$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft File: 8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft (raw, json) Hash identifier: 7H/RCHUExBb9I8u+mlYKICBAI48t5TAfZyO6HSPGFIY= Subject key identifier: BA:1A:97:75:87:12:D6:B9:A5:E8:09:86:8C:65:68:54:C8:A0:37:41 Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 Certificate issuer: /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Certificate serial: 010D0C9F4328584D49FA72AC1DC86ADEC3F45540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft Manifest number: 010D0C9F4328584073A826DE89D6DEF45FFDEF2C Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl (hash: jOKv9bxWpr13ocu1jSjqftfAd6CaTLkM8Y8gsYRs3mU=) 2: 9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (hash: mT/y3EPyxSO0gtZcDc7ma/hdRLolWsw55BuA6RFySEc=) 3: a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa (hash: MzVIy74xTusgmXNTrVnABULLbmn0DCEIDPRa1QZ6NWs=) 4: e5c86172-2a9c-3e75-9dfb-b0bb48de9187.roa (hash: 71cgY/c+4ATY6NwKrQZrzhQKW/TcrPHKgdNHdYEZOyw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:72:ac:1d:c8:6a:de:c3:f4:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=fb09cae2-e7ba-4267-b466-3bd99db2a932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3b:ec:8e:8f:48:2a:05:08:fd:1c:06:b9:f7: f5:18:9e:b5:27:60:65:e6:5b:08:0d:a7:31:0a:0c: 49:56:fd:88:54:bc:7a:90:d5:c3:1f:7a:7a:77:18: ef:b0:4e:7c:b5:37:78:65:70:d2:6d:f7:bd:3c:d1: e6:27:7f:b8:64:51:15:4e:27:03:61:86:82:14:40: b8:cf:40:74:1b:f1:05:05:fc:54:ff:eb:c9:9c:b8: b1:e1:89:fb:dc:46:b9:32:0b:c9:a6:10:fa:ff:fb: c5:59:39:55:0f:bb:4d:60:3a:7a:bf:12:8f:10:62: f6:a4:10:32:fa:e3:5d:3e:27:77:74:d3:20:07:c1: 2b:ee:1c:aa:83:6b:50:b1:8d:48:f5:7e:e2:19:da: 80:93:19:bf:9a:b3:21:3b:21:94:37:ee:8c:ee:e5: b1:c5:1b:8d:a1:4e:d1:31:2e:6d:21:6b:72:81:be: c9:f4:fb:f9:62:56:f7:c1:28:a7:10:75:d9:c7:91: 07:cc:62:83:c6:58:b2:11:0d:0d:a2:29:1e:5b:61: df:79:83:34:50:ba:7a:bd:7a:1f:9c:0e:ab:49:1c: 21:cb:6b:56:81:24:6f:c4:57:99:65:7d:3a:da:b9: 51:0e:d7:04:02:da:a6:d9:ef:7c:75:a3:69:22:70: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1A:97:75:87:12:D6:B9:A5:E8:09:86:8C:65:68:54:C8:A0:37:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl X509v3 Authority Key Identifier: keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:43:75:9c:7b:d5:05:1a:22:d5:81:59:0a:d4:d7:42:44:28: 73:cc:56:63:98:0c:87:7c:51:10:24:3e:72:0d:c7:6a:aa:d3: 4c:90:d8:ae:66:6e:14:9a:22:df:01:15:b8:24:fb:f2:bb:cb: e8:40:4c:f7:ba:7c:9d:4c:27:0c:b6:e5:8d:a9:68:cd:95:1c: 9f:7a:54:0b:de:cd:86:88:74:3d:2c:5d:bb:bf:b2:44:2e:c3: 92:a1:61:47:41:33:12:cd:fa:26:6a:b9:ca:8f:be:f1:83:b4: d5:52:99:49:07:90:03:b9:ab:8c:4e:ab:f6:55:41:e4:41:3b: 66:43:9b:f3:ca:2c:74:16:fa:19:b4:83:7a:15:36:c2:15:08: 66:9e:c1:bf:6b:57:ff:dd:0d:65:ba:3e:f2:4d:e6:6d:c9:40: d0:e2:12:58:bf:ac:30:bd:68:d2:61:7d:92:0c:41:b4:4d:c1: 20:3e:57:64:06:d4:e3:ac:a8:d9:e9:fa:36:ca:95:fc:31:97: db:c4:08:3a:25:77:01:76:0b:e8:57:89:8a:29:f1:ec:97:bd: 4b:82:ae:5e:b0:e9:ea:55:97:59:d3:26:fb:33:e7:39:93:fd: 9c:e2:6e:9b:99:1a:67:7d:8a:76:e9:48:13:bf:b2:59:d8:f4: 69:3a:0c:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nKsHchq3sP0VUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMzNmEyYjgtNDJjMy00MmZhLTgzNWUtNDliMjYxMmNj MjlhMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk ZmIwOWNhZTItZTdiYS00MjY3LWI0NjYtM2JkOTlkYjJhOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zvsjo9IKgUI/RwGuff1GJ61J2Bl5lsIDacx CgxJVv2IVLx6kNXDH3p6dxjvsE58tTd4ZXDSbfe9PNHmJ3+4ZFEVTicDYYaCFEC4 z0B0G/EFBfxU/+vJnLix4Yn73Ea5MgvJphD6//vFWTlVD7tNYDp6vxKPEGL2pBAy +uNdPid3dNMgB8Er7hyqg2tQsY1I9X7iGdqAkxm/mrMhOyGUN+6M7uWxxRuNoU7R MS5tIWtygb7J9Pv5Ylb3wSinEHXZx5EHzGKDxliyEQ0NoikeW2HfeYM0ULp6vXof nA6rSRwhy2tWgSRvxFeZZX062rlRDtcEAtqm2e98daNpInBHeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLoal3WHEta5pegJhoxlaFTIoDdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2 YTJiOC00MmMzLTQyZmEtODM1ZS00OWIyNjEyY2MyOWEvOGMzNmEyYjgtNDJjMy00 MmZhLTgzNWUtNDliMjYxMmNjMjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGMzNmEyYjgtNDJjMy00MmZhLTgz NWUtNDliMjYxMmNjMjlhLzhjMzZhMmI4LTQyYzMtNDJmYS04MzVlLTQ5YjI2MTJj YzI5YS5jcmwwHwYDVR0jBBgwFoAUiksEFIeDRSBp0+MZIK/tC2IZO2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2YTJiOC00MmMzLTQyZmEtODM1ZS00OWIy NjEyY2MyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzQ3Wce9UFGiLVgVkK1NdC RChzzFZjmAyHfFEQJD5yDcdqqtNMkNiuZm4UmiLfARW4JPvyu8voQEz3unydTCcM tuWNqWjNlRyfelQL3s2GiHQ9LF27v7JELsOSoWFHQTMSzfomarnKj77xg7TVUplJ B5ADuauMTqv2VUHkQTtmQ5vzyix0FvoZtIN6FTbCFQhmnsG/a1f/3Q1luj7yTeZt yUDQ4hJYv6wwvWjSYX2SDEG0TcEgPldkBtTjrKjZ6fo2ypX8MZfbxAg6JXcBdgvo V4mKKfHsl71Lgq5esOnqVZdZ0yb7M+c5k/2c4m6bmRpnfYp26UgTv7JZ2PRpOgzE -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:40 2026 by rpki-client