$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: 4plG8s4j7PUO3l2wNpy+CQn1nqy2OaLkgPiBZ0BydrE= Subject key identifier: 8D:FF:2E:94:54:AF:0E:FE:40:37:49:18:0D:86:36:79:5F:4A:97:F0 Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584D0682EBE73CDAB06586167500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F04444 Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Wed 04 Mar 2026 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: 4+nno3vLX2++EbYzTL8vvXrVIeqNG/xLKDiKyDGWT2k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:eb:e7:3c:da:b0:65:86:16:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 4 16:00:00 2026 GMT Subject: CN=a3cded2a-bdba-445f-a550-31d4185dea98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:63:96:04:53:29:12:62:18:18:87:d5:eb: f5:3e:b8:58:0c:bb:2a:2b:52:d6:05:75:13:84:56: 79:3f:d2:c0:5e:25:3d:23:b1:d4:9e:80:67:d3:83: 98:f2:44:b4:5d:ab:49:eb:0d:08:44:f7:44:8a:70: 19:94:88:71:0a:3c:7c:ce:01:2f:42:6a:88:88:b6: e2:3c:1d:24:29:d7:a4:aa:f5:41:98:f3:dc:5f:38: 19:08:51:e0:2a:d4:6f:68:43:52:6b:f4:3f:73:d6: 64:d4:3e:bc:df:0c:e3:7b:60:11:70:eb:a2:2a:66: 07:0c:0b:1c:85:86:b1:8c:6b:e8:db:7a:d8:0a:de: 31:1f:17:66:4d:a0:83:89:43:dd:6e:f9:90:14:96: ef:61:8c:af:ec:de:96:c8:7e:40:d6:5d:62:bf:42: c8:72:ac:a5:f8:25:96:c5:95:4e:b7:e2:41:02:fc: 31:16:11:7f:f0:2d:af:5b:14:73:63:c7:c5:ae:35: 6d:c7:2c:fc:2e:23:a8:5d:cd:99:23:b8:c4:12:37: 01:fb:b2:10:30:91:8f:37:66:76:ca:3e:15:86:33: fe:72:bb:73:36:5a:7b:57:09:f1:c4:3e:f4:01:93: be:25:2d:bf:db:8e:bd:1c:9f:bd:8a:a2:48:1a:cc: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FF:2E:94:54:AF:0E:FE:40:37:49:18:0D:86:36:79:5F:4A:97:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3d:49:d3:da:38:1f:9f:8d:36:e3:97:28:45:2f:04:48:9b: cb:07:9f:9c:46:bb:be:3a:4c:c6:b0:70:55:4a:c8:25:d8:8d: 61:49:20:ca:eb:0e:d0:13:8b:2d:cf:f8:3a:db:cf:83:c9:0a: e5:dd:70:cb:4e:75:2d:7a:19:31:1f:7a:16:1f:e4:e0:7b:df: e6:e1:94:ed:dd:df:e6:df:48:30:be:d9:a5:6e:ca:ec:10:8d: 00:2c:4e:47:41:d4:c3:e0:29:55:a1:f2:83:4c:20:0a:6a:5f: 7e:ec:c3:9b:65:3b:a6:db:4c:4c:b3:ec:e6:e1:6a:f4:08:58: bd:4c:df:45:00:15:63:0b:18:8b:95:11:fe:b4:64:86:97:aa: a4:d6:76:2a:17:e7:19:1a:93:d4:18:fb:7b:20:be:20:be:2e: 5b:01:f1:39:fb:7f:7f:e7:a9:14:06:c2:25:95:af:f6:5c:79: 79:66:d6:73:55:08:94:aa:be:47:5d:56:c1:25:f8:3e:dd:58: c8:6d:a3:c0:05:61:57:09:fa:bc:70:4f:51:3b:6e:37:9f:68: e4:a9:f0:58:45:c3:35:b5:9d:9b:f9:75:16:b4:36:2b:32:e3: dd:e6:10:74:2e:e5:88:e2:25:2d:9e:b5:51:cf:4b:f6:0d:0d: 45:96:e3:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GguvnPNqwZYYWdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwNDE2MDAwMFowLzEtMCsGA1UEAxMk YTNjZGVkMmEtYmRiYS00NDVmLWE1NTAtMzFkNDE4NWRlYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qNjlgRTKRJiGBiH1ev1PrhYDLsqK1LWBXUT hFZ5P9LAXiU9I7HUnoBn04OY8kS0XatJ6w0IRPdEinAZlIhxCjx8zgEvQmqIiLbi PB0kKdekqvVBmPPcXzgZCFHgKtRvaENSa/Q/c9Zk1D683wzje2ARcOuiKmYHDAsc hYaxjGvo23rYCt4xHxdmTaCDiUPdbvmQFJbvYYyv7N6WyH5A1l1iv0LIcqyl+CWW xZVOt+JBAvwxFhF/8C2vWxRzY8fFrjVtxyz8LiOoXc2ZI7jEEjcB+7IQMJGPN2Z2 yj4VhjP+crtzNlp7VwnxxD70AZO+JS2/2469HJ+9iqJIGswLRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI3/LpRUrw7+QDdJGA2GNnlfSpfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkPUnT2jgfn40245coRS8E SJvLB5+cRru+OkzGsHBVSsgl2I1hSSDK6w7QE4stz/g628+DyQrl3XDLTnUtehkx H3oWH+Tge9/m4ZTt3d/m30gwvtmlbsrsEI0ALE5HQdTD4ClVofKDTCAKal9+7MOb ZTum20xMs+zm4Wr0CFi9TN9FABVjCxiLlRH+tGSGl6qk1nYqF+cZGpPUGPt7IL4g vi5bAfE5+39/56kUBsIlla/2XHl5ZtZzVQiUqr5HXVbBJfg+3VjIbaPABWFXCfq8 cE9RO243n2jkqfBYRcM1tZ2b+XUWtDYrMuPd5hB0LuWI4iUtnrVRz0v2DQ1FluOv -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:47 2026 by rpki-client