$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft File: 4aeeea60-e12e-4570-a310-cac6f50c2bef.mft (raw, json) Hash identifier: yV41vvVDB7z0MssQ7KsGdxyByd4LhJ7hP6Svj9QCOSo= Subject key identifier: 3F:A2:19:94:83:21:79:A5:B9:48:02:63:34:2D:37:D3:60:C3:18:35 Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Certificate serial: 010D0C9F4328584D49FA73846BDBAAB5E1A9FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft Manifest number: 010D0C9F4328584073A82645A47BAF84172CEC44 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 17cbbf97-598d-34ab-88a5-0011ef8780c7.roa (hash: 87pZ+qXBcM15rEYsOTFGXYyC5pO2/5MITZNe8gopFVw=) 2: 2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa (hash: EB1wRWlySSuPv+yqNdZuY9ftcUNaaIbdbaYOCt2Rbd4=) 3: 4aeeea60-e12e-4570-a310-cac6f50c2bef.crl (hash: K13Z4Vhi9cUWgjxZV0Fa+jLrdQsl8DyvsHbWcbqRPww=) 4: 9cdc9f06-fadc-3c2a-a572-a2bfc3dd9abf.roa (hash: oaXeBDc6TVmiU/3Frek00h+XCnso8KlOi8mrBcyr6GY=) 5: acff9046-e5a0-3170-b9bc-60a50523997d.roa (hash: 6mksdnZHEZHF9QkXiYd56ExVeab6KJLCQ8coFuWK4nM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:73:84:6b:db:aa:b5:e1:a9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=a5f9f60b-0b51-4cf1-b29f-109341343f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:a9:74:99:f2:8d:39:72:4c:00:3d:0e:ad: da:e6:ce:42:23:26:e1:17:11:1f:9a:da:51:57:4e: b8:e6:48:70:ca:8c:a7:0b:ff:c7:66:06:cd:79:55: 07:12:ce:12:6a:14:15:e9:9a:90:aa:ca:0b:b8:08: 9f:f9:9d:dc:46:1a:9e:88:15:ab:b5:29:e8:04:e6: eb:43:ae:23:a2:a1:97:9f:c5:2f:2f:11:e2:83:da: 03:74:60:b0:08:de:31:1d:08:2b:af:c2:59:6e:7b: 54:a2:a7:1f:ba:82:2b:77:1c:dd:61:63:a2:09:9c: e9:51:f5:31:60:10:f7:46:6c:7b:13:1d:78:6a:57: 97:0c:b0:17:05:cc:f3:53:73:4b:86:af:4d:65:01: e5:e9:16:80:33:dd:a1:96:b9:e0:4d:49:e1:93:78: cf:86:79:2d:70:09:b1:92:40:35:2b:44:1c:1b:cf: 5a:86:7f:7c:d4:89:f1:ca:6a:a1:59:da:12:2a:8a: 13:da:f8:ce:d8:2c:87:3a:cd:cc:4e:91:9c:d3:83: 78:e9:9a:9f:f1:cc:a6:8b:ec:62:fd:6c:f5:be:54: 41:0b:73:d3:2b:a6:a6:da:20:41:00:f7:7e:87:83: 26:e3:00:d0:bb:cd:72:ef:9f:dc:7d:e3:2f:ac:6f: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A2:19:94:83:21:79:A5:B9:48:02:63:34:2D:37:D3:60:C3:18:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl X509v3 Authority Key Identifier: keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7b:22:5d:78:36:8b:8d:c5:b6:7f:99:92:ae:9f:24:df:c6: ee:1d:b3:03:ae:aa:b3:53:c8:2f:2f:31:1c:e9:4a:b8:af:45: 79:6a:1d:68:2a:d1:90:b9:60:56:30:1d:41:73:e5:9f:55:f9: 39:86:08:37:ca:0f:42:12:b1:bf:42:dc:f6:99:13:f4:84:27: 2f:ba:aa:89:6d:95:2d:94:05:39:b3:32:45:b8:5d:8b:70:66: a0:7d:29:1c:2a:ee:e7:43:0d:6e:72:91:e8:b3:0a:5d:a0:4b: 01:61:79:57:76:37:6a:09:c6:28:f4:77:c1:f7:ea:51:5c:e6: 5e:b5:45:39:21:b0:12:1a:13:59:9e:05:1d:79:b8:9e:df:58: 20:3b:3e:64:97:50:3e:06:e7:c3:61:77:77:5f:c4:5e:f7:1b: 36:86:74:d8:80:49:1a:94:c6:33:49:84:d3:18:b9:47:70:2c: d4:39:ac:a4:92:09:95:2a:45:47:38:cb:b0:e7:27:14:c2:5b: 82:4c:e8:4b:14:06:b4:e4:7d:1f:18:b5:12:2b:1a:7f:b6:04: 0d:5d:b1:5c:ae:47:f6:56:ba:88:55:e2:b8:7f:bc:e9:a1:4c: bd:d3:b7:27:93:32:65:64:2b:4d:64:10:84:62:3c:a9:13:c7: 9f:d2:51:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nOEa9uqteGp/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy YmVmMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk YTVmOWY2MGItMGI1MS00Y2YxLWIyOWYtMTA5MzQxMzQzZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCmpdJnyjTlyTAA9Dq3a5s5CIybhFxEfmtpR V0645khwyoynC//HZgbNeVUHEs4SahQV6ZqQqsoLuAif+Z3cRhqeiBWrtSnoBObr Q64joqGXn8UvLxHig9oDdGCwCN4xHQgrr8JZbntUoqcfuoIrdxzdYWOiCZzpUfUx YBD3Rmx7Ex14aleXDLAXBczzU3NLhq9NZQHl6RaAM92hlrngTUnhk3jPhnktcAmx kkA1K0QcG89ahn981InxymqhWdoSKooT2vjO2CyHOs3MTpGc04N46Zqf8cymi+xi /Wz1vlRBC3PTK6am2iBBAPd+h4Mm4wDQu81y75/cfeMvrG8XnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+iGZSDIXmluUgCYzQtN9Ngwxg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvNGFlZWVhNjAtZTEyZS00 NTcwLWEzMTAtY2FjNmY1MGMyYmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2 ZjUwYzJiZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPeyJdeDaLjcW2f5mSrp8k 38buHbMDrqqzU8gvLzEc6Uq4r0V5ah1oKtGQuWBWMB1Bc+WfVfk5hgg3yg9CErG/ Qtz2mRP0hCcvuqqJbZUtlAU5szJFuF2LcGagfSkcKu7nQw1ucpHoswpdoEsBYXlX djdqCcYo9HfB9+pRXOZetUU5IbASGhNZngUdebie31ggOz5kl1A+BufDYXd3X8Re 9xs2hnTYgEkalMYzSYTTGLlHcCzUOaykkgmVKkVHOMuw5ycUwluCTOhLFAa05H0f GLUSKxp/tgQNXbFcrkf2VrqIVeK4f7zpoUy907cnkzJlZCtNZBCEYjypE8ef0lEz -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:23 2026 by rpki-client