$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: HeYiqfYjuMeISPCSn5NV6z1SeKsm4Q0/5c+xH56rakM= Subject key identifier: 6D:47:88:DE:D2:F7:B5:7D:20:C5:D2:79:F1:FA:31:62:6A:0D:CE:AD Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584D4C4DF98C02C26A7F1A912CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFFA83 Signing time: Thu 26 Mar 2026 16:00:04 +0000 Manifest this update: Thu 26 Mar 2026 16:00:04 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: IP2DgrSbHYP1myvFYpEeVBjn2Ye/OF2pE3NMUV9h6M4=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: KVQMvB90ihYioXUzMLtlZTnSWo4rrtXC62ZgCBO5aYg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4d:f9:8c:02:c2:6a:7f:1a:91:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Mar 26 16:00:04 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=a18a94d8-aa02-4907-9347-7f01de7721aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:d4:4a:25:9b:1e:93:3e:85:6b:3e:2c:7e: 89:c5:6d:4c:9f:82:ee:e8:37:e9:01:7a:e5:bf:d6: 92:91:88:ec:a8:a5:84:64:ec:ad:18:f5:a9:f6:38: 97:ee:d4:6b:4b:f2:27:79:e3:b2:ee:6d:3f:86:fc: fc:55:5c:81:a2:c7:19:ec:7c:e2:d8:ed:c8:8f:32: 1c:30:b3:07:b6:8f:f7:9a:e2:15:24:d7:8d:fe:b1: 50:49:a6:5d:65:a0:6d:85:0d:9b:17:32:3b:9c:04: 25:c9:cb:65:f5:e6:0d:07:d7:4f:c8:da:02:e5:cc: 8f:4a:96:22:8e:bb:c7:23:35:d7:29:f2:e9:1b:d1: cd:21:ca:7a:54:90:12:00:fe:ed:5d:8c:c8:ba:83: 91:8e:90:f3:99:79:82:bb:b7:2b:66:7d:2e:8c:be: c9:5c:1d:e9:3a:2e:e1:f0:00:2b:1c:aa:9a:da:16: 5a:7d:ca:15:f4:d1:55:cf:34:e5:ae:ff:93:1c:89: e9:fc:8a:10:4e:10:80:60:11:b7:5d:3f:cd:79:8e: d2:fa:3b:a4:3d:e8:05:04:ea:eb:cc:1f:f2:86:a6: 0b:7b:e9:f5:cf:78:65:24:6b:31:f4:bc:68:73:18: 76:e3:a8:d0:3f:66:37:70:08:05:bd:0d:2d:39:3b: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:88:DE:D2:F7:B5:7D:20:C5:D2:79:F1:FA:31:62:6A:0D:CE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a0:7e:e9:0b:91:18:03:fb:d2:9c:89:13:2c:08:b5:b1:78: 71:1a:bc:7a:cf:2a:14:12:ca:65:94:e6:2f:f2:77:28:f3:93: 2a:58:49:d6:dc:e7:4d:aa:fd:ff:be:e2:48:07:39:e3:08:05: 8c:0a:3e:fa:f9:66:49:4d:6d:25:55:63:ff:1f:87:24:93:74: 18:41:a3:5f:0a:aa:93:de:32:83:31:f6:c9:42:85:33:60:8a: d8:f6:36:db:ac:a6:ee:a1:7d:77:05:b3:57:15:ba:38:63:b2: fa:e8:75:83:1a:f3:53:dc:81:cc:f0:34:d3:4a:6d:fc:b5:d0: c5:c7:ea:d3:34:40:c4:9f:25:e3:79:9d:69:99:0e:23:37:24: 2a:42:16:f6:84:80:d1:64:f2:f6:ad:f5:17:68:28:d3:89:80: ff:9c:1c:3a:b5:3b:81:cd:70:90:39:18:a9:4d:51:c1:ba:5a: 0e:00:80:12:33:11:84:5b:07:31:07:0f:bf:a0:97:b7:20:1f: 4b:7f:6f:0e:25:20:11:44:96:27:31:a7:d1:7d:c8:85:9f:d1: ce:29:58:23:1f:04:eb:42:da:cf:24:27:72:cc:a2:d6:32:73: af:94:3b:8d:00:25:22:6d:ca:ca:b9:90:3d:ef:04:6c:b4:84: 99:90:97:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MTfmMAsJqfxqRLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI2MDMyNjE2MDAwNFoXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk YTE4YTk0ZDgtYWEwMi00OTA3LTkzNDctN2YwMWRlNzcyMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW/USiWbHpM+hWs+LH6JxW1Mn4Lu6DfpAXrl v9aSkYjsqKWEZOytGPWp9jiX7tRrS/IneeOy7m0/hvz8VVyBoscZ7Hzi2O3IjzIc MLMHto/3muIVJNeN/rFQSaZdZaBthQ2bFzI7nAQlyctl9eYNB9dPyNoC5cyPSpYi jrvHIzXXKfLpG9HNIcp6VJASAP7tXYzIuoORjpDzmXmCu7crZn0ujL7JXB3pOi7h 8AArHKqa2hZafcoV9NFVzzTlrv+THInp/IoQThCAYBG3XT/NeY7S+jukPegFBOrr zB/yhqYLe+n1z3hlJGsx9Lxocxh246jQP2Y3cAgFvQ0tOTvoEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG1HiN7S97V9IMXSefH6MWJqDc6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeoH7pC5EYA/vSnIkTLAi1 sXhxGrx6zyoUEspllOYv8nco85MqWEnW3OdNqv3/vuJIBznjCAWMCj76+WZJTW0l VWP/H4ckk3QYQaNfCqqT3jKDMfbJQoUzYIrY9jbbrKbuoX13BbNXFbo4Y7L66HWD GvNT3IHM8DTTSm38tdDFx+rTNEDEnyXjeZ1pmQ4jNyQqQhb2hIDRZPL2rfUXaCjT iYD/nBw6tTuBzXCQORipTVHBuloOAIASMxGEWwcxBw+/oJe3IB9Lf28OJSARRJYn MafRfciFn9HOKVgjHwTrQtrPJCdyzKLWMnOvlDuNACUibcrKuZA97wRstISZkJdq -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:32 2026 by rpki-client