$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: A7kUjF3Zntftl1JC1zochTuhHmf8UiwYls1ENcCY6WI= Subject key identifier: 76:9C:A6:5B:0B:32:F9:41:33:2D:EC:6B:EF:89:B1:DD:DF:F6:82:0F Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584D49BED5514B5208F49B5AF9F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7CAF Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: iHt+4zkt9nQelL9T82RiUTtZegttgSFg5eSesO2Adwg=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: nIrmKsBLw52/wxWjuDSuI9YUt/Ap145zEdAelcuo2Tc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d5:51:4b:52:08:f4:9b:5a:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=d28e2d57-9879-4328-8cdc-470a9ec21ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:46:58:70:36:55:7a:48:80:5a:02:18:d3: f4:02:61:28:c3:bd:72:ce:57:7c:a3:97:b4:a7:d4: dd:f7:8a:8f:8e:54:ba:d1:78:1f:a3:f2:28:be:f2: 71:f7:1f:1e:8e:18:19:4b:6c:e6:a8:36:cf:ed:0a: e8:81:78:81:dd:b7:ef:aa:77:ad:63:2d:8b:63:68: ab:28:40:1b:55:f6:16:0c:47:0e:99:e3:e3:4a:43: 71:d1:b5:e8:72:95:36:60:b1:89:3d:cb:a5:a1:c2: ad:6e:88:c0:a6:67:db:71:0b:63:b8:59:3f:f9:75: 33:40:79:9c:b0:ac:7e:62:f2:43:a2:6b:24:5f:d4: ef:64:56:68:9f:70:93:aa:a0:9b:eb:86:0d:36:3b: 68:4a:98:b1:b2:3c:4f:a0:8e:b8:d2:34:91:6f:30: 35:94:d1:13:5c:07:25:a8:c2:a4:d5:e6:78:00:20: db:2c:ad:d4:85:ce:79:e8:77:56:28:d2:1a:9a:b9: 57:81:b0:1d:12:f5:2c:7c:75:df:e6:93:f0:a8:2b: ec:7d:f8:df:62:08:1f:fb:2a:e5:fe:48:41:94:3f: 89:df:77:11:b9:c5:bc:e6:11:e4:93:69:b1:83:e5: 84:9d:e0:ac:f5:4d:bf:76:7f:f8:ab:26:73:9e:82: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:A6:5B:0B:32:F9:41:33:2D:EC:6B:EF:89:B1:DD:DF:F6:82:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:99:91:33:66:34:06:ad:5c:43:03:ce:e4:a6:e8:49:08:42: 2a:b3:26:eb:98:51:aa:b8:15:0a:ce:49:93:c4:8e:a1:5b:eb: f9:6b:56:b7:34:ea:fb:08:78:ef:b4:6f:c3:69:8c:aa:4e:8f: 99:94:5e:e1:47:95:05:60:e0:fc:8d:7e:ba:ae:8d:b4:92:eb: 54:9f:ed:84:c7:aa:c4:b7:cd:bf:79:a1:53:fb:e1:16:72:38: fd:58:70:49:b0:6e:7e:f1:04:47:42:a2:80:70:e2:2f:83:6a: 42:40:54:d7:d4:26:7d:d0:fb:ab:ac:4a:15:0c:8a:c8:a6:71: 79:bc:7a:13:46:47:ba:a5:b3:bd:12:1b:f3:e5:ec:66:60:4a: 04:32:79:8d:b1:2c:43:77:8f:b8:9c:1c:f1:21:e7:10:6d:e2: f8:8b:6c:0f:a9:de:88:cc:1a:eb:9b:a3:89:b2:f6:ac:f1:64: 61:9e:d9:b3:1c:8d:24:cf:7b:a7:53:3e:4d:c0:19:83:45:88: bd:16:3e:ff:03:a4:be:17:e8:fc:0f:d3:8c:31:35:7b:51:7e: 2e:18:b2:63:c4:2c:e2:9e:3a:d3:e5:df:52:52:56:39:e4:6d: 26:55:bd:ce:6b:1b:aa:2f:8f:8e:1e:c0:3a:1e:8d:1a:b1:ed: a2:79:ec:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtVRS1II9Jta+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk ZDI4ZTJkNTctOTg3OS00MzI4LThjZGMtNDcwYTllYzIxY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEVGWHA2VXpIgFoCGNP0AmEow71yzld8o5e0 p9Td94qPjlS60Xgfo/IovvJx9x8ejhgZS2zmqDbP7QrogXiB3bfvqnetYy2LY2ir KEAbVfYWDEcOmePjSkNx0bXocpU2YLGJPculocKtbojApmfbcQtjuFk/+XUzQHmc sKx+YvJDomskX9TvZFZon3CTqqCb64YNNjtoSpixsjxPoI640jSRbzA1lNETXAcl qMKk1eZ4ACDbLK3Uhc556HdWKNIamrlXgbAdEvUsfHXf5pPwqCvsffjfYggf+yrl /khBlD+J33cRucW85hHkk2mxg+WEneCs9U2/dn/4qyZznoLD9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHacplsLMvlBMy3sa++Jsd3f9oIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADmZEzZjQGrVxDA87kpuhJ CEIqsybrmFGquBUKzkmTxI6hW+v5a1a3NOr7CHjvtG/DaYyqTo+ZlF7hR5UFYOD8 jX66ro20kutUn+2Ex6rEt82/eaFT++EWcjj9WHBJsG5+8QRHQqKAcOIvg2pCQFTX 1CZ90PurrEoVDIrIpnF5vHoTRke6pbO9Ehvz5exmYEoEMnmNsSxDd4+4nBzxIecQ beL4i2wPqd6IzBrrm6OJsvas8WRhntmzHI0kz3unUz5NwBmDRYi9Fj7/A6S+F+j8 D9OMMTV7UX4uGLJjxCzinjrT5d9SUlY55G0mVb3OaxuqL4+OHsA6Ho0ase2ieexy -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:38 2026 by rpki-client