$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft File: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft (raw, json) Hash identifier: iQQK7TwPm8gGkIbvoOfjpBy3rK9xMWIr9rm/civ0afk= Subject key identifier: D0:15:BB:91:57:4B:DC:3F:66:0D:4F:01:A4:B5:7C:40:36:66:24:6C Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584D4A1839B07E9CAF7950E53180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft Manifest number: 010D0C9F4328584073A829E3051185C1AED5AD22 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (hash: 80xUMchdxwxPC18dafjfNPJzgFOzcirUiKAG/yOKjpk=) 2: 175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa (hash: GG2S6T3jD6EDukLlAcyKUaIHDGnwAgwTbrtqpZX9EL0=) 3: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl (hash: iuHbfFx1l7kUo7rK8+kgq2A/OTfQ4+QrXZevRQFlIN4=) 4: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (hash: aKhvEF4SfgWtMEgCU3E7nZWvHzSIZVq6Myf/fYmqkMU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:39:b0:7e:9c:af:79:50:e5:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=949807bb-4107-4a03-97f1-4de749a799ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:5b:69:80:99:17:64:f7:52:7d:09:90:41: 04:7f:ab:e8:a1:06:e5:14:77:16:c6:89:08:c6:b7: 25:4d:a7:7e:92:e0:d4:9d:d1:01:11:00:45:64:a8: 12:26:97:ae:ed:35:20:2a:b8:24:44:01:0e:15:ec: 20:34:97:89:8e:a9:e4:10:e7:5c:6f:1d:41:92:51: 42:e5:6f:99:63:c3:a9:13:3a:c1:82:bd:80:55:27: 13:1c:ad:f5:16:36:2a:bc:77:c0:9e:3b:95:b7:c0: 2f:8e:0a:d0:7c:94:48:3f:4c:a4:7d:70:ba:b3:cc: d3:7c:39:f1:a4:0f:07:1b:f3:57:b5:f0:bb:81:2c: df:0c:fe:26:dc:ab:59:2f:85:fe:2d:8b:37:3b:3a: 58:0f:7f:e3:58:bf:9b:30:87:0d:1e:ec:a1:12:e7: 00:91:87:e0:21:4b:6d:f3:d1:a0:b0:72:c6:44:d6: df:b2:20:97:bd:ab:86:ff:bc:fe:33:7c:99:12:f5: b5:48:01:8b:e0:ce:7e:3a:77:22:10:44:40:f9:b1: a1:57:54:7c:67:25:2d:39:0a:15:26:d9:ae:de:27: f6:b8:b8:5b:28:39:bc:00:16:d5:c3:f7:97:65:5b: 64:ce:0c:ef:16:e5:44:09:65:e0:c5:fc:58:24:38: 5c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:15:BB:91:57:4B:DC:3F:66:0D:4F:01:A4:B5:7C:40:36:66:24:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:9c:2f:54:84:f7:f5:37:b1:61:9e:44:f8:17:b0:f0:63: 6f:d1:e2:7f:ab:87:32:9d:36:df:a8:d4:b3:97:1e:47:1d:49: ba:4e:49:f6:c9:8e:59:03:d4:63:dd:07:c2:ee:1f:13:ca:6c: 24:6a:99:8d:3a:3e:59:65:67:4b:49:c0:8c:81:0b:40:76:c2: 1a:2d:b7:74:1e:91:1d:a3:20:89:f5:c9:4e:bb:85:40:10:db: 9a:32:02:9b:20:89:84:03:68:fb:e9:02:d0:79:fb:37:00:26: 93:8e:22:58:29:4e:b3:a6:6b:b1:fc:ee:b2:5e:92:9c:36:6f: f1:ae:40:f6:0d:7a:4c:15:98:e6:75:99:6e:50:74:bf:b1:0c: 8b:d1:c2:ca:95:b6:6f:d3:15:df:56:4b:28:ef:f4:b5:2a:0d: c9:68:8b:48:b4:b4:5e:2c:24:e8:64:59:01:c3:8a:12:27:20: 5d:36:ae:d8:ad:12:84:e9:d1:be:1e:d8:fa:7f:24:ae:3e:df: a1:42:cc:f9:ac:60:72:2f:72:a6:44:e2:aa:16:53:a4:9a:7b: 5e:1a:80:bb:2f:f7:61:ef:4f:05:7d:05:18:ce:1b:52:1d:8a: b5:eb:3f:12:3b:fc:ee:1c:7d:b2:13:39:95:e6:bc:b8:dc:af: e7:e4:b1:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDmwfpyveVDlMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk OTQ5ODA3YmItNDEwNy00YTAzLTk3ZjEtNGRlNzQ5YTc5OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6tbaYCZF2T3Un0JkEEEf6vooQblFHcWxokI xrclTad+kuDUndEBEQBFZKgSJpeu7TUgKrgkRAEOFewgNJeJjqnkEOdcbx1BklFC 5W+ZY8OpEzrBgr2AVScTHK31FjYqvHfAnjuVt8AvjgrQfJRIP0ykfXC6s8zTfDnx pA8HG/NXtfC7gSzfDP4m3KtZL4X+LYs3OzpYD3/jWL+bMIcNHuyhEucAkYfgIUtt 89GgsHLGRNbfsiCXvauG/7z+M3yZEvW1SAGL4M5+OnciEERA+bGhV1R8ZyUtOQoV Jtmu3if2uLhbKDm8ABbVw/eXZVtkzgzvFuVECWXgxfxYJDhcBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNAVu5FXS9w/Zg1PAaS1fEA2ZiRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvYzg1ZjNiMmMtYzM5MS00 OWUzLWEzYTUtZWE0MzAyMzVjYzZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcS5wvVIT39TexYZ5E+Bew 8GNv0eJ/q4cynTbfqNSzlx5HHUm6Tkn2yY5ZA9Rj3QfC7h8TymwkapmNOj5ZZWdL ScCMgQtAdsIaLbd0HpEdoyCJ9clOu4VAENuaMgKbIImEA2j76QLQefs3ACaTjiJY KU6zpmux/O6yXpKcNm/xrkD2DXpMFZjmdZluUHS/sQyL0cLKlbZv0xXfVkso7/S1 Kg3JaItItLReLCToZFkBw4oSJyBdNq7YrRKE6dG+Htj6fySuPt+hQsz5rGByL3Km ROKqFlOkmnteGoC7L/dh708FfQUYzhtSHYq16z8SO/zuHH2yEzmV5ry43K/n5LGX -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:52 2026 by rpki-client