$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: 6MH1VWITl55FXG8fzidTT1+fY1qHvJfNkEscYPtx54g= Subject key identifier: 42:01:09:DA:70:65:C7:BC:D7:18:CC:E8:F9:F3:05:ED:FC:B5:DE:21 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584D0576DB7B378F9A8683314D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A341C Signing time: Sun 01 Mar 2026 07:00:04 +0000 Manifest this update: Sun 01 Mar 2026 07:00:04 +0000 Manifest next update: Wed 04 Mar 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: n3S4fnJ2tPTUqx19WPfvs2LPBwXVp588ob5jjCauYGI=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: k/izVyibu1i/9tciuX05sb+8bxrKg9N0Tpc14+9BScM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:76:db:7b:37:8f:9a:86:83:31:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Mar 1 07:00:04 2026 GMT Not After : Mar 4 07:00:00 2026 GMT Subject: CN=ced10327-7d78-41c2-ba7f-f55af14e857c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:64:0d:f0:e8:6a:28:f9:09:80:4b:f6:80: d7:76:02:fb:a7:a4:aa:52:d7:fc:4a:fe:1a:87:64: 0c:3e:5f:c2:86:d7:94:df:68:af:46:fb:74:fb:1f: 9b:40:95:3d:ee:74:86:1c:39:1a:7a:7e:b9:eb:3d: 69:4c:fc:c6:f1:36:c1:20:f0:c3:46:84:df:d4:98: 5e:27:e6:54:dd:67:d2:ca:62:1b:d3:77:80:2e:65: 6e:a4:dd:38:33:7e:83:5e:0a:fa:ca:91:8e:46:b1: 02:01:a8:ce:4a:1d:2c:a8:e9:10:8d:da:ac:15:82: dc:0f:e0:a7:df:9a:35:41:32:d4:71:7c:d9:16:b6: e3:37:bd:7c:fb:28:b7:20:55:6a:9a:7c:22:02:f3: 84:80:4c:47:77:f2:ef:ac:ea:24:5e:cd:ec:2d:fa: c8:6f:28:4e:1a:48:0f:9e:47:48:17:53:11:3b:85: ca:28:ee:ad:74:8a:f2:56:68:d4:fd:91:50:58:33: 7d:44:59:a5:a8:cf:f2:5e:19:5c:32:a0:ea:21:b9: ce:a0:a1:d3:c0:20:d8:c0:b8:f7:b7:fc:6f:95:0c: db:0d:9a:b9:c9:69:ea:55:6d:af:fc:e4:ea:9d:ec: 54:59:9f:7e:80:7d:10:76:e0:7e:3f:3f:cc:79:9c: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:09:DA:70:65:C7:BC:D7:18:CC:E8:F9:F3:05:ED:FC:B5:DE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a4:0f:1d:b5:f6:5d:51:09:9f:74:33:d0:40:8e:0e:e2:41: d7:3f:07:78:aa:70:bc:0a:a3:03:4d:ef:78:84:00:2a:64:38: b5:8b:6b:23:0f:f9:a8:8b:6b:48:9c:3b:39:56:be:af:f1:31: 01:46:41:af:b4:7c:a6:e0:50:5e:68:e0:e9:23:91:ae:85:1c: 62:c0:9d:89:81:d1:67:17:43:48:bc:39:d6:28:74:65:04:76: e8:12:d1:68:27:3f:1e:fd:3f:3a:33:26:31:60:6b:60:9e:5c: e4:0f:e1:2d:e2:ca:eb:c9:8e:0f:84:52:79:bd:bf:92:37:97: 6e:dd:b4:68:4c:09:a6:48:7f:4d:d0:7d:20:83:b9:5a:61:6f: 08:fa:7c:73:0b:17:53:59:0e:1f:ff:ee:4f:88:ac:b2:98:73: 30:7e:63:75:34:2f:16:1b:cb:44:db:8c:71:ad:40:e2:ed:fd: 81:85:88:01:cb:a2:53:46:18:2f:03:b2:1e:3e:84:a5:76:1f: 03:db:77:75:81:1e:84:a6:78:38:ae:36:b9:ad:82:2b:1f:6f: 6b:12:99:1b:e0:2e:4f:d2:06:73:08:3d:8f:9e:b9:cf:e0:79: e8:bb:c6:2d:95:58:64:e0:f7:ec:f7:45:61:94:35:48:b1:5b: 17:81:b8:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Fdtt7N4+ahoMxTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDMwMTA3MDAwNFoXDTI2MDMwNDA3MDAwMFowLzEtMCsGA1UEAxMk Y2VkMTAzMjctN2Q3OC00MWMyLWJhN2YtZjU1YWYxNGU4NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLNkDfDoaij5CYBL9oDXdgL7p6SqUtf8Sv4a h2QMPl/ChteU32ivRvt0+x+bQJU97nSGHDkaen656z1pTPzG8TbBIPDDRoTf1Jhe J+ZU3WfSymIb03eALmVupN04M36DXgr6ypGORrECAajOSh0sqOkQjdqsFYLcD+Cn 35o1QTLUcXzZFrbjN718+yi3IFVqmnwiAvOEgExHd/LvrOokXs3sLfrIbyhOGkgP nkdIF1MRO4XKKO6tdIryVmjU/ZFQWDN9RFmlqM/yXhlcMqDqIbnOoKHTwCDYwLj3 t/xvlQzbDZq5yWnqVW2v/OTqnexUWZ9+gH0QduB+Pz/MeZzUywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEIBCdpwZce81xjM6PnzBe38td4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEpA8dtfZdUQmfdDPQQI4O 4kHXPwd4qnC8CqMDTe94hAAqZDi1i2sjD/moi2tInDs5Vr6v8TEBRkGvtHym4FBe aODpI5GuhRxiwJ2JgdFnF0NIvDnWKHRlBHboEtFoJz8e/T86MyYxYGtgnlzkD+Et 4srryY4PhFJ5vb+SN5du3bRoTAmmSH9N0H0gg7laYW8I+nxzCxdTWQ4f/+5PiKyy mHMwfmN1NC8WG8tE24xxrUDi7f2BhYgBy6JTRhgvA7IePoSldh8D23d1gR6Epng4 rja5rYIrH29rEpkb4C5P0gZzCD2PnrnP4Hnou8YtlVhk4Pfs90VhlDVIsVsXgbjj -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:32 2026 by rpki-client