$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft File: c0311fc7-1b9e-4472-8780-7822d83e32fc.mft (raw, json) Hash identifier: 9kIl5ua1uaSSvFg58MTtZtkiJ5dJq5e66X6xX7CLwug= Subject key identifier: 32:9C:D1:AC:53:A0:0E:31:04:83:6E:07:80:A9:74:2D:CF:57:F9:19 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584D06A0A4351321E41DD96E4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft Manifest number: 010D0C9F4328584073A81FC56BE9847C211809C4 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 275dad88-147b-3524-8dd1-125da05ff542.roa (hash: hKACbvdKKR3ah3wGypYkQNG05Kds/3R3y4+pPPxTTDg=) 2: 3e196079-8695-30ec-97ad-a014098a62f1.roa (hash: jdjwNYC2qoX+loJFgKoXbXkbbnVs46+NQAd9hsGjf04=) 3: 98352e91-c3ba-3a49-b20e-9ea88df7f116.roa (hash: 2gvGQ9zNvTHtmu2TArFl6j///aSwfxUEHMSpB6DeO88=) 4: c0311fc7-1b9e-4472-8780-7822d83e32fc.crl (hash: cicLjwWulFdomA1xITvGQwZ4Dn6xVriM7Qd/gc/ZL7Q=) 5: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (hash: vnpVmgUiQYEeIMzDTLKDZYNzc6mREU383i4nTId/WdE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a4:35:13:21:e4:1d:d9:6e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=7f9c91ea-c74b-429b-aaa9-c82e3ba7b4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:76:c6:63:f6:42:96:4b:a7:e5:aa:9c:e6:01: 2b:13:65:1c:71:cf:ae:03:42:f1:fe:60:b0:fb:00: 69:fc:e1:75:ac:76:88:4b:ae:50:6e:b3:03:54:08: 67:d3:49:88:a0:1f:f0:d8:5d:38:af:4d:67:fb:36: af:b0:42:6c:d9:57:42:d5:12:16:70:16:3e:13:0b: 53:69:e4:be:3f:9f:e8:8e:05:6b:1f:59:35:0e:af: 00:87:fe:bc:15:a1:bf:66:aa:35:9d:35:97:94:24: 82:d4:9c:34:bc:ca:f2:e8:8d:26:e2:ac:53:e3:80: 4b:aa:3c:b7:44:be:9e:66:85:60:a7:9a:04:f1:63: 5e:ae:cc:94:4f:63:f7:2c:c1:92:d9:f8:25:bb:73: 92:84:2a:a0:25:0c:71:97:08:2e:27:cc:4c:e5:f9: 3b:d3:29:6d:84:99:a9:f3:77:d5:10:34:aa:42:ab: 9f:20:52:19:17:4c:86:0a:0b:93:39:71:1f:99:38: 19:9e:2b:6c:f9:23:e8:d8:c7:b0:1e:1e:9d:03:9e: ca:0a:06:ca:fc:7a:8b:39:e5:6f:b2:a6:ec:19:43: 39:3f:8f:b9:ec:05:ec:60:35:2b:68:42:2e:e4:bd: 60:e5:d2:65:86:d4:3e:45:5b:f3:2e:d6:f7:37:72: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9C:D1:AC:53:A0:0E:31:04:83:6E:07:80:A9:74:2D:CF:57:F9:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7a:aa:0f:67:4b:27:b4:0d:2d:40:ff:64:6e:8c:d0:2e:ca: 33:97:d0:39:14:7c:ab:a4:15:c0:4e:6a:26:11:05:aa:ca:82: 29:a4:bd:13:45:0a:6d:68:32:a4:9a:8c:7b:ca:49:8a:89:34: f2:c9:de:ff:2a:33:12:4b:b9:be:a8:a9:4f:79:d5:8c:79:f6: 14:4c:c1:04:e4:a4:c7:9f:f3:61:fe:de:de:62:2c:0c:b8:c4: 7c:a9:73:ef:1f:67:60:60:2c:57:f9:c8:78:cb:55:ab:0b:3b: 71:56:ab:88:f4:c0:d6:55:ee:7e:fe:67:4e:06:b1:00:bc:4c: 7a:b3:59:ac:b7:1d:4c:7c:69:9e:6c:2b:39:cc:2d:c2:93:0a: a5:02:09:f9:2f:b9:24:eb:c9:c2:11:aa:f1:bc:67:42:8f:24: 0b:f0:0b:20:32:07:06:22:48:03:96:0c:f1:ca:16:2b:b4:d5: 05:a1:c4:a7:e7:73:c1:6d:72:e6:c3:0b:da:ef:09:36:b1:f4: 72:99:e0:54:c9:d1:37:5a:30:cb:77:a7:6f:2c:4b:48:c2:cb: a9:05:b7:ff:27:40:c4:0c:2b:42:f2:d1:c7:92:a5:ce:91:df: 4c:71:0f:61:de:86:3c:7f:1e:99:5b:85:51:79:d2:7f:e5:31: a3:5e:4b:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKQ1EyHkHdluQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk N2Y5YzkxZWEtYzc0Yi00MjliLWFhYTktYzgyZTNiYTdiNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnbGY/ZClkun5aqc5gErE2Uccc+uA0Lx/mCw +wBp/OF1rHaIS65QbrMDVAhn00mIoB/w2F04r01n+zavsEJs2VdC1RIWcBY+EwtT aeS+P5/ojgVrH1k1Dq8Ah/68FaG/Zqo1nTWXlCSC1Jw0vMry6I0m4qxT44BLqjy3 RL6eZoVgp5oE8WNersyUT2P3LMGS2fglu3OShCqgJQxxlwguJ8xM5fk70ylthJmp 83fVEDSqQqufIFIZF0yGCguTOXEfmTgZnits+SPo2MewHh6dA57KCgbK/HqLOeVv sqbsGUM5P4+57AXsYDUraEIu5L1g5dJlhtQ+RVvzLtb3N3Lo1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKc0axToA4xBINuB4CpdC3PV/kZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvYzAzMTFmYzctMWI5ZS00 NDcyLTg3ODAtNzgyMmQ4M2UzMmZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAeqoPZ0sntA0tQP9kbozQ Lsozl9A5FHyrpBXATmomEQWqyoIppL0TRQptaDKkmox7ykmKiTTyyd7/KjMSS7m+ qKlPedWMefYUTMEE5KTHn/Nh/t7eYiwMuMR8qXPvH2dgYCxX+ch4y1WrCztxVquI 9MDWVe5+/mdOBrEAvEx6s1mstx1MfGmebCs5zC3CkwqlAgn5L7kk68nCEarxvGdC jyQL8AsgMgcGIkgDlgzxyhYrtNUFocSn53PBbXLmwwva7wk2sfRymeBUydE3WjDL d6dvLEtIwsupBbf/J0DEDCtC8tHHkqXOkd9McQ9h3oY8fx6ZW4VRedJ/5TGjXkt6 -----END CERTIFICATE-----Generated at Mon Mar 2 10:03:06 2026 by rpki-client