$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft File: 70379220-49c0-45f2-94d3-098a72b1db54.mft (raw, json) Hash identifier: bYh+yE1sbbmVqeQjYkf7bnHy5DkfkbCbDZbX3fXl81Q= Subject key identifier: 8C:D0:1C:25:09:BC:6F:0B:EA:7B:AB:79:89:4D:ED:34:7F:47:C6:92 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584D48950D260DA4A8B958B02D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft Manifest number: 010D0C9F4328584073A8486C280EC1A7EB0C051D Signing time: Wed 25 Mar 2026 08:00:04 +0000 Manifest this update: Wed 25 Mar 2026 08:00:04 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (hash: b1t4fDOpkBr3rLvEqWNvxEwtSV7JaRMBLJT5kk2Ydng=) 2: 70379220-49c0-45f2-94d3-098a72b1db54.crl (hash: IeVQpOEbCk8xcEzhPc+zL10gHXt8N7p0UoPImdN0mV0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:95:0d:26:0d:a4:a8:b9:58:b0:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Mar 25 08:00:04 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=86e00d3f-e3c1-4a2c-a094-a09e04004fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:76:2c:07:2b:3f:0c:e9:63:ea:5f:59:84: f0:43:5f:65:9e:90:73:ce:fe:77:76:4a:7b:7d:ca: c5:8b:32:df:38:d1:00:81:22:88:78:d9:c9:53:e9: 25:b9:ab:e7:50:c3:f0:64:a1:d8:ea:e0:42:e0:93: 80:bc:ca:bd:65:07:da:6f:2b:7c:26:15:9a:54:26: 4b:39:af:c8:9a:de:a3:a6:d0:3b:de:ce:20:ad:39: 1a:83:39:a9:d3:ae:86:d2:4c:56:82:ea:a4:f1:2e: 49:c7:46:8a:b6:2c:e1:47:59:f6:5c:a9:95:42:b9: 1d:f5:54:40:8d:a6:5d:a4:9e:88:bb:da:c7:d3:a3: a1:d7:50:bc:24:bd:09:75:d0:f3:b0:2f:58:28:01: e6:81:9a:31:46:0a:3f:32:83:ed:44:86:3e:59:eb: e2:ce:64:3e:82:e2:af:e0:12:0f:f4:15:9d:de:5c: 1e:06:50:ee:07:a9:91:1f:a3:24:d4:e4:4a:36:1b: 6f:d1:80:04:a1:43:a8:4d:c4:9a:33:7a:23:e5:4b: 6c:6e:59:02:9d:b7:86:57:b3:3e:2a:5b:9a:58:b4: ca:c2:61:6d:a4:ea:03:88:48:cb:48:7e:57:96:2c: e0:ec:74:50:ec:50:49:28:b3:8a:e2:05:c0:28:51: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:1C:25:09:BC:6F:0B:EA:7B:AB:79:89:4D:ED:34:7F:47:C6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:44:e6:6c:0b:dd:4f:f2:f4:8a:de:c2:81:11:3d:69:c6:2f: e7:d1:c7:9f:2a:c5:c3:75:63:db:4c:71:46:08:e3:9a:2b:6f: b3:13:65:11:73:80:c4:91:30:ce:f6:fe:98:1a:7e:b2:cc:a1: 73:d6:9a:b6:74:29:75:42:a6:38:3a:78:55:76:f1:78:5e:f9: 44:e3:66:e4:cb:3a:ac:76:1b:5a:8b:c4:b7:6b:b3:99:cd:a9: 3c:87:03:2e:34:3d:db:fd:2c:06:59:aa:e9:4a:6c:58:e7:e0: 4c:d1:0f:60:63:cb:db:8f:02:08:ac:7e:fe:ed:1a:aa:66:dd: 9c:61:e9:99:71:17:4a:00:30:b3:53:68:61:7c:f7:e0:69:82: af:f9:74:e3:44:25:bb:49:8a:6d:d6:b2:f3:cd:bb:27:df:dc: fc:17:d2:c4:f1:bf:06:e3:a7:7b:7c:62:e4:60:88:14:b4:aa: 09:32:3f:85:ce:f5:a9:e8:eb:11:83:a7:71:3e:9a:0e:a8:db: 58:7d:a5:f3:7c:33:3d:fc:70:9d:f6:62:24:83:dc:8a:ec:85: 27:26:f4:54:d6:ad:ef:5b:07:2e:3f:38:77:dd:af:f9:84:ea: 2d:72:9f:41:65:78:3e:3d:b4:83:7d:ba:9f:a8:a7:e3:ac:80: 32:3d:3b:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IlQ0mDaSouViwLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI2MDMyNTA4MDAwNFoXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk ODZlMDBkM2YtZTNjMS00YTJjLWEwOTQtYTA5ZTA0MDA0ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQZ2LAcrPwzpY+pfWYTwQ19lnpBzzv53dkp7 fcrFizLfONEAgSKIeNnJU+kluavnUMPwZKHY6uBC4JOAvMq9ZQfabyt8JhWaVCZL Oa/Imt6jptA73s4grTkagzmp066G0kxWguqk8S5Jx0aKtizhR1n2XKmVQrkd9VRA jaZdpJ6Iu9rH06Oh11C8JL0JddDzsC9YKAHmgZoxRgo/MoPtRIY+WevizmQ+guKv 4BIP9BWd3lweBlDuB6mRH6Mk1ORKNhtv0YAEoUOoTcSaM3oj5UtsblkCnbeGV7M+ KluaWLTKwmFtpOoDiEjLSH5Xlizg7HRQ7FBJKLOK4gXAKFF3TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIzQHCUJvG8L6nureYlN7TR/R8aSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvNzAzNzkyMjAtNDljMC00 NWYyLTk0ZDMtMDk4YTcyYjFkYjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYROZsC91P8vSK3sKBET1p xi/n0cefKsXDdWPbTHFGCOOaK2+zE2URc4DEkTDO9v6YGn6yzKFz1pq2dCl1QqY4 OnhVdvF4XvlE42bkyzqsdhtai8S3a7OZzak8hwMuND3b/SwGWarpSmxY5+BM0Q9g Y8vbjwIIrH7+7RqqZt2cYemZcRdKADCzU2hhfPfgaYKv+XTjRCW7SYpt1rLzzbsn 39z8F9LE8b8G46d7fGLkYIgUtKoJMj+FzvWp6OsRg6dxPpoOqNtYfaXzfDM9/HCd 9mIkg9yK7IUnJvRU1q3vWwcuPzh33a/5hOotcp9BZXg+PbSDfbqfqKfjrIAyPTuw -----END CERTIFICATE-----Generated at Thu Mar 26 02:49:32 2026 by rpki-client