$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: XIGtzO7AGAfYT4u2rx6aOehZJQ1zQ+5RFbpe4QRDxFs= Subject key identifier: 6C:EE:29:86:82:8C:C4:EB:A7:3C:29:4E:A5:2D:EE:1F:A7:E5:5E:4E Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584D06BE6DD7713AC41384D7A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DB0DD Signing time: Sun 01 Mar 2026 18:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:00:04 +0000 Manifest next update: Tue 03 Mar 2026 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: DyFZjAv/Fntz6b63fNrzbXrMN0zQm7dvetaIaB3C380=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: jS10Yeozm+JNxC8fzBEmYPP3QR3LvKbY0/p9YPj6Q9w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:be:6d:d7:71:3a:c4:13:84:d7:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Mar 1 18:00:04 2026 GMT Not After : Mar 3 18:00:00 2026 GMT Subject: CN=14ac1b33-5e9a-4b19-a888-1b0d0c93685e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:8c:65:64:f2:1a:e6:09:b9:e4:47:73:a7: cb:cd:49:c6:cd:de:71:32:b2:1d:8c:49:48:dd:7a: 33:00:c6:4c:68:30:b3:da:5c:30:d1:a7:05:6f:0a: 8d:d2:f7:e1:55:b1:18:9e:e9:4e:5b:73:4d:5b:14: da:6b:c7:bb:a4:f7:1c:93:9c:8d:47:e4:1e:f3:9a: 10:99:96:5e:a1:50:8c:5c:61:07:33:05:bd:1c:46: 62:5a:ec:54:00:cb:68:65:fb:6f:9a:03:cc:2b:47: dd:2f:94:f1:a7:6c:ea:cf:01:aa:b3:4b:e9:75:fa: 75:07:dc:a6:ba:80:bb:bc:8c:5c:4f:9e:2e:08:0e: d0:46:42:32:da:00:0a:fc:0f:a7:52:83:4f:28:26: 3d:37:61:1f:06:16:82:aa:fe:e6:68:72:a8:1f:94: f3:5f:33:0f:11:4c:3f:30:30:a6:14:f3:3b:3f:be: 4b:34:4a:10:53:aa:08:3d:63:b9:59:f1:88:b9:8e: d9:02:c6:eb:dc:ea:69:93:4a:30:12:b7:f8:4a:2d: 37:8b:b6:32:f3:62:b9:19:56:ce:ad:74:83:a9:c0: 71:8b:27:c0:21:f1:e5:5f:68:7b:ba:88:5b:6b:e5: 4a:89:e4:7e:c8:fc:9c:15:9a:48:13:df:cf:9f:44: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EE:29:86:82:8C:C4:EB:A7:3C:29:4E:A5:2D:EE:1F:A7:E5:5E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3d:2d:76:a3:51:59:9e:35:17:ca:32:2c:ea:1e:78:8e:e6: ff:07:22:c6:9a:9e:a4:5d:e4:07:15:65:46:3f:0d:a2:6c:0b: 0f:a6:96:7b:46:67:c9:f3:4b:52:ab:9c:d7:eb:15:07:52:ae: 92:7c:57:49:fb:1d:88:51:00:93:43:e1:19:24:04:4a:37:53: d0:96:c8:7d:1e:18:8e:a1:1c:e0:35:7f:5c:48:e1:fa:f1:bf: 50:44:64:3d:d3:85:0e:e4:bf:86:a4:d0:68:1a:75:78:9a:5f: 71:3c:84:d7:0c:e9:6f:32:de:40:65:d3:2a:4d:98:81:79:c3: 7e:b4:79:88:f5:55:d6:6c:e3:b6:86:26:23:ef:f0:42:a7:61: a0:8b:fc:96:c1:02:1c:f0:22:cf:d5:65:28:96:bd:4d:f1:d4: 92:36:92:1f:ad:58:28:f0:8d:93:24:76:2e:a1:ad:2b:9f:b6: e7:ff:ee:80:b0:99:35:27:4c:b7:02:4b:4d:83:94:ce:2c:ce: 83:18:a9:ce:1d:b1:e6:5b:9c:e4:d8:0f:46:af:25:78:52:8f: c3:73:a2:19:0b:bf:ba:52:a2:f1:99:22:6d:95:e7:68:81:1a: 5f:5b:de:7e:63:cb:24:f1:58:bb:44:33:e9:f6:84:64:4b:78: c0:36:14:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gvm3XcTrEE4TXqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI2MDMwMTE4MDAwNFoXDTI2MDMwMzE4MDAwMFowLzEtMCsGA1UEAxMk MTRhYzFiMzMtNWU5YS00YjE5LWE4ODgtMWIwZDBjOTM2ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL2MZWTyGuYJueRHc6fLzUnGzd5xMrIdjElI 3XozAMZMaDCz2lww0acFbwqN0vfhVbEYnulOW3NNWxTaa8e7pPcck5yNR+Qe85oQ mZZeoVCMXGEHMwW9HEZiWuxUAMtoZftvmgPMK0fdL5Txp2zqzwGqs0vpdfp1B9ym uoC7vIxcT54uCA7QRkIy2gAK/A+nUoNPKCY9N2EfBhaCqv7maHKoH5TzXzMPEUw/ MDCmFPM7P75LNEoQU6oIPWO5WfGIuY7ZAsbr3Oppk0owErf4Si03i7Yy82K5GVbO rXSDqcBxiyfAIfHlX2h7uohba+VKieR+yPycFZpIE9/Pn0RlFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGzuKYaCjMTrpzwpTqUt7h+n5V5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3PS12o1FZnjUXyjIs6h54 jub/ByLGmp6kXeQHFWVGPw2ibAsPppZ7RmfJ80tSq5zX6xUHUq6SfFdJ+x2IUQCT Q+EZJARKN1PQlsh9HhiOoRzgNX9cSOH68b9QRGQ904UO5L+GpNBoGnV4ml9xPITX DOlvMt5AZdMqTZiBecN+tHmI9VXWbOO2hiYj7/BCp2Ggi/yWwQIc8CLP1WUolr1N 8dSSNpIfrVgo8I2TJHYuoa0rn7bn/+6AsJk1J0y3AktNg5TOLM6DGKnOHbHmW5zk 2A9GryV4Uo/Dc6IZC7+6UqLxmSJtledogRpfW95+Y8sk8Vi7RDPp9oRkS3jANhTr -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:04 2026 by rpki-client