$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: QWc6TsBIVH20UPmGHzE2xmFmczIEXFboi7qUhz9033I= Subject key identifier: BD:4A:2C:25:99:7B:D2:AB:D4:60:81:30:B7:18:8B:D4:12:50:CF:FC Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584D3F648B92BF03BB0C800D78C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91AC53 Signing time: Sun 22 Mar 2026 01:00:04 +0000 Manifest this update: Sun 22 Mar 2026 01:00:04 +0000 Manifest next update: Wed 25 Mar 2026 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: K+FjJQBLf1unTOgYLegOkhhPtlnl3Qtgj1V9FfuSyTc=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: nf3GtnKSpkrhN2UOhAjVi0PZ9HgOPl/z39vo1u4BjAk=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: kLvNBghSKc8j9UtKPL8gLnIjIxmMYlpeJ+lAd8qjHAs=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: bQKp34+zW4XrXqxN2USziCnzfGHREE246ZoqtIzsqTU=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: yqV81dkTFZXrZzuECF5h0Q7Ptcg005RPJ8r5v5shbys=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:8b:92:bf:03:bb:0c:80:0d:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Mar 22 01:00:04 2026 GMT Not After : Mar 25 01:00:00 2026 GMT Subject: CN=00e3a4d0-d9bd-4784-b026-b5cf3f1d734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:98:ed:31:0f:d8:eb:7e:99:89:6f:03:7d: 09:d8:70:04:fb:7c:67:8f:7c:9d:18:40:45:5c:eb: 48:36:94:74:3d:fa:22:a8:c0:60:a9:c3:67:d0:4c: 38:94:d9:5a:b4:d4:97:d4:38:8b:ea:19:9e:62:1c: df:93:ee:95:7a:b2:23:e3:f5:57:49:a4:26:aa:80: 71:ab:c4:7b:a8:5a:5e:b3:ee:76:0e:34:3a:64:80: 9f:96:8e:e2:93:0b:b2:35:fe:50:08:9f:43:d3:6d: 5f:7a:1e:87:a6:b6:99:d0:f1:5a:8f:7f:84:97:8f: 92:7a:f1:80:6c:7d:f9:59:24:42:26:57:a1:0d:b0: a5:a2:89:79:2a:13:67:c3:cb:31:b1:9c:02:a9:3f: f8:37:e2:c5:76:69:a4:38:42:1a:10:e6:10:bc:d8: f4:02:d7:16:8a:59:f6:87:4f:4b:f4:22:f6:74:e0: ce:a7:04:a5:c7:cb:e1:7d:df:48:5e:6c:1c:a0:86: ab:0c:f1:f8:7d:dc:10:6b:eb:25:62:61:1e:7c:11: 0a:d3:ea:20:17:33:2c:16:96:2f:41:14:5d:8c:57: b8:e6:55:29:b8:e8:c5:fa:98:99:eb:21:07:b5:5f: 50:fb:15:15:79:97:f6:5e:f1:0a:79:57:14:c9:23: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4A:2C:25:99:7B:D2:AB:D4:60:81:30:B7:18:8B:D4:12:50:CF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:35:1d:a1:36:96:80:01:c5:7a:ac:64:00:55:a3:0f:c7:6e: 79:aa:35:6d:0d:cf:70:9c:4f:ca:00:b5:f8:81:d7:74:56:d4: 69:4b:4a:c4:44:86:f6:e9:69:e2:38:8f:f1:3b:d6:23:80:60: a5:11:c0:79:d3:50:24:10:54:e3:23:5c:9a:2c:fc:b1:15:e1: 77:76:8a:7d:7a:27:76:be:a3:27:60:29:1f:dc:f7:48:3e:a3: 9c:48:07:94:73:44:cd:04:66:b5:28:97:29:b1:6b:e9:4c:d5: c2:8d:ba:54:15:b2:5a:d8:16:6f:2c:73:53:ec:05:90:85:73: fb:dc:4d:07:fb:15:d2:57:cf:d0:d2:5a:d4:97:62:12:73:41: 94:1c:ff:1c:01:3f:50:9d:a2:a7:6e:b1:e9:e1:26:83:28:aa: 21:1d:30:9c:54:1e:9d:ef:dd:f1:55:8f:fe:2f:76:a8:9e:53: 2e:83:dd:ca:02:d6:f6:b4:fa:22:59:ff:35:58:58:e9:b9:f5: f5:73:7d:c8:30:12:68:ff:30:f3:48:d4:f6:ac:7b:35:97:4d: db:7e:25:f5:54:8f:cd:8a:f5:0b:e8:15:db:0d:89:d0:88:80: ce:f8:b2:44:4a:5e:3f:8b:c2:e7:75:15:10:2d:19:fb:66:fd: d9:c2:9d:7f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0/ZIuSvwO7DIANeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI2MDMyMjAxMDAwNFoXDTI2MDMyNTAxMDAwMFowLzEtMCsGA1UEAxMk MDBlM2E0ZDAtZDliZC00Nzg0LWIwMjYtYjVjZjNmMWQ3MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCOY7TEP2Ot+mYlvA30J2HAE+3xnj3ydGEBF XOtINpR0PfoiqMBgqcNn0Ew4lNlatNSX1DiL6hmeYhzfk+6VerIj4/VXSaQmqoBx q8R7qFpes+52DjQ6ZICflo7ikwuyNf5QCJ9D021feh6HpraZ0PFaj3+El4+SevGA bH35WSRCJlehDbClool5KhNnw8sxsZwCqT/4N+LFdmmkOEIaEOYQvNj0AtcWiln2 h09L9CL2dODOpwSlx8vhfd9IXmwcoIarDPH4fdwQa+slYmEefBEK0+ogFzMsFpYv QRRdjFe45lUpuOjF+piZ6yEHtV9Q+xUVeZf2XvEKeVcUySNs/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL1KLCWZe9Kr1GCBMLcYi9QSUM/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfNR2hNpaAAcV6rGQAVaMP x255qjVtDc9wnE/KALX4gdd0VtRpS0rERIb26WniOI/xO9YjgGClEcB501AkEFTj I1yaLPyxFeF3dop9eid2vqMnYCkf3PdIPqOcSAeUc0TNBGa1KJcpsWvpTNXCjbpU FbJa2BZvLHNT7AWQhXP73E0H+xXSV8/Q0lrUl2ISc0GUHP8cAT9QnaKnbrHp4SaD KKohHTCcVB6d793xVY/+L3aonlMug93KAtb2tPoiWf81WFjpufX1c33IMBJo/zDz SNT2rHs1l03bfiX1VI/NivUL6BXbDYnQiIDO+LJESl4/i8LndRUQLRn7Zv3Zwp1/ -----END CERTIFICATE-----Generated at Mon Mar 23 00:45:27 2026 by rpki-client