$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft File: 841d3ce8-d29f-40af-b883-2f114aee4d29.mft (raw, json) Hash identifier: hlNPbHNM32DAVyjRoqDDl5DfBWqt76ueadLGFfFhfcc= Subject key identifier: F8:11:F4:79:2C:BC:96:D3:A8:0C:A7:0C:9F:6A:BA:82:24:40:71:A7 Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4 Certificate issuer: /CN=841d3ce8-d29f-40af-b883-2f114aee4d29 Certificate serial: 010D0C9F4328584D49FA728DCA22594AE8CBE080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft Manifest number: 010D0C9F4328584B42B9264CFB82D9B9D412D2D3 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Sat 28 Mar 2026 20:00:00 +0000 Files and hashes: 1: 7f753e12-673a-3a2b-9155-84fc15154977.roa (hash: 98AW+ORD6ZQanHup73xkID7MbsOWydwTqB2SJvgfjJw=) 2: 841d3ce8-d29f-40af-b883-2f114aee4d29.crl (hash: QxPOW96fLwdoVakUSSF4rPTE6JqB+CSHJ80JyX6Tm+Y=) 3: ae0ce974-b160-3b50-8606-6a49c27c111f.roa (hash: f0m+wD379zfmnvYVJZooxYNgQvtp/Jd2MPpDNs9NZhU=) 4: cac81a67-312e-33f8-966d-322161e7bd8e.roa (hash: WOW4TXXyjcLPwJz2C67bLQN6EzU3G2J5BGatrFwam5A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:72:8d:ca:22:59:4a:e8:cb:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 28 20:00:00 2026 GMT Subject: CN=fba6b97a-284b-4392-b7a3-f90f9a4a6b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:95:2c:fa:fa:b3:2b:10:40:9b:91:9f:cd: d5:9a:ae:45:5b:3a:e4:2b:4f:01:d2:f8:b4:72:05: 14:8e:14:9c:27:4e:64:f3:db:46:b7:19:41:f8:ce: 69:cb:a9:b0:b0:91:11:57:26:4d:64:95:18:56:60: d4:88:3e:00:1f:e1:3f:0b:fa:9e:44:1f:15:07:50: 1a:ec:67:05:7f:f1:c7:54:2c:fb:32:0e:da:6b:58: 00:35:45:0d:f5:40:99:06:d4:1d:75:6b:1d:15:ee: 02:3a:9c:88:9b:f1:2c:d8:f8:98:40:23:47:dc:35: c9:45:1c:a1:e3:ac:cb:58:1c:d8:da:b7:ed:8d:3d: bd:cd:2d:e3:1a:81:b3:ce:37:42:09:b9:b3:ee:55: 7a:cf:eb:17:c0:b2:20:06:b9:86:8f:07:31:a4:0c: b3:9c:52:29:46:8f:ce:cf:2f:7f:3f:37:d1:b4:95: 90:d2:2e:ee:c5:85:4b:68:92:08:81:2d:1b:30:b8: 28:89:38:52:03:02:48:5d:03:a5:91:32:f6:41:62: 72:a6:1f:71:ba:3e:05:91:86:28:1f:53:f0:91:4b: e9:a7:24:c2:dd:8b:e1:77:24:38:ef:2e:de:0b:29: 49:6d:3b:16:5b:07:8d:82:b6:a3:b8:ed:d5:16:9f: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:11:F4:79:2C:BC:96:D3:A8:0C:A7:0C:9F:6A:BA:82:24:40:71:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl X509v3 Authority Key Identifier: keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:09:b1:8c:d9:c2:27:f6:dd:b4:ae:da:fa:d3:0e:4b:77:4b: f5:27:4b:a9:5d:99:51:3e:6b:6c:63:be:09:0b:de:4f:f1:93: d4:4a:b2:19:34:81:da:96:dd:e7:28:61:64:84:80:07:75:88: 59:b4:88:f9:f4:4d:89:e9:8b:11:ec:b2:f5:1a:b0:5f:51:59: 03:8f:8d:44:bf:3e:7f:8e:50:30:4c:6b:a8:94:5d:1b:55:d0: e5:ce:f5:20:ae:46:e4:e8:12:44:62:2e:77:d8:45:06:90:8e: 49:30:3e:77:94:20:ec:40:e8:ed:2b:e9:5d:31:79:c5:cd:b7: d5:45:cc:53:b4:5c:cd:51:10:ce:b5:f5:a4:52:9b:5b:38:a1: a7:dd:7c:5b:c7:ca:46:56:9a:f1:02:56:bb:d3:7b:a2:2a:ee: ab:8d:08:6a:69:c4:f7:fb:0f:f5:59:cd:57:84:15:10:a8:3b: 9d:99:ac:93:1b:ab:1e:dc:e0:ff:45:33:17:31:f9:af:0f:f1: d7:1e:88:4b:03:4d:09:43:79:06:c0:e4:47:4e:64:c8:56:66: 2d:cf:f1:5e:cc:33:da:f0:3f:0c:09:b2:9b:44:3c:71:44:ba: 1d:a5:5f:1a:61:3c:0b:ce:fd:21:11:70:09:27:7d:c8:a0:cc: 6d:04:35:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nKNyiJZSujL4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQxZDNjZTgtZDI5Zi00MGFmLWI4ODMtMmYxMTRhZWU0 ZDI5MB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyODIwMDAwMFowLzEtMCsGA1UEAxMk ZmJhNmI5N2EtMjg0Yi00MzkyLWI3YTMtZjkwZjlhNGE2YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqWVLPr6sysQQJuRn83Vmq5FWzrkK08B0vi0 cgUUjhScJ05k89tGtxlB+M5py6mwsJERVyZNZJUYVmDUiD4AH+E/C/qeRB8VB1Aa 7GcFf/HHVCz7Mg7aa1gANUUN9UCZBtQddWsdFe4COpyIm/Es2PiYQCNH3DXJRRyh 46zLWBzY2rftjT29zS3jGoGzzjdCCbmz7lV6z+sXwLIgBrmGjwcxpAyznFIpRo/O zy9/PzfRtJWQ0i7uxYVLaJIIgS0bMLgoiThSAwJIXQOlkTL2QWJyph9xuj4FkYYo H1PwkUvppyTC3YvhdyQ47y7eCylJbTsWWweNgrajuO3VFp/aCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPgR9HksvJbTqAynDJ9quoIkQHGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NDFk M2NlOC1kMjlmLTQwYWYtYjg4My0yZjExNGFlZTRkMjkvODQxZDNjZTgtZDI5Zi00 MGFmLWI4ODMtMmYxMTRhZWU0ZDI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODQxZDNjZTgtZDI5Zi00MGFmLWI4 ODMtMmYxMTRhZWU0ZDI5Lzg0MWQzY2U4LWQyOWYtNDBhZi1iODgzLTJmMTE0YWVl NGQyOS5jcmwwHwYDVR0jBBgwFoAU3K4MmZpEhmZapzo6SV+9KrNYIcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NDFkM2NlOC1kMjlmLTQwYWYtYjg4My0yZjEx NGFlZTRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvCbGM2cIn9t20rtr60w5L d0v1J0upXZlRPmtsY74JC95P8ZPUSrIZNIHalt3nKGFkhIAHdYhZtIj59E2J6YsR 7LL1GrBfUVkDj41Evz5/jlAwTGuolF0bVdDlzvUgrkbk6BJEYi532EUGkI5JMD53 lCDsQOjtK+ldMXnFzbfVRcxTtFzNURDOtfWkUptbOKGn3Xxbx8pGVprxAla703ui Ku6rjQhqacT3+w/1Wc1XhBUQqDudmayTG6se3OD/RTMXMfmvD/HXHohLA00JQ3kG wORHTmTIVmYtz/FezDPa8D8MCbKbRDxxRLodpV8aYTwLzv0hEXAJJ33IoMxtBDUG -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:44 2026 by rpki-client