$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft File: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft (raw, json) Hash identifier: kGs55PRGDkofvSsoIP5dUIUKe21EdC90DIZO+KWg2a4= Subject key identifier: DF:9E:25:A3:46:DB:47:A4:10:9E:7D:96:1D:2E:53:57:0B:74:4D:64 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584D48D099FF274F00102C08CD20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft Manifest number: 010D0C9F4328584073A84E8087935899AC515057 Signing time: Wed 25 Mar 2026 10:00:03 +0000 Manifest this update: Wed 25 Mar 2026 10:00:03 +0000 Manifest next update: Sat 28 Mar 2026 10:00:00 +0000 Files and hashes: 1: 780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa (hash: r8zJmK5JUQfb5K7XuCfEtGIDS9IT0ZmDCWMy/YqechM=) 2: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (hash: XvGyTpNf4VQ/5ZT2Q5KQNnn8AIg9gPyi0rdLAFypKEk=) 3: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (hash: JESAKMivgsLt7p/oLLf3/n3kEdqkGVowmwdZdWr2vpQ=) 4: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (hash: ywsKlIRcDjAseqAvLx5Kbgf+JbJYnboLG7b7L1ANu9I=) 5: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl (hash: GL6SIUbCTjaQ+8URe6To9zi8rSM9K1aWqkxMxaexx3o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:d0:99:ff:27:4f:00:10:2c:08:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Mar 25 10:00:03 2026 GMT Not After : Mar 28 10:00:00 2026 GMT Subject: CN=94b4091c-3a64-41d8-81e8-80e93cb9af7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:ea:5c:42:ba:f9:4c:d6:80:98:cd:9e:ea: 0b:36:d9:06:aa:85:08:99:c5:2a:0d:dd:0e:ee:f2: 28:87:12:c5:e2:ff:1d:85:26:a7:11:6f:e3:ca:54: 0c:40:57:36:64:2d:74:e2:0c:f2:9e:b6:e9:f9:db: 5a:da:62:01:d4:4a:1b:05:44:be:b8:f0:e3:4b:ad: 07:dc:c0:68:01:6b:ca:44:95:0c:b2:60:f5:1e:d3: 5e:2a:4d:05:a4:03:f2:df:c6:e0:5f:4d:78:79:9d: 9f:80:60:e5:e5:f4:c8:d6:e5:6d:e8:a0:f9:ee:f6: b9:b4:81:f8:44:91:9f:c0:7f:49:53:94:92:84:4d: d7:3e:b5:f6:b8:f0:75:18:33:db:cc:d3:a6:21:98: b2:68:ba:10:1f:20:bb:a3:9d:51:c5:c7:c6:69:5e: 1e:f0:6e:e2:bb:28:09:7a:0d:c7:4f:af:32:91:bf: fe:f8:fa:9c:fb:eb:f8:8d:ae:ae:7e:21:cf:52:7c: e9:cc:8c:c4:ae:8f:4a:44:97:14:c6:1b:fc:53:86: 3d:45:1e:78:ae:2b:2f:c2:35:d7:0c:03:04:0b:1a: 25:6b:94:06:3e:75:0c:73:1f:04:de:58:46:99:50: 88:d3:e3:a5:86:d4:79:37:a0:21:b9:ee:12:ee:dd: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9E:25:A3:46:DB:47:A4:10:9E:7D:96:1D:2E:53:57:0B:74:4D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:99:e0:71:99:7d:f8:82:5f:eb:ac:29:59:bc:3e:f0:28:76: 16:2d:5c:5d:c9:2d:a8:7a:e6:2b:30:ca:cf:e9:2e:5d:9d:bd: 03:88:b6:cb:c9:14:6c:7c:6a:78:41:23:10:7f:02:56:14:1a: c9:84:c2:f8:ee:75:d9:9b:ca:bb:68:67:2e:4c:60:93:bd:1b: c6:a3:8c:25:f0:02:c7:ba:9c:35:da:6d:79:08:d5:9b:8f:73: e6:f4:ca:07:4f:04:f6:c4:60:8b:0f:ee:3f:47:1d:2c:53:ee: 14:ad:7d:02:9f:32:40:86:82:02:aa:1a:40:67:ab:9c:33:ba: d6:9a:18:76:77:3d:3d:62:32:73:5a:1c:4e:8f:62:14:7e:17: 8c:0b:1e:08:fd:c3:ec:01:0c:7f:f2:02:4b:b9:bc:fe:6f:92: a3:c7:4f:f1:1f:e9:8a:62:a9:9b:44:d1:eb:c0:3c:3e:5e:47: f4:66:bf:61:16:c0:5d:43:6f:75:76:dd:cc:f5:22:5c:de:d8: 8d:fa:ab:70:e4:bc:02:d5:be:47:f8:11:fd:f8:fa:a9:d9:dc: 90:68:b8:d2:a0:8a:a2:67:27:71:13:64:a8:e5:ab:65:91:71: 77:89:2f:b4:e2:c2:f1:fb:80:94:37:72:32:cb:73:99:f5:dd: e4:ae:91:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I0Jn/J08AECwIzSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDMyNTEwMDAwM1oXDTI2MDMyODEwMDAwMFowLzEtMCsGA1UEAxMk OTRiNDA5MWMtM2E2NC00MWQ4LTgxZTgtODBlOTNjYjlhZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+LqXEK6+UzWgJjNnuoLNtkGqoUImcUqDd0O 7vIohxLF4v8dhSanEW/jylQMQFc2ZC104gzynrbp+dta2mIB1EobBUS+uPDjS60H 3MBoAWvKRJUMsmD1HtNeKk0FpAPy38bgX014eZ2fgGDl5fTI1uVt6KD57va5tIH4 RJGfwH9JU5SShE3XPrX2uPB1GDPbzNOmIZiyaLoQHyC7o51RxcfGaV4e8G7iuygJ eg3HT68ykb/++Pqc++v4ja6ufiHPUnzpzIzEro9KRJcUxhv8U4Y9RR54risvwjXX DAMECxola5QGPnUMcx8E3lhGmVCI0+OlhtR5N6Ahue4S7t2CGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN+eJaNG20ekEJ59lh0uU1cLdE1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvY2QxOThkYTQtZGJjYy00 YmVjLWExYTAtMzFkNjFkNWNjYzcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7meBxmX34gl/rrClZvD7w KHYWLVxdyS2oeuYrMMrP6S5dnb0DiLbLyRRsfGp4QSMQfwJWFBrJhML47nXZm8q7 aGcuTGCTvRvGo4wl8ALHupw12m15CNWbj3Pm9MoHTwT2xGCLD+4/Rx0sU+4UrX0C nzJAhoICqhpAZ6ucM7rWmhh2dz09YjJzWhxOj2IUfheMCx4I/cPsAQx/8gJLubz+ b5Kjx0/xH+mKYqmbRNHrwDw+Xkf0Zr9hFsBdQ291dt3M9SJc3tiN+qtw5LwC1b5H +BH9+Pqp2dyQaLjSoIqiZydxE2So5atlkXF3iS+04sLx+4CUN3Iyy3OZ9d3krpEH -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:12 2026 by rpki-client