$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json) Hash identifier: dOkURIyVAEN/7Gmg6Ag+b246xMSAt7yYo0UFvy6M7+0= Subject key identifier: 2D:21:9F:64:D5:A5:1F:D4:82:67:E1:AE:4B:1C:67:73:26:A6:B2:32 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584D06DC3211522832C12421FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE346 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: d7peY0kRQbyjSfnZb8jA4ArxII88AUB+qsi2jT8fLLI=) 2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: xB2+uCo7ev+JpilsUU/PwftY3a+MSRIAyFFjzNJWoqY=) 3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: /GhYLhBQHPtDx8xGiODrC1Et2jsyG3wJM3rSQDO5+2g=) 4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: X73sgv0YGT55yoPW+GIUam1GIj9DY18uQWhXdKyrguQ=) 5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: oQsXXkvKXGc08s5XDNvcGxlkfqDIFUeRDS0xuukhbio=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:32:11:52:28:32:c1:24:21:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=096f61ca-88a0-4df2-96bf-9b9c3158edfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:80:91:0b:da:1a:3f:51:e2:77:53:14:bf: 9f:37:a0:a8:bf:81:08:e1:95:22:ef:2e:8f:a5:4c: 86:ea:a1:e7:b3:5d:63:dd:30:1b:3a:58:2d:69:50: 53:9d:45:72:30:9b:eb:77:09:b3:5f:66:4e:47:c4: 5d:4c:dc:c7:10:35:01:06:ee:09:91:91:b5:78:08: 8e:a7:de:a7:e2:59:ba:17:9c:8f:bf:88:d9:d5:1f: c2:5b:37:e3:05:64:35:cc:9b:2f:82:a4:c3:96:97: ee:a3:d5:e7:c8:62:33:df:ee:dc:1f:99:11:94:b6: bc:13:d4:13:b3:f6:54:d7:b1:29:cd:90:c4:47:59: 98:34:01:69:ac:0d:5b:c1:21:d7:76:29:31:17:bb: db:fd:73:1c:14:ad:0a:f8:c8:83:80:9b:42:21:e8: ee:67:ab:e5:a2:0e:e4:61:35:27:5d:7f:98:f8:30: ca:b2:87:bb:85:08:42:2d:76:8e:6b:99:97:06:9d: 8d:41:ed:ea:5c:fb:d6:cd:01:c1:ef:b7:aa:ac:14: 23:30:fb:80:e3:a8:b2:b4:2f:dc:fa:8d:e6:d2:77: 78:3a:a6:a2:d1:65:b6:bc:b2:01:8a:95:5b:b7:2d: 9f:28:05:61:0a:db:08:0d:23:ad:f4:26:1c:5e:58: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:21:9F:64:D5:A5:1F:D4:82:67:E1:AE:4B:1C:67:73:26:A6:B2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:81:e1:33:e4:8c:c5:9b:2f:f5:78:b9:7d:11:6a:df:f6:94: 02:29:ab:d5:b7:35:f5:4f:37:f0:2e:4a:73:20:4b:38:9b:ac: 63:c9:9d:d7:73:8d:5a:f0:8d:6c:fe:c6:b2:84:88:e6:8b:a0: aa:8e:eb:2f:63:e8:d0:f9:95:b2:0f:7a:f2:28:96:3e:d8:cc: 00:71:8a:d3:e2:88:2a:29:fe:8d:61:b3:63:84:3e:b7:1f:ec: 57:70:40:a6:8c:37:c0:fd:df:66:71:e7:11:54:1f:03:cb:1a: 28:48:d4:45:42:ce:bc:98:3a:8c:23:41:fb:4d:6b:8e:a8:ca: 05:fb:ce:21:40:15:72:1b:03:ec:9e:5b:f8:23:65:16:17:5a: 86:46:d8:28:af:53:39:e9:e3:90:e8:bb:48:aa:24:d4:ae:9a: c4:d2:04:ea:94:97:9f:cd:fc:fa:aa:01:c0:e0:02:eb:71:d1: 6f:2c:c0:01:6e:10:3e:87:ef:82:00:17:3d:b1:ed:bb:89:7e: 6f:33:06:a4:c2:ad:ed:dd:99:4d:db:99:01:60:65:7c:21:c5: 01:33:e7:30:15:dd:2f:41:e0:fd:42:73:ad:95:93:b6:1f:bd: d3:c7:f7:6f:2f:8d:50:0a:83:6c:af:e9:e7:ea:af:70:7a:c6: 59:83:84:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DIRUigywSQh/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk MDk2ZjYxY2EtODhhMC00ZGYyLTk2YmYtOWI5YzMxNThlZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNOAkQvaGj9R4ndTFL+fN6Cov4EI4ZUi7y6P pUyG6qHns11j3TAbOlgtaVBTnUVyMJvrdwmzX2ZOR8RdTNzHEDUBBu4JkZG1eAiO p96n4lm6F5yPv4jZ1R/CWzfjBWQ1zJsvgqTDlpfuo9XnyGIz3+7cH5kRlLa8E9QT s/ZU17EpzZDER1mYNAFprA1bwSHXdikxF7vb/XMcFK0K+MiDgJtCIejuZ6vlog7k YTUnXX+Y+DDKsoe7hQhCLXaOa5mXBp2NQe3qXPvWzQHB77eqrBQjMPuA46iytC/c +o3m0nd4Oqai0WW2vLIBipVbty2fKAVhCtsIDSOt9CYcXliz2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC0hn2TVpR/UgmfhrkscZ3MmprIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00 MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPgeEz5IzFmy/1eLl9EWrf 9pQCKavVtzX1TzfwLkpzIEs4m6xjyZ3Xc41a8I1s/sayhIjmi6CqjusvY+jQ+ZWy D3ryKJY+2MwAcYrT4ogqKf6NYbNjhD63H+xXcECmjDfA/d9mcecRVB8DyxooSNRF Qs68mDqMI0H7TWuOqMoF+84hQBVyGwPsnlv4I2UWF1qGRtgor1M56eOQ6LtIqiTU rprE0gTqlJefzfz6qgHA4ALrcdFvLMABbhA+h++CABc9se27iX5vMwakwq3t3ZlN 25kBYGV8IcUBM+cwFd0vQeD9QnOtlZO2H73Tx/dvL41QCoNsr+nn6q9wesZZg4Qe -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:03 2026 by rpki-client