$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft File: 1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft (raw, json) Hash identifier: bX912Th7RHw0eybcDrMBS3V2OfuGSZyCPzBL9WHOaBM= Subject key identifier: 9A:6E:8D:19:18:B6:36:00:A5:F6:3B:3A:F9:69:3F:EA:5F:16:B0:EC Authority key identifier: 65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 Certificate issuer: /CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Certificate serial: 010D0C9F4328584D3651D50232F0B66F1B34B390 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft Manifest number: 010D0C9F4328584073A824BE45AB4E8E05DC59F0 Signing time: Wed 18 Mar 2026 19:00:04 +0000 Manifest this update: Wed 18 Mar 2026 19:00:04 +0000 Manifest next update: Sat 21 Mar 2026 19:00:00 +0000 Files and hashes: 1: 1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl (hash: u7f3WE5ATab8+6GD4QVgZptT63nJvOWYOAc9hbMelvI=) 2: 4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa (hash: NjRFhsJgeslGgyUpRwNnoI69UvmCvOliSgRoPQzpP5s=) 3: 7f4fbbd3-aef0-38f7-bfb9-b69d88519630.roa (hash: QLNwe9oqq9i7y8HhxgXE2Kh0jdKgTZXY1dPyD20VdTE=) 4: f0ae1a02-4b48-37f2-8fba-9e1fff45177a.roa (hash: krWYvz4pjQMOdFEAzO3WSAxOTF152DNeTYBIwXIuD+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:51:d5:02:32:f0:b6:6f:1b:34:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Validity Not Before: Mar 18 19:00:04 2026 GMT Not After : Mar 21 19:00:00 2026 GMT Subject: CN=28c07e63-4c84-467c-8878-67cc8a0568ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:10:98:a1:50:02:0f:63:c5:61:e2:47:f9: 13:f0:cc:5c:7e:ec:f9:61:02:b8:a0:e0:77:eb:8e: 50:5f:3b:d8:f0:60:6e:5a:2f:89:4c:19:a5:5c:b3: d1:aa:e7:df:b5:4d:d4:d1:d1:34:d0:cd:13:c1:0f: 60:63:9b:86:de:01:ff:ec:03:32:58:40:b3:e7:03: 0c:7f:87:6f:1d:30:12:83:36:56:d6:e3:ee:d8:66: b6:06:78:ef:76:5a:d1:15:5e:3c:81:48:fe:5a:d9: 8a:84:d0:61:5b:b3:02:58:f7:12:14:31:d0:2e:1e: 20:4b:9b:71:d3:5d:e9:34:10:e3:f2:f1:f5:a5:f8: 34:a4:45:3d:ff:9f:80:49:7f:ac:8c:09:a0:c3:9f: 87:41:70:c1:a4:f3:16:b8:50:c2:e4:9a:68:52:d7: d9:11:90:f5:71:6f:b8:1a:04:0c:4e:23:f0:2d:2f: 95:a2:0b:30:11:de:7e:f2:7e:5b:3b:92:46:d7:3e: ca:d3:25:74:8f:25:7b:a7:86:9e:a4:fd:ec:ed:c9: e0:55:50:b3:2e:62:6a:8a:24:df:38:09:6a:05:8f: be:26:98:f3:0d:55:b9:6e:5f:56:61:20:80:bf:46: c2:0d:77:a9:78:3a:25:9e:4c:57:2e:74:c7:0b:2f: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:8D:19:18:B6:36:00:A5:F6:3B:3A:F9:69:3F:EA:5F:16:B0:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl X509v3 Authority Key Identifier: keyid:65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:17:84:be:5a:46:66:56:82:f5:98:b7:fc:5b:94:52:a0:ef: b2:6f:28:f5:fa:66:06:46:6f:8a:7a:a0:b3:86:87:cb:36:d2: 53:9f:0c:4c:2a:ea:e5:3c:e3:10:99:e8:17:90:7b:d6:96:bb: 46:73:54:9b:7e:53:0a:16:6e:46:33:43:0e:5d:73:ab:eb:5d: cf:56:8e:3b:66:e2:b9:99:90:69:89:2e:77:43:e5:19:4a:20: 8a:77:95:32:f9:84:1a:a8:cf:af:82:65:89:d6:fa:d2:43:1f: e9:b5:70:7b:4a:40:d9:01:b4:5e:ad:4f:f9:d0:05:2e:a3:b6: 24:ab:22:b4:ba:ee:58:d7:39:0e:1b:3e:57:50:d6:94:14:16: e1:48:a8:3a:f8:e6:28:79:61:e2:af:f2:e7:de:91:e8:25:22: fd:42:1e:12:19:28:5f:7b:99:54:19:32:20:71:87:0c:bb:2f: 48:2f:76:05:b8:3c:17:84:77:5a:7d:6f:21:df:6c:07:89:2b: b0:23:ec:3e:69:aa:43:c9:81:48:af:8a:4b:2d:e3:82:f9:fc: 12:2c:6f:40:90:e0:e1:5f:54:a8:c4:37:5d:bc:16:4e:4b:28: 09:1f:4e:b1:75:d6:b0:19:a2:53:46:bc:3e:f6:f2:db:fc:12: 59:de:ff:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE02UdUCMvC2bxs0s5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUzOGEwYWYtYzQ5Mi00NGY1LTg4YjEtYjRkZmRiMTE4 MGYyMB4XDTI2MDMxODE5MDAwNFoXDTI2MDMyMTE5MDAwMFowLzEtMCsGA1UEAxMk MjhjMDdlNjMtNGM4NC00NjdjLTg4NzgtNjdjYzhhMDU2OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSwQmKFQAg9jxWHiR/kT8Mxcfuz5YQK4oOB3 645QXzvY8GBuWi+JTBmlXLPRqufftU3U0dE00M0TwQ9gY5uG3gH/7AMyWECz5wMM f4dvHTASgzZW1uPu2Ga2BnjvdlrRFV48gUj+WtmKhNBhW7MCWPcSFDHQLh4gS5tx 013pNBDj8vH1pfg0pEU9/5+ASX+sjAmgw5+HQXDBpPMWuFDC5JpoUtfZEZD1cW+4 GgQMTiPwLS+VogswEd5+8n5bO5JG1z7K0yV0jyV7p4aepP3s7cngVVCzLmJqiiTf OAlqBY++JpjzDVW5bl9WYSCAv0bCDXepeDolnkxXLnTHCy8fzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJpujRkYtjYApfY7OvlpP+pfFrDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4 YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRmZGIxMTgwZjIvMWUzOGEwYWYtYzQ5Mi00 NGY1LTg4YjEtYjRkZmRiMTE4MGYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUzOGEwYWYtYzQ5Mi00NGY1LTg4 YjEtYjRkZmRiMTE4MGYyLzFlMzhhMGFmLWM0OTItNDRmNS04OGIxLWI0ZGZkYjEx ODBmMi5jcmwwHwYDVR0jBBgwFoAUZam6MMqpS/TdHDT16dXIWpSBG6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRm ZGIxMTgwZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOF4S+WkZmVoL1mLf8W5RS oO+ybyj1+mYGRm+KeqCzhofLNtJTnwxMKurlPOMQmegXkHvWlrtGc1SbflMKFm5G M0MOXXOr613PVo47ZuK5mZBpiS53Q+UZSiCKd5Uy+YQaqM+vgmWJ1vrSQx/ptXB7 SkDZAbRerU/50AUuo7YkqyK0uu5Y1zkOGz5XUNaUFBbhSKg6+OYoeWHir/Ln3pHo JSL9Qh4SGShfe5lUGTIgcYcMuy9IL3YFuDwXhHdafW8h32wHiSuwI+w+aapDyYFI r4pLLeOC+fwSLG9AkODhX1SoxDddvBZOSygJH06xddawGaJTRrw+9vLb/BJZ3v+l -----END CERTIFICATE-----Generated at Thu Mar 19 19:33:56 2026 by rpki-client