$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft File: 25b8413b-5254-4959-a9f1-d00f0fc1b819.mft (raw, json) Hash identifier: 0o+a5T4UwrtTICNzKBlAD0DUecX9eaY8dbqgVqOALG8= Subject key identifier: 23:65:88:74:E4:66:0A:39:E7:36:CF:60:63:0D:1E:DC:6B:1C:E0:3F Authority key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Certificate issuer: /CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Certificate serial: 010D0C9F4328584D07E841F906CB29B9BB9AA220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft Manifest number: 010D0C9F432858451D2581D3B48CABDB22FE8E29 Signing time: Mon 02 Mar 2026 04:00:09 +0000 Manifest this update: Mon 02 Mar 2026 04:00:09 +0000 Manifest next update: Thu 05 Mar 2026 04:00:00 +0000 Files and hashes: 1: 25b8413b-5254-4959-a9f1-d00f0fc1b819.crl (hash: HhN5oPor3EWbju/G4qEu9R2UFQV2njQZrrxVlrkVUDY=) 2: 81b30814-d14d-3119-b7df-c279bfdf03c6.roa (hash: oMw+FPv2qbyRLA8REs+U0eWCorATGFjwWpsjkpyN0v8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:e8:41:f9:06:cb:29:b9:bb:9a:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Validity Not Before: Mar 2 04:00:09 2026 GMT Not After : Mar 5 04:00:00 2026 GMT Subject: CN=b3c822b0-4096-45ac-bb09-9ef51e903a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:84:69:07:f4:10:80:05:51:f5:76:63:33: ea:db:60:97:1a:e7:e4:6d:0e:33:9a:e9:0b:7d:1f: b0:ae:81:45:0d:85:42:ff:83:cf:66:23:d4:1a:0c: 9b:85:bc:b1:05:58:a1:88:a4:b2:09:7b:0d:25:f4: 44:be:ec:00:55:b0:87:95:32:67:c7:75:d0:09:66: 5b:96:ab:04:19:f1:a6:70:04:8b:04:01:4d:ca:3a: fd:9c:b6:b6:64:7e:ac:e8:91:9e:22:76:99:f2:c5: 47:20:ba:be:4e:95:77:ba:c8:a6:60:e8:60:5c:7c: c5:56:b7:00:78:57:56:d8:60:86:06:7e:2a:19:12: 92:12:07:a4:30:8d:83:2c:d8:40:59:9f:f8:67:6d: 93:b3:1b:57:94:b8:8f:b2:8e:f6:9e:28:cf:54:f7: 7d:3b:d9:31:eb:9f:95:70:8f:6e:85:fc:b0:ec:e5: e2:f6:f0:e7:0b:53:2b:e0:11:21:4b:be:c3:72:26: 2b:d8:8b:a9:ef:e2:9c:6a:02:cd:c1:7c:55:5a:b4: e1:b4:d6:d3:2e:71:46:f8:3e:b7:23:b3:b5:81:f2: 5c:49:17:6b:b0:b1:a5:35:02:99:37:79:1c:ec:c2: b9:34:45:51:ed:0e:29:91:fd:b8:dd:05:02:5e:9b: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:65:88:74:E4:66:0A:39:E7:36:CF:60:63:0D:1E:DC:6B:1C:E0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl X509v3 Authority Key Identifier: keyid:9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d7:4c:91:50:e4:b9:d4:43:10:e1:14:52:4d:0c:cf:52:77: d0:e6:bb:c1:54:04:0f:ef:d2:70:54:12:9c:59:89:19:a2:a0: fb:85:69:3d:24:38:8a:27:7d:7b:38:2a:c3:5d:c9:4f:7c:2b: 47:04:f0:58:ee:dc:27:a4:ee:4e:e0:f4:43:02:ee:4d:ba:38: 30:be:e9:23:c1:c4:b0:ca:9e:55:ba:fb:62:fe:c1:2c:f9:5f: 5e:39:e3:8a:28:a5:2b:ea:de:15:f9:92:31:d5:25:05:cc:82: 39:88:f6:0f:b1:20:f5:d1:de:95:83:d7:12:69:55:0e:5c:db: 96:5c:c9:60:39:86:38:7d:e1:fe:d5:a9:61:8b:86:5b:a8:c2: 48:f3:7a:08:d4:b6:fa:c6:6a:a5:b1:63:22:51:3c:f7:1e:64: 07:4b:a1:f8:22:f1:ac:dd:76:5c:bd:e3:af:dc:cb:44:7d:75: f3:c8:47:5a:94:9d:ac:4f:06:12:05:9c:07:a1:05:cc:16:c5: 59:34:de:03:23:da:64:d5:4e:13:88:e8:14:be:d5:d8:0d:bc: 3d:43:af:31:2e:96:8b:1c:1b:f3:b7:a4:36:4e:f8:1c:8e:a7: 84:cf:7e:4c:24:b1:26:3f:3f:68:2c:f3:6a:dd:95:54:ad:82: f5:bc:e9:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0H6EH5BsspubuaoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViODQxM2ItNTI1NC00OTU5LWE5ZjEtZDAwZjBmYzFi ODE5MB4XDTI2MDMwMjA0MDAwOVoXDTI2MDMwNTA0MDAwMFowLzEtMCsGA1UEAxMk YjNjODIyYjAtNDA5Ni00NWFjLWJiMDktOWVmNTFlOTAzYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydeEaQf0EIAFUfV2YzPq22CXGufkbQ4zmukL fR+wroFFDYVC/4PPZiPUGgybhbyxBVihiKSyCXsNJfREvuwAVbCHlTJnx3XQCWZb lqsEGfGmcASLBAFNyjr9nLa2ZH6s6JGeInaZ8sVHILq+TpV3usimYOhgXHzFVrcA eFdW2GCGBn4qGRKSEgekMI2DLNhAWZ/4Z22TsxtXlLiPso72nijPVPd9O9kx65+V cI9uhfyw7OXi9vDnC1Mr4BEhS77DciYr2Iup7+KcagLNwXxVWrThtNbTLnFG+D63 I7O1gfJcSRdrsLGlNQKZN3kc7MK5NEVR7Q4pkf243QUCXpvqkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNliHTkZgo55zbPYGMNHtxrHOA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI4 NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZjMWI4MTkvMjViODQxM2ItNTI1NC00 OTU5LWE5ZjEtZDAwZjBmYzFiODE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViODQxM2ItNTI1NC00OTU5LWE5 ZjEtZDAwZjBmYzFiODE5LzI1Yjg0MTNiLTUyNTQtNDk1OS1hOWYxLWQwMGYwZmMx YjgxOS5jcmwwHwYDVR0jBBgwFoAUm8HV8p8M9XZ5Z99wJUpri2W5HlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBm MGZjMWI4MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW10yRUOS51EMQ4RRSTQzP UnfQ5rvBVAQP79JwVBKcWYkZoqD7hWk9JDiKJ317OCrDXclPfCtHBPBY7twnpO5O 4PRDAu5NujgwvukjwcSwyp5Vuvti/sEs+V9eOeOKKKUr6t4V+ZIx1SUFzII5iPYP sSD10d6Vg9cSaVUOXNuWXMlgOYY4feH+1alhi4ZbqMJI83oI1Lb6xmqlsWMiUTz3 HmQHS6H4IvGs3XZcveOv3MtEfXXzyEdalJ2sTwYSBZwHoQXMFsVZNN4DI9pk1U4T iOgUvtXYDbw9Q68xLpaLHBvzt6Q2TvgcjqeEz35MJLEmPz9oLPNq3ZVUrYL1vOlH -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:07 2026 by rpki-client