$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft File: 8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft (raw, json) Hash identifier: aek0Pr0ZOEv5SmX6bNMI0ZutyNZZHG6k7rBhrbCkUi0= Subject key identifier: 97:C8:E3:A8:F7:B9:48:E4:29:66:49:64:F2:BB:A7:2B:D9:93:FE:49 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584D4EDD16858319DE4A51966E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft Manifest number: 010D0C9F432858477C2EA14A959B2687B7E5CF82 Signing time: Fri 27 Mar 2026 14:00:04 +0000 Manifest this update: Fri 27 Mar 2026 14:00:04 +0000 Manifest next update: Mon 30 Mar 2026 14:00:00 +0000 Files and hashes: 1: 31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa (hash: QsAw/IcXW87LFJYj0YZwOvE8TbLidbzY4GDB/SD9BnQ=) 2: 3880b21f-244e-35e6-a256-bd5d4c123331.roa (hash: Bn+VjyRaOW11rQQpg7i0DAyg1WmZM79FK1lEEsk9O64=) 3: 44b8d114-f82e-3748-9717-6e931b2c872c.roa (hash: 31HneWckBnRIySVjdCRrkolAM2JnZ6A/eg4nLf358hM=) 4: 8622301a-4144-3a94-b59c-4874fe9ff2ef.roa (hash: TWk+XexMptfdJdWHQ10uwuj0Ho3SDD0na2ycqS8aQF8=) 5: 8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl (hash: k0sHyy3xO3/r7dy0ilZ3raz69xLfH2d602x3HHiJk1Y=) 6: 8e538e64-2bf8-3da1-9438-625e450840da.roa (hash: 5k7frMMCyqqfoLk0gcvyDSEvYmkMWssxD+Q7W9FTZqY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:dd:16:85:83:19:de:4a:51:96:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Mar 27 14:00:04 2026 GMT Not After : Mar 30 14:00:00 2026 GMT Subject: CN=3a22a9af-21da-40c5-8198-a486977f3d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:e3:a7:b2:e8:c1:6e:2f:19:fc:20:c1:22: c3:55:10:99:c9:79:1a:3d:74:0e:b9:0b:45:ef:ba: 61:eb:2a:b3:0c:3f:0b:80:41:32:77:40:d0:78:19: c1:78:43:28:6c:1d:10:65:bd:0e:83:65:2a:85:85: 24:a8:9f:95:d8:5f:76:94:de:d9:2e:39:bc:f3:c6: c1:6d:db:55:99:37:7c:a2:bd:a1:07:04:9e:cc:74: 9c:95:26:b1:59:45:25:36:ef:c1:80:78:71:17:82: 15:6e:cf:9f:44:8d:34:77:fd:62:ee:de:71:0b:83: f4:00:9d:1a:da:6e:19:4c:5a:09:b7:e7:97:a3:90: 7f:29:49:77:f6:ee:aa:7d:46:99:37:56:1b:5e:77: 84:ad:a7:3d:0d:e1:a8:f6:99:d2:9f:6d:11:b1:0e: b9:ed:20:ce:c8:4f:80:0c:5c:c0:4f:95:cb:53:cb: 30:15:c1:c5:e0:dc:5d:a5:24:b4:63:45:d9:18:6d: b6:9e:30:86:c1:5f:09:e2:20:b7:21:a2:4e:6a:da: ea:4a:c6:56:7e:1c:a9:72:71:ec:80:fe:2c:e3:48: 15:6a:48:e3:ec:e7:6e:22:e5:2c:2d:6b:44:00:94: 86:52:9a:7a:cb:f7:fb:7e:91:11:c2:72:00:e1:64: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:E3:A8:F7:B9:48:E4:29:66:49:64:F2:BB:A7:2B:D9:93:FE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ee:62:23:9f:d7:48:81:b6:4d:a8:b8:71:a6:ce:19:c0:d1: f9:83:60:53:ba:c5:f4:e9:a6:46:ab:a7:b9:e7:18:94:a7:1b: 00:e7:ef:90:fc:44:51:8d:e0:cc:d3:0f:12:fe:cc:df:44:b3: 50:49:1b:2b:9d:63:85:2a:46:6b:fa:b9:40:5d:6d:13:99:c8: 37:07:0e:ec:22:b7:41:bd:03:85:21:cd:41:cf:15:d7:7e:b2: 13:42:d3:29:54:68:d7:c2:6a:9e:e7:f0:23:61:33:2b:ae:16: ac:92:09:3d:cd:8a:26:26:9f:8e:19:bd:88:93:53:ed:86:24: ba:96:fd:19:b4:64:f1:82:e3:0a:fc:61:49:fc:0c:5b:9e:12: b2:54:cf:bf:a5:ab:1f:6c:ee:16:a6:73:f7:03:c2:eb:f3:06: d2:c3:3f:57:9b:7f:0d:00:17:cf:94:56:bf:46:50:f7:d0:52: 8b:e5:07:89:08:f6:da:b6:7a:85:37:6c:90:0b:54:d6:58:69: 7e:68:b0:94:be:3c:7a:50:ef:b9:37:ba:aa:28:b4:0b:f0:df: a4:fb:68:dd:0d:b6:c8:32:dc:16:a8:bf:81:9d:8f:34:00:ed: 40:ed:d8:7a:a6:88:16:57:4b:ab:39:47:b2:27:3c:cc:88:7e: 9f:db:16:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1O3RaFgxneSlGWbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI2MDMyNzE0MDAwNFoXDTI2MDMzMDE0MDAwMFowLzEtMCsGA1UEAxMk M2EyMmE5YWYtMjFkYS00MGM1LTgxOTgtYTQ4Njk3N2YzZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlHjp7LowW4vGfwgwSLDVRCZyXkaPXQOuQtF 77ph6yqzDD8LgEEyd0DQeBnBeEMobB0QZb0Og2UqhYUkqJ+V2F92lN7ZLjm888bB bdtVmTd8or2hBwSezHSclSaxWUUlNu/BgHhxF4IVbs+fRI00d/1i7t5xC4P0AJ0a 2m4ZTFoJt+eXo5B/KUl39u6qfUaZN1YbXneErac9DeGo9pnSn20RsQ657SDOyE+A DFzAT5XLU8swFcHF4NxdpSS0Y0XZGG22njCGwV8J4iC3IaJOatrqSsZWfhypcnHs gP4s40gVakjj7OduIuUsLWtEAJSGUpp6y/f7fpERwnIA4WSnPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJfI46j3uUjkKWZJZPK7pyvZk/5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGE0YzcwYTQtMzNkYS00 ODQzLWEzYzctYzhmOGQ4OGQ4MDM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT7mIjn9dIgbZNqLhxps4Z wNH5g2BTusX06aZGq6e55xiUpxsA5++Q/ERRjeDM0w8S/szfRLNQSRsrnWOFKkZr +rlAXW0Tmcg3Bw7sIrdBvQOFIc1BzxXXfrITQtMpVGjXwmqe5/AjYTMrrhaskgk9 zYomJp+OGb2Ik1PthiS6lv0ZtGTxguMK/GFJ/AxbnhKyVM+/pasfbO4WpnP3A8Lr 8wbSwz9Xm38NABfPlFa/RlD30FKL5QeJCPbatnqFN2yQC1TWWGl+aLCUvjx6UO+5 N7qqKLQL8N+k+2jdDbbIMtwWqL+BnY80AO1A7dh6pogWV0urOUeyJzzMiH6f2xZa -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:22 2026 by rpki-client