$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft File: 68f1635e-5871-4108-b726-e99a09258e31.mft (raw, json) Hash identifier: /lG0/aRWHQjvxRZx4l7tW3Sm3Y/dpGUKd7fnsB39fUc= Subject key identifier: 36:12:43:60:8D:36:6B:8E:45:24:C6:9A:E6:85:1E:8B:4B:94:2B:2B Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC Certificate issuer: /CN=68f1635e-5871-4108-b726-e99a09258e31 Certificate serial: 010D0C9F4328584D06DC33A04DCC617E6D82A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft Manifest number: 010D0C9F43285849B37171ECF2EE65DF5B9F7338 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: 1dc07208-ca23-362a-a20c-22d013df9b70.roa (hash: lWmUVmWwlfY0hxRXXucbWOK1HTodUCyISV7KUlZ/fdE=) 2: 68f1635e-5871-4108-b726-e99a09258e31.crl (hash: 6TdGO+EPqnjGjBoc0tQhleQQnWMy5i+3LY6ZAsrLIdg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:33:a0:4d:cc:61:7e:6d:82:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31 Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=a402bbbb-9ddb-4fb7-a695-559faedee585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:aa:f6:e9:89:0f:b3:62:f3:1d:aa:8f:24: e9:b4:8f:ba:10:7a:7b:75:50:15:e1:f4:07:91:94: b1:22:13:a8:cc:60:d5:e1:76:20:7b:82:e0:f3:60: 47:48:bf:6d:c8:59:28:ec:50:9f:b6:2b:60:de:ae: 25:29:9d:b4:32:1e:0a:e9:7c:23:30:39:e8:c8:00: 62:8a:57:e5:22:70:aa:09:1a:fd:5a:47:a0:bd:e6: 00:fa:e3:19:85:c5:59:6a:42:35:35:3f:16:25:15: 49:c3:64:20:aa:f1:4a:2a:d3:a4:9d:05:7c:bf:ca: 36:f4:ca:af:cc:43:40:a5:cd:7c:82:05:77:e5:b8: 77:46:a2:61:16:9d:29:b8:38:5b:9a:50:49:a4:4d: 4d:7d:5d:0b:b2:76:15:45:60:4d:ee:25:81:ba:79: f0:86:75:fc:aa:c5:75:29:32:0c:c3:c7:fc:7b:b5: 65:de:f5:d6:08:cb:0b:21:25:0f:83:cb:6c:5c:bb: 5a:5a:ce:5a:06:1d:8b:80:d1:c8:e2:d0:29:ff:45: 97:f4:ff:20:8f:d1:54:6b:ab:ef:b2:37:ac:9e:b9: 66:c9:66:58:f1:91:4f:4b:aa:82:45:b6:8c:23:a1: 7e:cb:27:6f:2e:13:1e:a7:d4:61:06:82:a6:f1:b3: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:43:60:8D:36:6B:8E:45:24:C6:9A:E6:85:1E:8B:4B:94:2B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl X509v3 Authority Key Identifier: keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0e:5b:e9:93:1f:c3:78:e8:9b:2a:9a:1d:9f:a2:39:40:c3: 2d:39:78:b6:5d:a0:ec:99:3d:7a:19:9b:6b:2d:b5:01:e1:b0: b2:02:2a:57:b0:13:be:98:a1:a0:59:a5:ea:34:96:80:60:56: 80:ee:6f:a2:ca:0d:a8:f4:21:77:15:f9:1f:6f:20:89:d4:a2: 17:19:b8:06:33:5b:d7:a8:39:bb:b9:e8:f6:0a:8a:02:fd:7d: 67:dc:c1:02:ba:22:9d:c1:a1:40:6b:57:05:b5:63:e3:c4:72: 4e:43:cb:9e:27:bf:e2:84:eb:3c:13:e5:42:3b:14:a8:14:52: f3:49:39:76:b5:9a:fe:d9:cb:24:23:18:88:b6:7f:c4:e1:52: 2a:1f:61:84:42:7d:1e:3a:d9:cb:de:9a:5b:37:6e:4f:02:cc: 2e:08:13:a2:0f:b1:ca:da:34:d3:6a:ab:14:fa:d6:da:e1:cb: 72:c0:28:8f:96:e0:92:36:e6:8b:38:3e:2c:de:bc:e2:1c:20: cc:9a:cd:1b:4d:27:24:93:61:d8:0e:5c:bf:c7:f0:00:8f:80: b1:09:60:6a:bb:e7:f1:7f:30:ab:37:f9:8a:41:54:83:2c:3d: bf:2d:5b:d3:c9:9f:e1:e0:6b:7d:dc:1b:21:fe:2c:13:52:ec: 7d:55:a9:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DOgTcxhfm2CqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhmMTYzNWUtNTg3MS00MTA4LWI3MjYtZTk5YTA5MjU4 ZTMxMB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk YTQwMmJiYmItOWRkYi00ZmI3LWE2OTUtNTU5ZmFlZGVlNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr+q9umJD7Ni8x2qjyTptI+6EHp7dVAV4fQH kZSxIhOozGDV4XYge4Lg82BHSL9tyFko7FCftitg3q4lKZ20Mh4K6XwjMDnoyABi ilflInCqCRr9WkegveYA+uMZhcVZakI1NT8WJRVJw2QgqvFKKtOknQV8v8o29Mqv zENApc18ggV35bh3RqJhFp0puDhbmlBJpE1NfV0LsnYVRWBN7iWBunnwhnX8qsV1 KTIMw8f8e7Vl3vXWCMsLISUPg8tsXLtaWs5aBh2LgNHI4tAp/0WX9P8gj9FUa6vv sjesnrlmyWZY8ZFPS6qCRbaMI6F+yydvLhMep9RhBoKm8bPbCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDYSQ2CNNmuORSTGmuaFHotLlCsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OGYx NjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDkyNThlMzEvNjhmMTYzNWUtNTg3MS00 MTA4LWI3MjYtZTk5YTA5MjU4ZTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjhmMTYzNWUtNTg3MS00MTA4LWI3 MjYtZTk5YTA5MjU4ZTMxLzY4ZjE2MzVlLTU4NzEtNDEwOC1iNzI2LWU5OWEwOTI1 OGUzMS5jcmwwHwYDVR0jBBgwFoAUzcWfLdgpN6pPgo7UEHtu//TKCMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlh MDkyNThlMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByDlvpkx/DeOibKpodn6I5 QMMtOXi2XaDsmT16GZtrLbUB4bCyAipXsBO+mKGgWaXqNJaAYFaA7m+iyg2o9CF3 FfkfbyCJ1KIXGbgGM1vXqDm7uej2CooC/X1n3MECuiKdwaFAa1cFtWPjxHJOQ8ue J7/ihOs8E+VCOxSoFFLzSTl2tZr+2cskIxiItn/E4VIqH2GEQn0eOtnL3ppbN25P AswuCBOiD7HK2jTTaqsU+tba4ctywCiPluCSNuaLOD4s3rziHCDMms0bTSckk2HY Dly/x/AAj4CxCWBqu+fxfzCrN/mKQVSDLD2/LVvTyZ/h4Gt93Bsh/iwTUux9VanE -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:04 2026 by rpki-client