$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: 5a5uQupvuDZOn7B17z71YzbSTBjKdB5xuIHI5ZOlvW4= Subject key identifier: AF:FE:2A:2D:E0:BA:17:2F:1B:6C:79:B6:39:45:9E:59:CA:C6:A5:07 Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584D0629927F92C4022B928E31C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C5C Signing time: Sun 01 Mar 2026 13:00:08 +0000 Manifest this update: Sun 01 Mar 2026 13:00:08 +0000 Manifest next update: Wed 04 Mar 2026 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: gqvk+YhyW0/E8WbWExmoduEmQd1AJKdoufVvXT0WLoE=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: 29mmI04bTUx/OJZQQ+fTaT1NPWgLOmeuAG2MIGuA+pw=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: dE+L6tpJdYe5vQ5i/X8fMPIb+d1JRq4VMiXky1vuYd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:29:92:7f:92:c4:02:2b:92:8e:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Mar 1 13:00:08 2026 GMT Not After : Mar 4 13:00:00 2026 GMT Subject: CN=79b199a3-7979-4266-8d7c-c1d54aa3cf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:80:3c:50:7b:c7:a8:fb:25:fd:7e:ad:5d: 7a:f3:c4:ba:29:84:c6:98:1c:7f:ca:4a:1a:a3:08: b4:b8:cd:ce:77:2a:01:2d:0a:03:db:b8:ba:b2:3d: f5:c8:67:85:7a:13:f6:dd:23:e9:32:79:88:c6:80: 3a:ad:fa:0c:5f:07:85:61:5c:f0:83:8b:53:ba:c8: 0e:dd:67:64:fd:1e:3c:7a:a2:69:09:cc:32:ff:cb: 1c:34:6f:82:f5:df:91:69:6c:00:a2:a0:f5:b4:93: cf:f2:85:d5:94:a1:16:9d:7a:ea:2d:2c:db:21:24: 69:11:26:ad:b8:fc:f7:45:4d:4d:66:41:a2:6c:eb: 8c:69:3e:17:3a:77:b1:74:43:27:9a:c4:35:82:45: 59:7f:18:d4:40:c8:b4:b3:a1:a8:af:27:9d:0e:27: 37:4b:db:9d:bf:ea:cb:d8:61:59:f8:ed:33:e9:79: d5:f3:13:92:7a:3a:69:65:f8:3b:07:ca:fd:51:3e: 11:fb:5a:79:e9:10:e1:74:f4:54:f0:46:3a:67:3e: 40:f5:f1:83:8c:2b:80:7e:fb:3e:4d:3c:97:1c:f6: da:f1:03:71:d6:73:ff:0f:bd:4d:b0:a3:a9:d6:bb: 8b:33:65:00:b5:6b:12:14:d4:d2:a9:df:52:60:cc: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:2A:2D:E0:BA:17:2F:1B:6C:79:B6:39:45:9E:59:CA:C6:A5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f7:b6:43:8a:b1:f8:2a:2e:1f:3a:17:bc:05:09:5a:5f:76: e6:8b:43:b1:c0:01:a4:8c:ce:52:ed:05:b6:c8:87:f1:8d:80: 9e:e6:38:dd:fd:ef:9b:78:50:1f:19:7c:f5:fe:2e:77:42:40: 17:25:a6:2c:ce:97:ee:f3:de:7d:af:50:08:02:28:02:fa:4a: 89:b1:22:ea:6a:b1:8a:73:6e:57:7c:17:12:da:74:49:2b:bd: ff:f5:74:c8:55:db:3d:93:6a:2a:38:1f:9d:e9:88:ab:79:ad: 10:a5:29:51:a7:71:15:59:86:69:f6:70:11:10:ed:e3:09:b3: 3a:2c:b6:12:fb:cc:72:fe:13:f5:95:fc:76:70:91:b9:5f:7e: 88:0f:ef:9a:da:88:75:6f:2a:49:5c:46:8b:9e:b5:ee:92:e6: 96:4a:2a:ed:00:a0:3b:eb:ae:c4:b0:25:6c:42:65:5a:fa:90: 76:03:8f:b4:e2:5e:c0:0e:5f:b8:a1:0a:1a:9d:41:a7:a9:2d: 3f:5c:01:ec:e3:21:aa:bf:45:59:2f:87:71:db:88:c2:24:1e: 8d:96:02:7d:bb:02:ea:e0:b3:57:11:11:1f:19:eb:9f:af:e2: f4:fd:b0:64:10:ca:58:4f:ba:b7:0b:a1:bf:51:ce:d1:b5:58: e1:7c:32:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GKZJ/ksQCK5KOMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDMwMTEzMDAwOFoXDTI2MDMwNDEzMDAwMFowLzEtMCsGA1UEAxMk NzliMTk5YTMtNzk3OS00MjY2LThkN2MtYzFkNTRhYTNjZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZKAPFB7x6j7Jf1+rV1688S6KYTGmBx/ykoa owi0uM3OdyoBLQoD27i6sj31yGeFehP23SPpMnmIxoA6rfoMXweFYVzwg4tTusgO 3Wdk/R48eqJpCcwy/8scNG+C9d+RaWwAoqD1tJPP8oXVlKEWnXrqLSzbISRpESat uPz3RU1NZkGibOuMaT4XOnexdEMnmsQ1gkVZfxjUQMi0s6GoryedDic3S9udv+rL 2GFZ+O0z6XnV8xOSejppZfg7B8r9UT4R+1p56RDhdPRU8EY6Zz5A9fGDjCuAfvs+ TTyXHPba8QNx1nP/D71NsKOp1ruLM2UAtWsSFNTSqd9SYMxQ3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK/+Ki3guhcvG2x5tjlFnlnKxqUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBd97ZDirH4Ki4fOhe8BQla X3bmi0OxwAGkjM5S7QW2yIfxjYCe5jjd/e+beFAfGXz1/i53QkAXJaYszpfu8959 r1AIAigC+kqJsSLqarGKc25XfBcS2nRJK73/9XTIVds9k2oqOB+d6Yirea0QpSlR p3EVWYZp9nAREO3jCbM6LLYS+8xy/hP1lfx2cJG5X36ID++a2oh1bypJXEaLnrXu kuaWSirtAKA7667EsCVsQmVa+pB2A4+04l7ADl+4oQoanUGnqS0/XAHs4yGqv0VZ L4dx24jCJB6NlgJ9uwLq4LNXEREfGeufr+L0/bBkEMpYT7q3C6G/Uc7RtVjhfDLB -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:25 2026 by rpki-client