$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft File: 528385d7-74c5-424c-a337-95b993622fcc.mft (raw, json) Hash identifier: yM9Y+mxpuXFgdJRa+KNEPQyQUEVivvnkhm7/n3Mxdok= Subject key identifier: 54:5A:39:5B:05:12:58:2E:CA:DF:01:C5:AC:6D:DC:69:25:3C:6D:38 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584D06BE6E16D6A167AA40C86873 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft Manifest number: 010D0C9F432858416F331E6674A4842C389701D5 Signing time: Sun 01 Mar 2026 18:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:00:04 +0000 Manifest next update: Tue 03 Mar 2026 18:00:00 +0000 Files and hashes: 1: 37e379c2-123b-325c-ac07-0f1c59aac703.roa (hash: Q7shBo/06WcqmiqMFKq7JALXa5ES6GHbCgXea0cUmYI=) 2: 528385d7-74c5-424c-a337-95b993622fcc.crl (hash: fKGFs7If9K4upz/7ofqt4GhEMSGRuiABg0XPfG6vEZE=) 3: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (hash: AonI96y5zc6/P/wCiMCcg65wUx8yC6gvMafEWnrqb6E=) 4: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (hash: hN0MauhX+AOgZ9rNTe5vga4Q98i0AdEDrU3QvjvPVFY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:be:6e:16:d6:a1:67:aa:40:c8:68:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Mar 1 18:00:04 2026 GMT Not After : Mar 3 18:00:00 2026 GMT Subject: CN=d2ab8430-ef05-42d4-8209-b38a81510431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:ae:84:dc:cb:aa:f6:3b:23:c7:1e:ba:8a: 0c:9d:bc:4e:9f:7b:26:59:ae:7e:1a:94:62:24:be: 38:96:52:78:20:0d:a0:06:50:76:57:3a:34:bc:1b: 0f:1e:53:e0:f1:f6:01:ce:fc:aa:e0:86:93:c7:50: 5e:06:ad:3e:ee:82:8b:66:64:1d:5e:a4:c8:c9:ca: 4b:73:1a:a6:9d:38:ab:ac:46:a7:ec:d4:86:ec:10: 5a:22:99:bd:5c:7c:ca:df:b9:15:5a:05:da:91:57: 90:0d:fd:0f:d1:f1:93:1b:78:0d:fd:3a:7b:50:06: 31:bc:2c:77:95:fa:a6:10:1d:f3:b1:c2:41:a3:f6: 1c:6c:bd:3f:94:51:f4:8a:5b:90:94:d0:71:bf:fc: 55:fe:40:3a:73:e3:b2:87:77:17:6f:5f:ae:20:50: cb:f9:38:8a:c4:9a:d0:af:d3:86:d9:0d:08:f9:96: 11:4f:61:3d:18:b4:13:50:09:1a:ba:75:f4:f9:d6: 95:9c:ea:00:03:6a:79:f9:bc:63:c0:8f:ce:27:69: aa:0b:24:6f:19:2b:2f:10:65:1f:ff:25:45:f0:e4: b2:f6:35:61:d6:d3:bd:6e:33:05:d0:ea:90:eb:51: 33:1c:19:47:fe:6b:8c:4a:8f:9b:c3:2a:d2:26:18: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:39:5B:05:12:58:2E:CA:DF:01:C5:AC:6D:DC:69:25:3C:6D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:de:7a:05:5c:cb:dc:4e:4b:d8:7f:0d:09:8e:33:1d:09:9d: f1:86:3c:ab:ec:8d:4f:a6:f3:ee:af:8d:c7:97:39:1d:7f:f4: 81:66:a2:d5:96:41:12:b1:43:89:2e:17:5f:a5:cf:18:16:b9: 19:5d:80:23:b1:28:31:6c:f0:95:95:00:22:1e:b0:09:03:2d: 0f:bc:30:99:1d:e2:d7:ba:2c:16:08:f9:54:43:09:3c:27:85: 57:fd:84:79:8d:01:48:76:d8:bf:50:a3:18:09:f4:fa:58:12: 53:43:3b:c5:d2:0c:6a:84:e9:fe:f2:c0:dd:da:6d:4e:c1:00: 1e:5c:aa:02:0e:84:e4:5a:26:9c:af:00:64:55:01:d8:80:df: ee:2a:30:32:4f:f3:d1:a7:bb:71:67:af:45:3e:d8:83:ce:ea: 24:be:8f:53:17:3a:84:f8:76:2a:b6:72:83:23:6e:34:86:6c: 6b:ac:5e:45:7c:bb:96:ad:07:2e:5b:40:a1:73:2b:7c:45:7b: 2b:8c:d3:3d:bf:76:fb:2a:e0:92:2e:03:35:16:8a:41:e8:d8: f6:89:6e:14:5a:e0:44:4f:6d:54:14:bc:ae:4a:8e:0b:2e:08: 30:8f:46:ce:3f:4d:b9:df:69:04:48:21:39:3b:2a:54:90:12: 3f:4d:d3:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gvm4W1qFnqkDIaHMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI2MDMwMTE4MDAwNFoXDTI2MDMwMzE4MDAwMFowLzEtMCsGA1UEAxMk ZDJhYjg0MzAtZWYwNS00MmQ0LTgyMDktYjM4YTgxNTEwNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVquhNzLqvY7I8ceuooMnbxOn3smWa5+GpRi JL44llJ4IA2gBlB2Vzo0vBsPHlPg8fYBzvyq4IaTx1BeBq0+7oKLZmQdXqTIycpL cxqmnTirrEan7NSG7BBaIpm9XHzK37kVWgXakVeQDf0P0fGTG3gN/Tp7UAYxvCx3 lfqmEB3zscJBo/YcbL0/lFH0iluQlNBxv/xV/kA6c+Oyh3cXb1+uIFDL+TiKxJrQ r9OG2Q0I+ZYRT2E9GLQTUAkaunX0+daVnOoAA2p5+bxjwI/OJ2mqCyRvGSsvEGUf /yVF8OSy9jVh1tO9bjMF0OqQ61EzHBlH/muMSo+bwyrSJhiPiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFRaOVsFElguyt8Bxaxt3GklPG04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvNTI4Mzg1ZDctNzRjNS00 MjRjLWEzMzctOTViOTkzNjIyZmNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA73noFXMvcTkvYfw0JjjMd CZ3xhjyr7I1PpvPur43Hlzkdf/SBZqLVlkESsUOJLhdfpc8YFrkZXYAjsSgxbPCV lQAiHrAJAy0PvDCZHeLXuiwWCPlUQwk8J4VX/YR5jQFIdti/UKMYCfT6WBJTQzvF 0gxqhOn+8sDd2m1OwQAeXKoCDoTkWiacrwBkVQHYgN/uKjAyT/PRp7txZ69FPtiD zuokvo9TFzqE+HYqtnKDI240hmxrrF5FfLuWrQcuW0Chcyt8RXsrjNM9v3b7KuCS LgM1FopB6Nj2iW4UWuBET21UFLyuSo4LLggwj0bOP02532kESCE5OypUkBI/TdP4 -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:24 2026 by rpki-client