$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: QhGfJ5cjr4+PKY+PDI+tEVTgf5faNuRTe9RS8gVAsY0= Subject key identifier: 6C:E2:67:42:49:B2:0D:D8:DF:FC:B5:66:4C:29:40:E4:CD:42:39:C0 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584D4F18A73603B945E909E16780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A016BA Signing time: Fri 27 Mar 2026 16:00:03 +0000 Manifest this update: Fri 27 Mar 2026 16:00:03 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: oqByNp0hAVJe3UOtTJfgU5LA6oRkFAirhz7n7cr86jQ=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 5pGegQdf2haRKgXyUjryYusCBm5WwLO3Peg+cTZxdlQ=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: KXkyaCKfacjxJNU2WbOAvxUFMdIIAThTysYpTgo0ZGU=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: KKt1wnmAB/zsyLlDFjvlSzbHGtJQud9mO/iKDqU3+o8=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: 03d/KGqbhqnxK7FY/pT/2cj4ke63Ukm97eNsjOvSJFI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:18:a7:36:03:b9:45:e9:09:e1:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Mar 27 16:00:03 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=6ef5521b-9c2b-4d82-ac21-92981f3904d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:30:78:00:50:c8:b9:22:22:50:a5:b2:51: e4:3c:a0:b8:10:78:87:c8:e4:72:b6:6a:0a:13:a5: c1:50:d2:b0:df:ea:6e:8f:fe:45:b9:52:38:ec:b7: 34:97:ee:4d:cd:ad:ec:45:aa:eb:c1:60:96:6d:cc: 1a:ba:41:15:73:f6:0c:34:d5:2e:fd:64:9e:be:ea: 2f:84:cb:db:40:8e:22:5c:25:f0:7f:ed:99:6e:4c: f8:7b:73:72:23:c7:38:d8:22:5d:b0:17:28:d5:5a: 4a:4d:4f:32:76:bf:d8:32:d8:eb:7d:0f:03:3d:45: 64:7a:56:45:9c:18:47:9d:32:32:98:cb:9a:f1:4f: 9b:33:ad:e4:5e:5b:60:b0:9e:11:19:df:d8:e4:0c: 99:78:29:c0:57:57:c2:b7:44:89:31:2f:b4:10:c7: 21:5e:01:06:b4:2c:50:01:43:f8:11:87:a2:1b:72: 04:42:75:e2:ec:e3:d8:2b:10:4b:7f:db:81:2c:fd: 87:d6:e0:6d:ad:46:7e:3a:d6:30:5f:7b:28:28:ad: 0b:3e:63:da:22:63:df:de:7c:c8:43:7c:43:36:c1: 03:90:9f:29:0e:9e:67:6b:ac:52:e5:8d:5a:78:b6: ac:0f:53:e0:14:c1:ff:2b:2f:29:ba:6f:26:3e:d6: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E2:67:42:49:B2:0D:D8:DF:FC:B5:66:4C:29:40:E4:CD:42:39:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:22:5d:25:15:e2:5e:34:b2:2d:60:4b:56:f4:da:f7:94:e8: 85:11:38:59:de:24:f9:d0:f8:3b:fc:72:d8:ab:7e:25:0c:4d: 83:4f:48:4b:95:a9:c2:35:3d:f6:b9:ac:3d:0b:17:8e:1f:e9: 2b:dc:0a:d1:9c:14:14:58:88:f5:e6:8b:8a:ce:5e:06:15:d8: 5a:13:cb:e7:20:00:2b:b0:14:ab:cd:9d:21:94:c2:7f:d0:49: 34:59:25:7f:dc:a8:b0:cb:5b:0d:b0:92:b8:8e:43:1e:72:ab: a6:9d:b8:19:99:bd:43:4e:7f:52:13:f1:db:58:e1:8a:af:96: 49:64:73:80:97:f7:16:6d:12:29:b8:fa:1c:f1:4e:f3:bf:85: 2c:9f:7d:5d:4e:f1:2c:9e:0d:13:9a:02:16:b3:1b:ca:9b:a3: 74:bc:11:7a:82:0c:b6:b6:7f:07:f2:c3:0b:cc:4d:a7:91:a3: 7f:ba:11:4f:3b:26:dd:f3:53:d7:65:46:db:14:a1:1a:b8:55: ed:30:0c:b7:6e:5c:16:48:74:80:74:dc:95:b6:51:8d:cf:3c: 44:c2:0d:28:61:0b:4d:0e:3d:d3:70:59:35:0e:0e:59:df:1e: ba:59:f3:0b:70:82:10:97:8c:35:0d:b6:3f:6c:ce:02:a3:97: d0:c1:40:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PGKc2A7lF6QnhZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI2MDMyNzE2MDAwM1oXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk NmVmNTUyMWItOWMyYi00ZDgyLWFjMjEtOTI5ODFmMzkwNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzoweABQyLkiIlClslHkPKC4EHiHyORytmoK E6XBUNKw3+puj/5FuVI47Lc0l+5Nza3sRarrwWCWbcwaukEVc/YMNNUu/WSevuov hMvbQI4iXCXwf+2Zbkz4e3NyI8c42CJdsBco1VpKTU8ydr/YMtjrfQ8DPUVkelZF nBhHnTIymMua8U+bM63kXltgsJ4RGd/Y5AyZeCnAV1fCt0SJMS+0EMchXgEGtCxQ AUP4EYeiG3IEQnXi7OPYKxBLf9uBLP2H1uBtrUZ+OtYwX3soKK0LPmPaImPf3nzI Q3xDNsEDkJ8pDp5na6xS5Y1aeLasD1PgFMH/Ky8pum8mPtY9fwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGziZ0JJsg3Y3/y1ZkwpQOTNQjnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqIl0lFeJeNLItYEtW9Nr3 lOiFEThZ3iT50Pg7/HLYq34lDE2DT0hLlanCNT32uaw9CxeOH+kr3ArRnBQUWIj1 5ouKzl4GFdhaE8vnIAArsBSrzZ0hlMJ/0Ek0WSV/3Kiwy1sNsJK4jkMecqumnbgZ mb1DTn9SE/HbWOGKr5ZJZHOAl/cWbRIpuPoc8U7zv4Usn31dTvEsng0TmgIWsxvK m6N0vBF6ggy2tn8H8sMLzE2nkaN/uhFPOybd81PXZUbbFKEauFXtMAy3blwWSHSA dNyVtlGNzzxEwg0oYQtNDj3TcFk1Dg5Z3x66WfMLcIIQl4w1DbY/bM4Co5fQwUAp -----END CERTIFICATE-----Generated at Fri Mar 27 19:34:44 2026 by rpki-client