$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft File: c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft (raw, json) Hash identifier: oPShVOYwe5DM4yPpmJfnXNqSc9yWsvY1rZsgSS+MoOA= Subject key identifier: 22:6E:CE:5B:08:0A:D6:9E:C0:D8:DA:F4:C7:A4:54:F4:69:42:9C:0E Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584D1C9CC756E8E0C29FE12D8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft Manifest number: 010D0C9F432858428327A7A02D0C74A0E5057254 Signing time: Mon 09 Mar 2026 14:00:04 +0000 Manifest this update: Mon 09 Mar 2026 14:00:04 +0000 Manifest next update: Thu 12 Mar 2026 14:00:00 +0000 Files and hashes: 1: 25b113c9-c697-36b0-bd01-55f4b2111952.roa (hash: HKbYBYvNuQUFIIRw1IOXsQrAIBV2OSlYG49IE8D2vq0=) 2: 2973c52c-5659-3596-8301-dc3e576e7381.roa (hash: PnfzR2EVc0vXbwSbdXCYM8tyQIB6q2vFXM3LnNHy4jo=) 3: 2cde8d05-e5d7-30e3-ad36-2a409531c8fc.roa (hash: Phgr3N/smcXjU//LVuB28eiZ5jLW+GiD5Sx71sLBJB0=) 4: c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl (hash: k75x26HEQjWhjMx8BclR2gToi3jjUb5fW6O/Go/mL60=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:9c:c7:56:e8:e0:c2:9f:e1:2d:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Mar 9 14:00:04 2026 GMT Not After : Mar 12 14:00:00 2026 GMT Subject: CN=8d623392-cfda-481e-be64-fa903ce3f448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:a4:30:0e:62:e9:83:d1:ee:a3:60:ac:de: ce:8c:52:1e:45:42:d2:64:c1:a0:1f:b9:04:a1:4a: 3e:9a:24:11:58:61:dc:41:9d:8e:7a:df:1b:f6:ae: a2:3e:98:bc:35:e2:8c:9b:7b:bb:d0:45:60:bd:f8: 2e:32:33:b5:9c:e6:ee:97:d3:23:73:36:6c:3e:f1: ae:1c:a6:a4:8a:4f:27:93:31:0d:42:3c:c4:1f:3f: f3:a0:44:89:4b:c6:2d:5f:66:9a:2b:e8:57:86:75: 79:9d:fd:d2:c2:45:ea:7d:78:c6:03:8d:5a:f2:a2: 2f:70:09:83:08:fd:36:96:d8:57:f4:01:75:86:6b: 07:bf:a0:3d:4f:1e:23:84:e9:9a:f1:e0:e3:5e:90: 1f:75:46:ad:9e:5f:ca:28:9b:00:24:8d:fc:eb:a0: e9:a3:76:4d:b7:c7:9e:fb:50:96:d2:f5:48:86:69: 70:4e:b2:91:b5:c5:0f:db:d2:2d:6e:cd:84:29:8f: c8:d4:75:8b:2b:57:b3:dd:b6:db:11:0f:d2:dc:d8: 25:17:bc:f6:b6:4e:a9:c1:71:b3:69:06:ec:9f:e6: 20:59:8a:7a:86:21:ae:0a:b7:42:a0:bd:09:df:e6: dc:bd:b1:fd:18:b8:d7:7e:1c:38:91:05:4c:c8:51: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6E:CE:5B:08:0A:D6:9E:C0:D8:DA:F4:C7:A4:54:F4:69:42:9C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f6:cc:67:4c:44:59:b6:5e:28:07:7f:5f:0d:31:88:5d:22: 49:63:25:6e:97:b5:c9:b6:9c:a1:25:f7:76:3b:c2:6e:af:9a: 1b:8a:68:9d:8b:26:47:b3:82:5d:f8:dd:9a:9c:e8:29:26:a5: 09:34:41:1c:3d:cd:10:40:0e:0b:95:38:4e:b7:61:dd:6b:0f: 99:22:16:71:fb:f8:2a:33:71:77:c8:e5:6a:02:b2:a3:46:07: 03:ab:5d:b3:66:f4:dc:ba:09:be:5f:1b:7e:aa:12:2e:7b:9b: 3e:10:a9:36:c4:94:b1:ad:7a:dd:15:51:b4:64:9f:04:0b:ca: d7:e6:0b:9a:03:c1:4d:e4:12:04:3c:d9:0f:ee:7e:dc:11:5c: e3:d0:90:12:77:19:14:92:73:76:7d:13:36:c0:c6:3c:ce:9e: 84:46:9d:bc:e8:87:b0:f6:30:e7:ed:a7:78:b9:d6:60:9f:c9: 48:ba:df:9d:6e:a9:2b:d0:0a:bc:15:31:84:bc:78:7b:71:1b: e3:be:68:7a:d2:b1:e1:42:fc:e9:0b:13:74:dc:9a:9b:92:31: f7:55:9b:c8:38:f5:46:34:c9:92:e1:6f:86:d5:ea:d4:23:1a: ce:96:d0:45:ae:4c:46:fc:1a:36:0e:a2:dd:12:a5:8c:b3:c4: 50:1d:1f:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0cnMdW6ODCn+EtiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI2MDMwOTE0MDAwNFoXDTI2MDMxMjE0MDAwMFowLzEtMCsGA1UEAxMk OGQ2MjMzOTItY2ZkYS00ODFlLWJlNjQtZmE5MDNjZTNmNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo+kMA5i6YPR7qNgrN7OjFIeRULSZMGgH7kE oUo+miQRWGHcQZ2Oet8b9q6iPpi8NeKMm3u70EVgvfguMjO1nObul9MjczZsPvGu HKakik8nkzENQjzEHz/zoESJS8YtX2aaK+hXhnV5nf3SwkXqfXjGA41a8qIvcAmD CP02lthX9AF1hmsHv6A9Tx4jhOma8eDjXpAfdUatnl/KKJsAJI3866Dpo3ZNt8ee +1CW0vVIhmlwTrKRtcUP29Itbs2EKY/I1HWLK1ez3bbbEQ/S3NglF7z2tk6pwXGz aQbsn+YgWYp6hiGuCrdCoL0J3+bcvbH9GLjXfhw4kQVMyFHqIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJuzlsICtaewNja9MekVPRpQpwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvYzg1N2NhZGYtNDEyMC00 NmUxLThhNzctNjFlZDE0ZjhkYmM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF9sxnTERZtl4oB39fDTGI XSJJYyVul7XJtpyhJfd2O8Jur5obimidiyZHs4Jd+N2anOgpJqUJNEEcPc0QQA4L lThOt2Hdaw+ZIhZx+/gqM3F3yOVqArKjRgcDq12zZvTcugm+Xxt+qhIue5s+EKk2 xJSxrXrdFVG0ZJ8EC8rX5guaA8FN5BIEPNkP7n7cEVzj0JASdxkUknN2fRM2wMY8 zp6ERp286Iew9jDn7ad4udZgn8lIut+dbqkr0Aq8FTGEvHh7cRvjvmh60rHhQvzp CxN03JqbkjH3VZvIOPVGNMmS4W+G1erUIxrOltBFrkxG/Bo2DqLdEqWMs8RQHR9F -----END CERTIFICATE-----Generated at Tue Mar 10 14:52:25 2026 by rpki-client