$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft File: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft (raw, json) Hash identifier: I+wwl8jwjUZjfPbVwxwf+ovdF9yWK1RNOKR9R1cLN4I= Subject key identifier: 2A:90:D6:9F:CE:20:1A:E7:92:CB:87:B2:64:35:A3:86:56:12:29:1F Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Certificate issuer: /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Certificate serial: 010D0C9F4328584D48950CD76BFE489438732440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft Manifest number: 010D0C9F4328584073A847AD55AD23FF928542D0 Signing time: Wed 25 Mar 2026 08:00:04 +0000 Manifest this update: Wed 25 Mar 2026 08:00:04 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: 19b7c7cd-58e3-3c9e-bf71-b59ca2c837ea.roa (hash: b/gfnMeo0tbkrq+ufuDx4I+jRPzLmeoP2naHFwmE3Fk=) 2: 73fa706f-955a-33d3-927d-050c17047b65.roa (hash: 7Wac+nf85ZE0rDTmlA0gc56R1GlrhEKD6nvaIlSpiZo=) 3: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl (hash: 7ipWsWtQWZnlYXyfv+kzBLv4woBRSCI3NDeHn9fC1W4=) 4: 77652dba-b3a2-3dac-9db5-bd7c489cf68d.roa (hash: 1VRxqefmVrBQV96KWdd8UYfFbTnVQhpHXYmMhJCuIBU=) 5: b9088027-6641-3388-ab02-b3330242f7fd.roa (hash: gdNklkvWVDu8FamshsHkXIBEiPOGQAcb/zpfoYC0H90=) 6: f0092439-63d5-384f-bbda-d0bd831f7a06.roa (hash: zZnqOpwI6FD5zXMqNvqdhZaM0c+WnHjfgB3YQL+EI/Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:95:0c:d7:6b:fe:48:94:38:73:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Validity Not Before: Mar 25 08:00:04 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=e531baae-87a7-44dc-9c32-3c2532e38f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:e6:d5:bf:e6:5c:2f:08:a4:80:01:b8:6e: 3b:e0:58:cb:39:dc:17:4d:f0:82:ea:d7:eb:2f:a9: 78:99:c7:69:2e:d4:af:aa:55:57:9b:80:be:2b:29: 7d:91:7d:0c:ff:b8:17:a6:d0:ce:08:2c:13:21:57: 2f:ce:14:0b:0c:5d:b5:f1:6f:fb:0f:e2:4b:a9:82: 52:b2:23:a8:81:38:85:d7:f3:37:78:cc:b3:53:29: 9a:03:60:6e:9c:da:73:5f:2e:95:f2:7b:32:e8:27: cb:75:9f:ff:93:43:72:47:9d:e8:a4:c5:e1:03:68: 9c:fb:39:76:27:1f:2a:96:ed:07:0d:bc:68:94:6c: b3:67:02:d3:1b:26:5d:d4:6b:8c:bc:75:34:c0:ff: 91:eb:2e:a6:23:37:f8:c9:0b:9f:5c:5e:04:f3:d7: bd:a3:aa:04:77:73:da:1c:27:0b:7f:bb:e6:e3:76: 13:81:53:93:29:b3:f9:4e:e3:8d:3f:3a:07:7b:f7: d4:f8:da:c8:fe:9f:46:66:b7:c8:55:f4:13:15:80: a0:38:16:64:d1:cb:b4:a8:9e:5d:cd:20:34:d6:83: f3:83:a3:e8:ae:15:77:5d:33:4f:52:8a:b4:a3:fc: 2a:4a:7e:11:bb:3b:b5:43:c2:6e:ad:f1:56:00:0f: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:90:D6:9F:CE:20:1A:E7:92:CB:87:B2:64:35:A3:86:56:12:29:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl X509v3 Authority Key Identifier: keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:52:83:78:4d:23:e9:03:97:e3:18:7e:25:2e:9f:5c:39:61: 42:57:a8:0b:f3:00:93:f5:14:f4:c8:d1:a4:20:6d:6a:f4:b5: 5a:52:6f:d2:40:0f:8c:5e:75:62:8d:da:49:59:05:fd:32:61: 5a:67:b5:91:6e:e3:23:e2:a7:c7:31:2e:3f:22:09:c4:2f:d0: 2d:80:66:dc:90:a2:15:5a:d4:97:8e:df:01:f6:40:10:0f:1c: 53:1f:93:9d:6c:97:68:c8:a9:f2:25:20:cb:a5:64:2a:e8:44: 5a:0e:f5:c9:50:28:ed:55:be:5b:3e:ea:00:98:f4:d1:f1:c4: 5f:37:74:60:f8:ed:a7:5e:c0:be:95:b6:70:e6:04:ac:97:ef: 5f:dd:d0:43:9d:32:a3:0d:27:09:59:93:74:51:7f:64:b5:cd: 2f:7b:50:f0:62:a2:05:fa:04:77:46:b9:87:1e:5a:24:aa:c6: f6:92:58:76:99:cb:c9:40:af:07:fc:a5:35:19:d5:78:62:06: be:05:98:b2:77:9a:ae:86:e4:fe:bb:8e:c0:3f:66:0c:24:c6: 58:fb:d7:be:f1:bb:62:5b:df:1b:35:a7:ec:95:4b:cd:7e:af: d0:53:66:4e:fc:d1:3b:65:c0:8d:90:83:04:16:d7:28:5b:40: 67:c1:0a:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IlQzXa/5IlDhzJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2 OGY3MB4XDTI2MDMyNTA4MDAwNFoXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk ZTUzMWJhYWUtODdhNy00NGRjLTljMzItM2MyNTMyZTM4ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrbm1b/mXC8IpIABuG474FjLOdwXTfCC6tfr L6l4mcdpLtSvqlVXm4C+Kyl9kX0M/7gXptDOCCwTIVcvzhQLDF218W/7D+JLqYJS siOogTiF1/M3eMyzUymaA2BunNpzXy6V8nsy6CfLdZ//k0NyR53opMXhA2ic+zl2 Jx8qlu0HDbxolGyzZwLTGyZd1GuMvHU0wP+R6y6mIzf4yQufXF4E89e9o6oEd3Pa HCcLf7vm43YTgVOTKbP5TuONPzoHe/fU+NrI/p9GZrfIVfQTFYCgOBZk0cu0qJ5d zSA01oPzg6PorhV3XTNPUoq0o/wqSn4Ruzu1Q8JurfFWAA+cAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqQ1p/OIBrnksuHsmQ1o4ZWEikfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3 ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvNzRjN2YzMGUtNzBiZS00 ZjhjLWJjOGYtNjBiODVkMWI2OGY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRjN2YzMGUtNzBiZS00ZjhjLWJj OGYtNjBiODVkMWI2OGY3Lzc0YzdmMzBlLTcwYmUtNGY4Yy1iYzhmLTYwYjg1ZDFi NjhmNy5jcmwwHwYDVR0jBBgwFoAUvT8d3y7wTu8fXjVGgXxUE+Gl7UMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4 NWQxYjY4ZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0UoN4TSPpA5fjGH4lLp9c OWFCV6gL8wCT9RT0yNGkIG1q9LVaUm/SQA+MXnVijdpJWQX9MmFaZ7WRbuMj4qfH MS4/IgnEL9AtgGbckKIVWtSXjt8B9kAQDxxTH5OdbJdoyKnyJSDLpWQq6ERaDvXJ UCjtVb5bPuoAmPTR8cRfN3Rg+O2nXsC+lbZw5gSsl+9f3dBDnTKjDScJWZN0UX9k tc0ve1DwYqIF+gR3RrmHHlokqsb2klh2mcvJQK8H/KU1GdV4Yga+BZiyd5quhuT+ u47AP2YMJMZY+9e+8btiW98bNafslUvNfq/QU2ZO/NE7ZcCNkIMEFtcoW0BnwQoC -----END CERTIFICATE-----Generated at Thu Mar 26 04:10:59 2026 by rpki-client