$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.mft File: c90c1e98-8ade-461d-a5cc-ce1738f7633d.mft (raw, json) Hash identifier: VJx9YkFVOEE6poqegD3Arr3ntqM7Bi1v7NAUDiBvRPg= Subject key identifier: C0:6A:E0:95:2F:31:B3:2C:99:3B:44:1D:94:1E:3D:6C:C4:14:91:F0 Authority key identifier: DD:97:E0:D9:3D:F8:00:29:EF:9C:64:0F:66:09:B9:4F:37:FF:CC:68 Certificate issuer: /CN=c90c1e98-8ade-461d-a5cc-ce1738f7633d Certificate serial: 010D0C9F4328584D366F9AC8ED5E3F23DF7B9C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.mft Manifest number: 010D0C9F43285849DD6D8A1E819844C2FD4B36B9 Signing time: Wed 18 Mar 2026 20:00:04 +0000 Manifest this update: Wed 18 Mar 2026 20:00:04 +0000 Manifest next update: Fri 20 Mar 2026 20:00:00 +0000 Files and hashes: 1: 67e24c96-e2c0-346a-93e3-5e822539c957.roa (hash: e21tqsuhqzSfiF+zQw9w8BxJAQIRiUXsd9+1i86BUNE=) 2: 955ee1a1-071b-399e-91bf-03ddc834d051.roa (hash: IKIz0wJLsGT5bKfZ4e9D7Evb16OOPBHR6mRoVlC/Psw=) 3: c425c6f9-f0db-3be2-bc9d-52916145647a.roa (hash: ln9Lu7CC+61/cdu9QBiLlexcgnd1S7Hf5xRGNFyMtlg=) 4: c90c1e98-8ade-461d-a5cc-ce1738f7633d.crl (hash: 0jemgHbKtmFKnnfJCYbLrGDK07D6MGKzXWZfh0P9o0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:6f:9a:c8:ed:5e:3f:23:df:7b:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90c1e98-8ade-461d-a5cc-ce1738f7633d Validity Not Before: Mar 18 20:00:04 2026 GMT Not After : Mar 20 20:00:00 2026 GMT Subject: CN=acab5b16-a847-430a-982c-2810cad4a8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:62:1b:f6:ef:db:79:3e:eb:fc:2a:7d:c1: 50:85:85:c3:73:c7:c5:68:47:aa:49:a2:82:26:0e: 2a:5b:43:89:fa:0c:ed:03:6f:c3:a6:4e:31:32:7d: ce:a2:bb:1f:06:26:4c:4f:c7:8b:1e:0b:be:40:fc: 4c:70:f6:4b:e3:08:9b:eb:35:97:31:05:15:54:33: 34:2c:c2:9e:d3:5b:e4:98:02:74:b4:8d:54:95:7c: 25:22:73:8a:5a:65:b5:04:89:00:d7:56:14:c3:70: 42:34:66:8c:3b:08:8c:f3:25:c8:7d:71:3f:38:df: ba:19:af:62:34:bf:06:b1:fd:35:34:b5:40:42:25: d7:65:3d:b4:dc:99:77:7b:7d:aa:fa:9a:a3:57:7a: a2:6c:2c:d5:1b:26:92:ff:07:6b:a9:2c:f5:56:75: 31:a4:6f:4d:c7:4b:aa:63:4d:3d:20:f9:18:cc:ef: 1f:39:45:72:b1:11:b0:83:e7:fb:5a:f3:30:21:e4: ce:83:0b:43:c1:1b:7d:67:80:6e:42:50:0c:d2:da: 16:da:c0:7d:df:b5:dc:44:7a:f1:2b:39:9f:05:d3: 01:63:1b:a3:c4:2e:b5:26:e1:5a:39:30:f8:a7:d2: 8d:d8:ca:12:7f:11:85:e7:8e:a6:60:22:91:fb:4a: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6A:E0:95:2F:31:B3:2C:99:3B:44:1D:94:1E:3D:6C:C4:14:91:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.crl X509v3 Authority Key Identifier: keyid:DD:97:E0:D9:3D:F8:00:29:EF:9C:64:0F:66:09:B9:4F:37:FF:CC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ca:ff:e9:24:39:ea:52:38:fa:18:dd:fb:35:7f:5c:01:15: 7d:bb:e5:d8:42:83:d2:4c:e4:01:8c:b6:97:95:5d:83:80:98: 2a:1a:a6:f2:7a:01:e7:8e:df:01:57:38:e7:2a:33:7c:40:b5: 1c:63:09:89:b2:dc:e2:d2:69:03:43:e6:29:16:dd:c0:a4:d3: 24:0d:b7:60:4d:67:03:5b:4b:ad:85:78:71:31:e1:10:74:2d: 61:67:66:0f:65:ec:89:96:fe:5b:34:bb:26:9a:ae:a5:5b:3a: 99:55:fe:da:83:31:27:32:86:05:d8:1b:4e:4d:bd:8b:bf:f1: e4:7f:2b:ff:c7:77:c9:4f:44:dc:4e:eb:e0:a5:fd:a9:df:c9: c1:0b:6c:83:d4:f2:c8:75:5f:a2:57:99:4b:da:37:78:57:b5: 4e:af:90:d8:b1:50:9b:5c:48:83:60:5a:db:b0:1d:eb:71:de: e9:37:f7:43:f1:74:03:11:cc:78:e6:3f:06:48:75:80:2a:6e: 8d:e2:48:95:7f:9f:5b:75:1d:2d:45:f5:35:ac:bd:4b:65:95: 46:c1:f0:14:3f:75:82:1f:40:95:43:73:d7:3e:9e:be:19:0d: a3:4f:18:47:0f:57:f1:f2:c2:1c:46:ea:a9:e0:45:ac:a5:ee: 0f:a7:6f:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE02b5rI7V4/I997nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwYzFlOTgtOGFkZS00NjFkLWE1Y2MtY2UxNzM4Zjc2 MzNkMB4XDTI2MDMxODIwMDAwNFoXDTI2MDMyMDIwMDAwMFowLzEtMCsGA1UEAxMk YWNhYjViMTYtYTg0Ny00MzBhLTk4MmMtMjgxMGNhZDRhOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ1iG/bv23k+6/wqfcFQhYXDc8fFaEeqSaKC Jg4qW0OJ+gztA2/Dpk4xMn3OorsfBiZMT8eLHgu+QPxMcPZL4wib6zWXMQUVVDM0 LMKe01vkmAJ0tI1UlXwlInOKWmW1BIkA11YUw3BCNGaMOwiM8yXIfXE/ON+6Ga9i NL8Gsf01NLVAQiXXZT203Jl3e32q+pqjV3qibCzVGyaS/wdrqSz1VnUxpG9Nx0uq Y009IPkYzO8fOUVysRGwg+f7WvMwIeTOgwtDwRt9Z4BuQlAM0toW2sB937XcRHrx KzmfBdMBYxujxC61JuFaOTD4p9KN2MoSfxGF546mYCKR+0oT8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMBq4JUvMbMsmTtEHZQePWzEFJHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jOTBj MWU5OC04YWRlLTQ2MWQtYTVjYy1jZTE3MzhmNzYzM2QvYzkwYzFlOTgtOGFkZS00 NjFkLWE1Y2MtY2UxNzM4Zjc2MzNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzkwYzFlOTgtOGFkZS00NjFkLWE1 Y2MtY2UxNzM4Zjc2MzNkL2M5MGMxZTk4LThhZGUtNDYxZC1hNWNjLWNlMTczOGY3 NjMzZC5jcmwwHwYDVR0jBBgwFoAU3Zfg2T34ACnvnGQPZgm5Tzf/zGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jOTBjMWU5OC04YWRlLTQ2MWQtYTVjYy1jZTE3 MzhmNzYzM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkyv/pJDnqUjj6GN37NX9c ARV9u+XYQoPSTOQBjLaXlV2DgJgqGqbyegHnjt8BVzjnKjN8QLUcYwmJstzi0mkD Q+YpFt3ApNMkDbdgTWcDW0uthXhxMeEQdC1hZ2YPZeyJlv5bNLsmmq6lWzqZVf7a gzEnMoYF2BtOTb2Lv/Hkfyv/x3fJT0TcTuvgpf2p38nBC2yD1PLIdV+iV5lL2jd4 V7VOr5DYsVCbXEiDYFrbsB3rcd7pN/dD8XQDEcx45j8GSHWAKm6N4kiVf59bdR0t RfU1rL1LZZVGwfAUP3WCH0CVQ3PXPp6+GQ2jTxhHD1fx8sIcRuqp4EWspe4Pp2/D -----END CERTIFICATE-----Generated at Thu Mar 19 13:54:16 2026 by rpki-client