$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft File: d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft (raw, json) Hash identifier: Ba3/+XOX4uGjwrfVjWUY0UbujPYYTw/V3Xn8RgFYOpc= Subject key identifier: A0:B3:BC:0F:82:17:1D:F7:48:2D:0F:A8:7F:11:77:34:E1:3D:01:E0 Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Certificate serial: 010D0C9F4328584D4F18A6ADEB7B4684C0A22400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft Manifest number: 010D0C9F4328584B2ECE132C6AE5C59EACD9EBC8 Signing time: Fri 27 Mar 2026 16:00:03 +0000 Manifest this update: Fri 27 Mar 2026 16:00:03 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 19dc87c2-d464-34e5-b947-58aae145ee40.roa (hash: 7sDmLPFW8QTeSd0dONglrfB4UCsMpNTeyXe6srUcBJ0=) 2: 7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa (hash: cKenf62SB03yKZKTLwIBlCk8FTxHvkI3B4NzGcXf6y8=) 3: a96cb05b-0c60-3552-884a-bbc614e95519.roa (hash: HekR6I74mhSWfa6FI8qEg2R70ijxpjRG1wG9xeGld2E=) 4: cf261d6c-a652-301a-9b41-868da8fbfa85.roa (hash: jo8nvPKE855wTQ/+rKC5oDw5i/ezUb29Lvk1TxaERMk=) 5: cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa (hash: 9wy/RSWn1c5HA5tnDdB8HEjm8eHdI7yp+PvaBtajcj8=) 6: d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl (hash: ljNM6XznJGXYlBXHmq2k0Am4SSdtDfPOQM1AqRHBzIU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:18:a6:ad:eb:7b:46:84:c0:a2:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Validity Not Before: Mar 27 16:00:03 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=7933cd19-f30e-46c7-ab3d-47936d8925f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f4:3b:a3:68:14:1f:8c:0e:e6:47:94:eb:73: 84:ff:0c:a9:12:d4:7c:7b:bf:ff:af:86:0f:a5:61: 49:34:d6:39:92:9d:1f:f3:ef:78:f0:65:e5:9d:46: fc:09:f2:c2:a5:75:3a:0f:a8:4d:82:ae:26:08:c8: 25:b4:d0:da:c5:e8:7f:07:fa:fc:bc:b4:e1:bc:b6: 3e:72:bf:ef:24:ed:b9:48:39:8c:af:c3:11:42:b9: 84:60:8c:98:94:7b:e9:21:78:b7:ad:36:f6:b7:7c: 43:c0:ac:49:bc:ee:83:45:65:02:a4:78:c2:fe:4d: be:a7:72:dd:83:3a:a3:1b:10:92:f5:11:17:8c:c0: e0:a0:b7:43:86:16:7a:d0:7e:75:44:ce:a7:39:22: e7:8c:48:e8:d2:d9:2a:c2:c3:86:f1:92:95:aa:4b: d2:e9:34:35:f4:ac:eb:b3:7c:58:14:79:84:7d:ce: 6c:a8:2f:6d:ce:4c:b2:07:6c:3f:2f:7d:8a:9c:f0: c8:73:e8:d4:81:b6:52:ed:ec:a2:68:c2:cd:53:74: 74:20:ba:3e:a3:3b:49:a4:c4:73:7d:d0:81:3b:b8: 9d:0d:fa:a1:14:a5:36:78:d1:bc:8f:7a:2d:7f:86: 02:8d:51:d2:de:c5:68:1f:ab:a4:1b:33:74:a6:2f: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:BC:0F:82:17:1D:F7:48:2D:0F:A8:7F:11:77:34:E1:3D:01:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl X509v3 Authority Key Identifier: keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b8:bf:58:f0:ef:e5:ad:08:08:6a:2c:97:05:17:b2:ec:a1: 32:94:6a:27:9b:0c:1d:87:28:35:e5:d4:b4:5b:a4:6e:1d:b2: fd:7a:c3:08:a0:4a:9f:18:fc:96:44:6e:4f:26:9e:d0:6c:90: 27:68:4d:33:e1:ad:65:0e:c9:69:c9:28:52:eb:fc:34:88:e2: 9d:5f:7e:b7:dc:d0:a9:31:e5:75:6d:37:82:57:80:b0:0c:bc: 92:ff:cd:96:58:a3:30:59:57:2e:d2:7d:c5:8a:76:7a:f8:b0: 9a:54:33:c5:24:b0:90:65:b1:dd:a6:6d:f5:6c:be:b9:9d:b4: fb:61:a9:b7:0c:d1:1f:8e:9d:90:25:de:7f:c3:24:2c:90:bd: ec:e6:77:f6:73:49:14:6e:a6:5f:69:c7:dd:c1:7f:85:f6:c3: 18:e8:32:26:1f:a3:24:5b:55:0e:b9:da:8e:91:d1:da:39:10: 88:1c:d9:ce:53:f4:61:97:e0:d0:de:a7:47:91:78:b3:fc:67: a3:a1:f7:d9:5f:dc:39:b5:9d:fa:1f:47:17:4d:51:e6:e4:86: 86:f8:be:fc:89:cb:fa:ca:59:ae:a7:63:58:f7:96:4c:48:9e: 52:bd:1f:a2:34:bf:f9:2c:fe:f8:f1:cf:60:46:08:76:30:53: 12:c2:c5:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PGKat63tGhMCiJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm NWNiMB4XDTI2MDMyNzE2MDAwM1oXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk NzkzM2NkMTktZjMwZS00NmM3LWFiM2QtNDc5MzZkODkyNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fQ7o2gUH4wO5keU63OE/wypEtR8e7//r4YP pWFJNNY5kp0f8+948GXlnUb8CfLCpXU6D6hNgq4mCMgltNDaxeh/B/r8vLThvLY+ cr/vJO25SDmMr8MRQrmEYIyYlHvpIXi3rTb2t3xDwKxJvO6DRWUCpHjC/k2+p3Ld gzqjGxCS9REXjMDgoLdDhhZ60H51RM6nOSLnjEjo0tkqwsOG8ZKVqkvS6TQ19Kzr s3xYFHmEfc5sqC9tzkyyB2w/L32KnPDIc+jUgbZS7eyiaMLNU3R0ILo+oztJpMRz fdCBO7idDfqhFKU2eNG8j3otf4YCjVHS3sVoH6ukGzN0pi8xLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCzvA+CFx33SC0PqH8RdzThPQHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0 NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvZDJlNDU5MTItZTZlMy00 MDBjLWIwYmUtNGY2YzcwMDFmNWNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj NzAwMWY1Y2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1uL9Y8O/lrQgIaiyXBRey 7KEylGonmwwdhyg15dS0W6RuHbL9esMIoEqfGPyWRG5PJp7QbJAnaE0z4a1lDslp yShS6/w0iOKdX3633NCpMeV1bTeCV4CwDLyS/82WWKMwWVcu0n3FinZ6+LCaVDPF JLCQZbHdpm31bL65nbT7Yam3DNEfjp2QJd5/wyQskL3s5nf2c0kUbqZfacfdwX+F 9sMY6DImH6MkW1UOudqOkdHaORCIHNnOU/Rhl+DQ3qdHkXiz/GejoffZX9w5tZ36 H0cXTVHm5IaG+L78icv6ylmup2NY95ZMSJ5SvR+iNL/5LP748c9gRgh2MFMSwsWJ -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:21 2026 by rpki-client