$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft File: 958d43d9-c341-46e7-b131-b154f01666e6.mft (raw, json) Hash identifier: pMZBs7O0yY7NgQBvyDsXYj/1U5pP5yAbSh9ey8O+PRw= Subject key identifier: FD:22:8B:45:E1:F8:20:A8:CE:56:06:8D:62:1A:8E:85:02:29:C2:A1 Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584D06BE6D4C2044E3F7F8996680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft Manifest number: 010D0C9F4328584BD94681EE9FBA36868078126F Signing time: Sun 01 Mar 2026 18:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:00:04 +0000 Manifest next update: Wed 04 Mar 2026 18:00:00 +0000 Files and hashes: 1: 958d43d9-c341-46e7-b131-b154f01666e6.crl (hash: g6tXAyHBpXWvEEWH8nfJQnE0J4HQdZANK1t+A9q8B20=) 2: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (hash: Z2bPOKjKi+k72vTTqSrWWhOBLkXbjtv47YHqY///Idk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:be:6d:4c:20:44:e3:f7:f8:99:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Mar 1 18:00:04 2026 GMT Not After : Mar 4 18:00:00 2026 GMT Subject: CN=fbd1a725-4845-4704-81c7-2bc219a5a0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:14:6c:c2:cf:fe:d2:eb:b3:0a:0a:e9:13: a0:21:a2:f8:29:d3:38:82:b8:ad:02:56:fc:b7:3d: c1:ff:1c:f8:8b:9e:91:d8:64:a3:b5:ea:83:77:8e: fd:6d:3c:9b:f1:04:cb:1f:e4:17:24:88:48:27:05: 41:44:0c:93:4d:13:56:16:fd:9b:c3:c3:f3:47:30: 9b:70:80:6e:b9:0e:cf:9c:9c:f8:28:a7:36:1b:1f: a0:e6:fc:cb:40:d1:7d:b8:a7:99:d2:87:00:f2:45: 16:11:62:f5:40:c8:cb:2b:90:5e:ca:c5:28:16:89: 09:94:c2:21:38:11:58:b7:d6:28:02:4e:59:15:34: 14:e0:76:6b:01:06:46:13:a5:09:a9:3b:40:72:13: ad:ee:36:7b:57:16:45:76:41:5f:9d:54:17:6b:d7: b2:02:7d:bd:d2:ff:d2:d9:2d:4c:8e:0f:7a:40:e1: 8b:6f:2f:bb:41:ac:e9:9c:e1:0f:0c:62:6f:08:eb: 14:41:bb:fe:f5:62:58:83:4e:e2:89:cc:55:12:31: a2:90:60:54:05:8b:02:6c:da:94:dd:3e:68:9c:39: e0:64:3b:09:3c:fa:d9:0e:51:37:32:26:7b:00:b0: 66:f7:80:f4:e3:ec:0d:2d:7e:88:07:1d:bd:f3:6c: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:22:8B:45:E1:F8:20:A8:CE:56:06:8D:62:1A:8E:85:02:29:C2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f8:ca:89:de:19:20:56:49:b3:e3:a3:74:36:53:d8:83:20: e3:11:21:dc:77:49:f9:32:b2:1b:3c:c0:30:fb:11:a3:6c:b9: 14:55:84:5d:5e:d5:5a:66:e8:db:e8:15:41:b6:56:54:13:72: 1a:bd:b5:f2:86:12:6b:2a:d5:45:00:1f:6b:71:b1:a8:09:13: 49:77:95:ee:f9:a0:43:6e:a7:32:70:cf:ee:c0:c3:94:07:ea: 01:e0:27:5c:d8:b9:26:b7:12:e8:d8:bb:f9:e2:ed:e4:e3:88: 6e:2b:d6:bf:1b:e2:75:cb:ca:9b:62:c4:32:c3:59:a2:04:97: 5e:5a:83:70:22:63:a6:2e:1b:c3:54:ea:4f:8a:4e:3f:3a:37: 19:33:2d:c1:29:ae:13:ee:5e:6d:ee:88:32:37:7b:e1:ac:9b: 00:c9:3d:b1:0b:e4:fe:3d:92:43:cc:29:a6:63:ec:3d:bf:6a: da:9a:5f:48:84:a5:d4:7e:41:5a:fa:a6:1d:ba:b3:a1:5e:40: b9:eb:6e:82:f3:64:3c:0b:d7:14:49:c3:de:75:c9:e0:c1:01: c8:04:3b:f6:16:7d:b4:ba:d8:19:e4:7d:3b:18:52:66:ac:e4: 59:68:de:df:97:59:72:24:ba:30:ee:ec:6a:b0:c0:bc:e8:66: c6:bc:73:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gvm1MIETj9/iZZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI2MDMwMTE4MDAwNFoXDTI2MDMwNDE4MDAwMFowLzEtMCsGA1UEAxMk ZmJkMWE3MjUtNDg0NS00NzA0LTgxYzctMmJjMjE5YTVhMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28UUbMLP/tLrswoK6ROgIaL4KdM4gritAlb8 tz3B/xz4i56R2GSjteqDd479bTyb8QTLH+QXJIhIJwVBRAyTTRNWFv2bw8PzRzCb cIBuuQ7PnJz4KKc2Gx+g5vzLQNF9uKeZ0ocA8kUWEWL1QMjLK5BeysUoFokJlMIh OBFYt9YoAk5ZFTQU4HZrAQZGE6UJqTtAchOt7jZ7VxZFdkFfnVQXa9eyAn290v/S 2S1Mjg96QOGLby+7QazpnOEPDGJvCOsUQbv+9WJYg07iicxVEjGikGBUBYsCbNqU 3T5onDngZDsJPPrZDlE3MiZ7ALBm94D04+wNLX6IBx2982xU7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP0ii0Xh+CCozlYGjWIajoUCKcKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTU4ZDQzZDktYzM0MS00 NmU3LWIxMzEtYjE1NGYwMTY2NmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT+MqJ3hkgVkmz46N0NlPY gyDjESHcd0n5MrIbPMAw+xGjbLkUVYRdXtVaZujb6BVBtlZUE3IavbXyhhJrKtVF AB9rcbGoCRNJd5Xu+aBDbqcycM/uwMOUB+oB4Cdc2LkmtxLo2Lv54u3k44huK9a/ G+J1y8qbYsQyw1miBJdeWoNwImOmLhvDVOpPik4/OjcZMy3BKa4T7l5t7ogyN3vh rJsAyT2xC+T+PZJDzCmmY+w9v2raml9IhKXUfkFa+qYdurOhXkC5626C82Q8C9cU ScPedcngwQHIBDv2Fn20utgZ5H07GFJmrORZaN7fl1lyJLow7uxqsMC86GbGvHMl -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:30 2026 by rpki-client