$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.mft (raw, json) Hash identifier: w04qTzjVauE5j7ZgyEPqBIdqbKZ4avL7YExQnxpEPE8= Subject key identifier: F5:C9:FC:0D:D8:FB:46:18:09:ED:2F:61:E6:5F:5F:44:2C:E3:43:57 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584D4B41F4CAFD30E768210C9400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft Manifest number: 010D0C9F4328584073A843E7CFB37A94E46CAD92 Signing time: Thu 26 Mar 2026 07:00:04 +0000 Manifest this update: Thu 26 Mar 2026 07:00:04 +0000 Manifest next update: Sat 28 Mar 2026 07:00:00 +0000 Files and hashes: 1: 1a8794d9-eb16-4b3c-b869-96971b72a93b.crl (hash: 5uf1WBsJtwbtPVHCWaFfzwvEW0G/SIuVfnwuhORIfM4=) 2: 67aa11e0-08b1-3729-8732-afed74543a62.roa (hash: nQSMNZpN3rAO6Bc04HdXj+uxEaxxA9R2H1NMNw28/rc=) 3: b529d2af-47b9-3c02-92c0-0e879bd78302.roa (hash: 3EUOGNSU3u+loea0nhvAAs/DNw7uNkSrDSlwAU3P4s0=) 4: ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa (hash: AmZiKY42SpiPGJ0OKeCHZmWzuBGB0bCeIu3A23eH5K4=) 5: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (hash: iVnbsISO4VruWHDrNMVkHoDPcRwcS9vjXUvDS6nD8pk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:41:f4:ca:fd:30:e7:68:21:0c:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Mar 26 07:00:04 2026 GMT Not After : Mar 28 07:00:00 2026 GMT Subject: CN=d6df4c2b-be04-4326-bbba-badaca4d878b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:86:19:5c:7f:18:c0:8a:b6:5c:21:56:86: fa:4c:13:8d:82:da:34:aa:e0:91:38:2c:ad:01:48: 97:73:5f:5d:c5:71:88:09:e6:b4:c1:ad:2b:f4:0c: 6e:2b:5c:89:35:6f:90:24:c3:5a:eb:c8:f4:bc:8a: 25:e3:e3:c7:fb:5a:b9:3a:9f:01:46:ce:8d:28:f7: fc:f5:1a:04:75:52:39:36:26:c8:be:1f:8f:08:14: d3:36:69:17:b1:7c:32:ce:f1:7c:d5:ed:ed:3e:3e: 52:4e:be:1d:c6:25:e4:eb:8e:51:be:6d:e0:2d:b3: 42:3d:20:bc:d3:3d:21:50:c9:02:40:5c:0d:86:4b: 47:22:7a:d4:ee:fb:fb:7a:54:2f:79:a9:b1:a6:fe: ae:39:24:05:2d:5c:5d:f9:d3:fe:2e:82:86:7a:25: d1:11:f3:be:7c:80:17:19:13:75:ca:bc:5a:83:bc: 86:6b:77:0b:6b:30:54:9b:26:fa:a0:56:ee:97:38: fe:6f:de:ce:90:a2:c1:66:cc:42:ac:18:63:b7:3f: 9e:0d:74:d1:0a:08:d8:dc:39:38:80:4e:e3:8f:e2: d6:71:e7:d4:34:11:a2:99:78:e0:d4:e6:d3:ca:72: 61:02:43:d0:ad:af:04:a3:94:3c:9d:bf:06:c3:20: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C9:FC:0D:D8:FB:46:18:09:ED:2F:61:E6:5F:5F:44:2C:E3:43:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d3:ba:76:9e:be:3e:b7:5b:10:1f:33:0d:8a:fd:1b:17:9b: cb:5d:48:49:f3:02:47:4f:29:50:8d:04:ac:87:9a:8d:d3:dc: ec:bb:cd:6a:f1:4f:7b:08:c2:04:6a:41:61:14:60:b0:b0:41: 83:8f:f4:13:0f:79:4b:7c:0a:45:9e:34:12:4c:18:1e:4e:d5: be:78:b4:3c:80:99:5d:31:7f:0f:05:fb:6b:bd:16:71:91:34: c7:bc:5c:94:f3:b8:bd:91:49:d4:12:16:5a:62:a9:2d:61:2e: 81:f9:6f:f3:32:80:b8:ad:26:cc:3e:11:b4:47:f2:3b:32:bd: 13:dd:d6:e3:49:62:62:b3:aa:7d:ad:ec:4d:0c:c3:4a:ec:95: 44:71:1a:0e:14:6e:68:92:f8:44:90:95:bc:f2:b1:a5:b5:1b: ee:df:d7:09:d2:93:72:e9:c7:61:83:0a:47:ff:50:7c:8c:93: 33:ba:3c:be:40:4b:76:91:5b:c1:cf:b6:c5:ba:a8:52:07:d6: 95:00:bf:9a:6f:61:65:1e:3c:8a:ac:58:ca:24:55:ef:3b:40: 6c:47:47:a3:0c:23:02:c6:4a:bc:81:26:39:30:f3:cb:c7:78: ad:da:16:5d:20:08:9e:f7:bd:1b:97:c5:89:30:dc:05:52:c9: 89:53:ce:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LQfTK/TDnaCEMlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDMyNjA3MDAwNFoXDTI2MDMyODA3MDAwMFowLzEtMCsGA1UEAxMk ZDZkZjRjMmItYmUwNC00MzI2LWJiYmEtYmFkYWNhNGQ4NzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsiGGVx/GMCKtlwhVob6TBONgto0quCROCyt AUiXc19dxXGICea0wa0r9AxuK1yJNW+QJMNa68j0vIol4+PH+1q5Op8BRs6NKPf8 9RoEdVI5NibIvh+PCBTTNmkXsXwyzvF81e3tPj5STr4dxiXk645Rvm3gLbNCPSC8 0z0hUMkCQFwNhktHInrU7vv7elQveamxpv6uOSQFLVxd+dP+LoKGeiXREfO+fIAX GRN1yrxag7yGa3cLazBUmyb6oFbulzj+b97OkKLBZsxCrBhjtz+eDXTRCgjY3Dk4 gE7jj+LWcefUNBGimXjg1ObTynJhAkPQra8Eo5Q8nb8GwyA0KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPXJ/A3Y+0YYCe0vYeZfX0Qs40NXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMWE4Nzk0ZDktZWIxNi00 YjNjLWI4NjktOTY5NzFiNzJhOTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCC07p2nr4+t1sQHzMNiv0b F5vLXUhJ8wJHTylQjQSsh5qN09zsu81q8U97CMIEakFhFGCwsEGDj/QTD3lLfApF njQSTBgeTtW+eLQ8gJldMX8PBftrvRZxkTTHvFyU87i9kUnUEhZaYqktYS6B+W/z MoC4rSbMPhG0R/I7Mr0T3dbjSWJis6p9rexNDMNK7JVEcRoOFG5okvhEkJW88rGl tRvu39cJ0pNy6cdhgwpH/1B8jJMzujy+QEt2kVvBz7bFuqhSB9aVAL+ab2FlHjyK rFjKJFXvO0BsR0ejDCMCxkq8gSY5MPPLx3it2hZdIAie970bl8WJMNwFUsmJU87N -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:08 2026 by rpki-client