$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft File: 8cf8807c-494e-41ab-842c-c0672d6283b1.mft (raw, json) Hash identifier: wBHqYjIfVZ9k464PAmzQOFnCyfuiWC/9vtdNT6s7eOs= Subject key identifier: 49:AD:06:84:9A:C7:E5:CF:85:09:D3:0B:62:B3:0D:67:D7:91:C5:CF Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584D49657FA6861B4726613AEA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft Manifest number: 010D0C9F432858412642030EDA140B2EA0AA6BA8 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa (hash: kX6qHia8qjDy0rIgGf6Kp4hGoDHKx0GZUAHKFOmvHKc=) 2: 7c82a209-9386-3901-a7b9-57c1f597512b.roa (hash: wcMd8mhsKNhdTc8aTeKGPWfZ59WQqB+BLt5/DHVKoKc=) 3: 8cf8807c-494e-41ab-842c-c0672d6283b1.crl (hash: C7Yj3RsWBd+ykDQ8RA5ovmXfLtkkAA/M7W1T+5a6fSw=) 4: b7a020da-0d7e-3b24-9670-acd6fe134da5.roa (hash: ntavy5trLGosPS44+WjzH49wGSUVTcrGUW6oBbMv/mo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7f:a6:86:1b:47:26:61:3a:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=758be94e-3bbe-4587-8187-0dd4b8c5e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2b:47:c6:c1:4e:32:78:63:63:ad:fd:5b:16: 2b:26:9a:60:72:3d:73:44:6c:93:74:be:e8:4a:8e: c8:42:d9:23:05:d2:ce:1c:07:a8:95:b6:9a:a8:71: 89:24:1b:48:eb:af:c9:8e:3f:fc:82:c2:86:4f:d7: ee:29:b1:1f:ca:2f:68:1c:3f:ba:17:63:db:07:34: 0c:91:6f:8d:bb:ca:3e:87:9c:f8:ba:f2:31:2d:eb: fa:b1:82:9f:70:20:8a:2b:17:44:de:c9:6a:89:5d: 41:ab:04:9e:6b:2a:ff:bd:87:35:d0:8f:16:8d:65: b0:4e:25:0b:cf:ec:87:83:c2:91:fe:6f:35:00:9c: 8b:a0:22:ad:7c:3c:a0:a0:9a:a9:09:bf:b6:39:a7: 22:17:83:21:3e:67:c4:13:42:84:db:9b:14:3a:83: 4f:ea:06:4b:6f:8b:33:aa:2a:c8:b7:e7:91:4b:ef: 27:4f:e3:18:05:8e:c6:e3:17:cd:74:08:0f:81:64: 0f:43:e9:10:5a:4b:5a:89:b1:37:9f:86:ec:69:fb: 25:a3:ad:97:1e:2d:1b:14:4d:13:1c:b4:66:1a:47: 0f:d6:48:05:86:40:97:2c:8f:9e:43:ac:30:fb:1f: 67:30:51:72:91:b9:18:ef:ef:55:58:24:e7:5d:3f: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:06:84:9A:C7:E5:CF:85:09:D3:0B:62:B3:0D:67:D7:91:C5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ec:f6:df:b5:47:d0:e8:96:bf:e2:e7:bd:00:14:e4:14:80: e5:10:6b:9d:c5:31:e5:77:d0:96:ef:84:08:cc:61:7d:1e:d6: bb:64:5e:ef:0f:eb:70:22:08:15:f2:0a:77:31:ff:69:e4:28: ab:91:f5:93:97:c3:3f:ac:a3:a5:08:96:bd:9e:5d:8c:4d:a8: b4:5b:79:89:ee:c1:36:55:b0:a6:7e:05:09:64:37:53:6d:96: ee:d9:da:b9:b2:91:11:98:bc:08:7a:53:bf:2f:06:05:93:0e: 95:7c:d8:71:b8:76:bd:a1:31:14:a9:2e:e6:b6:44:a1:bf:58: 46:11:e0:ac:09:93:e3:23:13:f2:9f:cb:b9:59:05:3c:f3:9f: 53:e2:36:8e:bc:29:2d:bf:41:ff:fa:34:13:3a:6f:c9:b5:3e: 72:ce:9b:23:57:40:fe:e3:cd:8f:54:7b:90:f8:fc:f0:e6:d0: b1:b2:30:b2:54:9a:e3:8f:ea:a5:51:49:54:fc:62:fe:cd:a7: 05:ae:82:92:d7:af:17:ef:05:9f:a1:c0:39:74:24:d1:d8:ac: 56:b1:dc:f1:45:d6:86:fb:c3:42:09:09:c3:cb:aa:c2:c4:eb: 43:c1:07:a4:05:4a:30:6f:30:a9:63:f5:c0:55:77:fb:5a:ac: b1:2c:ba:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX+mhhtHJmE66gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk NzU4YmU5NGUtM2JiZS00NTg3LTgxODctMGRkNGI4YzVlOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjitHxsFOMnhjY639WxYrJppgcj1zRGyTdL7o So7IQtkjBdLOHAeolbaaqHGJJBtI66/Jjj/8gsKGT9fuKbEfyi9oHD+6F2PbBzQM kW+Nu8o+h5z4uvIxLev6sYKfcCCKKxdE3slqiV1BqwSeayr/vYc10I8WjWWwTiUL z+yHg8KR/m81AJyLoCKtfDygoJqpCb+2OaciF4MhPmfEE0KE25sUOoNP6gZLb4sz qirIt+eRS+8nT+MYBY7G4xfNdAgPgWQPQ+kQWktaibE3n4bsafslo62XHi0bFE0T HLRmGkcP1kgFhkCXLI+eQ6ww+x9nMFFykbkY7+9VWCTnXT85gQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEmtBoSax+XPhQnTC2KzDWfXkcXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvOGNmODgwN2MtNDk0ZS00 MWFiLTg0MmMtYzA2NzJkNjI4M2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA37PbftUfQ6Ja/4ue9ABTk FIDlEGudxTHld9CW74QIzGF9Hta7ZF7vD+twIggV8gp3Mf9p5CirkfWTl8M/rKOl CJa9nl2MTai0W3mJ7sE2VbCmfgUJZDdTbZbu2dq5spERmLwIelO/LwYFkw6VfNhx uHa9oTEUqS7mtkShv1hGEeCsCZPjIxPyn8u5WQU8859T4jaOvCktv0H/+jQTOm/J tT5yzpsjV0D+482PVHuQ+Pzw5tCxsjCyVJrjj+qlUUlU/GL+zacFroKS168X7wWf ocA5dCTR2KxWsdzxRdaG+8NCCQnDy6rCxOtDwQekBUowbzCpY/XAVXf7WqyxLLox -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:29 2026 by rpki-client