$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft File: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft (raw, json) Hash identifier: XpCvQkCUjIKf/8WIMDLFw7Y7wL0aZ1Z8I5Ik/5nbQWw= Subject key identifier: A2:4A:F8:07:77:BA:F4:56:70:DF:B9:B9:D7:32:60:E5:2A:EA:28:D7 Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584D06A0A5AF6AC8A36D721425E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft Manifest number: 010D0C9F4328584720528DA38C7982779313AF2A Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 16633004-e46a-3fb4-be3b-681f6a980807.roa (hash: biOKSpj0YdDXbM31GzWn7viLjczW9hE9hA4qXluEmPM=) 2: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl (hash: VRxN3cMOfh35vu+2SGFv1GiPrAqExjXAG78BH7jy1VI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a5:af:6a:c8:a3:6d:72:14:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=6dd75317-0ef3-4d7c-a618-836c2f975579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:11:e4:4f:66:50:3a:14:e4:42:9f:ff:3a: 34:54:9b:ed:cc:c9:21:cd:ba:db:2f:6a:82:36:d0: 7c:00:c5:3c:b5:87:e4:a6:9e:94:7b:53:d1:82:ac: 53:f7:a4:8f:58:e6:e9:8b:5f:0c:f9:c2:55:5d:26: e8:83:9c:4a:67:85:cc:3e:64:fc:79:a6:20:ad:09: bd:40:de:f3:aa:1e:f5:b0:bb:c5:31:9a:f4:db:01: 56:45:7b:fc:14:d7:09:c9:cd:e1:87:a7:e8:e3:44: 0b:50:a4:34:88:a3:46:b5:21:f0:4d:e6:05:66:7c: bc:4e:7b:56:04:4d:2c:fa:bf:e8:9e:67:30:1e:4e: 76:7c:ff:41:2b:b2:36:88:bf:09:8d:f3:9f:e8:de: 00:77:a5:84:f4:86:1b:31:d7:36:2a:4c:70:80:c3: a4:23:b9:e8:92:a4:a0:e7:3c:de:e1:c4:e7:ea:0d: d5:a7:19:a7:b9:7c:0e:22:45:ef:75:c0:ba:ee:a3: 06:31:3a:1d:b7:9a:ec:0c:3e:65:2d:a1:48:64:20: 5e:81:cb:bd:55:b9:cf:c0:29:d2:ba:d2:f1:f9:42: c7:83:4a:5d:2a:e5:bc:12:f8:db:b1:60:0b:40:5b: de:65:8b:41:9f:65:02:34:fc:4d:5f:8f:ad:3f:fb: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:F8:07:77:BA:F4:56:70:DF:B9:B9:D7:32:60:E5:2A:EA:28:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:95:c9:28:4f:1e:07:a2:8c:6b:89:15:4c:19:71:89:64:f2: c4:ec:76:bf:08:d4:4d:50:a4:0c:03:83:ff:c5:94:f8:bb:55: 0b:89:bb:ac:15:ab:d8:64:5a:db:c8:9d:67:65:85:d9:d4:4e: d0:a7:41:ee:46:05:56:98:ff:aa:61:25:d5:4f:29:c4:e7:65: 20:02:89:03:a4:61:17:b7:06:06:e5:73:54:b9:34:b2:eb:aa: 2d:8c:d7:34:ad:39:dd:d9:e0:12:76:f5:0c:70:ab:f2:02:f8: 2f:d1:00:60:60:32:35:ae:f6:46:f5:e9:9a:00:43:98:6b:1e: fe:05:9a:ef:72:69:82:6f:e5:68:d0:22:c9:a4:4d:d7:63:df: 73:03:19:1a:4b:e6:2f:68:85:c4:22:b2:87:df:92:31:8c:6c: 1c:c5:28:31:58:83:2d:2a:0b:c8:8d:5a:c4:44:03:4d:40:c3: 81:fb:93:ac:46:6e:57:d3:69:e9:9a:0a:20:0d:bb:7f:bd:ee: e9:97:b0:52:27:20:ea:1f:95:32:27:fb:92:3e:bf:e1:cf:bd: d7:de:52:57:9a:5e:09:f2:2b:2c:1c:10:e2:47:4a:4d:24:d2: 35:eb:7b:eb:6f:67:12:9e:cb:06:78:ac:65:39:8f:18:84:12: 6c:17:c5:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKWvasijbXIUJeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk NmRkNzUzMTctMGVmMy00ZDdjLWE2MTgtODM2YzJmOTc1NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLAR5E9mUDoU5EKf/zo0VJvtzMkhzbrbL2qC NtB8AMU8tYfkpp6Ue1PRgqxT96SPWObpi18M+cJVXSbog5xKZ4XMPmT8eaYgrQm9 QN7zqh71sLvFMZr02wFWRXv8FNcJyc3hh6fo40QLUKQ0iKNGtSHwTeYFZny8TntW BE0s+r/onmcwHk52fP9BK7I2iL8JjfOf6N4Ad6WE9IYbMdc2KkxwgMOkI7nokqSg 5zze4cTn6g3VpxmnuXwOIkXvdcC67qMGMTodt5rsDD5lLaFIZCBegcu9VbnPwCnS utLx+ULHg0pdKuW8EvjbsWALQFveZYtBn2UCNPxNX4+tP/v1OQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKJK+Ad3uvRWcN+5udcyYOUq6ijXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvNjZjZDRhNDAtNzVkMy00 MTEyLWE0YzgtNmRlOWNhNTcxZmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAlckoTx4HooxriRVMGXGJ ZPLE7Ha/CNRNUKQMA4P/xZT4u1ULibusFavYZFrbyJ1nZYXZ1E7Qp0HuRgVWmP+q YSXVTynE52UgAokDpGEXtwYG5XNUuTSy66otjNc0rTnd2eASdvUMcKvyAvgv0QBg YDI1rvZG9emaAEOYax7+BZrvcmmCb+Vo0CLJpE3XY99zAxkaS+YvaIXEIrKH35Ix jGwcxSgxWIMtKgvIjVrERANNQMOB+5OsRm5X02npmgogDbt/ve7pl7BSJyDqH5Uy J/uSPr/hz73X3lJXml4J8issHBDiR0pNJNI163vrb2cSnssGeKxlOY8YhBJsF8Wh -----END CERTIFICATE-----Generated at Mon Mar 2 04:10:15 2026 by rpki-client