$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft File: 2ce98e57-da60-49a3-b167-e6998e0d2945.mft (raw, json) Hash identifier: Bosu+lMp788XtQwe5f2lMC7LsQkRA6O1lUwbQAzdRxc= Subject key identifier: 8F:67:D1:48:CE:1B:18:66:E1:31:CF:89:59:12:F1:49:F6:D2:AE:3C Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584D4A35F5398C943A27C6A73780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft Manifest number: 010D0C9F4328584B647ED64DB623142887471579 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Sat 28 Mar 2026 22:00:00 +0000 Files and hashes: 1: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (hash: NyktiSEN+MIf6TpoEw9a7Mxbs08DGw6NGAvPhiEZ37o=) 2: 2ce98e57-da60-49a3-b167-e6998e0d2945.crl (hash: BaxPc6unavUIYAg49gTYZEMNgLvkbzrObaBEhzkkK/U=) 3: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (hash: a0FfTksjsQ1YAAatAU4UdZeXxdCdcaVbC9PWX5RNvlI=) 4: bd0731b8-b4cf-32f2-9183-9252be89bfab.roa (hash: UQgVnFKmVNUoFkhc1lTd+5+OKIs8f3QVugZGkgR4PBw=) 5: c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa (hash: NZhE6b6VDw9r+s9W5jAe7I0stig3pf1Mairv9dWCgDU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f5:39:8c:94:3a:27:c6:a7:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 28 22:00:00 2026 GMT Subject: CN=7f2c2cd1-58e2-4122-b194-5e21fb039bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:5d:e2:0d:f2:23:e9:93:1a:c2:96:47:1f: dc:a6:33:65:f9:b2:00:2f:21:e7:73:af:ff:ef:31: 99:58:f7:c5:54:30:59:29:e1:97:c9:09:7c:dd:82: c6:ac:ae:33:bb:55:10:98:48:d7:2e:8d:ab:79:b7: 06:b3:b5:28:f2:be:d8:6c:72:95:ac:05:28:12:04: 08:34:b1:bf:e4:68:4e:c9:14:70:31:7f:59:be:72: 45:93:41:21:f4:e1:c4:7c:2a:1e:35:99:3b:a6:22: 3e:ba:7f:a2:5e:4d:52:ad:8e:43:68:6e:a4:3b:6e: 95:59:21:72:15:ae:32:4e:13:12:c3:aa:11:bc:6c: 76:20:ff:29:e0:15:3f:12:83:80:ba:90:12:2e:d3: 9c:6e:32:6e:10:ca:8b:31:25:c4:c5:39:7f:2f:e9: 36:9b:69:5f:55:e4:9a:7e:fe:a6:cb:db:30:87:55: b4:34:a4:74:ae:5a:05:19:0a:d6:dd:e7:69:7e:54: c3:1f:53:49:28:f0:41:b4:3d:3e:ee:e9:42:dd:aa: 4a:dd:82:56:93:ef:47:79:5a:b3:8e:3d:f3:92:eb: 49:4f:64:67:cc:31:b8:b4:08:5f:cb:cb:b5:e8:6e: 7c:8c:d4:0f:ca:da:cb:60:2f:29:2c:7b:98:d9:fb: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:67:D1:48:CE:1B:18:66:E1:31:CF:89:59:12:F1:49:F6:D2:AE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:69:a5:21:3f:83:44:7a:7d:46:19:11:dd:87:54:c0:13:8c: 20:f7:df:98:6a:1c:2c:ec:96:d0:d6:1b:6e:77:79:62:e5:2b: b5:be:92:1b:40:a4:0d:7a:af:e5:5a:f7:83:58:fc:c7:16:fe: 7c:a6:e6:9c:dd:23:62:88:3f:b0:fe:9b:a1:22:78:84:e7:20: 98:29:bc:2f:76:9e:b2:53:28:70:4e:85:19:7f:1b:d6:e8:ea: 2d:6b:85:8c:e1:04:a0:83:70:66:7c:74:9c:33:2f:e5:ec:91: ac:a4:8b:17:fa:5d:55:39:e4:92:d1:db:25:cc:d8:c2:22:1c: c2:df:be:07:8b:de:e0:49:8f:c2:d0:6b:b1:28:35:2b:f7:2f: 80:2f:a3:08:26:bc:8c:d4:b8:00:46:66:d4:ff:b7:40:a8:56: 68:c0:90:ff:f7:d7:db:ed:92:b7:6a:d6:2f:71:c1:16:b1:16: 9f:02:f7:ac:c1:a4:93:38:6b:9d:f0:ff:7a:8d:62:f5:fc:13: 4e:5f:da:33:e0:9a:49:00:b4:18:49:56:e2:fe:c2:ab:d5:78: 0f:b9:b5:2a:ac:2d:6a:91:a4:76:cf:57:aa:bd:24:5f:c4:66: 29:c9:41:24:f8:aa:8f:ae:f6:17:ee:ff:6e:c9:bd:d7:32:6e: 41:29:61:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfU5jJQ6J8anN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyODIyMDAwMFowLzEtMCsGA1UEAxMk N2YyYzJjZDEtNThlMi00MTIyLWIxOTQtNWUyMWZiMDM5YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU9d4g3yI+mTGsKWRx/cpjNl+bIALyHnc6// 7zGZWPfFVDBZKeGXyQl83YLGrK4zu1UQmEjXLo2rebcGs7Uo8r7YbHKVrAUoEgQI NLG/5GhOyRRwMX9ZvnJFk0Eh9OHEfCoeNZk7piI+un+iXk1SrY5DaG6kO26VWSFy Fa4yThMSw6oRvGx2IP8p4BU/EoOAupASLtOcbjJuEMqLMSXExTl/L+k2m2lfVeSa fv6my9swh1W0NKR0rloFGQrW3edpflTDH1NJKPBBtD0+7ulC3apK3YJWk+9HeVqz jj3zkutJT2RnzDG4tAhfy8u16G58jNQPytrLYC8pLHuY2fsFhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI9n0UjOGxhm4THPiVkS8Un20q48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMmNlOThlNTctZGE2MC00 OWEzLWIxNjctZTY5OThlMGQyOTQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNaaUhP4NEen1GGRHdh1TA E4wg99+Yahws7JbQ1htud3li5Su1vpIbQKQNeq/lWveDWPzHFv58puac3SNiiD+w /puhIniE5yCYKbwvdp6yUyhwToUZfxvW6Oota4WM4QSgg3BmfHScMy/l7JGspIsX +l1VOeSS0dslzNjCIhzC374Hi97gSY/C0GuxKDUr9y+AL6MIJryM1LgARmbU/7dA qFZowJD/99fb7ZK3atYvccEWsRafAveswaSTOGud8P96jWL1/BNOX9oz4JpJALQY SVbi/sKr1XgPubUqrC1qkaR2z1eqvSRfxGYpyUEk+KqPrvYX7v9uyb3XMm5BKWHZ -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:49 2026 by rpki-client