$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.mft File: a7fb5a33-e5d6-4994-a771-5194ace5e014.mft (raw, json) Hash identifier: vtNT+AUSK9cVML74FmuxpGFHm41wmEjJWmKaksMQaxo= Subject key identifier: 14:90:77:1E:6A:94:7E:01:16:19:E2:1A:B3:62:5E:6C:F5:36:C4:78 Authority key identifier: 51:5C:3D:B9:65:61:78:8D:67:8F:02:47:95:A5:44:0D:0C:3A:81:DD Certificate issuer: /CN=a7fb5a33-e5d6-4994-a771-5194ace5e014 Certificate serial: 010D0C9F4328584D094D8D41F822752684250A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.mft Manifest number: 010D0C9F4328584779929A5F6704ACA7B4BFD347 Signing time: Mon 02 Mar 2026 16:00:03 +0000 Manifest this update: Mon 02 Mar 2026 16:00:03 +0000 Manifest next update: Thu 05 Mar 2026 16:00:00 +0000 Files and hashes: 1: 0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa (hash: Q9R505tf1KeRiK8U4m5rr6c0TIiBVX9uuP1YT+2tlEE=) 2: a7fb5a33-e5d6-4994-a771-5194ace5e014.crl (hash: buyGGNX9bldHJXBiW2Xt0J4rFk4rZU23vcbT+WwkiKw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:4d:8d:41:f8:22:75:26:84:25:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fb5a33-e5d6-4994-a771-5194ace5e014 Validity Not Before: Mar 2 16:00:03 2026 GMT Not After : Mar 5 16:00:00 2026 GMT Subject: CN=819df0e8-4656-4fea-9e26-c50527a09c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:3c:c0:11:59:29:b7:b4:a5:b6:03:62:de: f8:94:f4:f1:eb:0f:3b:b3:2a:cb:f6:0d:e8:9e:5c: a6:32:5e:51:e8:60:c7:c3:1d:32:b0:7f:82:e9:de: 4b:54:eb:5f:66:12:f6:8f:54:62:22:87:e0:78:3f: 20:25:a1:e1:32:b5:5a:49:77:13:3f:bc:41:e6:f9: 93:d1:cf:53:0a:7e:5b:39:fb:92:fa:1f:a2:30:3d: f4:cd:94:a6:57:8d:66:5f:31:55:6b:77:5c:55:7d: 6d:79:12:44:8d:85:67:a9:35:10:24:c7:17:be:23: 14:72:6f:2c:7a:85:66:a5:bf:20:8d:0a:59:8f:31: 0a:1b:60:93:7c:b1:26:d2:ac:9e:13:23:3b:1b:e9: 37:a9:5b:86:5e:89:51:b5:b7:c8:33:54:b0:f6:60: a2:0a:67:ef:d6:84:80:5f:92:aa:9e:cc:bd:61:a7: 6b:27:29:19:c1:1c:82:2a:44:33:53:57:1d:65:53: 4e:5b:6a:9f:e8:f7:f3:20:d8:84:bc:d3:97:db:8a: 62:6b:6c:8f:de:f5:25:cc:ab:e5:dd:c6:12:95:dd: b0:99:06:c5:9b:83:1f:a2:42:d2:3b:43:b9:ee:1f: c3:95:65:5e:83:67:fa:32:0d:e9:1f:64:29:b7:d0: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:90:77:1E:6A:94:7E:01:16:19:E2:1A:B3:62:5E:6C:F5:36:C4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.crl X509v3 Authority Key Identifier: keyid:51:5C:3D:B9:65:61:78:8D:67:8F:02:47:95:A5:44:0D:0C:3A:81:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:22:f9:b6:a0:59:11:46:6f:64:7a:c0:62:52:bb:12:88:f8: d2:81:f5:ea:ff:84:99:2b:9f:fe:4e:62:dc:18:2f:73:94:70: 73:be:c2:1a:91:64:44:eb:f3:af:b3:cf:3a:51:d8:4c:9c:00: e0:f8:65:df:99:e3:13:c0:df:8c:31:c3:d1:67:5a:3e:ad:e4: 2d:36:b8:39:77:40:f2:16:40:91:c6:f5:f6:fc:07:96:51:15: dc:11:41:cc:82:3c:f2:d4:e3:07:be:0d:3b:05:7e:85:df:43: 52:1d:90:7a:fd:f4:e5:26:92:74:b5:ef:5f:4a:2c:44:38:84: c2:0e:bb:ce:47:cd:be:2d:78:30:36:c1:d2:86:57:e5:28:71: 50:e8:0a:f7:27:71:85:a9:10:d7:29:d2:2b:1f:2a:62:84:ae: 31:64:27:6b:c4:7d:4f:f3:1a:82:a8:8f:c1:ab:00:75:e4:ca: 9f:22:9d:2a:ae:f0:6e:75:cc:1c:c6:5e:62:fc:b6:4c:f6:da: 92:84:6d:19:f5:dd:f6:c5:04:79:6f:32:ab:ba:b5:b9:0b:2f: fb:f2:8e:d1:14:20:b5:ba:65:a6:89:80:3a:5d:08:dc:dd:97: d7:d6:1a:8a:f5:39:47:2c:f1:08:bf:07:ba:86:55:ba:23:48: f5:29:a4:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0JTY1B+CJ1JoQlCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdmYjVhMzMtZTVkNi00OTk0LWE3NzEtNTE5NGFjZTVl MDE0MB4XDTI2MDMwMjE2MDAwM1oXDTI2MDMwNTE2MDAwMFowLzEtMCsGA1UEAxMk ODE5ZGYwZTgtNDY1Ni00ZmVhLTllMjYtYzUwNTI3YTA5YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPQ8wBFZKbe0pbYDYt74lPTx6w87syrL9g3o nlymMl5R6GDHwx0ysH+C6d5LVOtfZhL2j1RiIofgeD8gJaHhMrVaSXcTP7xB5vmT 0c9TCn5bOfuS+h+iMD30zZSmV41mXzFVa3dcVX1teRJEjYVnqTUQJMcXviMUcm8s eoVmpb8gjQpZjzEKG2CTfLEm0qyeEyM7G+k3qVuGXolRtbfIM1Sw9mCiCmfv1oSA X5Kqnsy9YadrJykZwRyCKkQzU1cdZVNOW2qf6PfzINiEvNOX24pia2yP3vUlzKvl 3cYSld2wmQbFm4MfokLSO0O57h/DlWVeg2f6Mg3pH2Qpt9DsNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSQdx5qlH4BFhniGrNiXmz1NsR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Zi NWEzMy1lNWQ2LTQ5OTQtYTc3MS01MTk0YWNlNWUwMTQvYTdmYjVhMzMtZTVkNi00 OTk0LWE3NzEtNTE5NGFjZTVlMDE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmYjVhMzMtZTVkNi00OTk0LWE3 NzEtNTE5NGFjZTVlMDE0L2E3ZmI1YTMzLWU1ZDYtNDk5NC1hNzcxLTUxOTRhY2U1 ZTAxNC5jcmwwHwYDVR0jBBgwFoAUUVw9uWVheI1njwJHlaVEDQw6gd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2ZiNWEzMy1lNWQ2LTQ5OTQtYTc3MS01MTk0 YWNlNWUwMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDSIvm2oFkRRm9kesBiUrsS iPjSgfXq/4SZK5/+TmLcGC9zlHBzvsIakWRE6/Ovs886UdhMnADg+GXfmeMTwN+M McPRZ1o+reQtNrg5d0DyFkCRxvX2/AeWURXcEUHMgjzy1OMHvg07BX6F30NSHZB6 /fTlJpJ0te9fSixEOITCDrvOR82+LXgwNsHShlflKHFQ6Ar3J3GFqRDXKdIrHypi hK4xZCdrxH1P8xqCqI/BqwB15MqfIp0qrvBudcwcxl5i/LZM9tqShG0Z9d32xQR5 bzKrurW5Cy/78o7RFCC1umWmiYA6XQjc3ZfX1hqK9TlHLPEIvwe6hlW6I0j1KaQ+ -----END CERTIFICATE-----Generated at Tue Mar 3 00:41:42 2026 by rpki-client