$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: aXNDDspbfkpUCTKMvKExFC4B2vkz+wQO8zZUgSpg86s= Subject key identifier: B8:E9:9A:33:61:4D:EB:80:3F:67:95:59:46:DD:50:4C:80:47:23:20 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584D066517D32F7DFADBF0F65900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C6D6 Signing time: Sun 01 Mar 2026 15:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:00:03 +0000 Manifest next update: Tue 03 Mar 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: sISOXPDKqDPUVZ+M9PYOM5w83WP8VC6jGhSZHcB8+7U=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: 5cFdCA2yhC1MZasYSNVLnWHXuSWRYKqS7lfaVBrskks=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:65:17:d3:2f:7d:fa:db:f0:f6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Mar 1 15:00:03 2026 GMT Not After : Mar 3 15:00:00 2026 GMT Subject: CN=5e462bbe-901a-48c4-b8ea-420c28fab52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:d6:fb:e6:64:ff:0c:37:72:f4:0a:d9:39: fd:1d:e5:ba:b8:58:9d:ab:11:1f:72:7f:12:b2:79: 98:fa:87:e9:35:65:a0:ef:1f:61:3f:38:ca:12:f0: a3:8f:b0:a4:80:35:5a:30:39:be:15:9a:32:87:0b: 28:3a:40:3d:17:3c:62:cf:fb:80:6c:4d:fa:38:b2: 80:f4:b2:b6:2a:54:92:45:9a:16:e9:84:4c:fb:7e: ee:e8:f6:8f:5c:1a:a1:c9:c5:77:75:a8:e9:70:ee: 47:71:48:a2:5c:a9:9b:71:ec:f7:65:18:f4:be:fd: 96:cf:db:d1:80:06:ab:2f:b8:37:01:57:5f:8c:92: ba:22:17:2b:ab:10:84:8b:68:06:6d:a2:2b:18:de: b9:3a:e3:05:7c:d7:30:62:36:f0:19:12:b1:c6:08: 70:82:42:2f:93:d3:2e:a2:ee:9e:c8:2e:cd:1d:c3: 7d:b4:ae:78:79:88:f9:ba:f0:74:5b:91:67:12:e5: d4:05:e1:44:fb:c8:ff:f8:b7:9c:7a:4d:63:bc:11: d5:5d:5d:99:86:83:49:12:aa:24:3e:28:37:c4:77: 7e:d8:d0:b1:1c:e1:c2:9c:24:46:8e:cc:a9:6d:02: de:9e:ac:c6:a3:85:90:a6:7b:0f:61:a6:b8:29:5a: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:9A:33:61:4D:EB:80:3F:67:95:59:46:DD:50:4C:80:47:23:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:23:92:26:38:ec:d7:b7:7a:9b:98:87:47:45:05:c4:e6:a4: f0:a2:63:4a:a0:4f:2b:6e:d1:d3:7b:95:c5:cb:26:6e:96:b5: db:25:3a:a8:16:7a:80:11:e8:db:29:cb:7e:5b:b5:bd:31:29: 43:2a:fe:43:21:8e:b5:00:e4:88:1a:13:dc:a8:08:25:bb:86: b9:48:14:9c:c9:35:7e:83:3c:44:80:8f:0c:fa:b6:9e:44:8e: 9e:cf:7f:c0:69:84:88:f3:12:80:d4:b1:a6:aa:2a:35:ee:5a: 53:8f:6f:9a:1c:48:61:52:c8:87:8d:3b:00:8b:9b:4d:b5:d8: 1f:fa:cf:fb:d2:47:e9:90:cd:eb:ef:6d:08:16:ff:b5:66:67: 46:53:3b:44:3b:6d:22:4e:88:58:69:3f:cf:1b:db:3b:74:c3: 0e:34:5c:d6:16:51:ed:ec:d6:5d:c6:d6:9d:be:7b:68:f6:2d: f1:10:b6:c6:da:27:09:0e:b4:79:7b:e7:90:08:19:e4:ba:db: 61:08:5e:c5:47:f8:fd:cf:fa:dc:4d:ad:52:7a:43:54:74:a9: 5d:af:90:c3:26:03:9f:44:bd:f2:1e:62:fc:aa:03:30:c4:7a: ad:33:5a:db:08:e6:55:f3:f3:ac:6d:55:67:94:37:6b:f3:1b: 3d:57:c6:64 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GZRfTL3362/D2WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDMwMTE1MDAwM1oXDTI2MDMwMzE1MDAwMFowLzEtMCsGA1UEAxMk NWU0NjJiYmUtOTAxYS00OGM0LWI4ZWEtNDIwYzI4ZmFiNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTPW++Zk/ww3cvQK2Tn9HeW6uFidqxEfcn8S snmY+ofpNWWg7x9hPzjKEvCjj7CkgDVaMDm+FZoyhwsoOkA9Fzxiz/uAbE36OLKA 9LK2KlSSRZoW6YRM+37u6PaPXBqhycV3dajpcO5HcUiiXKmbcez3ZRj0vv2Wz9vR gAarL7g3AVdfjJK6IhcrqxCEi2gGbaIrGN65OuMFfNcwYjbwGRKxxghwgkIvk9Mu ou6eyC7NHcN9tK54eYj5uvB0W5FnEuXUBeFE+8j/+Lecek1jvBHVXV2ZhoNJEqok Pig3xHd+2NCxHOHCnCRGjsypbQLenqzGo4WQpnsPYaa4KVp7fwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLjpmjNhTeuAP2eVWUbdUEyARyMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPI5ImOOzXt3qbmIdHRQXE 5qTwomNKoE8rbtHTe5XFyyZulrXbJTqoFnqAEejbKct+W7W9MSlDKv5DIY61AOSI GhPcqAglu4a5SBScyTV+gzxEgI8M+raeRI6ez3/AaYSI8xKA1LGmqio17lpTj2+a HEhhUsiHjTsAi5tNtdgf+s/70kfpkM3r720IFv+1ZmdGUztEO20iTohYaT/PG9s7 dMMONFzWFlHt7NZdxtadvnto9i3xELbG2icJDrR5e+eQCBnkutthCF7FR/j9z/rc Ta1SekNUdKldr5DDJgOfRL3yHmL8qgMwxHqtM1rbCOZV8/OsbVVnlDdr8xs9V8Zk -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:19 2026 by rpki-client