$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft File: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft (raw, json) Hash identifier: WHCrgqYB32gYCBZfTGhjnmFUia4OPdgFhq0p/fsGX9k= Subject key identifier: C5:28:DA:CC:D8:7A:DF:E3:B9:DB:5D:B1:0D:17:0E:B6:F9:6C:13:C4 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584D49657FAE9D22FF9D9357F990 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft Manifest number: 010D0C9F43285843FEF07D6FC52B221009C8A21D Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (hash: v0qEMHWRK+9aKHzuwaFjKayH1tTsmNLD7KlEODLrGW8=) 2: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl (hash: 67zZWderTMzlkw4R19IGlS9ThSzi31b0UP56Ozhuxqs=) 3: a91f6701-0585-395e-ad18-03c9b663d0f6.roa (hash: VMKfuHx/2wbzNh8bXlkTBCN4dL60PD1HH27ieO8rpT4=) 4: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (hash: tsED1Rnu0sZF4jHDLA4IitE9Nw9ed6+MfKQJW00MYNE=) 5: e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (hash: +Sh7yhd3vNnWL4W8CQX++aiPDJcvqg7pxEwsJdS2BC8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7f:ae:9d:22:ff:9d:93:57:f9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=8c37f409-7681-472e-bb31-9bd05e41b998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:36:82:af:be:13:20:3b:09:4f:e9:9d:4f: 4b:df:36:e4:be:63:61:17:3e:95:6a:ce:58:9c:af: bc:36:32:e1:ce:a5:fe:af:64:ab:d1:e7:0d:75:45: aa:97:82:7f:c1:4e:17:ad:c1:01:6b:81:88:b1:57: 53:95:aa:1a:39:b9:c7:77:6e:81:d5:f2:10:ff:f6: 68:03:7b:d2:dc:cc:0f:5f:e2:69:2d:4c:ea:7c:2d: 4b:09:08:e5:42:b0:3b:44:7a:23:4c:a5:5e:3f:d9: ef:ea:72:08:8d:15:83:17:28:c6:9e:af:d2:ba:32: 32:1d:2e:64:f4:88:c2:1c:1a:c9:3c:75:8a:40:00: 89:0d:b4:33:3d:58:7f:59:21:28:fa:76:10:1a:19: d3:90:82:48:1e:46:44:5e:84:70:ee:c6:9c:a0:c9: ba:c1:ce:03:d6:94:78:c3:be:d8:6b:76:90:65:f7: 89:2c:36:31:7c:f7:2a:cd:9b:5f:be:4e:26:79:65: 79:f4:06:20:2e:12:09:c7:5d:2c:c2:3c:bc:10:ed: 2d:2b:e9:2a:7d:22:56:20:eb:54:72:6c:38:51:fd: 37:ae:0c:dd:0e:f6:0a:1d:8a:b6:cf:01:f8:a0:c3: 14:6b:8d:9e:91:f9:9d:e6:2b:f0:0d:33:9d:fc:02: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:28:DA:CC:D8:7A:DF:E3:B9:DB:5D:B1:0D:17:0E:B6:F9:6C:13:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:89:d9:d4:ce:4e:73:c6:b1:7f:18:76:07:72:81:3f:8f:c8: a5:f8:f1:d4:9e:42:56:d5:0e:40:41:d4:3d:a4:e2:eb:6e:83: cf:b2:fa:e0:a0:d2:13:8c:4e:8d:32:0b:46:b1:56:f4:63:09: 4c:d1:20:80:98:af:8e:cb:f5:ad:a9:03:5f:d7:4f:9c:6d:90: a7:d9:c5:9b:ae:52:09:f4:7b:3f:23:8e:b7:2f:68:15:2e:05: 6c:55:79:c2:cd:b0:ee:26:77:75:c9:62:eb:d9:e1:dd:2c:bc: ee:d9:bc:1b:bf:63:51:63:72:08:22:f6:03:70:6f:98:23:76: 29:d2:d2:b7:af:ed:42:2e:bc:93:fc:a9:5e:e6:74:fa:1f:09: 35:3b:0d:07:85:04:f7:a7:7a:ea:ef:26:f5:92:77:ec:92:ba: e3:95:dc:4f:bb:17:c4:49:be:03:77:be:01:5d:2d:e9:f9:45: a2:a1:ca:ea:fb:83:d1:8d:7d:3b:d5:32:7e:92:77:ba:33:44: dd:37:6e:e7:31:57:43:5a:23:29:ba:62:e7:7f:0c:f1:b5:72: c2:29:e6:e1:8e:78:f9:eb:e6:bb:5b:56:20:02:e6:68:1e:27: 6f:82:75:99:50:8f:1d:e4:07:42:c1:b9:a9:03:b4:63:92:76: d1:a4:e5:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX+unSL/nZNX+ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk OGMzN2Y0MDktNzY4MS00NzJlLWJiMzEtOWJkMDVlNDFiOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J82gq++EyA7CU/pnU9L3zbkvmNhFz6Vas5Y nK+8NjLhzqX+r2Sr0ecNdUWql4J/wU4XrcEBa4GIsVdTlaoaObnHd26B1fIQ//Zo A3vS3MwPX+JpLUzqfC1LCQjlQrA7RHojTKVeP9nv6nIIjRWDFyjGnq/SujIyHS5k 9IjCHBrJPHWKQACJDbQzPVh/WSEo+nYQGhnTkIJIHkZEXoRw7sacoMm6wc4D1pR4 w77Ya3aQZfeJLDYxfPcqzZtfvk4meWV59AYgLhIJx10swjy8EO0tK+kqfSJWIOtU cmw4Uf03rgzdDvYKHYq2zwH4oMMUa42ekfmd5ivwDTOd/ALrJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMUo2szYet/judtdsQ0XDrb5bBPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvOGU0MzNjMWYtYTA3Mi00 ZGZkLTgwOTYtYzZjODYzNGE0OWY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeidnUzk5zxrF/GHYHcoE/ j8il+PHUnkJW1Q5AQdQ9pOLrboPPsvrgoNITjE6NMgtGsVb0YwlM0SCAmK+Oy/Wt qQNf10+cbZCn2cWbrlIJ9Hs/I463L2gVLgVsVXnCzbDuJnd1yWLr2eHdLLzu2bwb v2NRY3IIIvYDcG+YI3Yp0tK3r+1CLryT/Kle5nT6Hwk1Ow0HhQT3p3rq7yb1knfs krrjldxPuxfESb4Dd74BXS3p+UWiocrq+4PRjX071TJ+kne6M0TdN27nMVdDWiMp umLnfwzxtXLCKebhjnj56+a7W1YgAuZoHidvgnWZUI8d5AdCwbmpA7RjknbRpOWR -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:28 2026 by rpki-client