$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: hOstnw9hkJ/q36Kz0EcFyucdYZoABuNhHcOYH2Z6zq8= Subject key identifier: 4B:7C:9C:22:4A:DD:59:68:44:45:36:0C:2B:12:81:B6:37:D9:DC:99 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584D04A6733DBC58EAE22CF5D0F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACDEB Signing time: Sun 01 Mar 2026 00:00:08 +0000 Manifest this update: Sun 01 Mar 2026 00:00:08 +0000 Manifest next update: Wed 04 Mar 2026 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: xAh8XgKl8MpP6NFHVCLdDgWfCqRim2EFbRWsdlps1ak=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: Nkaqhi6a2ty1RxWNciKzN4T0yTni0094RZhyatdY/v8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:a6:73:3d:bc:58:ea:e2:2c:f5:d0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Mar 1 00:00:08 2026 GMT Not After : Mar 4 00:00:00 2026 GMT Subject: CN=17d228b9-e704-4562-9b55-468ce3eacaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:b6:44:b7:c7:7b:5c:83:fb:f8:43:cf:24: f0:e1:8f:04:8e:13:34:2d:e6:5f:3d:f8:a2:ca:b4: e8:47:d0:a1:fa:a2:91:b0:30:1f:ee:11:9a:80:5f: 91:85:62:33:b1:b8:6c:d7:c3:e9:d1:69:85:8a:2f: 4c:84:8e:30:e1:b0:17:9b:b9:0f:68:1c:02:c1:3c: 42:42:46:8f:1d:61:df:72:c7:15:9c:b3:c7:aa:b7: 8d:c8:f9:e2:39:40:19:0f:07:0f:fa:66:c4:c7:b1: 41:71:b6:fe:7d:42:b6:8a:01:e9:4a:a4:71:23:3d: 2f:aa:2a:5f:ac:2b:79:d0:ea:e9:ee:47:d8:b4:69: b1:1c:3b:37:ff:fc:40:d5:c9:8f:d1:16:4f:a0:85: 75:a3:e8:b0:85:eb:4c:81:a5:7b:39:e9:70:d3:c6: 38:ce:d0:18:3e:1b:52:82:7d:01:48:94:e0:40:f3: 4a:a8:65:a7:ad:b7:6c:e6:5f:ea:a6:f4:28:49:a9: 05:54:c2:a8:df:f5:6e:3e:93:9b:59:e7:84:64:74: 87:9a:25:4b:5f:fa:41:22:9d:38:33:92:93:b0:bb: 06:0b:a1:6d:48:d9:17:38:d3:10:e4:8f:cc:b8:b3: 87:10:c5:6b:27:02:87:a0:19:67:c4:9e:bb:a2:41: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:9C:22:4A:DD:59:68:44:45:36:0C:2B:12:81:B6:37:D9:DC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:47:fa:d3:81:13:da:c1:7c:b7:52:36:41:3e:a6:d9:f7:c5: f7:6d:d8:d0:33:10:d8:dd:20:cf:a8:6b:3b:af:1b:d2:73:96: 7e:b1:c3:04:7f:01:1c:5a:d9:a0:ce:62:6d:6d:a1:d8:a4:40: fd:83:e2:ee:8e:ac:8f:4c:79:fb:25:da:af:e5:f2:5e:51:57: 14:71:58:6f:7f:39:6b:2d:2c:2b:38:d5:fa:a1:6b:05:7e:63: 02:94:f5:59:e0:7e:d4:11:01:01:96:39:6c:39:e4:39:a6:71: 07:53:71:42:84:04:16:c6:be:94:73:b2:b6:16:3a:5f:90:50: 6a:81:78:e3:30:f9:ff:71:bc:a6:3f:b5:ce:3a:b2:db:4c:3e: ab:28:f5:16:52:3f:c7:9b:90:d0:ad:8f:32:31:84:78:3d:b1: d6:16:50:96:c0:9b:c7:4c:a1:ff:88:15:93:c6:5d:c5:04:1c: 3c:62:e4:1d:81:7a:b7:3d:26:dc:af:67:50:8e:60:d5:fa:6a: a1:cc:8e:cc:df:ff:91:53:3a:fc:a1:1d:d7:27:49:ab:c3:1a: f2:6a:ff:4e:cf:90:1a:a5:c6:9f:a9:88:47:3c:99:8d:8e:11: f7:80:fa:4e:cd:e1:e7:55:60:df:b2:0f:e7:ab:31:83:81:91: 98:21:61:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0EpnM9vFjq4iz10PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI2MDMwMTAwMDAwOFoXDTI2MDMwNDAwMDAwMFowLzEtMCsGA1UEAxMk MTdkMjI4YjktZTcwNC00NTYyLTliNTUtNDY4Y2UzZWFjYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z+2RLfHe1yD+/hDzyTw4Y8EjhM0LeZfPfii yrToR9Ch+qKRsDAf7hGagF+RhWIzsbhs18Pp0WmFii9MhI4w4bAXm7kPaBwCwTxC QkaPHWHfcscVnLPHqreNyPniOUAZDwcP+mbEx7FBcbb+fUK2igHpSqRxIz0vqipf rCt50Orp7kfYtGmxHDs3//xA1cmP0RZPoIV1o+iwhetMgaV7Oelw08Y4ztAYPhtS gn0BSJTgQPNKqGWnrbds5l/qpvQoSakFVMKo3/VuPpObWeeEZHSHmiVLX/pBIp04 M5KTsLsGC6FtSNkXONMQ5I/MuLOHEMVrJwKHoBlnxJ67okEUHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEt8nCJK3VloREU2DCsSgbY32dyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAR/rTgRPawXy3UjZBPqbZ 98X3bdjQMxDY3SDPqGs7rxvSc5Z+scMEfwEcWtmgzmJtbaHYpED9g+LujqyPTHn7 Jdqv5fJeUVcUcVhvfzlrLSwrONX6oWsFfmMClPVZ4H7UEQEBljlsOeQ5pnEHU3FC hAQWxr6Uc7K2FjpfkFBqgXjjMPn/cbymP7XOOrLbTD6rKPUWUj/Hm5DQrY8yMYR4 PbHWFlCWwJvHTKH/iBWTxl3FBBw8YuQdgXq3PSbcr2dQjmDV+mqhzI7M3/+RUzr8 oR3XJ0mrwxryav9Oz5AapcafqYhHPJmNjhH3gPpOzeHnVWDfsg/nqzGDgZGYIWET -----END CERTIFICATE-----Generated at Sun Mar 1 21:11:08 2026 by rpki-client