$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft File: c0311fc7-1b9e-4472-8780-7822d83e32fc.mft (raw, json) Hash identifier: x5SQsjMDJ9Nb0HHekISW8Rn1iKtg6FNckh9h+AOzZGk= Subject key identifier: DA:31:17:21:88:15:8F:D7:20:F5:5A:AA:7D:CA:03:61:20:59:D1:55 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584D49A10EE77B0E1DEFBD75A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft Manifest number: 010D0C9F4328584073A81FC56BE9847C211809DE Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 275dad88-147b-3524-8dd1-125da05ff542.roa (hash: hKACbvdKKR3ah3wGypYkQNG05Kds/3R3y4+pPPxTTDg=) 2: 3e196079-8695-30ec-97ad-a014098a62f1.roa (hash: jdjwNYC2qoX+loJFgKoXbXkbbnVs46+NQAd9hsGjf04=) 3: 98352e91-c3ba-3a49-b20e-9ea88df7f116.roa (hash: 3XB85Rn4ApvZrqNMP70NMuG91+HkY6Y/ff31mS0ilX0=) 4: c0311fc7-1b9e-4472-8780-7822d83e32fc.crl (hash: OsgHUoi7MXltZKFPvBv4Ar/CEyRalfaj+zm7uuE2PV0=) 5: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (hash: vnpVmgUiQYEeIMzDTLKDZYNzc6mREU383i4nTId/WdE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0e:e7:7b:0e:1d:ef:bd:75:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=3aca3f0f-acd6-4ff4-9592-d586be65bfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fd:37:08:dd:c0:62:10:f5:15:b1:9e:c2:6b: d4:57:e0:52:aa:68:74:a6:00:66:be:d1:3c:31:b8: c9:43:9d:82:52:17:e8:d7:b1:32:44:ef:66:27:bf: db:f6:93:0d:5e:96:f9:66:2b:91:ec:a3:db:77:8f: b0:1c:8f:12:43:17:c6:be:eb:95:02:f1:db:c7:b8: c9:fc:73:d1:f3:5e:56:42:5f:25:d9:d5:bd:a6:ff: 06:a1:02:68:57:24:f6:fc:a6:c6:e1:d7:a0:dd:69: 10:10:d8:d5:54:56:8c:ee:92:c4:43:50:07:8e:bb: 3d:0c:95:1f:96:c3:ba:27:61:71:58:1e:79:ae:a1: 71:aa:68:6a:d6:37:25:20:ef:3b:a7:2a:08:ee:fa: 67:d3:41:e3:4a:ac:18:85:0e:dc:60:df:43:17:4c: 1d:13:1c:21:da:7f:4a:5a:2f:4c:c8:27:a9:74:7a: 34:22:1c:a3:6d:fe:6d:4f:c9:5f:7e:02:d3:26:23: 03:5d:b7:49:82:52:1a:47:b1:21:2f:59:d4:9f:11: 00:16:40:c8:e2:3d:cb:f3:75:5d:9c:34:06:94:08: 18:e1:80:e4:79:1b:d3:7c:bf:68:26:de:ab:89:99: d9:e2:92:d0:90:ec:8d:4b:a9:b7:0f:78:06:13:43: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:31:17:21:88:15:8F:D7:20:F5:5A:AA:7D:CA:03:61:20:59:D1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:95:d4:56:e1:54:07:fe:cd:90:96:40:3c:9f:03:f2:d1:da: 5e:3a:da:eb:ed:e4:5f:e7:98:b4:99:bc:60:83:f2:34:14:fc: 43:ec:95:b6:a1:5c:7a:2d:87:6b:b8:4d:59:58:ab:66:68:3b: b8:fe:45:3b:2c:54:ea:e1:9e:63:85:42:02:a3:a1:12:b1:d4: cf:9f:ac:b0:de:9b:ff:82:93:8b:e9:40:87:eb:5c:f8:c9:cc: 09:82:5d:ef:e7:de:b6:0a:dd:e0:00:61:4d:29:30:dd:64:32: a4:d7:1d:8b:5e:be:a7:8a:25:6c:cf:06:75:66:1d:eb:9d:86: 47:f7:6b:5e:43:d2:4e:a1:d7:27:fb:c8:9e:d6:ee:10:18:cb: 66:c5:eb:36:9d:16:42:a6:64:b0:95:61:89:ad:dd:8e:ac:78: 10:90:30:9e:fe:e2:aa:71:a6:7d:5d:61:15:e7:ff:53:8b:7c: 57:2f:77:31:50:3a:75:d7:ec:91:9c:9c:46:8a:e0:e0:17:9e: 77:f3:1c:7e:61:56:5f:d1:ac:78:69:4d:6d:43:30:9f:7c:28: 53:83:27:2a:cd:cf:43:77:eb:aa:74:87:46:86:4e:d8:d5:5a: b5:a8:db:0c:11:51:64:75:a5:fe:f9:fe:f1:09:fc:15:aa:b0: 97:a2:78:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ7new4d7711qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk M2FjYTNmMGYtYWNkNi00ZmY0LTk1OTItZDU4NmJlNjViZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f03CN3AYhD1FbGewmvUV+BSqmh0pgBmvtE8 MbjJQ52CUhfo17EyRO9mJ7/b9pMNXpb5ZiuR7KPbd4+wHI8SQxfGvuuVAvHbx7jJ /HPR815WQl8l2dW9pv8GoQJoVyT2/KbG4deg3WkQENjVVFaM7pLEQ1AHjrs9DJUf lsO6J2FxWB55rqFxqmhq1jclIO87pyoI7vpn00HjSqwYhQ7cYN9DF0wdExwh2n9K Wi9MyCepdHo0Ihyjbf5tT8lffgLTJiMDXbdJglIaR7EhL1nUnxEAFkDI4j3L83Vd nDQGlAgY4YDkeRvTfL9oJt6riZnZ4pLQkOyNS6m3D3gGE0Pt+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNoxFyGIFY/XIPVaqn3KA2EgWdFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvYzAzMTFmYzctMWI5ZS00 NDcyLTg3ODAtNzgyMmQ4M2UzMmZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUldRW4VQH/s2QlkA8nwPy 0dpeOtrr7eRf55i0mbxgg/I0FPxD7JW2oVx6LYdruE1ZWKtmaDu4/kU7LFTq4Z5j hUICo6ESsdTPn6yw3pv/gpOL6UCH61z4ycwJgl3v5962Ct3gAGFNKTDdZDKk1x2L Xr6niiVszwZ1Zh3rnYZH92teQ9JOodcn+8ie1u4QGMtmxes2nRZCpmSwlWGJrd2O rHgQkDCe/uKqcaZ9XWEV5/9Ti3xXL3cxUDp11+yRnJxGiuDgF5538xx+YVZf0ax4 aU1tQzCffChTgycqzc9Dd+uqdIdGhk7Y1Vq1qNsMEVFkdaX++f7xCfwVqrCXonjP -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:36 2026 by rpki-client