$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft File: 8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft (raw, json) Hash identifier: usOcAqsNO3t5Jn40ZB5xXZk8NcRPz/kAA6G1LMKRhC4= Subject key identifier: 44:F2:E7:1D:22:8B:33:A0:3F:47:8F:2F:6A:0C:8A:52:EA:B3:98:13 Authority key identifier: 8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D Certificate issuer: /CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c Certificate serial: 010D0C9F4328584D066516C41CBE1AB6C9A042A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft Manifest number: 010D0C9F4328584CD174E34526ACDA7B7DF14717 Signing time: Sun 01 Mar 2026 15:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:00:03 +0000 Manifest next update: Tue 03 Mar 2026 15:00:00 +0000 Files and hashes: 1: 45f5cb58-72a8-3898-abe2-3604045d3bbd.roa (hash: T2m6BTUoOvFPLxu2TICu0lVTY6wgdzDF9i9Eaxax+uU=) 2: 8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl (hash: RYOon+hC5yuclu2FA2w3zTGUk/2D7R+al2OOu1LNE2w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:65:16:c4:1c:be:1a:b6:c9:a0:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c Validity Not Before: Mar 1 15:00:03 2026 GMT Not After : Mar 3 15:00:00 2026 GMT Subject: CN=6b00a8d9-172e-44c4-bed1-3402e1a243eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:24:d4:a6:d0:ff:22:17:33:c1:d3:d9:75: e3:f7:cf:c4:2c:f3:da:5d:e1:29:fe:b3:5c:ac:56: d7:3f:ef:e4:90:63:6a:c9:ab:25:aa:97:98:02:7f: cb:18:df:c9:b8:24:35:e0:2d:a6:97:1a:35:11:b9: af:4d:4a:e1:00:b3:d6:e4:34:e5:33:b9:a8:b3:e3: 4e:3e:6f:04:ed:6c:13:17:65:26:c7:df:28:74:4b: 93:52:ec:87:aa:cd:7c:74:41:18:d5:64:0e:2b:54: ca:f3:4a:1e:31:30:c4:5b:58:ca:ef:72:08:9c:a4: b8:4a:fc:71:00:71:d1:25:09:8f:92:88:1d:bc:76: fa:d0:8c:78:d5:6e:26:2d:f0:4c:a3:5b:df:b9:d7: dc:8f:24:3c:5b:8e:be:81:de:bc:f5:df:0d:dd:88: c4:5d:e3:dc:88:c8:24:7e:2d:cc:87:02:12:54:f9: 8a:f1:bf:c9:20:aa:1a:68:95:11:34:00:ca:da:c4: 48:39:94:34:29:12:82:39:4e:51:12:13:0b:6b:08: ad:37:e1:0d:5a:6e:c3:98:f8:a8:7c:bc:65:16:4b: bc:f6:91:7f:f4:6d:10:aa:24:11:68:bf:12:ce:c9: 0f:27:9a:ec:b4:b0:fc:06:84:9e:d3:41:d1:a6:0d: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F2:E7:1D:22:8B:33:A0:3F:47:8F:2F:6A:0C:8A:52:EA:B3:98:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl X509v3 Authority Key Identifier: keyid:8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ad:cb:22:96:fe:cf:53:e2:e8:0a:bf:ed:e6:93:f6:74:5a: f9:d1:61:71:2e:aa:50:66:4d:3e:49:50:a6:ad:dc:d7:f6:a7: 53:3e:92:07:34:84:cb:84:63:58:c1:37:ab:ae:3c:a5:55:d3: a9:d0:0d:e8:e4:5a:59:61:93:be:9b:04:f3:46:1f:bb:9b:46: d7:dd:e7:dc:3b:ac:ab:7b:45:cf:08:a0:41:68:0a:e2:e2:48: 28:b8:76:06:fb:0d:2f:da:9a:94:f7:49:f7:e4:1a:52:a8:69: 98:23:e4:f3:4e:fc:66:93:17:c6:93:93:77:7c:c4:86:2c:98: 8e:33:e9:2c:50:74:80:ae:d0:67:b8:62:56:af:36:b5:65:ab: b9:30:00:2b:de:1c:75:f8:ee:d5:a1:69:1d:37:a0:10:58:27: 5d:31:2d:4f:8c:50:e3:35:b6:27:5d:54:19:b1:3d:34:65:8f: 93:2d:1c:64:1e:a1:7d:e6:d5:f9:4b:af:9c:38:5a:f1:5a:35: cf:16:6e:19:9b:28:1d:f7:17:91:db:b5:3a:0e:ef:53:9c:92: 68:6f:e8:28:5a:40:d7:de:f2:ca:51:78:21:63:71:bc:43:ae: 0c:6a:fb:64:04:f7:8a:0a:6c:7c:04:c7:fa:71:2a:fb:14:8b: 0f:32:0e:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GZRbEHL4atsmgQqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOTk0YzItY2NkZi00YzQwLWIwNjYtYzc1OTVlOWE0 OTJjMB4XDTI2MDMwMTE1MDAwM1oXDTI2MDMwMzE1MDAwMFowLzEtMCsGA1UEAxMk NmIwMGE4ZDktMTcyZS00NGM0LWJlZDEtMzQwMmUxYTI0M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXAk1KbQ/yIXM8HT2XXj98/ELPPaXeEp/rNc rFbXP+/kkGNqyaslqpeYAn/LGN/JuCQ14C2mlxo1EbmvTUrhALPW5DTlM7mos+NO Pm8E7WwTF2Umx98odEuTUuyHqs18dEEY1WQOK1TK80oeMTDEW1jK73IInKS4Svxx AHHRJQmPkogdvHb60Ix41W4mLfBMo1vfudfcjyQ8W46+gd689d8N3YjEXePciMgk fi3MhwISVPmK8b/JIKoaaJURNADK2sRIOZQ0KRKCOU5REhMLawitN+ENWm7DmPio fLxlFku89pF/9G0QqiQRaL8SzskPJ5rstLD8BoSe00HRpg2UiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFETy5x0iizOgP0ePL2oMilLqs5gTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5 OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5NWU5YTQ5MmMvOGFkOTk0YzItY2NkZi00 YzQwLWIwNjYtYzc1OTVlOWE0OTJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFkOTk0YzItY2NkZi00YzQwLWIw NjYtYzc1OTVlOWE0OTJjLzhhZDk5NGMyLWNjZGYtNGM0MC1iMDY2LWM3NTk1ZTlh NDkyYy5jcmwwHwYDVR0jBBgwFoAUjDi32N9FhrQX5iGl3Adt2FfGfC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5 NWU5YTQ5MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6rcsilv7PU+LoCr/t5pP2 dFr50WFxLqpQZk0+SVCmrdzX9qdTPpIHNITLhGNYwTerrjylVdOp0A3o5FpZYZO+ mwTzRh+7m0bX3efcO6yre0XPCKBBaAri4kgouHYG+w0v2pqU90n35BpSqGmYI+Tz TvxmkxfGk5N3fMSGLJiOM+ksUHSArtBnuGJWrza1Zau5MAAr3hx1+O7VoWkdN6AQ WCddMS1PjFDjNbYnXVQZsT00ZY+TLRxkHqF95tX5S6+cOFrxWjXPFm4Zmygd9xeR 27U6Du9TnJJob+goWkDX3vLKUXghY3G8Q64MavtkBPeKCmx8BMf6cSr7FIsPMg7j -----END CERTIFICATE-----Generated at Sun Mar 1 23:25:58 2026 by rpki-client