$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft File: 433ef7a7-1e53-4401-9dec-0da336641458.mft (raw, json) Hash identifier: 22auZQIiKCgRd1sYHIQLXmN04WDedi8iDePbJyxLEfY= Subject key identifier: 98:C0:E7:67:3F:49:3C:7C:E9:D6:9C:47:E1:32:82:63:24:D6:21:E1 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584D49DC9C48A54A912D7E0B42E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft Manifest number: 010D0C9F4328584646AAFC67B35FD9718D3312DA Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa (hash: L8KZAFFHbyOWV0weg7bYyQYvIyPA05f2ojevM1H+y6k=) 2: 433ef7a7-1e53-4401-9dec-0da336641458.crl (hash: x6v9xIZw5aQtQSfCTyGRcUjKBHlngncWr44srGH2570=) 3: 554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (hash: DXc/6q5VThyBmsWGJccfuAjmkxjSGIVYFUq9aviiYC0=) 4: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (hash: YmlnntRhIl2+ZN700a7/PRi4v3Xp5RHAqmV+oNT7wxs=) 5: bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (hash: QhIEIZVaFw6QhIq8xNUJHn20SxcjjJ8HClWf/DtXndw=) 6: bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa (hash: o1UhMwpZJiHUlk/zn9R4gSvAf07UYCanSquAEe/S6+s=) 7: e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (hash: lDLf3AIH0RKxFcQKVapeYRzGYu8ta0uW+qjz5uNRc8A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9c:48:a5:4a:91:2d:7e:0b:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=8ea7ed7f-68f4-4b1d-9f9c-69870d3aa8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:58:f8:9f:1f:e3:77:a3:5d:7e:ec:49:33: 65:4c:de:bf:9a:45:7f:36:43:62:c5:f8:1e:d1:55: 2b:da:56:a9:a4:d3:e1:5c:48:c8:8c:ac:4e:b4:90: 1a:9b:b3:28:70:62:fa:69:f4:72:01:38:b4:78:80: ef:33:52:7c:19:b6:b4:4a:f3:e7:ba:34:72:21:dc: f0:95:2e:84:9f:4c:4c:d8:19:32:e6:5d:88:6a:87: 61:cc:ee:82:0e:78:b3:4d:e0:d9:e5:91:fe:9b:06: d6:4a:40:6e:40:73:90:fc:31:62:5e:a9:0a:dd:51: 25:12:4c:48:42:7b:0c:19:c0:bc:4e:5d:7b:04:90: a0:1a:dd:54:f5:c5:f7:65:df:27:63:5b:b2:61:41: 0c:5d:78:3c:48:a9:92:75:6d:bd:4a:86:a8:f0:84: 4b:86:c4:8c:99:b7:0a:c8:1c:1a:59:48:80:98:ec: 82:b7:91:c8:00:e2:8e:52:ba:89:12:39:08:30:f4: d4:c5:24:12:c1:69:e8:da:37:52:e7:5f:a5:7b:2c: a3:52:bc:1e:34:93:45:42:55:40:69:c4:43:7a:a2: 72:83:76:5a:23:c4:08:ae:64:ab:16:d2:98:89:8e: 26:d2:fb:43:75:3d:89:35:9f:2e:8d:ee:da:65:e0: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C0:E7:67:3F:49:3C:7C:E9:D6:9C:47:E1:32:82:63:24:D6:21:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8a:c6:2b:56:8b:db:5b:85:e3:17:31:6a:6d:6a:cd:4d:87: 20:eb:2d:14:12:b4:86:81:0e:17:3f:8f:5b:8e:e6:8b:8a:66: 1f:dc:40:41:6d:b1:1b:6a:37:97:79:c3:24:76:c1:48:0d:1b: a3:95:2d:c9:99:98:11:b1:de:6b:2a:1d:e2:6f:6b:d6:ac:14: c6:1c:c4:e2:ad:8f:bc:3c:15:7a:e7:0e:ad:48:9a:cd:86:cd: 88:04:29:81:59:1c:02:f6:ff:21:45:c5:d6:b9:df:ea:b7:78: 7d:96:b3:15:91:88:35:84:b1:15:35:11:24:de:a3:8c:c3:6e: e8:60:20:bc:fe:e7:43:da:6b:d5:93:9a:08:24:38:2d:71:9f: fb:b9:f8:d8:fe:d6:61:c3:04:c6:dc:83:7d:bb:94:1e:2b:93: 56:97:f3:bf:38:32:51:bf:74:af:1c:dc:0f:e5:f3:b0:2b:fd: 0d:98:44:99:6b:e9:29:b2:87:ba:98:fd:1e:50:cd:9d:25:c0: 73:2b:b1:5f:76:32:a3:f4:a2:11:3b:15:db:39:b0:a2:70:eb: 67:e2:ed:f6:d9:f5:a3:d8:68:d8:91:9c:18:20:d8:e8:43:67: 6f:39:87:14:dd:5f:c4:3a:fc:b7:fc:c9:cc:f2:36:68:41:6a: 75:a3:78:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3JxIpUqRLX4LQuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk OGVhN2VkN2YtNjhmNC00YjFkLTlmOWMtNjk4NzBkM2FhOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9lY+J8f43ejXX7sSTNlTN6/mkV/NkNixfge 0VUr2lappNPhXEjIjKxOtJAam7MocGL6afRyATi0eIDvM1J8Gba0SvPnujRyIdzw lS6En0xM2Bky5l2IaodhzO6CDnizTeDZ5ZH+mwbWSkBuQHOQ/DFiXqkK3VElEkxI QnsMGcC8Tl17BJCgGt1U9cX3Zd8nY1uyYUEMXXg8SKmSdW29Soao8IRLhsSMmbcK yBwaWUiAmOyCt5HIAOKOUrqJEjkIMPTUxSQSwWno2jdS51+leyyjUrweNJNFQlVA acRDeqJyg3ZaI8QIrmSrFtKYiY4m0vtDdT2JNZ8uje7aZeDO9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJjA52c/STx86dacR+EygmMk1iHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvNDMzZWY3YTctMWU1My00 NDAxLTlkZWMtMGRhMzM2NjQxNDU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+isYrVovbW4XjFzFqbWrN TYcg6y0UErSGgQ4XP49bjuaLimYf3EBBbbEbajeXecMkdsFIDRujlS3JmZgRsd5r Kh3ib2vWrBTGHMTirY+8PBV65w6tSJrNhs2IBCmBWRwC9v8hRcXWud/qt3h9lrMV kYg1hLEVNREk3qOMw27oYCC8/udD2mvVk5oIJDgtcZ/7ufjY/tZhwwTG3IN9u5Qe K5NWl/O/ODJRv3SvHNwP5fOwK/0NmESZa+kpsoe6mP0eUM2dJcBzK7FfdjKj9KIR OxXbObCicOtn4u322fWj2GjYkZwYINjoQ2dvOYcU3V/EOvy3/MnM8jZoQWp1o3ht -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:33 2026 by rpki-client