$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: 1CG13DQhGeqXp5UCt3519dtdP6uIq5og9Dk9m1JRr7M= Subject key identifier: BD:0E:C2:6B:AF:7E:72:1D:AE:AC:C7:8D:03:5D:E3:0A:5E:DA:A3:67 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584D0717BFB63E4BF57C4D7212A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079A7E Signing time: Sun 01 Mar 2026 21:00:04 +0000 Manifest this update: Sun 01 Mar 2026 21:00:04 +0000 Manifest next update: Wed 04 Mar 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: HuBw8BoHatOfV74Pz5VEOcWLgHDvglXF1+ii0VMCC4s=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: UxnT05YnUBgH8YlbSQ8C8/RuLOMFyGzjAdsoH+QNum4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:17:bf:b6:3e:4b:f5:7c:4d:72:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Mar 1 21:00:04 2026 GMT Not After : Mar 4 21:00:00 2026 GMT Subject: CN=d7f538ea-3e51-429a-bef2-25c09f82a0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:72:85:d5:e8:7a:4f:55:c3:73:3e:5b:31: fe:bc:16:68:fc:4c:ba:15:a3:77:b2:9d:bb:24:04: 42:32:24:76:4b:52:f2:b7:5a:fa:3a:76:fb:e4:e3: a4:af:7b:e2:eb:59:7d:ec:d6:e3:c3:f5:dc:ce:36: 79:4a:7a:08:01:d5:27:f7:ff:01:b1:ab:81:ac:34: 0f:4c:6c:08:5a:82:61:af:a0:5a:fb:ab:8a:e1:5d: f6:ce:19:9c:a0:c6:4a:98:07:14:34:44:a8:13:67: 28:84:6d:b0:ab:a5:1c:55:15:48:b9:c1:5e:9f:f5: 05:bc:41:c7:45:10:07:51:43:2e:35:89:79:3d:39: 30:12:34:42:ab:19:f0:4c:f6:b9:69:8a:a5:62:e9: fe:d1:44:d7:77:63:4c:de:00:65:34:d3:10:5c:e5: 77:47:2e:5e:78:1f:0a:4c:69:eb:59:75:3c:3b:c9: 43:f0:c8:13:3e:74:8a:75:39:39:69:e6:58:2a:49: ce:a3:6a:44:8e:d5:07:ac:c6:10:b8:e8:62:ea:23: 9a:d7:77:df:ba:dc:0a:25:69:2f:a4:67:de:9f:bb: d7:37:4a:b6:3e:2c:34:84:bf:56:e8:b2:94:4b:37: 1d:35:10:6a:7b:2f:40:a2:d7:f1:ee:49:81:5f:24: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0E:C2:6B:AF:7E:72:1D:AE:AC:C7:8D:03:5D:E3:0A:5E:DA:A3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f7:2b:b1:28:07:d1:d3:45:1a:68:10:aa:4a:bc:0f:35:38: 35:ba:f8:f7:c5:c1:e4:f7:70:68:c4:4e:f3:4f:40:67:bf:0f: 1a:21:1b:6d:c9:2c:97:79:14:15:0b:1d:55:31:e6:2a:40:13: 16:18:91:fc:02:51:f0:1e:b5:db:87:29:bb:1e:e6:4b:52:17: 99:97:12:cb:b3:8d:ed:92:6e:c4:19:a4:5b:95:bb:8f:70:64: 6d:87:0a:31:c0:62:59:7f:a5:81:09:0b:92:75:7f:06:d7:a1: 67:87:12:04:e5:e3:78:44:3e:6f:bb:2a:2d:8d:db:b0:95:7f: 19:44:17:3f:34:0b:8d:66:f5:21:c8:f5:c4:08:0a:e3:c9:dd: 4e:10:9b:26:8f:ac:cb:1f:9e:da:37:95:79:5f:c0:e2:e0:61: b8:f8:83:f2:a9:fe:82:1b:4d:1e:c5:61:95:65:39:62:5c:95: e5:0c:6b:93:d0:e8:99:65:57:99:c6:27:d9:4f:aa:92:15:3c: 51:cf:17:71:80:d5:0a:84:79:7c:77:a2:08:91:84:84:3d:af: c9:e3:49:e9:b1:a7:11:39:c4:4a:6d:82:70:b2:fc:3a:d4:6f: dd:0b:1c:a1:20:01:19:db:99:47:70:0f:18:e9:17:fb:df:5b: 58:2a:70:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HF7+2Pkv1fE1yEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDMwMTIxMDAwNFoXDTI2MDMwNDIxMDAwMFowLzEtMCsGA1UEAxMk ZDdmNTM4ZWEtM2U1MS00MjlhLWJlZjItMjVjMDlmODJhMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArilyhdXoek9Vw3M+WzH+vBZo/Ey6FaN3sp27 JARCMiR2S1Lyt1r6Onb75OOkr3vi61l97Nbjw/XczjZ5SnoIAdUn9/8BsauBrDQP TGwIWoJhr6Ba+6uK4V32zhmcoMZKmAcUNESoE2cohG2wq6UcVRVIucFen/UFvEHH RRAHUUMuNYl5PTkwEjRCqxnwTPa5aYqlYun+0UTXd2NM3gBlNNMQXOV3Ry5eeB8K TGnrWXU8O8lD8MgTPnSKdTk5aeZYKknOo2pEjtUHrMYQuOhi6iOa13ffutwKJWkv pGfen7vXN0q2Piw0hL9W6LKUSzcdNRBqey9Aotfx7kmBXySPOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL0OwmuvfnIdrqzHjQNd4wpe2qNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBN9yuxKAfR00UaaBCqSrwP NTg1uvj3xcHk93BoxE7zT0Bnvw8aIRttySyXeRQVCx1VMeYqQBMWGJH8AlHwHrXb hym7HuZLUheZlxLLs43tkm7EGaRblbuPcGRthwoxwGJZf6WBCQuSdX8G16FnhxIE 5eN4RD5vuyotjduwlX8ZRBc/NAuNZvUhyPXECArjyd1OEJsmj6zLH57aN5V5X8Di 4GG4+IPyqf6CG00exWGVZTliXJXlDGuT0OiZZVeZxifZT6qSFTxRzxdxgNUKhHl8 d6IIkYSEPa/J40npsacROcRKbYJwsvw61G/dCxyhIAEZ25lHcA8Y6Rf731tYKnAP -----END CERTIFICATE-----Generated at Mon Mar 2 02:14:54 2026 by rpki-client