$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft File: 68de9da0-8f7e-4231-9340-c37abafc3714.mft (raw, json) Hash identifier: A7gmyy0ghZTOn966HyoijGWn+IwR8sLnHuC1UVwI0OE= Subject key identifier: BC:87:20:0B:F9:F7:93:7E:CE:FE:C9:78:D4:58:78:0A:E7:5E:DA:E9 Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714 Certificate serial: 010D0C9F4328584D4BB9118DA8A5E50EB9341440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft Manifest number: 010D0C9F4328584481A6987F83956D07F8B040BA Signing time: Thu 26 Mar 2026 11:00:04 +0000 Manifest this update: Thu 26 Mar 2026 11:00:04 +0000 Manifest next update: Sun 29 Mar 2026 11:00:00 +0000 Files and hashes: 1: 38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (hash: b+71THmjeppJky5F5bbmT1O/8/gYBZwqRPTBfqz0xTw=) 2: 68de9da0-8f7e-4231-9340-c37abafc3714.crl (hash: 0sN7M9hilx8VF43QR7Nsk5vSEcYf33Sv0NMtIA37pj4=) 3: 8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa (hash: +Pvc2uREZBoMW7K6woU0Z9kt68Oc6s7ggF7MkJ2IhMU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:b9:11:8d:a8:a5:e5:0e:b9:34:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714 Validity Not Before: Mar 26 11:00:04 2026 GMT Not After : Mar 29 11:00:00 2026 GMT Subject: CN=c270426d-c24b-4ee9-9d71-76661e1a2df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:ee:20:b3:38:4c:45:c0:85:72:73:0a:19: 7e:e6:e9:16:42:94:5f:b8:09:19:72:73:47:de:f9: 45:0c:1d:ca:13:5b:cc:d8:27:e3:dc:8a:a3:7e:48: 3a:b1:76:75:c4:62:7b:04:ba:e7:46:2d:6d:3a:fa: be:b5:7e:ea:51:a9:ad:74:3f:4c:65:76:9d:2e:45: ba:66:9a:b7:35:78:fa:5b:79:62:95:30:c2:cb:23: 40:1a:88:38:3e:b6:f4:e6:4c:08:f5:50:ed:7d:43: a7:2d:e1:74:6e:68:1a:d2:52:c9:d7:d8:23:5f:22: 84:cb:37:a1:b5:18:3e:d0:f0:eb:85:6a:d8:32:ab: 18:0d:bd:12:43:83:24:6d:b4:06:c6:62:37:c4:cb: dc:8c:e2:f1:e2:95:66:ed:bc:93:70:14:58:60:bb: 05:51:46:12:93:63:1f:d2:13:49:6a:b7:47:57:25: 64:0d:61:bb:24:d9:bb:7b:fd:7d:ce:88:76:7c:15: 77:38:55:7f:de:46:9d:ce:0b:40:fa:dc:00:a1:16: 1b:01:a0:94:8c:dd:f7:0b:b1:ce:e5:62:59:60:f2: e1:c0:55:a7:89:8a:ef:ad:1e:de:c3:00:ba:a2:f9: 51:8c:51:b4:69:fd:58:09:67:47:b9:47:e7:cf:82: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:87:20:0B:F9:F7:93:7E:CE:FE:C9:78:D4:58:78:0A:E7:5E:DA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl X509v3 Authority Key Identifier: keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:22:2d:a7:fd:d1:e2:c6:15:26:73:a2:0f:da:f5:41:53:ca: 43:68:57:ba:ed:01:ac:74:05:70:2a:f4:47:b2:de:18:f5:49: 6c:be:bf:ec:98:ed:81:8b:a3:ea:b9:f6:94:25:dd:b6:33:28: 4f:c1:fd:20:67:c6:cc:5e:01:47:0f:22:00:89:75:15:8e:1d: 60:18:45:7a:e5:8b:7b:9b:69:2e:f4:e1:a1:20:4f:49:c8:c8: 28:6e:d5:8c:cc:49:41:fa:49:35:8a:98:33:61:d9:6e:db:d4: c3:91:2e:0b:50:f9:94:68:78:76:3e:24:9c:18:dd:a5:23:02: b0:9b:9e:18:ad:e3:d6:64:1c:8d:fd:27:5b:80:a7:ba:23:33: 76:90:29:c1:20:6d:84:c6:81:9d:64:b1:e3:4a:c3:7c:ee:b1: 6e:0c:cb:30:90:c4:36:52:39:f1:2c:2a:21:14:9f:c2:ac:a4: e9:cf:88:93:90:6b:7e:74:69:e2:4c:b1:4c:35:b5:2b:04:8b: e4:1c:a9:93:8d:8b:d0:f4:1c:be:74:c1:22:97:8d:23:22:3b: 38:b7:5e:36:ff:67:b6:9b:2e:5b:87:01:d2:dd:ab:84:25:08: 95:a7:cf:31:3f:37:b9:54:e8:92:d1:19:53:94:92:2a:1a:0b: f6:39:52:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LuRGNqKXlDrk0FEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhkZTlkYTAtOGY3ZS00MjMxLTkzNDAtYzM3YWJhZmMz NzE0MB4XDTI2MDMyNjExMDAwNFoXDTI2MDMyOTExMDAwMFowLzEtMCsGA1UEAxMk YzI3MDQyNmQtYzI0Yi00ZWU5LTlkNzEtNzY2NjFlMWEyZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSLuILM4TEXAhXJzChl+5ukWQpRfuAkZcnNH 3vlFDB3KE1vM2Cfj3Iqjfkg6sXZ1xGJ7BLrnRi1tOvq+tX7qUamtdD9MZXadLkW6 Zpq3NXj6W3lilTDCyyNAGog4Prb05kwI9VDtfUOnLeF0bmga0lLJ19gjXyKEyzeh tRg+0PDrhWrYMqsYDb0SQ4MkbbQGxmI3xMvcjOLx4pVm7byTcBRYYLsFUUYSk2Mf 0hNJardHVyVkDWG7JNm7e/19zoh2fBV3OFV/3kadzgtA+twAoRYbAaCUjN33C7HO 5WJZYPLhwFWniYrvrR7ewwC6ovlRjFG0af1YCWdHuUfnz4I3cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLyHIAv595N+zv7JeNRYeArnXtrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRl OWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdhYmFmYzM3MTQvNjhkZTlkYTAtOGY3ZS00 MjMxLTkzNDAtYzM3YWJhZmMzNzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhkZTlkYTAtOGY3ZS00MjMxLTkz NDAtYzM3YWJhZmMzNzE0LzY4ZGU5ZGEwLThmN2UtNDIzMS05MzQwLWMzN2FiYWZj MzcxNC5jcmwwHwYDVR0jBBgwFoAU3HTcGzn5AYyZQEAOWxJ8czrP4Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRlOWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdh YmFmYzM3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzIi2n/dHixhUmc6IP2vVB U8pDaFe67QGsdAVwKvRHst4Y9Ulsvr/smO2Bi6PqufaUJd22MyhPwf0gZ8bMXgFH DyIAiXUVjh1gGEV65Yt7m2ku9OGhIE9JyMgobtWMzElB+kk1ipgzYdlu29TDkS4L UPmUaHh2PiScGN2lIwKwm54YrePWZByN/SdbgKe6IzN2kCnBIG2ExoGdZLHjSsN8 7rFuDMswkMQ2UjnxLCohFJ/CrKTpz4iTkGt+dGniTLFMNbUrBIvkHKmTjYvQ9By+ dMEil40jIjs4t142/2e2my5bhwHS3auEJQiVp88xPze5VOiS0RlTlJIqGgv2OVKU -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:21 2026 by rpki-client