$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: 6TZrbEvqAPaiK92KoaUXQ+FZfl9YVFL2J3BgAHyZ6UA= Subject key identifier: E4:AD:1C:03:4E:BD:6F:74:7E:8F:1C:B3:2B:5B:52:8C:72:C0:31:4E Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584D3E1CFC3967809176A7CC2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB445 Signing time: Sat 21 Mar 2026 14:00:04 +0000 Manifest this update: Sat 21 Mar 2026 14:00:04 +0000 Manifest next update: Mon 23 Mar 2026 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: yiO4mjSQlegiIeOR8mOexPZukn/ushdn/CE9GOnbKb8=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: 6TWo0rZ8MSkH7yVaFJ/8jjRbw56n3rqI4ME3SbmQoR4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:1c:fc:39:67:80:91:76:a7:cc:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Mar 21 14:00:04 2026 GMT Not After : Mar 23 14:00:00 2026 GMT Subject: CN=ffed8270-ed55-44b4-be86-0f9edc770845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:86:e8:c1:ed:82:00:3c:84:10:c9:a2:6f: e3:2f:8f:e2:36:62:08:c8:9f:3e:b1:0e:f1:7e:cc: f0:65:5b:cb:71:d0:cc:e1:48:96:92:a5:c4:29:07: 94:80:cf:5a:f8:84:15:23:aa:c7:6d:7b:a6:38:47: 4d:c6:e1:ad:52:05:63:04:f2:8a:fa:9a:01:3a:02: 50:e8:9a:d6:dc:6b:05:17:db:d8:7f:b4:48:fe:06: 93:e9:77:77:24:40:6e:bf:fc:8c:c7:f7:05:5d:db: c5:44:7e:a6:b1:31:e1:17:b1:1a:48:b8:6d:54:7a: fd:c9:57:0f:85:e4:2f:ec:fc:63:6d:d3:f0:f4:ce: a7:b7:00:65:25:77:24:d8:e5:e7:51:60:dc:48:7d: f3:ac:d4:22:31:61:ee:a9:a9:d3:ff:9c:16:39:d9: 27:44:19:d2:1b:e6:9a:87:51:f9:9a:82:f0:0a:b3: 81:5c:bb:27:da:1a:6f:c6:a1:50:c2:a5:7a:44:7d: ba:2b:ad:ca:07:58:9d:7a:23:1b:48:22:ca:96:41: 04:1b:b0:06:33:6a:bd:77:af:bb:88:79:de:7e:0c: 02:a2:11:94:d4:76:04:ec:dd:c0:8f:3c:c7:78:b1: fc:e5:c7:e0:c8:94:7b:51:bc:ab:1e:7a:5a:9c:1d: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AD:1C:03:4E:BD:6F:74:7E:8F:1C:B3:2B:5B:52:8C:72:C0:31:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d6:0a:51:d8:d9:09:d6:0a:90:2e:a6:d1:b6:fc:60:9e:41: ed:a0:ee:c6:ad:3a:df:55:d3:43:c4:54:73:b8:e1:e4:ca:45: 8b:ae:2d:ab:5f:0a:fa:00:24:3b:d8:34:81:44:3e:d3:65:1c: bf:5e:7e:72:57:b1:4e:57:7d:73:85:89:44:e7:d9:5a:01:66: c6:76:e3:df:ad:9f:8c:6c:c2:92:76:84:8b:4b:11:33:3a:f1: c1:3e:55:f3:5e:ab:a6:73:4f:a8:0d:f9:56:28:57:54:4a:d7: 80:a8:40:22:b2:45:de:89:87:5f:5e:39:6b:65:a3:c5:d7:86: 3a:19:dd:57:05:92:67:4e:83:71:7b:89:1f:34:49:4f:4b:8b: 5c:85:7b:24:66:dd:67:29:6b:16:3f:db:a4:3c:c6:99:3b:df: 98:cc:15:c5:92:5b:ee:f2:ec:37:6c:66:e9:d4:5f:59:f7:f0: 3d:56:50:85:21:bf:eb:fe:c7:8e:29:33:f5:75:52:cb:1f:39: 0f:20:e0:4f:69:8d:ee:a2:8a:c2:89:68:6d:b6:4d:0c:1a:f0: 7d:38:91:fe:48:19:39:ab:35:47:d3:ee:f5:b2:6a:b7:f1:73: ff:7c:b9:19:e3:eb:cf:50:ed:15:df:9d:36:74:b7:4f:fa:a8: ee:f2:f9:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+HPw5Z4CRdqfML4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI2MDMyMTE0MDAwNFoXDTI2MDMyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZmZlZDgyNzAtZWQ1NS00NGI0LWJlODYtMGY5ZWRjNzcwODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlqG6MHtggA8hBDJom/jL4/iNmIIyJ8+sQ7x fszwZVvLcdDM4UiWkqXEKQeUgM9a+IQVI6rHbXumOEdNxuGtUgVjBPKK+poBOgJQ 6JrW3GsFF9vYf7RI/gaT6Xd3JEBuv/yMx/cFXdvFRH6msTHhF7EaSLhtVHr9yVcP heQv7PxjbdPw9M6ntwBlJXck2OXnUWDcSH3zrNQiMWHuqanT/5wWOdknRBnSG+aa h1H5moLwCrOBXLsn2hpvxqFQwqV6RH26K63KB1ideiMbSCLKlkEEG7AGM2q9d6+7 iHnefgwCohGU1HYE7N3AjzzHeLH85cfgyJR7UbyrHnpanB2nTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOStHANOvW90fo8csytbUoxywDFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU1gpR2NkJ1gqQLqbRtvxg nkHtoO7GrTrfVdNDxFRzuOHkykWLri2rXwr6ACQ72DSBRD7TZRy/Xn5yV7FOV31z hYlE59laAWbGduPfrZ+MbMKSdoSLSxEzOvHBPlXzXqumc0+oDflWKFdUSteAqEAi skXeiYdfXjlrZaPF14Y6Gd1XBZJnToNxe4kfNElPS4tchXskZt1nKWsWP9ukPMaZ O9+YzBXFklvu8uw3bGbp1F9Z9/A9VlCFIb/r/seOKTP1dVLLHzkPIOBPaY3uoorC iWhttk0MGvB9OJH+SBk5qzVH0+71smq38XP/fLkZ4+vPUO0V3502dLdP+qju8vkS -----END CERTIFICATE-----Generated at Sun Mar 22 05:47:17 2026 by rpki-client