$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft File: ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft (raw, json) Hash identifier: Ngr1Mc1OtbxJ/t9DrytjrwiVsAixpV39wuw+1MNrP0U= Subject key identifier: 4D:1E:65:C0:23:1C:B9:2E:20:79:E0:A4:BA:4B:9F:20:06:81:64:D2 Authority key identifier: 23:25:61:E2:AD:2F:59:83:6C:AA:C8:B6:9C:96:D0:39:C6:A1:31:39 Certificate issuer: /CN=ca5d839b-d64f-4e83-8f70-c4cca4144dc1 Certificate serial: 010D0C9F4328584D051D91FA359729FEA5B43B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft Manifest number: 010D0C9F4328584CD5C0C011BF69EF1C88EE83D1 Signing time: Sun 01 Mar 2026 04:00:08 +0000 Manifest this update: Sun 01 Mar 2026 04:00:08 +0000 Manifest next update: Tue 03 Mar 2026 04:00:00 +0000 Files and hashes: 1: 793aabb5-54c2-34e2-827f-f393e893c9d6.roa (hash: OcCMKOdiUn8u1Tm4GzdOLWJ0qKSvxXZyqurt4kwg0CE=) 2: ca5d839b-d64f-4e83-8f70-c4cca4144dc1.crl (hash: sxREHl2ump/lQaUuKeZXHhnYXbfy3ysvNf51CbDMF/M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:1d:91:fa:35:97:29:fe:a5:b4:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5d839b-d64f-4e83-8f70-c4cca4144dc1 Validity Not Before: Mar 1 04:00:08 2026 GMT Not After : Mar 3 04:00:00 2026 GMT Subject: CN=06d1009d-5081-4663-9c2d-5d9af143d29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:43:3e:26:7e:33:b5:85:1b:a1:95:97:25: fb:c7:c2:55:26:df:34:0e:a3:ac:33:20:3a:0b:95: 16:d3:bd:a2:60:1b:bb:1e:3b:79:78:f8:36:a2:3e: 32:b2:44:cb:fd:75:f6:c6:50:e3:14:66:88:57:bb: 50:91:a2:4f:a2:63:f5:7e:75:01:95:2b:ee:f7:61: 35:a8:71:c5:da:71:5e:e6:69:01:7e:1c:61:2e:1f: b5:9b:f2:bd:83:4b:e9:53:4d:a7:58:a1:90:d3:1d: 0c:7c:69:7c:ff:97:31:f4:27:65:84:70:94:3f:50: 91:b5:81:53:a0:35:f4:24:37:21:28:38:63:74:53: 0b:37:63:82:5d:63:eb:40:cc:77:c3:a1:35:7f:48: 50:44:06:a6:be:e8:ba:5c:90:f3:7b:08:0e:98:a1: b2:79:a6:41:84:6e:9c:29:da:14:ed:20:41:a4:da: c5:a3:cd:b5:36:fc:f5:6f:61:2b:aa:50:80:e5:99: 15:4c:28:14:0e:66:4a:6b:95:16:82:77:34:e9:92: 30:5a:3e:19:15:d7:cc:9b:39:5e:15:75:b1:c0:35: 57:a5:85:e8:20:c3:36:5e:43:6f:67:b0:cc:a1:28: ba:76:90:87:32:55:7d:fd:97:4a:a5:f9:43:ca:8d: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1E:65:C0:23:1C:B9:2E:20:79:E0:A4:BA:4B:9F:20:06:81:64:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.crl X509v3 Authority Key Identifier: keyid:23:25:61:E2:AD:2F:59:83:6C:AA:C8:B6:9C:96:D0:39:C6:A1:31:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ca5d839b-d64f-4e83-8f70-c4cca4144dc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:17:b8:0d:dd:59:9b:75:0a:54:b0:cc:80:9d:21:c5:e0:31: 22:ef:95:37:3f:b7:75:c6:8e:0a:c9:a6:94:6a:6c:25:db:5b: ab:58:89:86:39:0e:64:dd:84:e6:83:a5:05:9e:fc:fa:fd:8d: 0f:af:1c:a5:09:47:35:79:ae:c6:9c:87:8d:77:9a:b9:9f:65: 37:c1:b9:36:d0:0a:5a:4c:cd:6b:c7:9b:0b:b1:39:30:4b:4d: 46:f9:86:68:4d:f9:06:6b:57:14:3e:7e:2d:52:ac:13:00:dd: 3d:1a:04:f5:07:1f:7f:ed:87:60:52:38:ed:3a:7a:79:e8:ca: e3:e7:2b:29:a6:9c:39:4b:e8:bf:42:ce:01:87:1c:24:a3:8a: c1:f0:0f:d4:4e:c0:db:25:ca:86:db:3c:15:2a:d1:0e:c9:f0: f8:a4:69:28:73:74:cb:90:91:84:49:70:ac:f3:de:8b:5c:51: e3:02:67:74:75:05:4b:f4:0a:12:72:51:26:d4:8a:2e:c6:21: 0b:be:ad:1d:41:c6:36:7d:a2:c8:ca:30:36:c8:d7:2e:a4:ab: 3b:da:02:5c:14:f3:c3:bf:22:a7:db:06:66:c1:8d:e3:98:a5: 9f:1d:d7:9c:e4:17:30:03:3c:47:64:62:40:e1:da:59:bf:4f: 0b:af:40:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FHZH6NZcp/qW0OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E1ZDgzOWItZDY0Zi00ZTgzLThmNzAtYzRjY2E0MTQ0 ZGMxMB4XDTI2MDMwMTA0MDAwOFoXDTI2MDMwMzA0MDAwMFowLzEtMCsGA1UEAxMk MDZkMTAwOWQtNTA4MS00NjYzLTljMmQtNWQ5YWYxNDNkMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eBDPiZ+M7WFG6GVlyX7x8JVJt80DqOsMyA6 C5UW072iYBu7Hjt5ePg2oj4yskTL/XX2xlDjFGaIV7tQkaJPomP1fnUBlSvu92E1 qHHF2nFe5mkBfhxhLh+1m/K9g0vpU02nWKGQ0x0MfGl8/5cx9CdlhHCUP1CRtYFT oDX0JDchKDhjdFMLN2OCXWPrQMx3w6E1f0hQRAamvui6XJDzewgOmKGyeaZBhG6c KdoU7SBBpNrFo821Nvz1b2ErqlCA5ZkVTCgUDmZKa5UWgnc06ZIwWj4ZFdfMmzle FXWxwDVXpYXoIMM2XkNvZ7DMoSi6dpCHMlV9/ZdKpflDyo2vpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE0eZcAjHLkuIHngpLpLnyAGgWTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jYTVk ODM5Yi1kNjRmLTRlODMtOGY3MC1jNGNjYTQxNDRkYzEvY2E1ZDgzOWItZDY0Zi00 ZTgzLThmNzAtYzRjY2E0MTQ0ZGMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2E1ZDgzOWItZDY0Zi00ZTgzLThm NzAtYzRjY2E0MTQ0ZGMxL2NhNWQ4MzliLWQ2NGYtNGU4My04ZjcwLWM0Y2NhNDE0 NGRjMS5jcmwwHwYDVR0jBBgwFoAUIyVh4q0vWYNsqsi2nJbQOcahMTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jYTVkODM5Yi1kNjRmLTRlODMtOGY3MC1jNGNj YTQxNDRkYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRF7gN3VmbdQpUsMyAnSHF 4DEi75U3P7d1xo4KyaaUamwl21urWImGOQ5k3YTmg6UFnvz6/Y0PrxylCUc1ea7G nIeNd5q5n2U3wbk20ApaTM1rx5sLsTkwS01G+YZoTfkGa1cUPn4tUqwTAN09GgT1 Bx9/7YdgUjjtOnp56Mrj5yspppw5S+i/Qs4Bhxwko4rB8A/UTsDbJcqG2zwVKtEO yfD4pGkoc3TLkJGESXCs896LXFHjAmd0dQVL9AoSclEm1IouxiELvq0dQcY2faLI yjA2yNcupKs72gJcFPPDvyKn2wZmwY3jmKWfHdec5BcwAzxHZGJA4dpZv08Lr0CD -----END CERTIFICATE-----Generated at Sun Mar 1 18:07:22 2026 by rpki-client