$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft File: 2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft (raw, json) Hash identifier: a9FEFg6GkRo4Q80R6XLaWGWg++7Hj31nP7Dvm4N2Ycs= Subject key identifier: 43:D4:60:CF:C9:4F:C0:64:76:B1:F7:07:49:4B:69:29:E1:0F:82:70 Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Certificate issuer: /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Certificate serial: 010D0C9F4328584D4A183CF098DA638152880D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft Manifest number: 010D0C9F4328584073A828B8E1C4096FC55A83D0 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl (hash: M6BizU371ah7tK/6SFvmNEdDYQR7aj1P+k5cKjVM5fw=) 2: 340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa (hash: EfE65g0b8O94e2FAISHRsxu8Qx30GPMg26NlMZGQC1o=) 3: 47c9278e-dc66-39c2-884a-deec4ee4f615.roa (hash: dfcoZkP5MlJ9jruS9XMr8SSemx0TTNMY1qnL99xHZXo=) 4: b39ed084-6335-3303-91cb-d4bd54f999ee.roa (hash: MwM+dJoQoPW0QK00KICztfE311JEqRwZ2uOseqjVtOU=) 5: b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa (hash: DmEGVSO+bXz2n1Y+QEvuk2xV4t9wgX9Ok3apgvi9mlE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3c:f0:98:da:63:81:52:88:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=6d02d6ad-0531-4591-8bb5-b3d6f3e65b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:33:c9:d8:b1:b7:b2:d1:8e:8c:f4:72:45: 44:3e:37:49:07:85:e2:13:9e:e7:f4:cf:26:f5:43: 31:c0:c7:b2:2c:3e:49:83:d0:0b:4b:a7:df:6b:70: 05:22:98:a5:f2:d2:d2:20:42:10:7a:c8:d3:6b:74: fe:9e:b5:c1:3f:c8:46:33:71:8b:bd:18:47:b5:49: 61:ba:6f:98:bd:f4:c3:b4:d0:24:dd:b0:d1:d2:0d: 28:c3:ce:8b:dd:0a:c8:ad:43:fb:9d:59:0b:58:da: eb:b9:79:3d:b8:5f:98:d4:02:c0:73:16:34:74:3f: 05:ee:21:3d:0f:77:9f:82:7e:8e:e0:53:f9:0e:34: 3e:b0:21:74:6e:3d:45:aa:16:b7:c8:bd:84:23:9d: db:96:67:95:81:99:d6:96:34:d3:ef:a6:f3:aa:2d: a5:92:e3:cb:c7:b9:46:37:70:f8:58:f4:24:c1:76: fa:2a:81:01:ad:de:c0:9c:b1:29:7e:96:46:2e:c6: 98:ba:7e:0c:42:3a:1a:42:d4:33:c4:7c:b8:b1:dd: 1f:a3:b1:f1:f8:82:8f:9c:5d:eb:d4:a8:90:1a:1b: d2:e1:89:29:13:47:39:d1:8f:4f:42:26:21:4c:1f: 00:6a:c8:8a:c7:b1:90:71:95:d4:6b:08:f3:40:9b: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:60:CF:C9:4F:C0:64:76:B1:F7:07:49:4B:69:29:E1:0F:82:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl X509v3 Authority Key Identifier: keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:65:a8:f1:8d:17:43:92:af:98:9f:d3:3c:02:a1:4f:47:8c: 6b:08:f7:48:1b:d4:b0:7a:9b:4d:93:b4:9f:5e:1d:a7:71:17: b5:45:49:19:70:e5:db:ab:7e:69:ba:b9:79:1e:d8:d2:67:87: 9c:98:e7:33:7d:0c:1d:da:84:98:0c:46:72:d7:20:a6:f6:55: df:a2:82:8d:14:b0:d8:cc:48:da:32:74:91:95:e7:5b:20:42: db:34:9b:31:8e:cc:7f:2f:9f:9a:1a:cb:98:31:94:d7:6e:ae: a8:e8:da:0c:17:f8:aa:e7:08:aa:9f:69:9a:4d:af:c4:f8:29: df:b0:e5:e7:22:74:78:3f:89:ef:87:7e:0a:a6:9a:aa:63:8b: 09:37:8b:39:8f:ef:8f:72:ea:c7:c2:5b:53:8a:36:59:fe:1c: b4:3f:c6:0d:c1:8a:3b:ac:3a:82:ad:31:26:6b:59:46:25:2f: ec:bb:0c:25:6f:36:bf:6f:bd:d6:65:3d:ee:0f:9e:b2:b7:50: dd:89:f4:a6:c0:32:4f:ad:c8:a6:ee:68:17:54:11:8c:7a:29: 1f:f5:fa:b7:e9:7c:f9:21:47:81:2c:ac:4c:93:b0:55:3e:ed: 73:de:cd:88:19:f8:fa:d4:a0:b3:5b:2b:94:a3:63:9a:6e:15: bf:b1:ed:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDzwmNpjgVKIDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlYTRmNmEtYmI0ZS00NmJlLWIzMjctMzMwYmY4Zjdl MjA5MB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk NmQwMmQ2YWQtMDUzMS00NTkxLThiYjUtYjNkNmYzZTY1YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR4zydixt7LRjoz0ckVEPjdJB4XiE57n9M8m 9UMxwMeyLD5Jg9ALS6ffa3AFIpil8tLSIEIQesjTa3T+nrXBP8hGM3GLvRhHtUlh um+YvfTDtNAk3bDR0g0ow86L3QrIrUP7nVkLWNrruXk9uF+Y1ALAcxY0dD8F7iE9 D3efgn6O4FP5DjQ+sCF0bj1Fqha3yL2EI53blmeVgZnWljTT76bzqi2lkuPLx7lG N3D4WPQkwXb6KoEBrd7AnLEpfpZGLsaYun4MQjoaQtQzxHy4sd0fo7Hx+IKPnF3r 1KiQGhvS4YkpE0c50Y9PQiYhTB8AasiKx7GQcZXUawjzQJtB3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEPUYM/JT8BkdrH3B0lLaSnhD4JwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVh NGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhmN2UyMDkvMmZlYTRmNmEtYmI0ZS00 NmJlLWIzMjctMzMwYmY4ZjdlMjA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmZlYTRmNmEtYmI0ZS00NmJlLWIz MjctMzMwYmY4ZjdlMjA5LzJmZWE0ZjZhLWJiNGUtNDZiZS1iMzI3LTMzMGJmOGY3 ZTIwOS5jcmwwHwYDVR0jBBgwFoAURri9dl6NDsmaHWINCw4t6L5O1xEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBi ZjhmN2UyMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCZajxjRdDkq+Yn9M8AqFP R4xrCPdIG9SweptNk7SfXh2ncRe1RUkZcOXbq35purl5HtjSZ4ecmOczfQwd2oSY DEZy1yCm9lXfooKNFLDYzEjaMnSRledbIELbNJsxjsx/L5+aGsuYMZTXbq6o6NoM F/iq5wiqn2maTa/E+CnfsOXnInR4P4nvh34KppqqY4sJN4s5j++PcurHwltTijZZ /hy0P8YNwYo7rDqCrTEma1lGJS/suwwlbza/b73WZT3uD56yt1DdifSmwDJPrcim 7mgXVBGMeikf9fq36Xz5IUeBLKxMk7BVPu1z3s2IGfj61KCzWyuUo2OabhW/se1M -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:34 2026 by rpki-client