$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft File: 2ce98e57-da60-49a3-b167-e6998e0d2945.mft (raw, json) Hash identifier: OLq9g89zbRZiOzQEGiGp6C3jRFKiL4yYcDSiOrE1Mrg= Subject key identifier: 56:18:0D:5F:2F:50:61:14:0D:8F:A8:DA:3E:31:AB:6D:58:76:FA:E8 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584D36AB291AC5917D0963E5C440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft Manifest number: 010D0C9F4328584B647ED64DB62314288747156F Signing time: Wed 18 Mar 2026 22:00:03 +0000 Manifest this update: Wed 18 Mar 2026 22:00:03 +0000 Manifest next update: Fri 20 Mar 2026 22:00:00 +0000 Files and hashes: 1: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (hash: NyktiSEN+MIf6TpoEw9a7Mxbs08DGw6NGAvPhiEZ37o=) 2: 2ce98e57-da60-49a3-b167-e6998e0d2945.crl (hash: CsBjI5DpWbYNJn3M42TcSz0V7HGp8xtwY709nDd+G1I=) 3: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (hash: a0FfTksjsQ1YAAatAU4UdZeXxdCdcaVbC9PWX5RNvlI=) 4: bd0731b8-b4cf-32f2-9183-9252be89bfab.roa (hash: UQgVnFKmVNUoFkhc1lTd+5+OKIs8f3QVugZGkgR4PBw=) 5: c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa (hash: NZhE6b6VDw9r+s9W5jAe7I0stig3pf1Mairv9dWCgDU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:ab:29:1a:c5:91:7d:09:63:e5:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Mar 18 22:00:03 2026 GMT Not After : Mar 20 22:00:00 2026 GMT Subject: CN=bdf23b8e-aa5c-4f87-b84c-7bdeeb617490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:d7:45:0b:0c:3f:46:e9:dc:62:cf:7f:ec: 51:fe:5b:50:bc:8d:51:64:a2:a5:93:ec:40:46:67: a9:fb:24:d0:73:a6:72:55:45:c9:f7:11:85:f5:64: 9c:b3:7b:09:5e:c5:49:82:e6:dd:27:bb:32:f5:9b: 86:98:30:73:6a:c6:64:a9:ad:3a:46:b8:ea:2a:82: 15:57:ff:0a:9d:ee:ba:e1:0f:6f:f2:2b:41:0a:6a: 2a:24:af:61:85:f2:12:38:49:8e:d1:c9:98:2d:77: 27:18:b0:0f:c4:95:ed:72:69:6e:1b:58:1f:3d:17: e9:49:6f:be:26:e2:dc:a3:c4:db:9b:94:2e:7b:5e: d4:90:d2:cf:07:9e:1a:6c:8a:c0:17:0a:63:76:07: 07:21:48:f7:d6:00:f6:3f:9c:c0:68:ae:e0:06:84: 57:5d:dd:1d:bf:ec:a4:60:c3:6d:b4:ad:d6:75:d6: d6:e5:79:31:0c:90:89:fe:7c:4d:f4:6f:d3:d2:58: 76:04:a7:a3:8b:7c:f5:6b:69:8d:ef:57:14:1e:5c: 57:d3:df:00:68:84:34:2e:81:1c:dc:ff:5f:62:ac: 25:c9:98:07:a2:8f:27:37:cc:3a:45:85:cf:1d:73: 08:be:6c:4a:d7:93:6b:92:a9:b3:5b:7f:31:7d:d5: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:0D:5F:2F:50:61:14:0D:8F:A8:DA:3E:31:AB:6D:58:76:FA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fc:0b:88:db:02:9c:60:71:79:4c:b1:8b:b8:e5:f5:d7:ec: 13:b1:01:6e:90:9e:10:e6:42:9c:50:33:9a:01:43:1d:10:f9: da:8a:44:d9:52:e0:3d:72:26:48:55:28:99:af:94:a9:77:45: 6b:dd:9b:b9:66:ae:2a:0f:58:7a:33:fe:54:13:6e:1f:4f:e6: b2:24:9c:3c:19:c4:57:fc:1c:05:42:67:d6:d4:53:b6:b3:ae: e7:84:bc:b8:8e:00:30:c2:72:aa:b9:fb:4e:58:88:7e:45:fe: f7:b3:e6:26:b9:a6:f7:e3:82:dc:16:c7:82:b4:45:02:04:18: 57:f1:28:8e:82:15:d1:dd:e9:f9:5b:25:94:ad:8c:1e:47:11: 98:5c:48:cc:f8:74:78:42:55:2a:6d:4c:8c:5b:e5:a5:cb:35: 92:1a:66:eb:21:2e:37:93:3d:dd:8d:a5:3b:2e:9c:d4:07:bd: 2a:f2:d5:16:49:67:6a:f0:4c:54:38:fa:2c:25:a8:bf:51:00: ba:24:a8:e8:af:8a:c0:55:36:28:94:f8:5a:4b:5f:18:35:5c: 93:35:a1:d9:d5:3b:7d:e5:38:26:11:d1:a6:35:c2:e0:02:be: e0:71:d7:75:62:a3:29:e9:58:88:40:4e:f6:a4:0c:c8:f7:9a: 06:f9:70:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE02qykaxZF9CWPlxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDMxODIyMDAwM1oXDTI2MDMyMDIyMDAwMFowLzEtMCsGA1UEAxMk YmRmMjNiOGUtYWE1Yy00Zjg3LWI4NGMtN2JkZWViNjE3NDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIrXRQsMP0bp3GLPf+xR/ltQvI1RZKKlk+xA Rmep+yTQc6ZyVUXJ9xGF9WScs3sJXsVJgubdJ7sy9ZuGmDBzasZkqa06RrjqKoIV V/8Kne664Q9v8itBCmoqJK9hhfISOEmO0cmYLXcnGLAPxJXtcmluG1gfPRfpSW++ JuLco8Tbm5Que17UkNLPB54abIrAFwpjdgcHIUj31gD2P5zAaK7gBoRXXd0dv+yk YMNttK3WddbW5XkxDJCJ/nxN9G/T0lh2BKeji3z1a2mN71cUHlxX098AaIQ0LoEc 3P9fYqwlyZgHoo8nN8w6RYXPHXMIvmxK15NrkqmzW38xfdXGywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFYYDV8vUGEUDY+o2j4xq21YdvroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMmNlOThlNTctZGE2MC00 OWEzLWIxNjctZTY5OThlMGQyOTQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB/AuI2wKcYHF5TLGLuOX1 1+wTsQFukJ4Q5kKcUDOaAUMdEPnaikTZUuA9ciZIVSiZr5Spd0Vr3Zu5Zq4qD1h6 M/5UE24fT+ayJJw8GcRX/BwFQmfW1FO2s67nhLy4jgAwwnKquftOWIh+Rf73s+Ym uab344LcFseCtEUCBBhX8SiOghXR3en5WyWUrYweRxGYXEjM+HR4QlUqbUyMW+Wl yzWSGmbrIS43kz3djaU7LpzUB70q8tUWSWdq8ExUOPosJai/UQC6JKjor4rAVTYo lPhaS18YNVyTNaHZ1Tt95TgmEdGmNcLgAr7gcdd1YqMp6ViIQE72pAzI95oG+XAI -----END CERTIFICATE-----Generated at Thu Mar 19 13:52:52 2026 by rpki-client