$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft File: 8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft (raw, json) Hash identifier: XJIdMMAMLAvlwxNMeJjN/erNh8iqMIzPs6ybLyLJBVs= Subject key identifier: 21:13:DF:A0:9C:E7:D4:AD:88:E6:10:51:BF:0C:51:F9:4F:F1:17:DB Authority key identifier: 5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2 Certificate issuer: /CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8 Certificate serial: 010D0C9F4328584D49A11216C18669A365025D64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft Manifest number: 010D0C9F432858436B28E34299E53F4201C598A0 Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 63d52020-fd63-3e4c-b974-456f989ef686.roa (hash: R/j5icN6dltyTqH1pNCY6sfdUPwgP3qEzrRWHUHQr4E=) 2: 8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl (hash: aW49R/56nM7P6nO1tegtMPFWXjTEvC5pEP2ZQr1pjqM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:12:16:c1:86:69:a3:65:02:5d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8 Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=6c53cfb0-79f2-4aef-bbbb-2ced302ce941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:d0:2c:f3:6f:66:13:7c:97:62:e8:03:ef: 3b:da:e7:a4:20:35:cb:b7:bf:92:80:f8:47:3a:8a: 65:19:ad:f3:6c:b5:32:be:dd:05:55:49:52:15:35: bd:cf:6a:19:ee:8c:e0:7d:63:78:47:ac:45:b5:0a: 7d:f3:ca:05:4d:5e:85:e6:08:27:af:56:fd:60:af: e9:a0:41:1c:8e:9f:4d:91:f8:2b:51:9f:9e:4a:ee: 4a:a5:3c:28:b3:1b:34:1d:79:63:fd:7c:16:85:7a: d3:c7:dc:02:5a:62:b6:2f:d9:00:27:15:4e:b4:bf: db:0f:51:83:cd:6a:df:c3:6b:2b:72:5c:00:ce:ec: 30:7d:3d:63:31:81:b8:48:23:42:09:81:a1:a1:65: 60:01:0b:3b:73:b3:a2:66:5d:94:95:95:25:0b:20: 22:44:39:bf:c8:f8:bb:b8:cb:72:70:8c:46:e5:d9: 22:25:55:c1:92:a5:ce:17:8e:9a:8c:88:75:dd:c9: ad:7d:0b:71:2d:ce:cd:b7:f0:00:50:e4:9d:4d:cf: 8e:72:4f:5c:64:27:7e:48:b6:80:07:3c:2e:6a:a2: cb:26:35:58:28:ab:45:0f:db:6d:2c:8d:b2:5f:af: 2f:eb:2c:da:36:51:74:a9:bc:af:d0:0b:00:71:47: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:DF:A0:9C:E7:D4:AD:88:E6:10:51:BF:0C:51:F9:4F:F1:17:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl X509v3 Authority Key Identifier: keyid:5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:5f:f5:67:b2:ef:8b:b5:5c:a8:64:1d:b7:df:9d:98:11:e0: 1d:a5:9e:8d:37:29:28:ce:8b:7f:66:46:d7:c5:d2:ec:2c:ce: eb:c3:07:36:50:79:9f:a4:52:8d:7c:61:a8:d2:6c:e5:22:e0: 0c:61:41:5c:55:89:86:b8:3a:a9:4a:73:ec:d1:31:55:71:4f: 6a:d3:0e:a0:26:20:08:5d:ea:10:da:5e:0c:20:7f:16:d4:21: d8:d6:05:c3:d9:6b:ee:91:74:c4:52:56:26:8b:b3:1b:94:46: c2:6d:de:b6:be:8d:ed:6e:dd:0c:79:b9:c6:eb:11:b8:28:47: a9:5e:32:77:15:04:8c:d0:47:4a:c5:90:7b:65:23:00:0b:46: 67:a1:2b:4b:12:57:fc:ba:f1:23:3b:3d:62:f5:74:7c:6f:6c: 84:49:ba:49:08:8b:8a:81:c8:61:29:cf:9b:d7:4f:5d:e2:26: a0:13:67:4f:3d:29:73:08:c6:af:1f:68:ea:ca:65:0c:44:2a: 17:81:83:58:f6:01:1f:84:90:73:77:0e:48:cc:39:9c:c1:14: 35:d3:17:c5:8d:66:cd:e0:ac:ea:e5:6a:15:be:fc:fa:ae:05: 1e:57:bb:80:09:87:fa:88:44:28:5e:27:b9:dd:fe:fc:c4:4d: 90:58:6a:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoRIWwYZpo2UCXWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY0NWI2ZTctYWMwYi00NzBlLWI1NGUtZTM4ZWQ3Zjhj NWE4MB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk NmM1M2NmYjAtNzlmMi00YWVmLWJiYmItMmNlZDMwMmNlOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVzQLPNvZhN8l2LoA+872uekIDXLt7+SgPhH OoplGa3zbLUyvt0FVUlSFTW9z2oZ7ozgfWN4R6xFtQp988oFTV6F5ggnr1b9YK/p oEEcjp9NkfgrUZ+eSu5KpTwosxs0HXlj/XwWhXrTx9wCWmK2L9kAJxVOtL/bD1GD zWrfw2srclwAzuwwfT1jMYG4SCNCCYGhoWVgAQs7c7OiZl2UlZUlCyAiRDm/yPi7 uMtycIxG5dkiJVXBkqXOF46ajIh13cmtfQtxLc7Nt/AAUOSdTc+Ock9cZCd+SLaA BzwuaqLLJjVYKKtFD9ttLI2yX68v6yzaNlF0qbyv0AsAcUdijQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCET36Cc59StiOYQUb8MUflP8RfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NjQ1 YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhlZDdmOGM1YTgvODY0NWI2ZTctYWMwYi00 NzBlLWI1NGUtZTM4ZWQ3ZjhjNWE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODY0NWI2ZTctYWMwYi00NzBlLWI1 NGUtZTM4ZWQ3ZjhjNWE4Lzg2NDViNmU3LWFjMGItNDcwZS1iNTRlLWUzOGVkN2Y4 YzVhOC5jcmwwHwYDVR0jBBgwFoAUXiwHeEe+zg/Ta0VKz5YCZrhp5rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84NjQ1YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhl ZDdmOGM1YTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcX/Vnsu+LtVyoZB23352Y EeAdpZ6NNykozot/ZkbXxdLsLM7rwwc2UHmfpFKNfGGo0mzlIuAMYUFcVYmGuDqp SnPs0TFVcU9q0w6gJiAIXeoQ2l4MIH8W1CHY1gXD2WvukXTEUlYmi7MblEbCbd62 vo3tbt0MebnG6xG4KEepXjJ3FQSM0EdKxZB7ZSMAC0ZnoStLElf8uvEjOz1i9XR8 b2yESbpJCIuKgchhKc+b109d4iagE2dPPSlzCMavH2jqymUMRCoXgYNY9gEfhJBz dw5IzDmcwRQ10xfFjWbN4Kzq5WoVvvz6rgUeV7uACYf6iEQoXie53f78xE2QWGr5 -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:18 2026 by rpki-client