$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft File: 1d25e0e4-3256-419b-9e99-0f045d2a1125.mft (raw, json) Hash identifier: PU8KnkEc3JrhSoBIzSVPmssYkMP19q1a0T6J7O10bJI= Subject key identifier: F5:42:55:08:EE:FC:5E:4E:CC:E9:1A:A9:0E:57:0F:06:43:31:27:AD Authority key identifier: E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F Certificate issuer: /CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Certificate serial: 010D0C9F4328584D07CA6CB6007F31FE5FFC3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft Manifest number: 010D0C9F4328584073A83978E201F31829BF94BC Signing time: Mon 02 Mar 2026 03:00:04 +0000 Manifest this update: Mon 02 Mar 2026 03:00:04 +0000 Manifest next update: Wed 04 Mar 2026 03:00:00 +0000 Files and hashes: 1: 1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa (hash: GXb9fZ4Hqa05rPeoXcwb8E++VuDNQmC5T1BAvGHerQk=) 2: 1d25e0e4-3256-419b-9e99-0f045d2a1125.crl (hash: h1QDT4FceFelyDPeiqeslJk8OroCQXFOLGKzMutM6Kg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ca:6c:b6:00:7f:31:fe:5f:fc:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Validity Not Before: Mar 2 03:00:04 2026 GMT Not After : Mar 4 03:00:00 2026 GMT Subject: CN=08b4db2c-00d3-4506-94ea-7310474e2bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:36:51:c1:eb:b9:a4:e8:71:09:6b:fb:cf: df:22:93:4e:6f:49:0b:8c:d0:8a:24:71:00:d9:c6: d1:c8:25:fd:6f:e6:6e:e9:44:32:f6:7f:23:d4:6a: 74:50:ff:8a:a6:6a:12:8d:46:17:35:b4:f8:65:21: d1:14:ba:76:49:0c:63:b3:e4:bc:b6:ac:e4:ae:72: b8:a1:1e:d9:57:27:31:60:8c:87:c1:eb:9b:4d:70: 30:ec:5e:b9:af:fa:d8:94:4f:b1:1b:f4:92:a0:e1: f1:56:81:15:9a:83:1c:5c:7c:95:47:e5:4a:ed:20: 3a:a0:ae:e5:55:07:b6:da:c7:2e:30:d5:4c:85:38: 9a:db:65:93:7e:53:4a:33:b2:ae:c4:7b:bb:d9:d1: e4:cc:93:20:d1:f0:19:83:8e:bd:b4:c3:81:4b:c9: d4:1d:78:de:2f:70:d4:af:4b:10:7f:c3:87:38:fb: 1c:51:53:4b:69:60:3c:89:94:fb:40:b4:4e:6b:d8: 0b:81:18:8c:77:0e:c0:8b:8b:85:67:1d:ad:6c:dc: 85:1c:0d:c8:ba:42:41:6c:ed:50:3f:02:5d:b6:81: 68:d4:ca:84:66:fb:ff:41:93:1c:24:88:3f:72:01: 4f:df:7e:e5:01:c8:b7:3c:73:46:ce:11:10:35:3a: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:42:55:08:EE:FC:5E:4E:CC:E9:1A:A9:0E:57:0F:06:43:31:27:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl X509v3 Authority Key Identifier: keyid:E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:41:87:47:be:ff:3f:f4:72:45:40:0c:3f:01:6f:b3:a0:de: 1c:cb:ea:af:c3:31:6d:f0:6f:a3:b9:2a:b6:d5:09:05:cf:fa: 10:f4:ab:00:bd:43:cd:ad:35:7d:9e:1d:cd:5d:16:de:ec:70: 63:24:9c:3c:62:a8:f0:f3:0a:b2:69:d2:ef:b9:b7:14:00:06: f7:8b:78:36:01:aa:a8:36:f3:60:12:32:99:20:6b:5e:8e:12: 2c:b2:e9:90:a4:3c:f7:ce:6d:0e:f8:e7:51:95:3c:2e:9c:ef: 47:fa:19:f8:e5:ab:4a:ab:f6:11:63:65:d4:5b:a7:35:a6:04: db:ef:d4:f0:08:6e:bf:dc:e2:fc:3c:62:08:1e:89:36:0a:0a: 40:f0:67:8a:ef:26:38:62:f6:7d:dc:26:ca:25:96:3a:3d:47: 21:6f:de:b7:18:86:14:91:7b:2f:58:16:1a:33:62:48:a5:49: 5e:b3:b4:20:6f:8c:c3:21:ec:7f:3d:41:b6:a6:ff:02:09:de: e3:95:21:d7:2d:44:a5:ea:66:74:bf:5d:78:e3:d5:e9:21:45: df:b3:3e:6c:96:0b:04:1d:d4:3d:07:5f:ea:56:26:80:3c:fb: fc:74:7f:9c:33:cf:d3:b1:bf:09:84:c5:79:b5:3f:a1:45:02: d1:38:94:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Hymy2AH8x/l/8PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNWUwZTQtMzI1Ni00MTliLTllOTktMGYwNDVkMmEx MTI1MB4XDTI2MDMwMjAzMDAwNFoXDTI2MDMwNDAzMDAwMFowLzEtMCsGA1UEAxMk MDhiNGRiMmMtMDBkMy00NTA2LTk0ZWEtNzMxMDQ3NGUyYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQ2UcHruaTocQlr+8/fIpNOb0kLjNCKJHEA 2cbRyCX9b+Zu6UQy9n8j1Gp0UP+KpmoSjUYXNbT4ZSHRFLp2SQxjs+S8tqzkrnK4 oR7ZVycxYIyHweubTXAw7F65r/rYlE+xG/SSoOHxVoEVmoMcXHyVR+VK7SA6oK7l VQe22scuMNVMhTia22WTflNKM7KuxHu72dHkzJMg0fAZg469tMOBS8nUHXjeL3DU r0sQf8OHOPscUVNLaWA8iZT7QLROa9gLgRiMdw7Ai4uFZx2tbNyFHA3IukJBbO1Q PwJdtoFo1MqEZvv/QZMcJIg/cgFP337lAci3PHNGzhEQNTrcxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPVCVQju/F5OzOkaqQ5XDwZDMSetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1 ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0NWQyYTExMjUvMWQyNWUwZTQtMzI1Ni00 MTliLTllOTktMGYwNDVkMmExMTI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyNWUwZTQtMzI1Ni00MTliLTll OTktMGYwNDVkMmExMTI1LzFkMjVlMGU0LTMyNTYtNDE5Yi05ZTk5LTBmMDQ1ZDJh MTEyNS5jcmwwHwYDVR0jBBgwFoAU4EGDQJtT8Eom8gPK4HsRKVTnpJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0 NWQyYTExMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnQYdHvv8/9HJFQAw/AW+z oN4cy+qvwzFt8G+juSq21QkFz/oQ9KsAvUPNrTV9nh3NXRbe7HBjJJw8Yqjw8wqy adLvubcUAAb3i3g2AaqoNvNgEjKZIGtejhIssumQpDz3zm0O+OdRlTwunO9H+hn4 5atKq/YRY2XUW6c1pgTb79TwCG6/3OL8PGIIHok2CgpA8GeK7yY4YvZ93CbKJZY6 PUchb963GIYUkXsvWBYaM2JIpUles7Qgb4zDIex/PUG2pv8CCd7jlSHXLUSl6mZ0 v11449XpIUXfsz5slgsEHdQ9B1/qViaAPPv8dH+cM8/Tsb8JhMV5tT+hRQLROJRN -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:34 2026 by rpki-client