$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft File: caa8771d-81d7-474e-8d02-b2c215e51102.mft (raw, json) Hash identifier: 4LmQTDIOrEULjV7llxLK/a65oRcdaclp0duKc+PhMCQ= Subject key identifier: A3:5E:75:A3:E4:BE:29:4A:E2:A3:B0:64:75:F2:DC:35:6D:B9:BD:A5 Authority key identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Certificate issuer: /CN=caa8771d-81d7-474e-8d02-b2c215e51102 Certificate serial: 010D0C9F4328584D060BBEBF058E4E6F21D18878 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft Manifest number: 010D0C9F4328584073A85231683698E27AB79E07 Signing time: Sun 01 Mar 2026 12:00:03 +0000 Manifest this update: Sun 01 Mar 2026 12:00:03 +0000 Manifest next update: Wed 04 Mar 2026 12:00:00 +0000 Files and hashes: 1: caa8771d-81d7-474e-8d02-b2c215e51102.crl (hash: RmOCwUWScT/jubdujYCuxZ6PCrETnx3sSPAS+ZT2aG4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:0b:be:bf:05:8e:4e:6f:21:d1:88:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caa8771d-81d7-474e-8d02-b2c215e51102 Validity Not Before: Mar 1 12:00:03 2026 GMT Not After : Mar 4 12:00:00 2026 GMT Subject: CN=4c2b7f0c-a5eb-4fe8-a0ac-9b265e9e5af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5a:64:c7:09:27:2c:d8:18:17:57:ee:83:c1: 4f:3a:2e:f6:d5:d9:d1:d6:63:87:91:6a:6b:26:3b: 69:05:04:32:44:5d:6d:38:26:83:7e:fa:76:82:48: 62:b3:1f:c5:f7:85:93:9e:88:10:72:00:37:6a:ab: 1d:e6:72:c4:39:3d:8b:4c:0e:50:2c:a7:9d:9d:09: 16:e0:c7:ae:63:44:a7:76:fb:32:d2:b8:fe:64:c7: 78:55:e8:75:3b:e3:7c:f8:74:ce:33:8c:df:b6:d7: d0:73:2a:33:fc:8c:27:3d:3b:6b:a5:24:48:b9:0d: 03:a4:20:81:77:dc:6e:06:71:94:b5:a4:95:2a:0e: 7a:25:88:13:a4:2d:20:53:fa:02:c4:5f:fa:96:01: df:09:b5:b7:3c:f0:ff:ec:5e:69:bf:ba:e3:bf:2b: 6d:af:47:39:5e:97:9b:b1:8d:32:ab:06:9a:d5:13: 0d:9a:bf:79:35:87:eb:c5:35:74:69:c0:31:ed:2b: 8e:95:a5:32:df:6a:76:6e:36:bf:b0:f3:93:d1:56: 62:23:43:f9:be:44:54:2b:37:2c:30:8d:10:09:8a: 61:90:ba:6b:06:2e:a1:8d:5f:74:b6:19:d7:70:36: a3:33:d6:e3:57:6a:b1:dc:35:48:77:cb:cc:e4:5f: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5E:75:A3:E4:BE:29:4A:E2:A3:B0:64:75:F2:DC:35:6D:B9:BD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.crl X509v3 Authority Key Identifier: keyid:5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:52:7e:fe:b1:68:66:97:72:3e:63:fb:20:2c:a7:68:be:a8: 27:31:d7:c6:af:47:2b:c6:e1:25:84:07:a5:db:0d:e5:37:a6: 40:c0:ae:e9:58:23:ae:35:fd:ae:38:a6:f5:0d:fb:6a:38:55: a6:d7:3e:98:50:93:1e:37:ba:56:82:d6:87:9d:52:bf:9f:e5: 95:50:d7:2b:b7:ff:b5:0d:16:c2:57:ef:ea:ea:20:61:75:2c: 5b:90:49:38:94:cc:9e:b3:4c:8c:c4:77:3a:fb:68:5d:ed:c0: 7c:a9:5f:0e:40:41:13:e5:ab:eb:7c:a3:cf:21:4b:6d:df:8a: 5e:83:67:93:6b:06:07:98:79:80:28:cb:47:27:76:d3:f2:07: ba:33:08:25:10:40:e6:18:fb:d8:70:09:31:92:a0:f9:d3:3e: 9d:b5:3a:57:2a:17:44:21:78:fa:4d:f2:5b:ce:62:40:23:1c: fa:a4:ae:87:30:6f:46:00:ae:d8:ae:ea:12:af:5c:4f:ad:b5: 33:d8:d2:2a:d7:a2:59:f4:6f:11:47:94:4e:41:cd:38:53:72: 67:e1:9b:7b:56:ad:0d:2c:49:ab:b5:19:9c:7d:ce:c3:df:51: b0:ee:dc:4a:fe:6e:c7:e4:3e:88:34:a6:58:33:5b:c1:2e:d5: b9:33:05:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GC76/BY5ObyHRiHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FhODc3MWQtODFkNy00NzRlLThkMDItYjJjMjE1ZTUx MTAyMB4XDTI2MDMwMTEyMDAwM1oXDTI2MDMwNDEyMDAwMFowLzEtMCsGA1UEAxMk NGMyYjdmMGMtYTVlYi00ZmU4LWEwYWMtOWIyNjVlOWU1YWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVpkxwknLNgYF1fug8FPOi721dnR1mOHkWpr JjtpBQQyRF1tOCaDfvp2gkhisx/F94WTnogQcgA3aqsd5nLEOT2LTA5QLKednQkW 4MeuY0Sndvsy0rj+ZMd4Veh1O+N8+HTOM4zfttfQcyoz/IwnPTtrpSRIuQ0DpCCB d9xuBnGUtaSVKg56JYgTpC0gU/oCxF/6lgHfCbW3PPD/7F5pv7rjvyttr0c5Xpeb sY0yqwaa1RMNmr95NYfrxTV0acAx7SuOlaUy32p2bja/sPOT0VZiI0P5vkRUKzcs MI0QCYphkLprBi6hjV90thnXcDajM9bjV2qx3DVId8vM5F+0wQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKNedaPkvilK4qOwZHXy3DVtub2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWE4 NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVlNTExMDIvY2FhODc3MWQtODFkNy00 NzRlLThkMDItYjJjMjE1ZTUxMTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FhODc3MWQtODFkNy00NzRlLThk MDItYjJjMjE1ZTUxMTAyL2NhYTg3NzFkLTgxZDctNDc0ZS04ZDAyLWIyYzIxNWU1 MTEwMi5jcmwwHwYDVR0jBBgwFoAUWvsWnlpwW/ChpwXjWloJB6t5gnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMy MTVlNTExMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZUn7+sWhml3I+Y/sgLKdo vqgnMdfGr0crxuElhAel2w3lN6ZAwK7pWCOuNf2uOKb1DftqOFWm1z6YUJMeN7pW gtaHnVK/n+WVUNcrt/+1DRbCV+/q6iBhdSxbkEk4lMyes0yMxHc6+2hd7cB8qV8O QEET5avrfKPPIUtt34peg2eTawYHmHmAKMtHJ3bT8ge6MwglEEDmGPvYcAkxkqD5 0z6dtTpXKhdEIXj6TfJbzmJAIxz6pK6HMG9GAK7YruoSr1xPrbUz2NIq16JZ9G8R R5ROQc04U3Jn4Zt7Vq0NLEmrtRmcfc7D31Gw7txK/m7H5D6INKZYM1vBLtW5MwUo -----END CERTIFICATE-----Generated at Sun Mar 1 19:17:33 2026 by rpki-client