$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft File: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft (raw, json) Hash identifier: 1UBPU0pnjM4JsfQwoLNAhbRh8TwDK/22QczHgXOsaG0= Subject key identifier: F0:41:86:9D:11:70:B0:35:3B:AB:02:2C:5B:B2:4F:40:47:EA:42:31 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584D06A0A59685CFC8ECD35ADD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft Manifest number: 010D0C9F4328584073A81EA95548D8D821DD44C6 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (hash: 8U2NcLvuc1Cnuh89nu11HaBnAutDBOcfrer0NRPGgcI=) 2: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl (hash: p8cxKJtR9I1PqqenCF//prTCt5lRmq1KbmsZVg70xXI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a5:96:85:cf:c8:ec:d3:5a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=0de878cb-3f37-4c94-8221-8eb58a6f3082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:fa:6e:ba:2d:d8:8e:a1:e4:ac:57:16:d8: 32:6c:e9:8a:7f:44:4d:84:dc:57:fd:fb:77:50:1c: 07:4f:35:6d:78:1b:3b:f0:82:26:44:eb:79:d0:73: ae:f9:c2:bd:c9:e0:3d:0c:12:d6:18:18:c4:58:b3: 47:84:98:70:fb:25:23:a8:3b:9b:5a:ba:df:d0:30: e7:1e:65:bd:38:67:4b:43:52:47:27:af:5b:7d:11: 6c:ca:a8:5e:2c:c3:61:bf:10:72:08:83:8b:22:2c: e4:c7:fe:d4:9b:7c:3d:3a:ef:28:2f:e2:b3:52:f3: e9:d5:0c:8d:1a:f6:ff:43:e2:5a:f4:ce:71:53:8c: e5:8d:42:68:0b:1d:36:1d:f0:91:1b:6c:94:90:98: 11:23:62:ff:58:6b:e9:5c:a0:df:71:5e:89:df:1d: aa:f9:c2:7c:01:50:b6:1a:fc:46:2e:a2:d4:12:44: e3:05:bb:8b:06:e5:87:d1:3d:c0:85:5e:0b:44:95: 86:15:53:b6:0a:8f:3c:be:ca:ec:27:61:7c:a7:52: 01:b6:44:dc:39:33:4e:21:8e:ac:fd:5d:32:0e:4c: f0:5e:10:39:ef:37:df:da:b6:3c:c2:40:6d:94:8c: 58:ae:9f:12:0c:5d:0d:9e:da:6e:2c:ec:4f:92:44: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:86:9D:11:70:B0:35:3B:AB:02:2C:5B:B2:4F:40:47:EA:42:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f2:98:76:1b:78:01:bd:75:c3:ce:12:a5:93:44:1e:31:18: c9:b0:0d:aa:84:3e:02:dc:2f:74:36:54:75:26:ef:de:a5:7f: 45:40:61:ec:80:07:29:cc:95:90:84:6f:8b:70:15:11:cf:29: eb:9a:f9:f0:98:8f:00:22:5e:ef:fe:4c:df:11:9c:ab:79:64: 4f:0c:15:c9:e9:60:ce:99:65:d9:dd:66:17:af:d5:b9:5e:a2: 61:b0:5b:51:ee:9f:11:eb:9d:a7:37:04:5a:b3:df:f7:49:bd: b4:7d:6c:56:95:15:d0:be:3d:30:e9:c8:7e:56:58:ab:51:22: 26:1e:63:71:c6:12:0f:92:ae:97:af:1e:43:75:7a:a5:e4:66: fe:99:5c:24:57:f7:50:66:8c:a6:7e:7a:df:11:16:bf:7e:cd: 25:1f:d7:a0:c2:cb:b4:eb:a2:30:64:a1:16:ad:04:ea:3c:42: 4f:22:06:a4:0c:09:1a:05:95:ff:76:f1:8c:df:f3:be:b2:56: 41:d8:82:58:72:24:3a:50:6a:3c:b3:b3:2f:5e:fc:26:30:27: 47:06:dc:2f:9c:28:73:0c:21:32:53:3e:9f:0f:40:a8:a4:2a: ff:4a:d0:cf:75:b7:d9:a5:a2:2c:82:ab:6e:c5:b2:43:73:89: 0f:84:b0:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKWWhc/I7NNa3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk MGRlODc4Y2ItM2YzNy00Yzk0LTgyMjEtOGViNThhNmYzMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2H6brot2I6h5KxXFtgybOmKf0RNhNxX/ft3 UBwHTzVteBs78IImROt50HOu+cK9yeA9DBLWGBjEWLNHhJhw+yUjqDubWrrf0DDn HmW9OGdLQ1JHJ69bfRFsyqheLMNhvxByCIOLIizkx/7Um3w9Ou8oL+KzUvPp1QyN Gvb/Q+Ja9M5xU4zljUJoCx02HfCRG2yUkJgRI2L/WGvpXKDfcV6J3x2q+cJ8AVC2 GvxGLqLUEkTjBbuLBuWH0T3AhV4LRJWGFVO2Co88vsrsJ2F8p1IBtkTcOTNOIY6s /V0yDkzwXhA57zff2rY8wkBtlIxYrp8SDF0NntpuLOxPkkRZVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPBBhp0RcLA1O6sCLFuyT0BH6kIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZGZmZmE1YzMtYjVjNy00 MzQ3LThkNTctOTZiYzMxMDJkZjhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD8ph2G3gBvXXDzhKlk0Qe MRjJsA2qhD4C3C90NlR1Ju/epX9FQGHsgAcpzJWQhG+LcBURzynrmvnwmI8AIl7v /kzfEZyreWRPDBXJ6WDOmWXZ3WYXr9W5XqJhsFtR7p8R652nNwRas9/3Sb20fWxW lRXQvj0w6ch+VlirUSImHmNxxhIPkq6Xrx5DdXql5Gb+mVwkV/dQZoymfnrfERa/ fs0lH9egwsu066IwZKEWrQTqPEJPIgakDAkaBZX/dvGM3/O+slZB2IJYciQ6UGo8 s7MvXvwmMCdHBtwvnChzDCEyUz6fD0CopCr/StDPdbfZpaIsgqtuxbJDc4kPhLAO -----END CERTIFICATE-----Generated at Sun Mar 1 20:42:28 2026 by rpki-client