$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft File: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft (raw, json) Hash identifier: f7Ue6badoUHl0Ro5ur0IXM/fvAKpRPpyQOnXA1vDHDw= Subject key identifier: 04:35:0F:C8:F3:78:F6:CA:3E:B1:98:2B:AC:88:23:14:22:E2:9E:4B Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F Certificate issuer: /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Certificate serial: 010D0C9F4328584D0559123E2D25D7327033EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft Manifest number: 010D0C9F4328584073A8419EE8E3E5AE11DFE59C Signing time: Sun 01 Mar 2026 06:00:03 +0000 Manifest this update: Sun 01 Mar 2026 06:00:03 +0000 Manifest next update: Wed 04 Mar 2026 06:00:00 +0000 Files and hashes: 1: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl (hash: o7O1JJenIBe4uMf0tqU0M+pUnOw3kTMyHSIhz66bdY8=) 2: 6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (hash: AT3FDShuKixRJO2lfHcu9GXcLd4iqPPZWwQSnuoBxtM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:59:12:3e:2d:25:d7:32:70:33:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Validity Not Before: Mar 1 06:00:03 2026 GMT Not After : Mar 4 06:00:00 2026 GMT Subject: CN=2001674d-9112-493e-a0ec-7dbb80dd6d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:70:7e:c6:ff:f8:eb:1d:16:ba:f2:f6:3a: af:58:a4:a1:84:04:5c:30:80:a1:1b:5b:ce:31:3f: 61:51:3c:d3:24:36:8e:11:ef:14:db:fb:26:d7:bc: 14:7d:65:6e:54:b5:37:af:6a:dd:76:6f:62:76:57: 7b:2f:7a:13:93:2a:c6:fc:4b:98:e3:61:1c:a3:af: 49:86:3f:8e:13:06:8b:6d:cb:97:79:ac:46:3f:ed: 49:0a:b4:ff:d9:7b:82:e2:9c:6d:58:8f:13:d3:42: 1d:3d:31:ed:55:e7:52:dc:3c:cf:03:cc:c7:7c:4e: 81:6a:49:a2:8b:74:e4:2b:ba:2a:91:d6:28:af:dc: 91:8e:69:b8:b2:15:70:a5:a5:43:1c:c2:a2:e5:57: 01:70:11:5b:fd:4b:7e:42:26:66:1b:3a:ec:ca:f5: a4:47:53:2f:e7:91:4e:df:e3:68:e0:fc:5a:48:c9: 38:c1:f9:d9:7d:94:ad:92:3a:4d:e2:7b:1d:96:eb: 75:43:fb:b4:91:58:bb:91:ad:df:85:9e:ac:b7:74: b9:95:6d:e8:5f:dd:19:e3:81:32:ed:1c:5c:a5:31: 3a:ba:d9:ae:f5:10:4a:ef:7e:ad:55:b1:df:c2:9f: 88:7f:2d:0b:d2:31:77:7e:5c:4f:47:96:61:58:18: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:0F:C8:F3:78:F6:CA:3E:B1:98:2B:AC:88:23:14:22:E2:9E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl X509v3 Authority Key Identifier: keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ec:a1:92:da:6d:b5:1e:3c:80:b5:bb:f4:1b:8d:08:62:d0: 68:30:60:2c:34:b5:6f:5a:d7:a9:6a:13:97:7e:e2:54:54:8f: 26:17:8f:53:4b:46:64:42:f6:7f:fa:79:e2:ac:66:40:63:09: 7a:c1:8b:f5:36:a0:05:26:7c:58:35:ed:25:b6:d0:68:af:c2: 6b:1d:a4:6e:50:0b:8f:9f:0a:0c:5b:cc:74:2a:6d:37:7a:1a: 79:a8:7d:0f:fd:9a:8f:25:92:c7:4d:ef:36:6a:00:1b:39:13: 0c:37:be:2f:fd:db:be:2e:99:80:59:dc:d7:49:7b:17:53:91: f0:35:f8:a8:07:79:d3:ab:eb:54:49:7e:1c:5e:10:d3:97:58: 3f:69:30:f5:1a:42:7e:18:87:a7:ce:7f:5e:8a:98:64:a5:ed: 3c:3b:52:14:f6:03:04:5b:59:57:c8:6a:4a:39:7e:86:d1:ca: 55:ed:de:d9:ab:b1:90:02:e9:10:32:7e:5c:b4:97:a8:ce:f9: cd:2f:09:63:b7:ff:81:34:be:55:c0:ec:b8:00:d3:2c:bc:4a: 20:fa:a3:4b:5d:4b:ab:72:57:c4:5a:5c:30:8f:e8:47:3e:03: 63:b0:51:44:8c:e3:67:c1:60:f6:fc:fc:6f:fb:c8:c1:33:f5: 4e:b5:45:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FWRI+LSXXMnAz6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk MmIzMB4XDTI2MDMwMTA2MDAwM1oXDTI2MDMwNDA2MDAwMFowLzEtMCsGA1UEAxMk MjAwMTY3NGQtOTExMi00OTNlLWEwZWMtN2RiYjgwZGQ2ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYxwfsb/+OsdFrry9jqvWKShhARcMIChG1vO MT9hUTzTJDaOEe8U2/sm17wUfWVuVLU3r2rddm9idld7L3oTkyrG/EuY42Eco69J hj+OEwaLbcuXeaxGP+1JCrT/2XuC4pxtWI8T00IdPTHtVedS3DzPA8zHfE6Bakmi i3TkK7oqkdYor9yRjmm4shVwpaVDHMKi5VcBcBFb/Ut+QiZmGzrsyvWkR1Mv55FO 3+No4PxaSMk4wfnZfZStkjpN4nsdlut1Q/u0kVi7ka3fhZ6st3S5lW3oX90Z44Ey 7RxcpTE6utmu9RBK736tVbHfwp+Ify0L0jF3flxPR5ZhWBid/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAQ1D8jzePbKPrGYK6yIIxQi4p5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvMGRlMzdkMTctMjY2NC00 Yzg1LTliZTQtYTM1YmFmMGZkMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD7KGS2m21HjyAtbv0G40I YtBoMGAsNLVvWtepahOXfuJUVI8mF49TS0ZkQvZ/+nnirGZAYwl6wYv1NqAFJnxY Ne0lttBor8JrHaRuUAuPnwoMW8x0Km03ehp5qH0P/ZqPJZLHTe82agAbORMMN74v /du+LpmAWdzXSXsXU5HwNfioB3nTq+tUSX4cXhDTl1g/aTD1GkJ+GIenzn9eiphk pe08O1IU9gMEW1lXyGpKOX6G0cpV7d7Zq7GQAukQMn5ctJeozvnNLwljt/+BNL5V wOy4ANMsvEog+qNLXUurclfEWlwwj+hHPgNjsFFEjONnwWD2/Pxv+8jBM/VOtUUX -----END CERTIFICATE-----Generated at Sun Mar 1 19:01:36 2026 by rpki-client