After : Mar 24 17:00:00 2026 GMT Subject: CN=df2cde8b-57bc-4728-af05-3a624c439b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1a:3f:c9:99:0b:49:22:72:dc:01:6d:17:fd: 59:96:4e:2f:64:0e:b4:f5:09:51:3f:73:82:df:25: 1f:93:c4:9b:80:8c:88:67:71:ab:78:70:4d:b4:c8: 4f:17:6f:c2:c1:66:25:a7:b7:fe:e0:d9:2c:3d:0b: 43:7a:82:cd:18:56:59:40:65:f2:b0:d9:1e:1b:f4: 80:88:e4:5d:48:67:46:51:7f:77:b2:49:02:ed:39: 3c:78:89:46:a5:e9:f4:79:f3:21:6f:c6:76:b5:42: ca:50:61:92:a1:12:b5:7f:b9:0e:3a:83:62:b1:ab: fd:5b:12:0b:c9:33:fc:3b:c6:f5:a0:df:d5:c7:a7: b3:62:c9:19:80:21:65:91:f2:25:75:f3:8d:d1:71: 0f:49:50:22:bc:56:f0:6c:19:80:03:93:aa:ce:c6: 45:a7:82:36:de:92:de:96:2d:c1:05:ca:59:2b:42: 6a:96:87:e3:88:ed:91:b7:f9:76:1e:0b:3d:89:6c: c8:7d:40:72:b9:ed:e9:25:0d:04:8d:11:21:17:56: b7:46:43:28:66:52:fa:d6:fa:4c:3c:11:4a:37:8b: 8b:7f:d8:c6:d0:31:ce:bc:d5:11:66:07:49:08:60: 5b:79:61:eb:24:e8:23:37:e8:fd:aa:ca:66:34:aa: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:F8:01:EC:E7:AC:45:5A:13:52:56:13:DF:33:BC:D9:95:C2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl X509v3 Authority Key Identifier: keyid:6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:09:4a:3e:c9:34:86:ba:27:8c:4e:95:26:b7:6d:0e:d0:f5: b3:1b:0a:76:f9:44:31:80:80:4f:b4:16:a5:fe:f1:17:1c:61: c3:df:0b:09:17:10:d1:96:ad:91:e7:7f:84:b3:b1:07:b3:46: 54:f8:39:97:c7:33:2a:09:b8:b7:7f:a1:44:2b:14:6e:e7:51: 9c:75:e9:fd:99:f0:9d:ec:b7:94:9a:91:c6:3e:92:45:ac:02: 8a:fb:4f:95:ea:13:b6:7c:ff:18:61:b9:29:b1:a2:00:bc:d9: fe:26:b3:2e:c0:86:7d:22:3c:87:e0:70:85:5e:f6:02:66:df: 06:7f:14:cf:1d:af:d1:17:c6:71:7d:e0:d7:94:63:33:45:31: 8a:ed:ee:8a:2e:af:22:d3:3c:3b:ce:05:85:30:36:6d:ab:ac: e6:1a:43:c9:3b:39:d9:70:b7:ab:47:da:92:67:e4:08:33:42: b3:99:14:e8:c5:6a:bd:a9:14:ce:e5:ef:70:44:69:aa:46:a8: 97:91:14:4b:99:3a:e6:ff:da:dc:27:05:b8:71:4f:95:bf:9b: 75:9d:22:eb:db:d5:8e:31:32:d4:c0:9a:e8:e1:07:2d:35:e1: 7b:c1:0a:4a:b6:8f:2e:27:ff:0d:85:dd:9b:58:d2:76:c6:ef: 49:cb:af:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+dmCehOAqte5ROQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NTM5NmUtNWFlZC00OGFmLWIzMzctOTVkNGRjNTY3 YWZiMB4XDTI2MDMyMTE3MDAwOVoXDTI2MDMyNDE3MDAwMFowLzEtMCsGA1UEAxMk ZGYyY2RlOGItNTdiYy00NzI4LWFmMDUtM2E2MjRjNDM5YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkho/yZkLSSJy3AFtF/1Zlk4vZA609QlRP3OC 3yUfk8SbgIyIZ3GreHBNtMhPF2/CwWYlp7f+4NksPQtDeoLNGFZZQGXysNkeG/SA iORdSGdGUX93skkC7Tk8eIlGpen0efMhb8Z2tULKUGGSoRK1f7kOOoNisav9WxIL yTP8O8b1oN/Vx6ezYskZgCFlkfIldfON0XEPSVAivFbwbBmAA5OqzsZFp4I23pLe li3BBcpZK0JqlofjiO2Rt/l2Hgs9iWzIfUByue3pJQ0EjREhF1a3RkMoZlL61vpM PBFKN4uLf9jG0DHOvNURZgdJCGBbeWHrJOgjN+j9qspmNKr/7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE8++AHs56xFWhNSVhPfM7zZlcLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1 Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0ZGM1NjdhZmIvZmY0NTM5NmUtNWFlZC00 OGFmLWIzMzctOTVkNGRjNTY3YWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmY0NTM5NmUtNWFlZC00OGFmLWIz MzctOTVkNGRjNTY3YWZiL2ZmNDUzOTZlLTVhZWQtNDhhZi1iMzM3LTk1ZDRkYzU2 N2FmYi5jcmwwHwYDVR0jBBgwFoAUbdoY/gxSm/xACX4/13WI5aH9XLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0 ZGM1NjdhZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjCUo+yTSGuieMTpUmt20O 0PWzGwp2+UQxgIBPtBal/vEXHGHD3wsJFxDRlq2R53+Es7EHs0ZU+DmXxzMqCbi3 f6FEKxRu51Gcden9mfCd7LeUmpHGPpJFrAKK+0+V6hO2fP8YYbkpsaIAvNn+JrMu wIZ9IjyH4HCFXvYCZt8GfxTPHa/RF8ZxfeDXlGMzRTGK7e6KLq8i0zw7zgWFMDZt q6zmGkPJOznZcLerR9qSZ+QIM0KzmRToxWq9qRTO5e9wRGmqRqiXkRRLmTrm/9rc JwW4cU+Vv5t1nSLr29WOMTLUwJro4QctNeF7wQpKto8uJ/8Nhd2bWNJ2xu9Jy68G -----END CERTIFICATE-----Generated at Sun Mar 22 08:15:14 2026 by rpki-client