$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: 1oGb6YfHNOgKNge8EvpY8ZgM9tH/iGGPImI7LmeKpKQ= Subject key identifier: 24:95:5E:53:1D:9E:80:3F:A8:04:C1:0A:49:C1:53:4A:37:0F:DE:CC Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584D4947BA19D86D2A3B49E42F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602AD5D Signing time: Wed 25 Mar 2026 14:00:03 +0000 Manifest this update: Wed 25 Mar 2026 14:00:03 +0000 Manifest next update: Sat 28 Mar 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: kGh8Ztgr/i5X8Nkfj8XchDI/qFuY6ekI4Inptex6snA=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: GvwJhUVamqGgc2f0gJv6mWUhBE+a3phznUtGlkhWR94=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:47:ba:19:d8:6d:2a:3b:49:e4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Mar 25 14:00:03 2026 GMT Not After : Mar 28 14:00:00 2026 GMT Subject: CN=a3759d39-f189-44b2-be10-0e871b4ba61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:f6:07:cf:65:64:99:1f:02:e0:de:d5:d5: 78:66:21:a2:49:a1:d7:f3:c9:68:79:9a:bb:99:3c: 50:4d:9d:4e:7f:5a:9d:ca:a1:15:fd:36:23:b8:46: c8:e6:b8:f8:d6:f5:4a:e7:95:99:f6:56:61:d5:72: ad:67:00:68:03:64:be:d1:72:0b:d6:8e:15:76:72: 42:c0:8c:dc:2e:9a:42:62:fd:c4:bb:8e:a6:a7:9d: a8:97:6c:2d:fe:6a:bd:0a:36:fb:29:2a:d4:25:90: 2a:b1:d5:48:df:db:54:76:c9:91:cd:8a:17:c1:db: 10:19:3f:f4:d9:ea:91:23:bc:c8:e9:98:fc:9d:7f: 00:16:0c:ad:30:f4:52:bb:74:1f:47:5d:be:d4:8c: a2:e9:d8:29:a7:59:bb:a6:b5:11:c2:f7:3e:04:7e: 11:d1:65:35:c9:c1:0c:a0:9b:be:da:0c:67:0d:bd: c6:b2:1f:68:5a:04:53:e3:4d:32:06:37:2e:bb:2c: 03:18:e6:be:86:7d:41:54:f4:c9:43:c7:37:38:4e: ad:d0:7b:80:9b:f2:7c:48:85:05:84:64:e4:d6:f0: 4e:5f:ac:55:d4:ff:13:cc:0e:70:cd:b1:b3:c8:f6: 33:08:4d:0b:84:1f:60:1b:5e:66:56:a8:22:5c:a8: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:95:5E:53:1D:9E:80:3F:A8:04:C1:0A:49:C1:53:4A:37:0F:DE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:df:70:89:95:52:f4:dd:0b:83:a3:c0:7b:c9:1e:e5:a7:4c: 45:a7:87:ad:8c:b1:9f:77:af:1e:6c:40:7f:76:02:0d:a7:ec: 6f:7f:da:ca:d1:01:db:4a:a2:52:1d:60:bf:2a:ff:cb:56:75: 08:b6:a2:db:c9:1d:77:6a:ec:81:69:4d:b1:53:20:f7:7c:e4: 2e:ec:29:47:dc:c8:d4:4f:ad:32:77:db:0c:06:be:37:a0:ad: e9:30:18:3f:14:57:91:bd:c0:b8:4f:15:25:00:a8:80:3a:77: 6b:1e:c4:8a:cc:fa:bb:bc:23:ab:a4:bd:b4:05:a2:2c:e7:38: f0:44:d4:50:e5:48:dc:29:f3:97:69:c2:d2:bc:cb:63:e1:5e: f3:04:63:c9:5c:b3:6b:11:84:50:1b:f0:7c:75:09:71:eb:30: 08:c6:47:3d:b3:d6:95:c8:f7:e4:34:43:ca:8d:4a:0b:fb:bd: 41:ce:90:05:35:d0:a5:cf:f3:8a:1e:ec:93:43:d3:b6:1b:d7: d1:fb:25:c5:a9:ba:44:ef:8e:49:25:ad:95:a4:85:55:96:dd: e4:8c:e7:a9:51:32:0c:58:65:38:49:06:2a:01:0a:68:5f:c7: e9:0c:94:f6:19:e6:3c:5b:dc:13:44:35:80:5f:2f:5c:5d:fa: 8e:e7:bf:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JR7oZ2G0qO0nkL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDMyNTE0MDAwM1oXDTI2MDMyODE0MDAwMFowLzEtMCsGA1UEAxMk YTM3NTlkMzktZjE4OS00NGIyLWJlMTAtMGU4NzFiNGJhNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF32B89lZJkfAuDe1dV4ZiGiSaHX88loeZq7 mTxQTZ1Of1qdyqEV/TYjuEbI5rj41vVK55WZ9lZh1XKtZwBoA2S+0XIL1o4VdnJC wIzcLppCYv3Eu46mp52ol2wt/mq9Cjb7KSrUJZAqsdVI39tUdsmRzYoXwdsQGT/0 2eqRI7zI6Zj8nX8AFgytMPRSu3QfR12+1Iyi6dgpp1m7prURwvc+BH4R0WU1ycEM oJu+2gxnDb3Gsh9oWgRT400yBjcuuywDGOa+hn1BVPTJQ8c3OE6t0HuAm/J8SIUF hGTk1vBOX6xV1P8TzA5wzbGzyPYzCE0LhB9gG15mVqgiXKg3OQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSVXlMdnoA/qATBCknBU0o3D97MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBM33CJlVL03QuDo8B7yR7l p0xFp4etjLGfd68ebEB/dgINp+xvf9rK0QHbSqJSHWC/Kv/LVnUItqLbyR13auyB aU2xUyD3fOQu7ClH3MjUT60yd9sMBr43oK3pMBg/FFeRvcC4TxUlAKiAOndrHsSK zPq7vCOrpL20BaIs5zjwRNRQ5UjcKfOXacLSvMtj4V7zBGPJXLNrEYRQG/B8dQlx 6zAIxkc9s9aVyPfkNEPKjUoL+71BzpAFNdClz/OKHuyTQ9O2G9fR+yXFqbpE745J Ja2VpIVVlt3kjOepUTIMWGU4SQYqAQpoX8fpDJT2GeY8W9wTRDWAXy9cXfqO578Z -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:06 2026 by rpki-client