$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft File: 959a22b2-95d2-48c0-8feb-819d877ee1e3.mft (raw, json) Hash identifier: eKqdy7nhsGCfoqIDyOthm7+zQiYMIIAK17762rizwR8= Subject key identifier: 88:84:1B:4C:53:AA:A7:1B:4A:D1:E7:3D:AB:53:F5:DE:8B:21:B9:09 Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78 Certificate issuer: /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3 Certificate serial: 010D0C9F4328584D4BD6DA606F5C4EDA9EDB34C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft Manifest number: 010D0C9F4328584A4966E60750CFA833D217F429 Signing time: Thu 26 Mar 2026 12:00:03 +0000 Manifest this update: Thu 26 Mar 2026 12:00:03 +0000 Manifest next update: Sun 29 Mar 2026 12:00:00 +0000 Files and hashes: 1: 17922156-b32e-3f9a-8bc5-25eb9f4add68.roa (hash: 24icIA4BS4lN0lBF/jFmcCnnfppj1xEit4vKaRkAG1c=) 2: 6238e14e-1c02-3174-9d3b-46ed6e0d2b53.roa (hash: dM1oG3IImoUB3MEhYWUGrIHine4edm0C6piQxAX4e8c=) 3: 76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa (hash: 42Z4rVNWfD+TuYgJYSgSnPnW7vWk7dx+SOlVjiBVOD8=) 4: 8edd3ca6-6839-3602-82a0-a559bf5bbf9a.roa (hash: 2Vgk4eR9u3THmC0udAI9EEPG97z7yE3wMGuK9lZkoDo=) 5: 959a22b2-95d2-48c0-8feb-819d877ee1e3.crl (hash: 2BSZtSzNhn6Dis7+gIwXcUHtYp48iz41HZ5YUjWKg1E=) 6: aca5ece8-7cc8-3a6c-b63b-8896537dc5d2.roa (hash: +tHgZeCFt6PlKB2JYND/ezTmRqQftwdRd8sF+wNyJUA=) 7: d6ffc25e-7072-3a97-ad1e-99780cceb137.roa (hash: +MhO11unXSUXr+1oXfGGFVV2Q6MRMcDMwdOxRazP4MA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:d6:da:60:6f:5c:4e:da:9e:db:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3 Validity Not Before: Mar 26 12:00:03 2026 GMT Not After : Mar 29 12:00:00 2026 GMT Subject: CN=e8a19d87-58a1-4d16-9d79-08823f052816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:62:f4:cc:ef:3d:2a:77:8e:21:9c:d9:31: 8c:7a:05:a4:95:99:f2:00:ba:5d:a4:e5:d4:ce:1f: 7a:93:ce:49:82:d7:7f:71:b8:bd:70:88:ae:23:c2: a1:2a:2a:48:cc:53:ae:1b:94:25:65:77:d1:42:92: 7a:5b:88:a1:3f:8f:d4:10:8e:a4:81:39:6a:84:8b: c8:84:68:00:b1:fa:ba:14:07:bf:d0:72:f9:e2:18: b1:47:1f:4e:00:65:fe:92:c9:9a:54:51:b7:1e:02: 87:00:91:f3:6a:d4:8a:b2:4b:2b:e2:8e:c3:a0:b9: 3e:ca:bf:22:97:06:82:ab:ff:8d:73:d1:bd:8a:cc: fe:bd:2b:76:d3:aa:69:e1:d4:9c:74:f8:f4:6a:4d: 40:32:1c:42:72:12:df:3b:da:62:9d:a6:e2:9d:b6: f3:a1:2b:73:b2:3b:78:93:4f:c7:91:23:02:9e:e5: a4:31:4e:1b:58:52:13:2d:fb:4e:84:d2:aa:ce:27: 17:f2:e6:83:ea:a2:63:38:d1:8a:e0:ca:c1:c4:eb: 99:cf:ad:f3:79:76:32:c5:60:d6:f4:cd:74:20:c8: 1c:53:0c:79:de:97:ad:ae:a9:0a:78:02:c8:14:41: a1:6f:4d:e9:19:b9:96:df:b6:2c:04:e8:c9:87:a2: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:84:1B:4C:53:AA:A7:1B:4A:D1:E7:3D:AB:53:F5:DE:8B:21:B9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl X509v3 Authority Key Identifier: keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cb:0a:80:0f:22:e5:f6:0b:44:9d:4f:67:49:c6:3f:07:1e: 49:a0:d2:ea:e8:8d:4a:5f:ee:b6:cc:d3:be:e8:a5:c5:e5:79: 72:9e:44:2a:96:df:99:ed:db:58:11:c2:5f:ff:5a:42:a6:6d: 7d:21:98:14:0e:ad:d4:48:e0:0a:61:04:df:6f:fc:69:98:51: f5:20:57:4d:d9:d7:65:72:c8:2b:ef:4d:56:ca:5d:4f:a1:af: c2:1a:e9:96:2e:6f:6e:e0:fa:20:cb:46:e3:e2:1f:0a:09:6d: dc:17:2e:73:b1:53:ee:69:82:34:8b:6a:02:70:43:f5:13:57: 10:9f:91:8f:9a:a8:40:93:10:6b:bf:47:58:f2:ca:2e:4a:c9: 41:2e:76:b3:c9:eb:5c:26:7d:27:90:39:b7:52:b8:cc:fe:ac: 6b:c6:56:f1:df:37:a7:63:bb:0a:8a:25:5f:8e:fc:cb:5f:ce: 02:36:9d:da:cd:e7:96:86:a1:ef:0f:1e:c3:82:bb:84:4c:db: e1:13:13:26:4a:b9:37:67:8d:e8:a0:c9:d0:58:20:62:9f:b4: 35:08:4a:f6:f6:26:46:c7:03:5a:43:ac:81:ee:51:d6:89:2b: 6f:f0:d6:cb:a6:90:55:ae:cd:93:ad:54:9b:49:0e:9a:f8:20: 90:22:d2:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L1tpgb1xO2p7bNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU5YTIyYjItOTVkMi00OGMwLThmZWItODE5ZDg3N2Vl MWUzMB4XDTI2MDMyNjEyMDAwM1oXDTI2MDMyOTEyMDAwMFowLzEtMCsGA1UEAxMk ZThhMTlkODctNThhMS00ZDE2LTlkNzktMDg4MjNmMDUyODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0li9MzvPSp3jiGc2TGMegWklZnyALpdpOXU zh96k85Jgtd/cbi9cIiuI8KhKipIzFOuG5QlZXfRQpJ6W4ihP4/UEI6kgTlqhIvI hGgAsfq6FAe/0HL54hixRx9OAGX+ksmaVFG3HgKHAJHzatSKsksr4o7DoLk+yr8i lwaCq/+Nc9G9isz+vSt206pp4dScdPj0ak1AMhxCchLfO9pinabinbbzoStzsjt4 k0/HkSMCnuWkMU4bWFITLftOhNKqzicX8uaD6qJjONGK4MrBxOuZz63zeXYyxWDW 9M10IMgcUwx53petrqkKeALIFEGhb03pGbmW37YsBOjJh6IWWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIiEG0xTqqcbStHnPatT9d6LIbkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NTlh MjJiMi05NWQyLTQ4YzAtOGZlYi04MTlkODc3ZWUxZTMvOTU5YTIyYjItOTVkMi00 OGMwLThmZWItODE5ZDg3N2VlMWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTU5YTIyYjItOTVkMi00OGMwLThm ZWItODE5ZDg3N2VlMWUzLzk1OWEyMmIyLTk1ZDItNDhjMC04ZmViLTgxOWQ4Nzdl ZTFlMy5jcmwwHwYDVR0jBBgwFoAUY54Wzv5Ue1vzA4W5ucX2ajQGOngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85NTlhMjJiMi05NWQyLTQ4YzAtOGZlYi04MTlk ODc3ZWUxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6ywqADyLl9gtEnU9nScY/ Bx5JoNLq6I1KX+62zNO+6KXF5XlynkQqlt+Z7dtYEcJf/1pCpm19IZgUDq3USOAK YQTfb/xpmFH1IFdN2ddlcsgr701Wyl1Poa/CGumWLm9u4Pogy0bj4h8KCW3cFy5z sVPuaYI0i2oCcEP1E1cQn5GPmqhAkxBrv0dY8souSslBLnazyetcJn0nkDm3UrjM /qxrxlbx3zenY7sKiiVfjvzLX84CNp3azeeWhqHvDx7DgruETNvhExMmSrk3Z43o oMnQWCBin7Q1CEr29iZGxwNaQ6yB7lHWiStv8NbLppBVrs2TrVSbSQ6a+CCQItLe -----END CERTIFICATE-----Generated at Thu Mar 26 15:31:38 2026 by rpki-client