$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: jblSaKi3BbYYOpF2JQjtFQsUY04pwyQTPMfRLNfWjK8= Subject key identifier: 08:05:80:74:3F:3E:CA:EA:6B:66:16:D0:0F:F2:FF:90:5E:10:A7:AC Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584D47E25FB61859D9557ACC5040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337A58 Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: 4+LDLGdZzBRhLwZVa2xZTZYnWEhRgU3b4vMKTe0TD9E=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: EB2LWe+1WD39PSjs8qyH3cT1b6F92AbWWjUA+TOk25o=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: c1N3GY8sBGStgmkSYu0Egr8q5+h91ccuMldeQ1n+9GU=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: X5H56wCb54eyPhgVf26tVICvXkywU3s4OFWmShVgH8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:5f:b6:18:59:d9:55:7a:cc:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=ab40ad8f-16fb-4bfb-8813-f39b5a8ab73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:7f:86:30:e6:47:ad:b0:7b:f5:e2:93:3c: ac:4d:74:6c:2b:0a:6a:52:a2:c5:d1:70:0d:63:f2: b7:d8:21:e8:1a:ab:92:c2:aa:bc:b2:38:d5:6b:1f: 50:2e:a5:da:cc:3d:9f:d1:8e:7c:a2:a1:a5:eb:8a: ea:60:da:21:c1:43:46:30:24:90:39:6e:eb:5e:d8: 72:90:e9:f8:75:c5:89:87:0c:3c:d1:f2:dc:7d:26: b5:bb:6e:9a:30:6a:7d:eb:d7:1d:f9:a4:ed:50:cb: e4:43:63:c8:dc:04:19:5a:4e:ff:08:ee:cb:1b:4d: 15:f7:3f:8f:f8:19:24:2f:38:2b:e1:d1:61:5a:0c: 48:3a:3d:47:6c:27:41:9f:b2:43:aa:26:42:85:4e: c2:da:0a:dd:64:44:3b:5b:ea:55:bf:21:9d:19:25: 6f:3a:2d:74:48:13:3b:bb:d4:15:6c:d5:1b:e6:16: f1:29:dd:cf:0e:e6:53:d8:36:ab:58:bc:54:81:17: 44:4f:a1:b2:2c:de:9f:a4:06:25:5b:ce:05:d9:82: f0:91:94:62:fd:4d:63:d3:13:93:a4:b7:d2:6d:a3: 0d:8f:17:34:58:00:e2:a0:38:9a:c8:39:56:9b:87: 5a:dc:b2:8f:45:ce:0c:9f:1a:cd:22:6c:6e:7b:ee: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:80:74:3F:3E:CA:EA:6B:66:16:D0:0F:F2:FF:90:5E:10:A7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:79:33:9b:15:a3:e1:b7:5f:9a:20:0a:66:9b:dd:e1:ed:3d: 3a:81:b4:67:ac:24:f2:55:ed:26:ab:f3:65:0b:53:ff:c6:cc: b5:45:f4:19:42:7e:e7:77:bf:b8:07:81:f3:3f:cb:c2:ef:9d: b6:85:55:87:c8:07:ad:5e:de:e4:96:7e:ce:24:4d:a6:68:fd: 57:eb:4e:07:57:d8:48:ba:aa:68:a0:50:d3:a5:39:6a:e7:ce: a3:15:32:19:4b:64:96:12:fc:ea:41:5f:1b:cb:5c:4b:27:f9: 87:db:4b:da:66:92:ba:2a:c8:f9:4d:4a:cc:a2:12:53:82:9a: 84:2f:62:83:8f:b2:14:87:98:17:e2:54:37:be:e2:fb:83:19: 59:f6:b3:77:ea:06:79:22:8e:14:96:bb:c6:77:36:fa:27:6a: 94:7b:17:97:e1:70:fc:ed:bd:26:2a:f5:75:36:1c:25:97:11: 22:15:14:82:32:38:9a:03:97:0d:55:7f:bc:a8:5a:0c:37:ab: 63:29:1a:fb:c1:66:e2:a1:26:7c:2f:40:37:70:c7:01:08:57: e3:96:0c:54:b1:ed:6a:96:e9:91:51:85:0e:e4:e3:ec:c2:ce: 23:a8:2a:8e:b4:cb:d9:65:fe:af:83:b8:6e:be:be:fe:6e:97: 7a:b1:75:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4l+2GFnZVXrMUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk YWI0MGFkOGYtMTZmYi00YmZiLTg4MTMtZjM5YjVhOGFiNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYh/hjDmR62we/XikzysTXRsKwpqUqLF0XAN Y/K32CHoGquSwqq8sjjVax9QLqXazD2f0Y58oqGl64rqYNohwUNGMCSQOW7rXthy kOn4dcWJhww80fLcfSa1u26aMGp969cd+aTtUMvkQ2PI3AQZWk7/CO7LG00V9z+P +BkkLzgr4dFhWgxIOj1HbCdBn7JDqiZChU7C2grdZEQ7W+pVvyGdGSVvOi10SBM7 u9QVbNUb5hbxKd3PDuZT2DarWLxUgRdET6GyLN6fpAYlW84F2YLwkZRi/U1j0xOT pLfSbaMNjxc0WADioDiayDlWm4da3LKPRc4MnxrNImxue+5D7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgFgHQ/Psrqa2YW0A/y/5BeEKesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmeTObFaPht1+aIApmm93h 7T06gbRnrCTyVe0mq/NlC1P/xsy1RfQZQn7nd7+4B4HzP8vC7522hVWHyAetXt7k ln7OJE2maP1X604HV9hIuqpooFDTpTlq586jFTIZS2SWEvzqQV8by1xLJ/mH20va ZpK6Ksj5TUrMohJTgpqEL2KDj7IUh5gX4lQ3vuL7gxlZ9rN36gZ5Io4UlrvGdzb6 J2qUexeX4XD87b0mKvV1NhwllxEiFRSCMjiaA5cNVX+8qFoMN6tjKRr7wWbioSZ8 L0A3cMcBCFfjlgxUse1qlumRUYUO5OPsws4jqCqOtMvZZf6vg7huvr7+bpd6sXVV -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:09 2026 by rpki-client