$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft File: a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft (raw, json) Hash identifier: YMEYDkcnW64SWfL8bsfnL46lGRNN+yses4G8bgbxj0g= Subject key identifier: 31:FC:72:21:E8:21:FC:76:CB:38:CB:5B:2B:D2:28:DF:BA:BE:FC:EF Authority key identifier: 12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26 Certificate issuer: /CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6 Certificate serial: 010D0C9F4328584D077117EB113C7F5F33982080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft Manifest number: 010D0C9F4328584073A832615F8ACBF3D0910C32 Signing time: Mon 02 Mar 2026 00:00:04 +0000 Manifest this update: Mon 02 Mar 2026 00:00:04 +0000 Manifest next update: Wed 04 Mar 2026 00:00:00 +0000 Files and hashes: 1: a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl (hash: thYTXF8g9tux/cE6AJNqXYh0sHZGCeFS0lwlrln9nfU=) 2: a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa (hash: hY6sfp7R2mAsy1gquPuUB/A4rzCFWuao41thux5pTBw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:71:17:eb:11:3c:7f:5f:33:98:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6 Validity Not Before: Mar 2 00:00:04 2026 GMT Not After : Mar 4 00:00:00 2026 GMT Subject: CN=ca44559a-1012-4c68-86e5-5cafba6d94f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:33:fd:11:cd:fb:02:96:e0:7f:c8:99:78: dc:d0:38:b9:9a:ca:82:05:0b:df:cd:9a:77:bb:b1: 95:fb:1e:23:d6:d1:ce:d3:4d:2a:f6:d7:f2:9d:d1: 80:15:e2:41:92:c5:7e:35:7f:c0:c5:86:a5:6d:59: b4:32:73:50:9d:fd:97:1d:56:6e:40:2a:ff:98:5c: cf:b7:bf:f7:4b:5c:31:61:1c:cd:d1:99:bf:28:78: f2:b0:b6:ec:a0:a2:e4:6a:9d:39:e1:df:ad:ef:75: 54:6a:4d:a3:c2:fe:c5:30:00:ee:af:95:d1:55:a2: 84:2e:70:ec:1f:bf:14:2c:f8:f1:fe:8b:d6:98:5f: ac:39:ec:3f:4f:07:76:8d:31:c8:b2:38:bd:a1:60: 13:ad:36:de:56:a4:87:d5:47:af:9b:1c:7f:6e:97: 6d:f4:bc:e8:fa:d7:7e:a0:54:7b:ea:3e:b9:bb:88: a4:37:03:4c:05:0b:8c:4a:47:4e:c4:9d:c3:f2:4f: 28:0e:9b:3a:ad:d0:45:0b:b3:bf:53:0e:89:75:19: f3:a6:2f:98:ca:ad:74:cc:a5:44:56:e9:a4:25:f1: 8d:af:62:f6:8f:33:6a:a8:3b:89:8b:39:1c:e9:15: 2c:81:47:e9:cc:12:e7:28:78:a9:3e:a0:c1:27:f6: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:72:21:E8:21:FC:76:CB:38:CB:5B:2B:D2:28:DF:BA:BE:FC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl X509v3 Authority Key Identifier: keyid:12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:10:53:ac:1c:12:72:b9:23:6d:5a:bb:49:c4:d8:fe:ae:f2: df:db:81:2c:4e:a4:f3:a2:95:79:dc:98:90:1b:de:8e:bc:04: 20:08:e0:cf:1d:b5:cf:30:fd:13:80:29:49:97:e9:4f:d5:21: 4f:89:d3:5b:61:26:df:cd:0c:13:4d:ce:b2:73:55:8e:84:85: d1:e0:4c:7f:0b:1c:9c:47:c6:30:c6:7b:c4:8e:46:42:5d:f6: 9b:87:98:ac:f1:4e:3a:48:dc:7c:33:61:6a:08:e0:84:40:6e: 2f:f4:ff:b7:cb:ab:4e:a6:50:78:12:19:0a:12:e9:c6:68:fb: c9:e3:31:a7:d2:6e:5c:f7:8d:80:16:b3:61:78:bc:9e:b7:da: 9d:61:97:87:87:bb:64:7d:64:7d:5a:7b:6e:0e:0f:24:50:01: 68:00:2f:64:c1:2f:e5:31:49:4e:43:ef:97:c4:32:4c:be:71: 59:b3:90:99:f5:b6:70:43:cf:5c:90:89:39:f6:7e:27:c4:f8: 18:a9:3c:88:f7:84:cf:e3:eb:ad:26:2c:0f:50:ca:24:96:69: f9:b2:b4:19:77:3c:10:28:31:4e:6b:7f:b5:93:02:ac:c1:ea: d4:8f:c9:c7:52:7a:53:bc:d8:5b:5b:25:bc:40:59:48:a1:f3: 82:c4:48:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HcRfrETx/XzOYIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVkMjAyNDAtYTNkZC00ZWI3LWEzNzEtZWRlZjg3ZTc5 YmE2MB4XDTI2MDMwMjAwMDAwNFoXDTI2MDMwNDAwMDAwMFowLzEtMCsGA1UEAxMk Y2E0NDU1OWEtMTAxMi00YzY4LTg2ZTUtNWNhZmJhNmQ5NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisQz/RHN+wKW4H/ImXjc0Di5msqCBQvfzZp3 u7GV+x4j1tHO000q9tfyndGAFeJBksV+NX/AxYalbVm0MnNQnf2XHVZuQCr/mFzP t7/3S1wxYRzN0Zm/KHjysLbsoKLkap054d+t73VUak2jwv7FMADur5XRVaKELnDs H78ULPjx/ovWmF+sOew/Twd2jTHIsji9oWATrTbeVqSH1Uevmxx/bpdt9Lzo+td+ oFR76j65u4ikNwNMBQuMSkdOxJ3D8k8oDps6rdBFC7O/Uw6JdRnzpi+Yyq10zKVE VumkJfGNr2L2jzNqqDuJizkc6RUsgUfpzBLnKHipPqDBJ/YwYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDH8ciHoIfx2yzjLWyvSKN+6vvzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQy MDI0MC1hM2RkLTRlYjctYTM3MS1lZGVmODdlNzliYTYvYTVkMjAyNDAtYTNkZC00 ZWI3LWEzNzEtZWRlZjg3ZTc5YmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVkMjAyNDAtYTNkZC00ZWI3LWEz NzEtZWRlZjg3ZTc5YmE2L2E1ZDIwMjQwLWEzZGQtNGViNy1hMzcxLWVkZWY4N2U3 OWJhNi5jcmwwHwYDVR0jBBgwFoAUElcRMo3/G9vmXrOAbUw8Ybv1USYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQyMDI0MC1hM2RkLTRlYjctYTM3MS1lZGVm ODdlNzliYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqEFOsHBJyuSNtWrtJxNj+ rvLf24EsTqTzopV53JiQG96OvAQgCODPHbXPMP0TgClJl+lP1SFPidNbYSbfzQwT Tc6yc1WOhIXR4Ex/CxycR8YwxnvEjkZCXfabh5is8U46SNx8M2FqCOCEQG4v9P+3 y6tOplB4EhkKEunGaPvJ4zGn0m5c942AFrNheLyet9qdYZeHh7tkfWR9WntuDg8k UAFoAC9kwS/lMUlOQ++XxDJMvnFZs5CZ9bZwQ89ckIk59n4nxPgYqTyI94TP4+ut JiwPUMoklmn5srQZdzwQKDFOa3+1kwKswerUj8nHUnpTvNhbWyW8QFlIofOCxEjJ -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:07 2026 by rpki-client