$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft File: 35c42a25-42c3-46fe-9914-5b8394eae9b1.mft (raw, json) Hash identifier: 7ZzvjnZj7sEYWVOzjluAMxziwqLnTVwUIi3jBBrxbP0= Subject key identifier: CF:16:F6:45:0E:11:5A:D1:7E:98:EF:C4:0A:53:C6:EF:F6:56:22:78 Authority key identifier: 03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB Certificate issuer: /CN=35c42a25-42c3-46fe-9914-5b8394eae9b1 Certificate serial: 010D0C9F4328584D4B41F3AC3B97A028EF1BF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft Manifest number: 010D0C9F43285846E1CD999D4767BA1CE472799A Signing time: Thu 26 Mar 2026 07:00:04 +0000 Manifest this update: Thu 26 Mar 2026 07:00:04 +0000 Manifest next update: Sun 29 Mar 2026 07:00:00 +0000 Files and hashes: 1: 1542f51d-2157-31f8-91cd-a013c591d66f.roa (hash: holsuxbOjPwLM8yreVgUYnltf3XItjeDvSZXERt4A6M=) 2: 35c42a25-42c3-46fe-9914-5b8394eae9b1.crl (hash: RXrsHalFN7w2jC+mUrZsOdRz8QzX4GOekyCzZSgyL8I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:41:f3:ac:3b:97:a0:28:ef:1b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1 Validity Not Before: Mar 26 07:00:04 2026 GMT Not After : Mar 29 07:00:00 2026 GMT Subject: CN=22ef03e5-6af2-4455-b26e-32970eeb7186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:b4:a6:e8:a8:38:68:93:ea:bc:2a:b1:de: 9c:93:75:c1:a8:02:e2:39:10:00:20:c8:02:f1:f2: 89:79:70:67:85:29:29:f5:d0:65:14:55:e0:5d:2d: 1b:51:3e:90:1c:1a:96:c2:94:89:2d:54:24:64:d2: bb:4c:37:2d:72:63:b1:80:d7:d8:62:63:dc:de:32: 68:a7:87:0c:e1:ca:c1:aa:e4:13:8b:3f:08:e8:30: 08:cc:58:29:b9:c3:03:0a:a5:3e:f0:48:48:6a:d0: 24:8f:dd:cd:dd:7d:01:0d:0d:f9:8b:e8:ca:32:0c: 4c:68:50:6c:0d:5d:d7:3c:f4:f3:c2:6a:03:54:4b: 18:55:64:00:54:5e:75:fc:ff:d1:9a:90:be:3d:92: ea:38:7c:8f:be:82:71:76:77:3a:89:fa:90:8c:7e: be:00:a0:ae:80:42:80:02:5b:83:f3:96:1c:98:d0: 90:ea:4d:7b:2c:fa:87:35:6a:2c:f1:0e:b3:27:25: eb:fd:d3:7b:3a:25:3e:d3:2c:38:76:65:dc:b5:01: d4:c6:12:bf:5c:b9:fb:90:9b:58:61:69:04:b8:ac: 62:44:3d:59:dd:12:71:50:7f:4f:47:fd:9a:27:05: 88:ee:61:f9:3a:cd:13:57:9f:9a:b2:e1:a2:4a:60: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:F6:45:0E:11:5A:D1:7E:98:EF:C4:0A:53:C6:EF:F6:56:22:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl X509v3 Authority Key Identifier: keyid:03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:aa:d6:d2:da:e8:33:87:83:af:7b:54:9b:32:5a:93:97:77: 1d:06:24:99:2b:93:e0:e5:71:b6:f2:82:78:c1:1e:40:1a:96: d9:0c:77:cd:6f:08:f5:02:b8:f3:d9:bc:5f:6f:c0:a6:82:a1: f7:60:f0:a6:3c:d7:e7:bc:2f:0b:b8:10:6b:c8:82:a3:b1:76: fe:ec:dd:0b:47:a3:1c:10:90:b7:c3:e5:15:63:e5:46:75:ac: c4:ee:9c:88:1b:71:a7:7d:28:39:cc:d3:d1:20:d3:82:68:d1: 00:7a:a1:63:d5:eb:ef:9d:b5:c7:a3:c2:2b:90:d3:ca:32:69: aa:d2:cf:68:d7:15:eb:3c:f2:3d:67:6d:1c:e0:4c:64:79:20: 25:b3:59:ee:8b:c3:41:72:99:97:2a:85:21:6d:7f:ed:d0:7d: e4:51:a0:61:e2:13:00:9e:e8:d0:36:80:46:22:ae:4c:89:21: 73:20:61:30:16:77:46:12:f7:6b:3a:cc:fe:4b:ce:cf:3e:39: c1:ff:83:02:38:6f:99:54:b1:be:1a:ee:da:0c:b1:e1:89:c6: 5a:19:53:0d:86:cd:08:f8:1b:8d:e2:ce:8c:27:8c:37:24:92: c4:2d:ed:98:d4:85:a1:b0:ac:61:84:a4:06:69:12:25:a9:ba: f9:e5:fc:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LQfOsO5egKO8b9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjNDJhMjUtNDJjMy00NmZlLTk5MTQtNWI4Mzk0ZWFl OWIxMB4XDTI2MDMyNjA3MDAwNFoXDTI2MDMyOTA3MDAwMFowLzEtMCsGA1UEAxMk MjJlZjAzZTUtNmFmMi00NDU1LWIyNmUtMzI5NzBlZWI3MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTa0puioOGiT6rwqsd6ck3XBqALiORAAIMgC 8fKJeXBnhSkp9dBlFFXgXS0bUT6QHBqWwpSJLVQkZNK7TDctcmOxgNfYYmPc3jJo p4cM4crBquQTiz8I6DAIzFgpucMDCqU+8EhIatAkj93N3X0BDQ35i+jKMgxMaFBs DV3XPPTzwmoDVEsYVWQAVF51/P/RmpC+PZLqOHyPvoJxdnc6ifqQjH6+AKCugEKA AluD85YcmNCQ6k17LPqHNWos8Q6zJyXr/dN7OiU+0yw4dmXctQHUxhK/XLn7kJtY YWkEuKxiRD1Z3RJxUH9PR/2aJwWI7mH5Os0TV5+asuGiSmAiawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM8W9kUOEVrRfpjvxApTxu/2ViJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNWM0 MmEyNS00MmMzLTQ2ZmUtOTkxNC01YjgzOTRlYWU5YjEvMzVjNDJhMjUtNDJjMy00 NmZlLTk5MTQtNWI4Mzk0ZWFlOWIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzVjNDJhMjUtNDJjMy00NmZlLTk5 MTQtNWI4Mzk0ZWFlOWIxLzM1YzQyYTI1LTQyYzMtNDZmZS05OTE0LTViODM5NGVh ZTliMS5jcmwwHwYDVR0jBBgwFoAUA7qtHWql6FJWF66N5OuHRGU45vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNWM0MmEyNS00MmMzLTQ2ZmUtOTkxNC01Yjgz OTRlYWU5YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsqtbS2ugzh4Ove1SbMlqT l3cdBiSZK5Pg5XG28oJ4wR5AGpbZDHfNbwj1Arjz2bxfb8CmgqH3YPCmPNfnvC8L uBBryIKjsXb+7N0LR6McEJC3w+UVY+VGdazE7pyIG3GnfSg5zNPRINOCaNEAeqFj 1evvnbXHo8IrkNPKMmmq0s9o1xXrPPI9Z20c4ExkeSAls1nui8NBcpmXKoUhbX/t 0H3kUaBh4hMAnujQNoBGIq5MiSFzIGEwFndGEvdrOsz+S87PPjnB/4MCOG+ZVLG+ Gu7aDLHhicZaGVMNhs0I+BuN4s6MJ4w3JJLELe2Y1IWhsKxhhKQGaRIlqbr55fwj -----END CERTIFICATE-----Generated at Fri Mar 27 05:08:09 2026 by rpki-client