$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft File: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft (raw, json) Hash identifier: LihS1IqizvDQXwKfBcAYuM+Lgw9W6Bi7Y3lyvtjtkIY= Subject key identifier: 67:EE:77:C1:1C:2C:55:C6:D6:03:F9:B4:1B:C4:56:8F:60:84:F1:9E Authority key identifier: A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A Certificate issuer: /CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Certificate serial: 010D0C9F4328584D05EDF6D9B6D428C5A39F6A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft Manifest number: 010D0C9F4328584073A850B44D23714C2A8A2C1B Signing time: Sun 01 Mar 2026 11:00:04 +0000 Manifest this update: Sun 01 Mar 2026 11:00:04 +0000 Manifest next update: Wed 04 Mar 2026 11:00:00 +0000 Files and hashes: 1: 41f5ef31-c5d9-309f-bb2c-fd3013b7f8c3.roa (hash: 3XIZ8StZ1NS6EhuseEf8K7b+nF6uMZhZUHTSmfw0pU0=) 2: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl (hash: +i9PfEaPfPFNuTQPa0UW/qYoWolI3OK+YXMNThp0mCU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:ed:f6:d9:b6:d4:28:c5:a3:9f:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Validity Not Before: Mar 1 11:00:04 2026 GMT Not After : Mar 4 11:00:00 2026 GMT Subject: CN=bd92653d-f6a1-45d6-931b-99eb99fcc1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:ab:43:f3:49:63:9d:1b:9c:59:0a:c1:63: ff:b5:0c:7e:dc:22:6b:11:3c:b0:3f:57:99:6d:12: 00:40:76:e7:5d:32:a3:1c:5f:2d:85:eb:26:bd:ac: e6:41:62:c6:67:1b:b3:25:4d:22:59:cd:ee:c4:f8: f0:0a:18:f3:c0:a6:02:17:be:ed:11:51:e5:2c:52: 4c:1f:ad:17:34:a0:80:d7:9c:b0:49:2e:39:fb:37: a0:a8:68:3c:58:37:14:a9:4a:2b:72:27:19:7d:0e: 20:48:88:3a:72:63:96:99:70:65:42:ed:d6:79:f0: 41:c2:02:a8:fa:f1:85:9a:ae:43:bb:36:e9:ee:8c: e8:b3:17:d1:59:cc:ec:bd:ac:cb:de:db:b5:5a:9c: 3d:5f:82:2e:a4:3d:f3:97:15:3c:d1:4d:93:fe:24: 70:04:b6:f7:03:e4:95:7a:d3:f5:7d:7d:15:6c:70: 8a:e6:2a:66:37:ad:f2:5d:b7:c9:cf:11:cc:6d:7f: 6a:80:53:9d:27:75:95:a3:9d:35:47:ff:cb:30:29: 7c:77:6c:04:fb:cd:92:7b:4c:18:a9:4b:64:07:af: 85:4d:84:82:82:6f:5b:0b:60:0b:5b:03:ee:95:5e: 73:c2:ca:70:e5:e6:f0:0d:ba:35:8e:90:75:d3:16: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EE:77:C1:1C:2C:55:C6:D6:03:F9:B4:1B:C4:56:8F:60:84:F1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl X509v3 Authority Key Identifier: keyid:A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e1:d2:41:73:87:96:65:eb:33:78:1b:18:af:74:f7:af:8a: 41:59:a7:be:3e:9f:8a:8b:8b:6a:7e:3f:eb:70:76:4e:45:5d: e8:c5:53:0a:50:4d:2a:81:7c:6a:c5:41:63:c7:4b:83:ae:5f: 91:77:d8:74:4d:3e:c7:55:b0:3d:25:71:8f:fd:53:80:49:06: 42:42:20:54:bc:35:67:82:67:a1:68:b7:fb:6b:99:d5:10:0a: 5a:fb:40:ef:ec:b1:fc:5f:13:b0:45:b2:69:ee:4a:2e:1e:30: 4f:9d:d1:fb:dd:0c:c6:9e:c1:c5:85:47:6c:82:37:0e:ca:57: 5e:24:50:94:5f:d4:7c:6e:af:69:88:3a:4d:28:2e:eb:e4:b6: 95:29:57:e7:91:f3:f9:93:f7:11:f4:45:62:94:20:fa:84:f5: e0:2f:0a:11:e9:02:c0:67:0d:a5:71:85:44:56:e1:fd:5b:60: 0a:1f:83:4d:8f:1a:e9:40:3d:55:aa:09:ac:8b:e6:e6:32:2b: c2:3f:a4:73:1e:be:03:72:c5:d1:c1:62:d6:40:08:89:17:ab: 92:2f:1c:1c:1c:62:bf:6b:0d:76:c3:b4:ce:79:c5:14:86:84: 93:0c:ed:bb:a4:96:65:23:84:02:b9:3e:d6:2f:8c:c7:0e:d7: 7a:27:7a:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0F7fbZttQoxaOfakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYwN2Y4YTctMWE5NS00MTI3LWFhNTQtYTVjODViY2Nh OWI4MB4XDTI2MDMwMTExMDAwNFoXDTI2MDMwNDExMDAwMFowLzEtMCsGA1UEAxMk YmQ5MjY1M2QtZjZhMS00NWQ2LTkzMWItOTllYjk5ZmNjMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF2rQ/NJY50bnFkKwWP/tQx+3CJrETywP1eZ bRIAQHbnXTKjHF8thesmvazmQWLGZxuzJU0iWc3uxPjwChjzwKYCF77tEVHlLFJM H60XNKCA15ywSS45+zegqGg8WDcUqUorcicZfQ4gSIg6cmOWmXBlQu3WefBBwgKo +vGFmq5Duzbp7ozosxfRWczsvazL3tu1Wpw9X4IupD3zlxU80U2T/iRwBLb3A+SV etP1fX0VbHCK5ipmN63yXbfJzxHMbX9qgFOdJ3WVo501R//LMCl8d2wE+82Se0wY qUtkB6+FTYSCgm9bC2ALWwPulV5zwspw5ebwDbo1jpB10xa2vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGfud8EcLFXG1gP5tBvEVo9ghPGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3 ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4NWJjY2E5YjgvYmYwN2Y4YTctMWE5NS00 MTI3LWFhNTQtYTVjODViY2NhOWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYwN2Y4YTctMWE5NS00MTI3LWFh NTQtYTVjODViY2NhOWI4L2JmMDdmOGE3LTFhOTUtNDEyNy1hYTU0LWE1Yzg1YmNj YTliOC5jcmwwHwYDVR0jBBgwFoAUqHy8AqBI1Hrp2o02RvUk8g1lKWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4 NWJjY2E5YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO4dJBc4eWZeszeBsYr3T3 r4pBWae+Pp+Ki4tqfj/rcHZORV3oxVMKUE0qgXxqxUFjx0uDrl+Rd9h0TT7HVbA9 JXGP/VOASQZCQiBUvDVngmehaLf7a5nVEApa+0Dv7LH8XxOwRbJp7kouHjBPndH7 3QzGnsHFhUdsgjcOyldeJFCUX9R8bq9piDpNKC7r5LaVKVfnkfP5k/cR9EVilCD6 hPXgLwoR6QLAZw2lcYVEVuH9W2AKH4NNjxrpQD1Vqgmsi+bmMivCP6RzHr4DcsXR wWLWQAiJF6uSLxwcHGK/aw12w7TOecUUhoSTDO27pJZlI4QCuT7WL4zHDtd6J3om -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:41 2026 by rpki-client