$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft File: a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft (raw, json) Hash identifier: i/AWHWOiOhWaJCaHnfSIpmEo+bWAWQpPdlDvLPTRO/k= Subject key identifier: 0B:1C:F8:8A:DB:E7:43:81:66:CB:3A:16:71:27:27:C0:4D:8A:84:01 Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B Certificate issuer: /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Certificate serial: 010D0C9F4328584D4BB9117F8F383E97DC2BAD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft Manifest number: 010D0C9F43285847A2E4EB6778299310D14615A3 Signing time: Thu 26 Mar 2026 11:00:04 +0000 Manifest this update: Thu 26 Mar 2026 11:00:04 +0000 Manifest next update: Sat 28 Mar 2026 11:00:00 +0000 Files and hashes: 1: 2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa (hash: gjD+/2tt+CHNr989q9vwnoZBOMsj/EDcEUu2t95mOxk=) 2: 7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (hash: ufnM/oB8CyoDN53YJZOKUGe/qZxEEfwIyUcGDPI6tCM=) 3: 7f946da9-d718-3646-bb94-ea37bac0eefb.roa (hash: jVf85ePRTfnKj0iafY5C6k04NYeh7oge7wtw75BS0OU=) 4: a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl (hash: VM6odr49oaAhdtaIGZZjXfppT1JnWr04ntaZJBOuP5E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:b9:11:7f:8f:38:3e:97:dc:2b:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Validity Not Before: Mar 26 11:00:04 2026 GMT Not After : Mar 28 11:00:00 2026 GMT Subject: CN=07e97697-d377-4d85-92f7-c46ff3b97fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:1b:51:a0:dd:30:20:78:58:78:e0:d0:06: 3c:8a:40:78:2e:fb:60:0b:4e:04:79:8f:d9:3f:cd: 25:d4:14:99:a5:d1:dd:93:85:00:70:fd:96:4f:45: 03:78:af:15:df:29:02:99:83:8a:b5:2c:04:ad:46: 10:df:0c:8d:3f:fa:15:49:a6:da:17:f0:49:a5:4a: 70:b4:a7:1b:a3:5c:f9:ea:e7:56:5f:c3:d9:57:da: b9:b1:aa:f9:b2:03:26:ee:27:15:68:17:99:35:b6: f3:7e:59:4b:d7:f2:0b:3d:49:36:a1:f6:29:30:24: 84:19:8e:68:f2:95:f3:c4:92:4c:6b:61:47:08:63: 63:a1:35:96:a1:99:27:a0:0c:b7:36:21:d0:c9:35: e0:a5:b4:2e:cf:51:f8:6d:3f:5a:14:17:92:6d:51: da:50:7e:21:4f:06:e5:56:8b:ce:e2:d8:5e:af:d7: 99:65:46:e8:d3:c8:81:20:45:43:7d:c6:80:79:7b: 33:0b:f0:4d:a5:99:5a:ad:9b:1b:b4:aa:51:9a:eb: ed:0e:9c:c6:97:fb:b9:a7:63:81:51:08:05:50:87: 85:44:4b:4c:07:01:a6:25:1a:ed:c2:61:6b:77:c9: ea:e2:aa:7f:4d:ab:f4:2f:c6:11:b7:c4:ea:18:66: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1C:F8:8A:DB:E7:43:81:66:CB:3A:16:71:27:27:C0:4D:8A:84:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl X509v3 Authority Key Identifier: keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:71:ad:25:97:47:fc:c8:3c:ee:0b:24:66:b8:b2:5e:da:ab: 2e:e3:c7:b4:d8:6e:55:0d:a7:1f:c6:f7:97:01:8f:92:7a:39: 4b:52:71:49:e9:d5:8e:1c:17:66:7c:f0:7a:ac:d1:2f:b1:ed: 41:88:13:d5:ca:fe:16:73:e6:6c:e7:42:f5:c2:97:4c:3e:14: ff:0b:1f:dc:8f:10:f6:c2:d9:26:cc:fb:5f:f1:47:db:5d:1f: 6c:6b:5e:23:3f:ca:75:eb:a6:ee:8b:f6:ed:44:86:48:10:cd: 35:68:0f:25:b1:f0:2b:d0:01:1b:25:93:93:10:f7:11:35:c1: 5d:b9:30:20:3e:58:d5:a9:bf:28:45:fd:27:fc:a2:84:96:d5: 8f:ca:46:5f:e1:9a:52:6e:68:c4:58:5b:c5:cb:96:4f:de:93: 26:1e:34:a9:7a:5d:d9:de:79:cb:a9:bd:51:73:40:16:7d:09: 60:23:b3:1b:d1:38:c1:dc:ec:f9:db:e5:7e:a2:67:d6:b0:98: cb:4c:37:9e:ed:43:bc:00:bb:9a:13:b1:79:bd:76:d7:af:1f: 30:53:46:28:be:bf:a8:8a:85:dc:18:b0:a4:64:90:fd:dd:43: fc:22:27:af:f7:59:4a:21:ed:47:f2:20:10:c4:6c:e6:a5:5c: e7:c9:1a:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LuRF/jzg+l9wrrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmNDdlM2UtMjU2MS00Yjc5LWIzMzItZWU4YTExZWEw NjE5MB4XDTI2MDMyNjExMDAwNFoXDTI2MDMyODExMDAwMFowLzEtMCsGA1UEAxMk MDdlOTc2OTctZDM3Ny00ZDg1LTkyZjctYzQ2ZmYzYjk3ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6EbUaDdMCB4WHjg0AY8ikB4LvtgC04EeY/Z P80l1BSZpdHdk4UAcP2WT0UDeK8V3ykCmYOKtSwErUYQ3wyNP/oVSabaF/BJpUpw tKcbo1z56udWX8PZV9q5sar5sgMm7icVaBeZNbbzfllL1/ILPUk2ofYpMCSEGY5o 8pXzxJJMa2FHCGNjoTWWoZknoAy3NiHQyTXgpbQuz1H4bT9aFBeSbVHaUH4hTwbl VovO4ther9eZZUbo08iBIEVDfcaAeXszC/BNpZlarZsbtKpRmuvtDpzGl/u5p2OB UQgFUIeFREtMBwGmJRrtwmFrd8nq4qp/Tav0L8YRt8TqGGaL5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAsc+Irb50OBZss6FnEnJ8BNioQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0 N2UzZS0yNTYxLTRiNzktYjMzMi1lZThhMTFlYTA2MTkvYThmNDdlM2UtMjU2MS00 Yjc5LWIzMzItZWU4YTExZWEwNjE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYThmNDdlM2UtMjU2MS00Yjc5LWIz MzItZWU4YTExZWEwNjE5L2E4ZjQ3ZTNlLTI1NjEtNGI3OS1iMzMyLWVlOGExMWVh MDYxOS5jcmwwHwYDVR0jBBgwFoAUWxYEyUxTiq2t4dvVwLnJn3tsqzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0N2UzZS0yNTYxLTRiNzktYjMzMi1lZThh MTFlYTA2MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMca0ll0f8yDzuCyRmuLJe 2qsu48e02G5VDacfxveXAY+SejlLUnFJ6dWOHBdmfPB6rNEvse1BiBPVyv4Wc+Zs 50L1wpdMPhT/Cx/cjxD2wtkmzPtf8UfbXR9sa14jP8p166bui/btRIZIEM01aA8l sfAr0AEbJZOTEPcRNcFduTAgPljVqb8oRf0n/KKEltWPykZf4ZpSbmjEWFvFy5ZP 3pMmHjSpel3Z3nnLqb1Rc0AWfQlgI7Mb0TjB3Oz52+V+omfWsJjLTDee7UO8ALua E7F5vXbXrx8wU0Yovr+oioXcGLCkZJD93UP8Iiev91lKIe1H8iAQxGzmpVznyRp3 -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:44 2026 by rpki-client