$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft File: 3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft (raw, json) Hash identifier: FoGcJiKIYZ9XG7P7Bb+z2TR2Famqh1Kn0JOM3SEGWBI= Subject key identifier: E4:83:30:F2:82:FF:E9:AB:0D:18:4C:D9:02:8C:21:5F:D6:72:6C:FF Authority key identifier: 91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA Certificate issuer: /CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19 Certificate serial: 010D0C9F4328584D49BED6ADDE918D55E3707140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft Manifest number: 010D0C9F4328584BB22FE819BEB25ACDBDD81D18 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 30bd9f78-f7ca-3103-8b20-13a228c2ef2f.roa (hash: fgfBWkQmOoJGLSM65aNaMhTrQe6SVw6p97gmAjQsXxU=) 2: 3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl (hash: yAhBGdHdXBdgNTa+LXYWo7CCwRhHYbm7hKrFXYeYWt8=) 3: 376df6f5-a235-341a-9edd-7f05fa6ea0a1.roa (hash: Ly1DeCqJ1T0dUAR6IDZ2Ht0AcuEohM8mrhGA92l4eLY=) 4: e93b34e6-9cb0-3bfc-8467-91d67706f31e.roa (hash: R5Ypn2uvQOOQ+Y/7wWZ3wejpAMLxLzrvdmEqB61WDLc=) 5: ee5442f0-2739-340d-b087-f18695c6629e.roa (hash: lhGiKKNU9vmRGXNgtS/hEW81bjf+jBGxn+VY3i1ciUA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:ad:de:91:8d:55:e3:70:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19 Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=5ae94edc-5cc3-4407-a0a7-0df363ad5fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:20:a8:c5:32:b5:1e:d6:ba:98:d3:df:36: d3:04:da:74:b5:c6:fd:87:db:8b:72:e6:62:4b:85: 05:bc:eb:92:15:8f:96:22:3a:e6:ed:51:db:7f:96: 53:dd:2f:83:78:34:10:43:35:14:26:d7:50:70:d9: 4c:96:49:b2:17:8e:95:09:59:29:bf:4e:2d:ff:1e: 44:d6:fa:fa:75:09:ad:f7:75:0c:3b:fc:15:87:87: 92:02:31:9c:17:9f:05:26:3e:ef:e6:2e:34:39:b4: bb:ff:1f:d4:7f:ae:7f:a2:6c:1c:20:e1:94:76:a5: 01:27:98:fb:2a:a9:9b:b3:7a:8c:46:26:e3:40:81: 3f:2b:f6:0a:a6:81:46:69:5a:9e:46:62:a2:ab:64: 43:c3:13:fb:2e:4b:95:90:13:25:38:b7:bb:ec:1e: 0b:bb:a7:53:5b:72:66:ff:68:29:b8:63:c2:2f:32: e5:92:d4:f3:7e:93:51:8b:9c:9f:d8:09:63:3f:6a: a7:07:c5:2c:32:8a:3b:3d:8e:8a:90:a9:0c:09:b0: a2:bf:56:fa:b5:23:e8:e6:77:2e:2a:85:c0:35:80: ea:1f:8d:63:2c:9d:7a:f9:14:77:91:27:28:aa:59: 38:ee:2d:2e:de:7f:e5:4f:f6:69:70:6d:67:ac:fc: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:83:30:F2:82:FF:E9:AB:0D:18:4C:D9:02:8C:21:5F:D6:72:6C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl X509v3 Authority Key Identifier: keyid:91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cc:d1:af:bd:e4:f0:e0:6e:b4:33:6e:c0:8e:e7:64:4a:51: 67:f8:d8:69:35:6f:1b:00:fa:c4:d5:b7:2d:22:8b:17:35:3d: bc:8d:da:e0:f6:e8:05:37:2e:c5:7f:56:d5:36:e9:ef:a7:65: 94:f0:02:c2:74:d3:79:b8:f9:47:6c:4d:bc:a0:ee:97:6d:96: 26:c4:57:39:6a:79:be:d2:38:58:3a:eb:b4:67:a2:ed:53:06: eb:e2:25:86:ee:35:e3:b9:c4:0e:c4:d3:51:0d:e6:b8:4a:f0: ca:36:f6:8e:6c:8f:5c:36:7b:2c:53:25:96:27:91:37:e5:6f: 73:f2:44:c5:35:42:bf:95:fe:53:68:bf:b0:dd:63:14:ca:16: da:5f:b2:bc:37:03:63:25:3a:87:59:8b:d3:c7:ca:0b:81:a4: 5e:b4:61:3b:b6:4a:19:d6:3a:f6:e6:a9:86:f4:1e:bd:5e:0c: 3c:a0:10:8e:82:2c:85:56:da:3b:f5:62:4b:91:b7:b9:7d:a5: 06:2e:ed:c1:41:42:e6:f7:c6:69:06:ee:1b:86:a2:a3:47:e9: b5:db:a5:9a:33:20:7c:4d:29:df:22:89:b2:af:ee:8e:5d:3b: a4:46:45:b0:c1:93:81:36:be:ca:fc:a4:8c:30:13:56:56:be: 75:a7:c5:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jvtat3pGNVeNwcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUyNWQwMjQtOGJjNy00YjhkLWIzM2EtNDBlZjFjOGZh YTE5MB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk NWFlOTRlZGMtNWNjMy00NDA3LWEwYTctMGRmMzYzYWQ1ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK4gqMUytR7WupjT3zbTBNp0tcb9h9uLcuZi S4UFvOuSFY+WIjrm7VHbf5ZT3S+DeDQQQzUUJtdQcNlMlkmyF46VCVkpv04t/x5E 1vr6dQmt93UMO/wVh4eSAjGcF58FJj7v5i40ObS7/x/Uf65/omwcIOGUdqUBJ5j7 Kqmbs3qMRibjQIE/K/YKpoFGaVqeRmKiq2RDwxP7LkuVkBMlOLe77B4Lu6dTW3Jm /2gpuGPCLzLlktTzfpNRi5yf2AljP2qnB8UsMoo7PY6KkKkMCbCiv1b6tSPo5ncu KoXANYDqH41jLJ16+RR3kScoqlk47i0u3n/lT/ZpcG1nrPyzoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOSDMPKC/+mrDRhM2QKMIV/Wcmz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNTI1 ZDAyNC04YmM3LTRiOGQtYjMzYS00MGVmMWM4ZmFhMTkvMzUyNWQwMjQtOGJjNy00 YjhkLWIzM2EtNDBlZjFjOGZhYTE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzUyNWQwMjQtOGJjNy00YjhkLWIz M2EtNDBlZjFjOGZhYTE5LzM1MjVkMDI0LThiYzctNGI4ZC1iMzNhLTQwZWYxYzhm YWExOS5jcmwwHwYDVR0jBBgwFoAUkR2cmhGb4HAtSKJ5oQncq1xKcNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNTI1ZDAyNC04YmM3LTRiOGQtYjMzYS00MGVm MWM4ZmFhMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJzNGvveTw4G60M27Ajudk SlFn+NhpNW8bAPrE1bctIosXNT28jdrg9ugFNy7Ff1bVNunvp2WU8ALCdNN5uPlH bE28oO6XbZYmxFc5anm+0jhYOuu0Z6LtUwbr4iWG7jXjucQOxNNRDea4SvDKNvaO bI9cNnssUyWWJ5E35W9z8kTFNUK/lf5TaL+w3WMUyhbaX7K8NwNjJTqHWYvTx8oL gaRetGE7tkoZ1jr25qmG9B69Xgw8oBCOgiyFVto79WJLkbe5faUGLu3BQULm98Zp Bu4bhqKjR+m126WaMyB8TSnfIomyr+6OXTukRkWwwZOBNr7K/KSMMBNWVr51p8Vu -----END CERTIFICATE-----Generated at Thu Mar 26 11:09:54 2026 by rpki-client