$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft File: ff3f112b-a6d8-4720-982d-117f151ed213.mft (raw, json) Hash identifier: C3FRHhMeuGWuzlYs0xkC0pD4jxQqDM/AZb0v/cgnjL0= Subject key identifier: AD:01:24:1A:EB:8F:0C:4A:26:16:43:8F:2A:9D:A3:D2:1C:64:BB:48 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584D54AE070252260FC08B069100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft Manifest number: 010D0C9F43285847526336F04DE670A751DFEA43 Signing time: Sun 29 Mar 2026 16:00:03 +0000 Manifest this update: Sun 29 Mar 2026 16:00:03 +0000 Manifest next update: Tue 31 Mar 2026 16:00:00 +0000 Files and hashes: 1: 1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa (hash: YX3nxnjKPMZ6ZAWdtqhIZGhk11vcFszM6e8wn//qdQQ=) 2: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (hash: NTmQyuj0JEwctyKrv5xhMZU8lrP7wU/106/j7bTJrRc=) 3: fd534e9c-4605-365f-b678-e5faa4b9bc67.roa (hash: c958PkB8pk5YyqKKV+ide0mPCQkZy3y1dcOX8yJsjsU=) 4: ff3f112b-a6d8-4720-982d-117f151ed213.crl (hash: n+7I9XN1+jcmMq4J8qcCkPGTHnR8ibdT0mG03asaRj4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:ae:07:02:52:26:0f:c0:8b:06:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Mar 29 16:00:03 2026 GMT Not After : Mar 31 16:00:00 2026 GMT Subject: CN=9f229b51-48e0-41ac-aefb-c3d329207b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:e2:46:80:35:c7:3b:e2:a3:4c:2f:ab:c0: e4:c5:7e:dc:df:d7:0f:55:92:b4:8b:b4:59:38:1f: ef:3c:f0:dc:28:d3:57:48:96:df:a1:f7:80:51:16: a7:d5:00:08:ee:94:d2:27:63:ae:9c:9a:f3:b1:83: cb:6b:c9:f6:c0:e0:4e:95:e4:5f:64:82:c2:cf:1e: e2:d2:88:32:a1:e0:a1:f0:2a:5a:a5:1c:0b:2b:fb: b6:35:ef:3c:a3:74:84:3f:81:4e:45:54:d4:14:d3: 6b:ed:13:25:c1:48:c4:34:83:ea:9b:a7:54:6c:77: c2:30:10:c9:76:a1:e2:c1:ed:1d:05:cf:d9:bf:3a: 6c:06:d4:54:87:e6:a0:73:16:3a:16:59:6e:bf:c0: 53:8e:4f:5c:71:de:28:a8:5d:b6:55:05:a5:1b:a4: cf:44:ce:3f:43:e6:be:2e:0e:70:d8:20:62:c4:bf: 51:80:32:74:71:d6:13:c5:09:d8:79:e0:e8:65:c2: c8:6f:34:73:4e:62:1c:b1:13:66:d2:18:1f:8b:24: d0:14:40:73:24:04:9e:72:d9:31:33:56:4f:74:cf: f9:c9:fe:7d:d0:69:1b:f6:c2:a9:70:98:90:ac:50: 9f:c5:6c:c1:ef:3c:5b:3d:d3:da:b7:82:4f:d2:5b: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:24:1A:EB:8F:0C:4A:26:16:43:8F:2A:9D:A3:D2:1C:64:BB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e5:0f:d1:42:e6:cd:8e:fa:ba:f5:f7:50:17:d0:3d:dd:b7: 32:28:f7:67:ca:3a:80:fe:50:4c:f8:78:3f:f1:ed:54:f2:3f: ed:d7:be:6d:a4:68:7b:a5:69:8f:c0:05:c5:ea:8d:10:c2:78: 42:fb:3f:bc:aa:e5:4e:27:55:2a:52:de:8f:9d:ab:86:98:94: f5:d5:eb:fa:5e:4f:7a:6f:dc:c1:f8:71:c0:f4:f7:5c:91:af: 14:6a:2b:ca:4d:fb:d0:70:9e:fe:46:67:c7:36:05:9a:b2:83: be:d1:e2:6a:83:5e:7c:2d:13:b7:8e:17:22:68:ff:c4:84:bd: 05:96:22:5a:d0:06:15:cd:44:df:e8:40:d2:82:79:69:ed:d6: 0b:d0:ac:ea:1c:2b:ec:0b:39:ab:a1:33:57:4d:a5:b3:01:f4: 74:2f:bf:e0:6a:21:6d:03:ba:76:5b:68:c2:92:ec:1f:fe:2b: eb:a5:d6:e8:35:33:e9:d7:fe:cc:48:f2:cc:76:1d:95:e5:c4: 29:a0:25:9d:93:ba:65:11:a7:ef:4e:0b:fd:56:de:89:5e:4d: 45:c5:16:88:06:d3:3d:dd:f5:08:ed:2a:5e:1d:10:c9:2a:a8: 22:72:2b:9d:99:84:6b:20:7f:9b:99:04:a6:9e:12:44:8c:87: 43:fd:a9:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1UrgcCUiYPwIsGkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI2MDMyOTE2MDAwM1oXDTI2MDMzMTE2MDAwMFowLzEtMCsGA1UEAxMk OWYyMjliNTEtNDhlMC00MWFjLWFlZmItYzNkMzI5MjA3YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo3iRoA1xzvio0wvq8DkxX7c39cPVZK0i7RZ OB/vPPDcKNNXSJbfofeAURan1QAI7pTSJ2OunJrzsYPLa8n2wOBOleRfZILCzx7i 0ogyoeCh8CpapRwLK/u2Ne88o3SEP4FORVTUFNNr7RMlwUjENIPqm6dUbHfCMBDJ dqHiwe0dBc/ZvzpsBtRUh+agcxY6Flluv8BTjk9ccd4oqF22VQWlG6TPRM4/Q+a+ Lg5w2CBixL9RgDJ0cdYTxQnYeeDoZcLIbzRzTmIcsRNm0hgfiyTQFEBzJASectkx M1ZPdM/5yf590Gkb9sKpcJiQrFCfxWzB7zxbPdPat4JP0ltuRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK0BJBrrjwxKJhZDjyqdo9IcZLtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvZmYzZjExMmItYTZkOC00 NzIwLTk4MmQtMTE3ZjE1MWVkMjEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCR5Q/RQubNjvq69fdQF9A9 3bcyKPdnyjqA/lBM+Hg/8e1U8j/t175tpGh7pWmPwAXF6o0QwnhC+z+8quVOJ1Uq Ut6PnauGmJT11ev6Xk96b9zB+HHA9Pdcka8UaivKTfvQcJ7+RmfHNgWasoO+0eJq g158LRO3jhciaP/EhL0FliJa0AYVzUTf6EDSgnlp7dYL0KzqHCvsCzmroTNXTaWz AfR0L7/gaiFtA7p2W2jCkuwf/ivrpdboNTPp1/7MSPLMdh2V5cQpoCWdk7plEafv Tgv9Vt6JXk1FxRaIBtM93fUI7SpeHRDJKqgiciudmYRrIH+bmQSmnhJEjIdD/akk -----END CERTIFICATE-----Generated at Sun Mar 29 19:23:11 2026 by rpki-client