$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: JPJqgSlTKytBnnPgKE7Jx/fGyx+kyMtym/WlTCRQ3zM= Subject key identifier: 09:1B:D2:62:81:E2:7A:B5:19:CA:F9:D4:7F:A2:7A:19:53:63:BF:6D Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584D309EAFFDCC01D467A47DDDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA6A1 Signing time: Mon 16 Mar 2026 18:00:04 +0000 Manifest this update: Mon 16 Mar 2026 18:00:04 +0000 Manifest next update: Thu 19 Mar 2026 18:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: IoX07dU3NWolM1K0dZ4oLmeY970/Mq5eJdLHuKIo2dM=) 2: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: CnPI0a5mALTqicyjFl66SQsFwxFn+EGcBU1qJwGKpv0=) 3: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: GGVo550DEhxZpRCtwVKnaCLim+6XNi+grz0WU0JUKg8=) 4: d779b9b9-5804-3150-8ebf-8baf0661eeaf.roa (hash: 2R02wcR6mbh6Etuzp5E3qrmn8RpdzjgX+ApSMbpx4hQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:9e:af:fd:cc:01:d4:67:a4:7d:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Mar 16 18:00:04 2026 GMT Not After : Mar 19 18:00:00 2026 GMT Subject: CN=04e6d96d-81a9-43d9-b9cd-4d2ea481aef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:95:90:ba:1a:2c:fb:db:f4:6e:86:40:3b:57: 54:66:e2:e7:07:f0:59:50:a6:4c:55:4a:c6:03:92: 2c:da:d8:13:19:ba:1d:d0:c7:fa:53:8d:d3:ea:12: be:75:b1:12:76:15:ff:01:78:e7:ed:f1:ed:96:4c: ea:6c:b9:64:5a:6c:56:11:58:3d:2a:a7:67:eb:27: 7f:41:80:34:f5:11:d5:03:5a:6b:c7:d7:0d:88:d0: 57:a5:cc:15:2f:77:a1:93:76:a4:71:f4:eb:6b:c5: b2:cd:07:09:14:35:30:df:8f:c3:bc:ff:88:50:a4: 0b:77:d2:5b:2f:e2:a2:14:13:d1:fd:84:92:ea:78: 06:a5:4f:af:43:e0:3e:e2:6b:93:0c:dd:4c:fa:a7: 24:7f:33:b7:21:83:78:50:40:e4:b7:0c:e5:9e:5a: 24:0e:ee:24:b9:e4:b0:f4:b8:76:66:71:67:bc:eb: e2:e2:6f:c7:50:15:5a:92:a3:73:f5:2c:a3:12:c2: 26:4b:da:b9:ab:a4:9f:2e:08:49:16:80:23:89:e7: 52:92:0d:b8:46:7b:ff:5d:48:f6:10:5e:8b:94:23: 64:c7:a9:f0:72:96:fa:80:d7:a2:64:81:36:62:b7: 40:b3:f2:e0:6e:9a:fe:e1:b6:9b:aa:16:69:ad:cb: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:D2:62:81:E2:7A:B5:19:CA:F9:D4:7F:A2:7A:19:53:63:BF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fe:f3:da:51:88:5d:24:ff:8d:27:c1:62:47:81:3c:1a:47: 7e:95:af:77:d6:f7:6a:fb:c2:16:87:5a:36:7d:27:ba:b1:d8: 5f:46:15:b0:95:8f:b9:49:e0:0f:78:73:95:80:e7:b8:ef:d6: f9:1c:ee:96:d5:75:71:28:74:ad:33:2e:69:b5:d8:88:9c:66: 18:dd:72:8f:5e:9b:6b:55:20:d9:4b:ac:55:17:b0:fb:30:42: f6:ab:bd:dc:d0:09:f3:87:46:83:97:61:6d:58:30:d7:01:a6: 15:39:29:8c:ed:67:ac:c2:4b:2b:07:f6:15:67:9d:e7:88:42: ed:d8:69:6e:11:bc:06:d5:42:37:0d:e9:45:d4:5d:64:3b:9a: 8e:47:9b:7d:1e:50:e4:8e:ce:06:11:b6:96:6e:49:55:5f:63: 24:bd:a1:85:38:6e:c3:7d:b5:2a:a1:4a:18:ab:92:06:68:ba: c7:21:b8:3a:c4:24:d6:4d:59:cb:33:7b:42:c2:eb:77:47:56: 1b:30:be:76:ef:0a:c1:42:cf:19:22:67:af:45:b6:3f:1f:cd: 51:9c:e1:a1:f2:26:36:a2:52:e9:6a:31:69:17:31:8f:c1:c2: 5b:f2:5e:db:b1:fc:4a:52:d1:eb:40:da:80:e7:22:61:d8:b6: 79:7a:a2:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0wnq/9zAHUZ6R93cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MDMxNjE4MDAwNFoXDTI2MDMxOTE4MDAwMFowLzEtMCsGA1UEAxMk MDRlNmQ5NmQtODFhOS00M2Q5LWI5Y2QtNGQyZWE0ODFhZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZWQuhos+9v0boZAO1dUZuLnB/BZUKZMVUrG A5Is2tgTGbod0Mf6U43T6hK+dbESdhX/AXjn7fHtlkzqbLlkWmxWEVg9Kqdn6yd/ QYA09RHVA1prx9cNiNBXpcwVL3ehk3akcfTra8WyzQcJFDUw34/DvP+IUKQLd9Jb L+KiFBPR/YSS6ngGpU+vQ+A+4muTDN1M+qckfzO3IYN4UEDktwzlnlokDu4kueSw 9Lh2ZnFnvOvi4m/HUBVakqNz9SyjEsImS9q5q6SfLghJFoAjiedSkg24Rnv/XUj2 EF6LlCNkx6nwcpb6gNeiZIE2YrdAs/Lgbpr+4babqhZprcvK6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAkb0mKB4nq1Gcr51H+iehlTY79tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBt/vPaUYhdJP+NJ8FiR4E8 Gkd+la931vdq+8IWh1o2fSe6sdhfRhWwlY+5SeAPeHOVgOe479b5HO6W1XVxKHSt My5ptdiInGYY3XKPXptrVSDZS6xVF7D7MEL2q73c0Anzh0aDl2FtWDDXAaYVOSmM 7WeswksrB/YVZ53niELt2GluEbwG1UI3DelF1F1kO5qOR5t9HlDkjs4GEbaWbklV X2MkvaGFOG7DfbUqoUoYq5IGaLrHIbg6xCTWTVnLM3tCwut3R1YbML527wrBQs8Z ImevRbY/H81RnOGh8iY2olLpajFpFzGPwcJb8l7bsfxKUtHrQNqA5yJh2LZ5eqJK -----END CERTIFICATE-----Generated at Mon Mar 16 23:11:59 2026 by rpki-client