$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft File: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft (raw, json) Hash identifier: StGexugUXFH+SDdjIL8C0l+VupGXqJfo8fPJhmUeoMg= Subject key identifier: 84:BD:A0:18:97:FE:A9:13:69:9E:28:CD:CC:96:99:89:72:D1:91:9A Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584D530D1FFA96F31B4DCAAB8FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft Manifest number: 010D0C9F4328584073A837989C436B4363A20EF9 Signing time: Sun 29 Mar 2026 02:00:03 +0000 Manifest this update: Sun 29 Mar 2026 02:00:03 +0000 Manifest next update: Wed 01 Apr 2026 02:00:00 +0000 Files and hashes: 1: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (hash: BHRrrcB9hV0HR+C70Lj3XSCBKBhFfaN+Gv6MrSNfv3M=) 2: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl (hash: BatYGguTgwFLQcZeZ+n9r6Ph+Brd87IgJkeJO4Xepys=) 3: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (hash: phC3hv7sg5FWVYKe8Z37AVuGoXA3BnFuF5SBIspfm7w=) 4: 7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa (hash: /4yIbLCSZ9a2RgacKjjaCPoCTkm9QVXjIv2uptMojeY=) 5: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (hash: KMlPMay19yx2Qgcn/mPP019pXTRgB08+iL/IWrMxFoI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:53:0d:1f:fa:96:f3:1b:4d:ca:ab:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Mar 29 02:00:03 2026 GMT Not After : Apr 1 02:00:00 2026 GMT Subject: CN=98c46e15-24b2-4b0f-b9ee-6ff40c62efd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:66:e6:1a:f1:21:a5:2a:93:66:c2:57:24: b6:91:38:b5:aa:08:ce:f3:41:0f:d6:18:c4:44:a2: 19:d5:ae:a5:b4:95:19:7c:2c:4a:05:25:86:d7:c1: 2a:88:0a:83:ec:bb:60:76:e8:75:c2:65:58:8d:f3: 57:87:e2:47:f4:34:fc:41:21:9a:36:1f:f8:70:c6: c9:66:6d:70:a4:0f:fd:1c:16:ce:7f:0c:50:d9:04: 36:99:53:5f:c9:c7:9e:e2:cf:37:9b:9f:4d:66:9f: 06:b5:76:47:d5:10:6d:66:8a:5a:11:d1:4e:b3:4f: 48:f1:fd:a6:fa:44:16:99:44:86:6b:95:95:4e:d7: 6e:17:8d:ea:6a:a2:18:56:b6:1b:e9:1d:89:63:10: 85:f4:29:19:12:4b:57:b5:b0:fd:59:5f:2e:e8:be: f3:31:d1:2b:3a:40:2b:65:87:b9:0d:53:f2:51:bb: e5:78:75:46:53:f1:1b:58:5d:83:82:03:6d:a0:37: 8a:c7:4e:25:97:e4:fe:d2:d2:23:09:9e:27:c4:e2: c8:b3:19:03:d1:93:ce:e9:9f:4d:82:ec:5a:06:52: 65:1e:e4:28:9f:69:14:00:c3:50:c0:a4:62:b4:85: b0:cb:ff:23:df:7f:8c:ff:c9:ca:d6:be:d1:0b:7b: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:A0:18:97:FE:A9:13:69:9E:28:CD:CC:96:99:89:72:D1:91:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a8:45:76:4d:bc:43:81:ec:f1:56:2b:26:f9:c5:47:e8:08: 8e:7c:2f:ee:4c:1c:52:88:01:dc:ad:73:b1:07:7a:c1:20:11: c4:18:47:3e:a6:27:08:7d:0f:64:84:c4:00:d7:10:64:3a:da: d5:33:8c:65:4a:4d:5f:f2:0e:1c:cb:33:7c:e3:fd:bf:46:00: 54:fa:16:77:99:39:a8:c7:c9:2d:84:56:46:ba:89:9d:50:9e: a1:02:cc:57:a4:db:af:7e:00:70:20:8c:db:ec:df:49:41:60: e3:0c:95:6a:d9:62:5d:ee:86:0d:a7:0a:ca:a7:de:44:be:b7: 6f:57:f1:85:92:e8:51:b8:e0:64:48:79:f8:ee:b3:db:0c:a4: 9d:d6:be:6a:b4:19:ac:1e:5f:9c:13:64:7c:87:f7:6a:7f:fa: 21:e9:d6:f6:4e:87:2c:66:1f:36:21:f8:67:ab:75:93:16:27: df:56:28:76:07:40:df:db:20:ed:b0:8a:15:b7:c8:52:da:0a: d2:5a:7e:e0:e0:28:92:87:df:28:9c:98:ef:3c:b6:48:c8:a9: 5b:4b:cf:94:4e:3a:f1:c3:d9:0c:36:42:f3:2a:bf:8f:d6:cf: ba:01:6b:64:96:32:58:0e:a0:d9:aa:9a:dd:45:a2:50:86:5e: 51:45:5c:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1TDR/6lvMbTcqrj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI2MDMyOTAyMDAwM1oXDTI2MDQwMTAyMDAwMFowLzEtMCsGA1UEAxMk OThjNDZlMTUtMjRiMi00YjBmLWI5ZWUtNmZmNDBjNjJlZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lJm5hrxIaUqk2bCVyS2kTi1qgjO80EP1hjE RKIZ1a6ltJUZfCxKBSWG18EqiAqD7Ltgduh1wmVYjfNXh+JH9DT8QSGaNh/4cMbJ Zm1wpA/9HBbOfwxQ2QQ2mVNfycee4s83m59NZp8GtXZH1RBtZopaEdFOs09I8f2m +kQWmUSGa5WVTtduF43qaqIYVrYb6R2JYxCF9CkZEktXtbD9WV8u6L7zMdErOkAr ZYe5DVPyUbvleHVGU/EbWF2DggNtoDeKx04ll+T+0tIjCZ4nxOLIsxkD0ZPO6Z9N guxaBlJlHuQon2kUAMNQwKRitIWwy/8j33+M/8nK1r7RC3t5mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIS9oBiX/qkTaZ4ozcyWmYly0ZGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmU2OWU1NWQtM2JhZi00 MWU2LTllNjctYmJlNWVkODg4YmU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOqEV2TbxDgezxVism+cVH 6AiOfC/uTBxSiAHcrXOxB3rBIBHEGEc+picIfQ9khMQA1xBkOtrVM4xlSk1f8g4c yzN84/2/RgBU+hZ3mTmox8kthFZGuomdUJ6hAsxXpNuvfgBwIIzb7N9JQWDjDJVq 2WJd7oYNpwrKp95EvrdvV/GFkuhRuOBkSHn47rPbDKSd1r5qtBmsHl+cE2R8h/dq f/oh6db2TocsZh82Ifhnq3WTFiffVih2B0Df2yDtsIoVt8hS2grSWn7g4CiSh98o nJjvPLZIyKlbS8+UTjrxw9kMNkLzKr+P1s+6AWtkljJYDqDZqprdRaJQhl5RRVxz -----END CERTIFICATE-----Generated at Mon Mar 30 00:47:06 2026 by rpki-client