$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft File: 9f8abfb1-5f91-4570-a775-7435d3e52012.mft (raw, json) Hash identifier: i0vdZrJHV7M2KjOB03GYpgF4NGVdN+aNrF/llE6mw+4= Subject key identifier: 67:01:9C:72:E0:2A:80:62:56:B7:0D:00:4D:E7:CF:60:15:DD:FC:66 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584D4A35F3A271843B3DA2444700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft Manifest number: 010D0C9F4328584073A82D5F5401C587F87D9E2B Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 20ba3136-7192-3d31-ba1d-b329c8840df5.roa (hash: rNgA3kcookA1Y3YjJB5E52BRTpGsXVAhYNUaPh76QKE=) 2: 907a2032-3d7d-36e2-bc36-8924c1c162b7.roa (hash: wNdaPVQoBgM1L5NHYGperi8EBmBmBxfXa1vtml2hR9g=) 3: 9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa (hash: TdDYVg32QvWm95XIfEndKcapPtzv6vozYz9DZciDAu8=) 4: 9f8abfb1-5f91-4570-a775-7435d3e52012.crl (hash: iYNEYMnRoSZm3uPCniIsIWxkofT3NTXYaGPzIn4qn8c=) 5: e0533640-95af-39f9-bfa9-1881a9fbeefb.roa (hash: T5mA/DW9bg0g63/sc/xJaByjZBXj23wSXkqn5zbBJQA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f3:a2:71:84:3b:3d:a2:44:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=1406123b-7616-40b7-87f2-5644d79b8f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e7:34:6f:ca:15:20:a8:ae:1d:aa:76:e1:4a: 1e:a0:d8:ae:88:9d:f3:3b:ed:5c:41:9e:c8:1a:25: f5:51:3c:81:08:19:aa:41:4d:e3:66:73:83:24:81: 1a:ab:0f:d6:47:c8:97:6b:72:45:46:99:a8:52:fa: bf:86:ae:b0:83:ae:98:9d:a2:a0:3d:55:38:f8:a6: 2a:c1:c6:bf:b8:19:03:33:3b:15:f1:82:13:2e:06: 00:a5:70:48:ae:4b:d0:af:ec:8d:74:14:2b:1d:24: af:ba:ec:d1:d1:f6:07:12:71:cb:e4:bc:d6:63:91: f2:d2:df:1a:49:65:eb:a1:82:73:5e:78:e5:ee:09: 8a:4e:af:bc:fb:82:ff:af:49:db:11:35:3c:13:7f: b7:c4:1e:6f:8a:c5:63:1a:6a:e4:6a:68:eb:31:25: cb:60:f1:e4:09:b3:ad:cf:af:95:ef:3b:a3:5b:e1: 19:06:a7:71:19:bd:d3:b7:c2:1b:db:b2:49:fa:66: 8e:c8:a0:a5:5e:73:ad:d5:a9:80:af:28:fd:c7:62: d7:48:d0:31:83:f8:bd:53:d5:62:f0:0a:37:70:fe: bc:22:81:31:11:44:39:6a:da:fc:ee:2b:37:f2:91: 0f:59:47:96:b0:42:54:07:02:df:1b:09:ce:3f:1d: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:9C:72:E0:2A:80:62:56:B7:0D:00:4D:E7:CF:60:15:DD:FC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:65:b7:31:07:f1:fb:73:02:21:89:8e:e3:73:a8:07:cf:9d: 0f:35:a5:4b:03:df:81:38:da:17:21:ae:e0:5e:90:76:d2:29: 58:06:9e:e4:39:de:ab:15:d6:54:8f:5e:4e:42:3b:fa:64:be: fa:f1:2a:40:40:85:94:dd:b7:6d:7e:53:64:ee:b7:ce:b8:18: 44:16:47:df:77:09:39:75:cf:88:a2:26:ed:85:33:d3:89:00: a8:0f:0b:61:7d:e9:21:6c:b4:95:c2:32:0f:85:d4:83:ed:28: 92:22:b2:a7:52:07:08:14:b3:89:09:3a:8e:0f:46:5b:0a:f8: c1:ae:71:37:e7:60:6b:f6:bb:2d:52:b2:1f:ed:64:97:34:cd: 1c:b5:b9:a7:fe:47:52:2a:d6:43:1c:a1:1c:5f:55:1f:b0:bc: 33:f6:94:94:40:0e:2a:24:96:82:c6:e6:af:53:0e:5c:0c:61: 49:32:98:30:3b:3e:a1:4d:ab:bf:e8:45:01:5f:14:f7:a7:fa: 21:6e:a3:53:07:6e:11:49:37:7e:22:cf:6f:82:0c:79:da:eb: 93:00:11:43:73:61:55:d2:31:60:0a:45:c2:b0:b4:ce:16:e2: 80:12:69:69:4c:8a:c9:b9:ce:2b:13:de:41:3e:e9:0f:cf:c8: a6:26:8d:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfOicYQ7PaJERwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk MTQwNjEyM2ItNzYxNi00MGI3LTg3ZjItNTY0NGQ3OWI4ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOc0b8oVIKiuHap24UoeoNiuiJ3zO+1cQZ7I GiX1UTyBCBmqQU3jZnODJIEaqw/WR8iXa3JFRpmoUvq/hq6wg66YnaKgPVU4+KYq wca/uBkDMzsV8YITLgYApXBIrkvQr+yNdBQrHSSvuuzR0fYHEnHL5LzWY5Hy0t8a SWXroYJzXnjl7gmKTq+8+4L/r0nbETU8E3+3xB5visVjGmrkamjrMSXLYPHkCbOt z6+V7zujW+EZBqdxGb3Tt8Ib27JJ+maOyKClXnOt1amAryj9x2LXSNAxg/i9U9Vi 8Ao3cP68IoExEUQ5atr87is38pEPWUeWsEJUBwLfGwnOPx3lOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGcBnHLgKoBiVrcNAE3nz2AV3fxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOWY4YWJmYjEtNWY5MS00 NTcwLWE3NzUtNzQzNWQzZTUyMDEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUZbcxB/H7cwIhiY7jc6gH z50PNaVLA9+BONoXIa7gXpB20ilYBp7kOd6rFdZUj15OQjv6ZL768SpAQIWU3bdt flNk7rfOuBhEFkffdwk5dc+IoibthTPTiQCoDwthfekhbLSVwjIPhdSD7SiSIrKn UgcIFLOJCTqOD0ZbCvjBrnE352Br9rstUrIf7WSXNM0ctbmn/kdSKtZDHKEcX1Uf sLwz9pSUQA4qJJaCxuavUw5cDGFJMpgwOz6hTau/6EUBXxT3p/ohbqNTB24RSTd+ Is9vggx52uuTABFDc2FV0jFgCkXCsLTOFuKAEmlpTIrJuc4rE95BPukPz8imJo0A -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:30 2026 by rpki-client