$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft File: 2605899c-3814-40b2-905e-c31be23847a7.mft (raw, json) Hash identifier: 0jmHXZHPqfwkbuQE9YMt3PxXn4k+Wn9QuQKhOp8fk/g= Subject key identifier: A9:37:FC:C5:D8:68:18:41:D3:82:0D:8A:45:84:92:9F:27:77:07:9A Authority key identifier: 52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C Certificate issuer: /CN=2605899c-3814-40b2-905e-c31be23847a7 Certificate serial: 010D0C9F4328584D3C22BF169D7B09202A4F1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft Manifest number: 010D0C9F4328584073A825E98897E82B2702C230 Signing time: Fri 20 Mar 2026 21:00:04 +0000 Manifest this update: Fri 20 Mar 2026 21:00:04 +0000 Manifest next update: Mon 23 Mar 2026 21:00:00 +0000 Files and hashes: 1: 2605899c-3814-40b2-905e-c31be23847a7.crl (hash: lKZt806UAviTbtXmNhJ8B2IYHRAJYursF2NqfukLtjs=) 2: e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa (hash: wO0QSAeJlyz2t6380PE6BfhcF6C8/7VUUhL9zN3SebE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:22:bf:16:9d:7b:09:20:2a:4f:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2605899c-3814-40b2-905e-c31be23847a7 Validity Not Before: Mar 20 21:00:04 2026 GMT Not After : Mar 23 21:00:00 2026 GMT Subject: CN=00ed5996-1cc6-4e93-967c-f241ddf9cb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:25:10:6a:53:d0:9b:8a:17:4a:4f:84:29: 4a:53:09:d6:77:4a:2f:e4:ba:39:62:fe:3f:59:c4: 9e:75:46:c6:9c:8c:1c:36:17:f8:26:74:c8:61:89: 31:1e:45:21:d9:a8:97:8b:b6:7d:c5:88:c3:2e:9a: b9:e5:70:dc:10:e4:e5:e3:a2:e4:5f:cd:41:c1:d1: c5:de:17:8c:81:27:71:7a:d5:b9:9b:4b:51:2f:41: 3b:25:58:d8:9b:84:01:d3:0b:c5:46:62:af:1c:30: 3d:35:c4:b0:45:65:4a:fc:93:74:9a:d0:26:af:12: a6:55:33:28:6c:19:1a:9b:0f:cc:b1:09:03:42:97: 3f:ee:b1:8a:f5:50:88:ef:bc:c1:c7:1f:3f:30:82: 92:d7:5a:51:7c:b6:5e:7b:d2:05:be:38:17:d7:ee: 20:06:6e:96:ec:28:23:85:49:f2:f4:11:dd:c4:7c: 89:6a:3a:01:43:ea:f7:72:25:63:32:a3:ff:5a:37: fd:4c:a2:6c:de:7e:41:3f:89:0b:61:99:d5:15:f5: 41:87:67:ee:e1:8c:51:83:29:35:d8:3f:14:40:d4: e9:26:87:d6:db:55:f8:86:90:37:1c:8f:d4:1d:b6: ed:82:c8:c2:f7:bf:43:ae:eb:3e:3b:d5:f0:e8:d3: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:FC:C5:D8:68:18:41:D3:82:0D:8A:45:84:92:9F:27:77:07:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl X509v3 Authority Key Identifier: keyid:52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:11:6c:5e:e6:9b:ed:1b:35:98:fb:f4:34:75:01:3b:ea:a6: ac:7d:bd:5c:85:b5:31:c6:94:78:c1:69:81:28:0a:e3:1b:9e: 35:1a:a1:e2:0e:4e:3e:f6:e6:23:b3:06:b1:c8:22:14:ad:0e: 04:07:8f:a5:09:0d:62:d7:d5:bc:61:b3:64:ea:47:c2:7e:6f: 2c:b6:25:6e:04:a8:1c:29:3e:3c:2b:13:8f:21:d4:55:23:31: 5f:82:0c:12:08:fb:8d:93:81:bf:a7:9a:c7:38:bf:57:a3:12: 02:a2:b9:c9:11:d4:df:3c:aa:88:5a:36:cf:9b:72:9b:15:71: 23:fa:a6:33:aa:d3:fc:d3:be:8c:37:29:02:47:ef:d5:d0:eb: 48:e0:6b:5a:aa:87:d0:a7:24:df:4d:cc:90:28:f2:23:77:87: 13:50:03:f9:fa:5e:a5:88:a9:cd:4d:ef:89:a5:42:fa:66:01: 13:b5:9b:ad:d8:11:bf:06:b9:7e:4d:5b:eb:c8:37:40:a5:0f: 7b:26:85:66:1e:14:d2:84:c3:ef:d6:87:c2:4d:53:a8:d2:d3: 5c:d6:8d:a8:04:b9:81:0e:a0:73:c5:7b:c2:f9:d5:ce:91:f9: 36:a0:23:5e:0c:4a:40:02:17:3a:83:ec:3c:8b:bd:25:10:02: 59:84:a6:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE08Ir8WnXsJICpPHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwNTg5OWMtMzgxNC00MGIyLTkwNWUtYzMxYmUyMzg0 N2E3MB4XDTI2MDMyMDIxMDAwNFoXDTI2MDMyMzIxMDAwMFowLzEtMCsGA1UEAxMk MDBlZDU5OTYtMWNjNi00ZTkzLTk2N2MtZjI0MWRkZjljYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVIlEGpT0JuKF0pPhClKUwnWd0ov5Lo5Yv4/ WcSedUbGnIwcNhf4JnTIYYkxHkUh2aiXi7Z9xYjDLpq55XDcEOTl46LkX81BwdHF 3heMgSdxetW5m0tRL0E7JVjYm4QB0wvFRmKvHDA9NcSwRWVK/JN0mtAmrxKmVTMo bBkamw/MsQkDQpc/7rGK9VCI77zBxx8/MIKS11pRfLZee9IFvjgX1+4gBm6W7Cgj hUny9BHdxHyJajoBQ+r3ciVjMqP/Wjf9TKJs3n5BP4kLYZnVFfVBh2fu4YxRgyk1 2D8UQNTpJofW21X4hpA3HI/UHbbtgsjC979Drus+O9Xw6NNbXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKk3/MXYaBhB04INikWEkp8ndweaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yNjA1 ODk5Yy0zODE0LTQwYjItOTA1ZS1jMzFiZTIzODQ3YTcvMjYwNTg5OWMtMzgxNC00 MGIyLTkwNWUtYzMxYmUyMzg0N2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjYwNTg5OWMtMzgxNC00MGIyLTkw NWUtYzMxYmUyMzg0N2E3LzI2MDU4OTljLTM4MTQtNDBiMi05MDVlLWMzMWJlMjM4 NDdhNy5jcmwwHwYDVR0jBBgwFoAUUmiG79q6Osjswbqf0mU5corS+mwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yNjA1ODk5Yy0zODE0LTQwYjItOTA1ZS1jMzFi ZTIzODQ3YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACEWxe5pvtGzWY+/Q0dQE7 6qasfb1chbUxxpR4wWmBKArjG541GqHiDk4+9uYjswaxyCIUrQ4EB4+lCQ1i19W8 YbNk6kfCfm8stiVuBKgcKT48KxOPIdRVIzFfggwSCPuNk4G/p5rHOL9XoxICornJ EdTfPKqIWjbPm3KbFXEj+qYzqtP8076MNykCR+/V0OtI4GtaqofQpyTfTcyQKPIj d4cTUAP5+l6liKnNTe+JpUL6ZgETtZut2BG/Brl+TVvryDdApQ97JoVmHhTShMPv 1ofCTVOo0tNc1o2oBLmBDqBzxXvC+dXOkfk2oCNeDEpAAhc6g+w8i70lEAJZhKZh -----END CERTIFICATE-----Generated at Sat Mar 21 15:56:38 2026 by rpki-client