$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft File: 1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft (raw, json) Hash identifier: e1kyGU6h2hSaftKyKtzQAL/RATwyoz8dB1wlUhqGd7I= Subject key identifier: 4D:5B:F9:6D:0B:9F:D0:45:DB:A1:69:39:27:A5:4D:C7:E5:DB:59:7E Authority key identifier: 65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 Certificate issuer: /CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Certificate serial: 010D0C9F4328584D06DC3481450614D7CC41EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft Manifest number: 010D0C9F4328584073A824BE45AB4E8E05DC59DF Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: 1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl (hash: lUFxEl3LnnTWoBNQxyJV24O5GnohrounaCdFVX5P6IM=) 2: 4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa (hash: NjRFhsJgeslGgyUpRwNnoI69UvmCvOliSgRoPQzpP5s=) 3: 7f4fbbd3-aef0-38f7-bfb9-b69d88519630.roa (hash: QLNwe9oqq9i7y8HhxgXE2Kh0jdKgTZXY1dPyD20VdTE=) 4: f0ae1a02-4b48-37f2-8fba-9e1fff45177a.roa (hash: krWYvz4pjQMOdFEAzO3WSAxOTF152DNeTYBIwXIuD+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:34:81:45:06:14:d7:cc:41:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=86228758-bb99-4e52-8f58-8c6769fa5543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:c3:90:0e:51:87:38:7e:54:f7:7d:22:39: c8:c2:03:4d:72:89:c0:c3:f4:89:4c:1d:bb:88:6c: 0b:7c:0e:5a:60:0b:41:b5:67:6f:04:ad:34:15:7e: d6:7b:44:6a:9b:82:d9:f1:1d:84:40:1f:51:96:a7: 79:a2:41:bd:2c:a5:f9:66:d4:a3:7a:e7:85:cd:a8: 8d:51:c0:7d:cb:91:05:31:24:91:a9:bb:67:74:06: 0a:00:7c:7f:18:11:3f:d1:af:a8:19:37:a7:e1:75: 58:8f:40:da:12:d6:07:fe:6d:b4:3e:db:35:ca:2b: 9a:b6:dd:b4:05:c6:15:e8:a6:f8:5f:90:bb:19:97: 53:b8:80:cd:b9:41:80:6f:ba:04:65:6c:05:d2:d0: 80:15:73:b4:4b:60:d8:f5:00:69:82:f7:10:2d:8e: 0b:d7:58:de:ab:d2:54:98:7d:ad:29:4c:e6:30:b2: 66:d1:e6:d8:02:04:6a:7d:71:74:63:e4:15:8b:1f: bc:64:9d:2a:04:f6:01:85:39:46:4e:da:cc:85:a9: 29:80:60:19:c8:22:eb:32:82:27:f7:08:fd:26:f9: 71:c1:8c:d5:ae:85:7c:e3:9f:18:3a:c1:e8:41:4f: ea:6b:00:0f:2d:76:ed:e8:a3:d7:4a:10:ad:8a:9b: 10:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5B:F9:6D:0B:9F:D0:45:DB:A1:69:39:27:A5:4D:C7:E5:DB:59:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl X509v3 Authority Key Identifier: keyid:65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a0:01:1f:df:ee:d4:e9:0a:c7:80:8e:5f:da:c0:d7:db:57: a3:2e:94:59:8a:de:48:7c:55:ff:45:f2:93:30:a5:4f:a0:6d: 47:d3:2e:9d:96:ff:8c:8a:9d:e4:a6:1c:c1:4d:ea:5f:e5:79: d1:dc:e2:57:bc:9b:93:09:3d:ab:9f:33:4b:57:bc:11:34:5c: 2b:ec:f8:56:b0:25:c8:dc:ae:e2:63:d8:04:d0:7b:af:99:b8: 1e:13:cf:4b:b7:df:05:10:d6:b6:bd:31:f4:74:fd:a4:50:22: 7a:b6:27:f8:81:b9:d8:56:13:7e:ff:27:7b:19:f5:02:20:cf: 8b:ae:31:6b:44:5b:8a:b7:99:ea:86:88:58:53:38:1d:7f:c6: 36:e8:d8:6c:bd:4d:3b:46:fd:1f:f4:06:37:55:45:53:96:c0: 21:71:f3:50:ff:b3:8c:ab:0b:09:b6:2f:20:6c:7a:45:26:44: a4:9a:0f:0c:4b:c7:04:0e:31:30:94:84:60:7c:98:e1:e0:5e: 70:6e:d1:15:ad:5b:48:40:c1:6a:a4:92:4f:35:9e:ba:87:ef: e8:4f:60:7f:f5:a6:4f:bb:0d:69:4a:72:fb:67:5b:97:ac:11: 6d:97:84:b1:33:03:17:61:6e:f9:68:39:d3:d6:5c:8d:60:84: d0:ca:7d:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DSBRQYU18xB6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUzOGEwYWYtYzQ5Mi00NGY1LTg4YjEtYjRkZmRiMTE4 MGYyMB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk ODYyMjg3NTgtYmI5OS00ZTUyLThmNTgtOGM2NzY5ZmE1NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4vDkA5Rhzh+VPd9IjnIwgNNconAw/SJTB27 iGwLfA5aYAtBtWdvBK00FX7We0Rqm4LZ8R2EQB9Rlqd5okG9LKX5ZtSjeueFzaiN UcB9y5EFMSSRqbtndAYKAHx/GBE/0a+oGTen4XVYj0DaEtYH/m20Pts1yiuatt20 BcYV6Kb4X5C7GZdTuIDNuUGAb7oEZWwF0tCAFXO0S2DY9QBpgvcQLY4L11jeq9JU mH2tKUzmMLJm0ebYAgRqfXF0Y+QVix+8ZJ0qBPYBhTlGTtrMhakpgGAZyCLrMoIn 9wj9JvlxwYzVroV8458YOsHoQU/qawAPLXbt6KPXShCtipsQpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE1b+W0Ln9BF26FpOSelTcfl21l+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4 YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRmZGIxMTgwZjIvMWUzOGEwYWYtYzQ5Mi00 NGY1LTg4YjEtYjRkZmRiMTE4MGYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUzOGEwYWYtYzQ5Mi00NGY1LTg4 YjEtYjRkZmRiMTE4MGYyLzFlMzhhMGFmLWM0OTItNDRmNS04OGIxLWI0ZGZkYjEx ODBmMi5jcmwwHwYDVR0jBBgwFoAUZam6MMqpS/TdHDT16dXIWpSBG6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRm ZGIxMTgwZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEoAEf3+7U6QrHgI5f2sDX 21ejLpRZit5IfFX/RfKTMKVPoG1H0y6dlv+Mip3kphzBTepf5XnR3OJXvJuTCT2r nzNLV7wRNFwr7PhWsCXI3K7iY9gE0HuvmbgeE89Lt98FENa2vTH0dP2kUCJ6tif4 gbnYVhN+/yd7GfUCIM+LrjFrRFuKt5nqhohYUzgdf8Y26NhsvU07Rv0f9AY3VUVT lsAhcfNQ/7OMqwsJti8gbHpFJkSkmg8MS8cEDjEwlIRgfJjh4F5wbtEVrVtIQMFq pJJPNZ66h+/oT2B/9aZPuw1pSnL7Z1uXrBFtl4SxMwMXYW75aDnT1lyNYITQyn3U -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:49 2026 by rpki-client