$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft File: dd638a66-157d-4b37-b487-c2b5f4dbe940.mft (raw, json) Hash identifier: Eo/NC7YMCUx7X2dJVVZ69BcoBvx6hk3vxbj8hE98Zzw= Subject key identifier: 9B:03:69:78:EF:4A:4C:33:25:B9:80:9A:FD:8F:CF:76:E8:95:01:76 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584D089ADFD06BD74DCE957A3300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft Manifest number: 010D0C9F4328584073A84D50659089CBD4B3609F Signing time: Mon 02 Mar 2026 10:00:04 +0000 Manifest this update: Mon 02 Mar 2026 10:00:04 +0000 Manifest next update: Wed 04 Mar 2026 10:00:00 +0000 Files and hashes: 1: 0a3f164c-5f88-301b-adde-657863805f1c.roa (hash: BzsoQQ8cixhovHAsJtOyhpbKWTvs1tcCA2c8mLgFJ7s=) 2: 129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (hash: kQroQ1zLz7a/UwUvgkBA57PD+rN8kXtKo+EXKI88yW4=) 3: 32bae387-9a90-39b8-b5de-920b138b534b.roa (hash: Tag9tLu6b3k9hNO1ehJcRVLQGglSIUhnE/hJ/NlcXkQ=) 4: dd638a66-157d-4b37-b487-c2b5f4dbe940.crl (hash: yryPq226wCpJXVsLlo3LD+Kv/PuvpBG0XHWkDcQvT8U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:9a:df:d0:6b:d7:4d:ce:95:7a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Mar 2 10:00:04 2026 GMT Not After : Mar 4 10:00:00 2026 GMT Subject: CN=117bb31f-71b2-4c80-b618-20cdceddea47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:21:36:21:e9:73:05:05:d3:de:74:ae:4d: a5:f1:09:67:2f:8d:ea:53:70:8d:14:8e:af:73:4d: 76:e8:73:ca:fc:44:48:a0:ad:06:78:97:a5:04:c4: c7:51:01:3a:df:41:bf:cb:5b:7c:f0:70:7a:af:95: 05:06:e3:b0:17:49:ab:eb:fc:bb:2d:5e:b1:90:e5: 3d:a0:d3:b8:23:61:ef:5f:9d:81:00:f6:79:22:58: 7d:92:95:53:92:95:4c:47:43:ff:ad:89:8d:c0:9c: 57:5a:93:9d:09:9c:79:27:c2:a6:51:64:11:2a:8f: 2c:5e:41:56:e2:50:2b:c2:18:56:1a:65:f0:47:3d: 8b:3d:74:8c:f0:74:15:55:d7:be:e6:36:78:91:9b: 69:01:4b:af:83:07:92:ee:f3:3b:62:10:a2:f5:4d: 63:05:37:5d:e1:d0:46:3c:96:d5:e2:90:6b:6e:6d: 4f:d7:db:ee:7b:9a:29:13:d3:16:62:f2:80:32:9c: af:5d:8b:24:e5:b5:0c:1e:48:68:bb:c3:dc:a6:d0: e5:9c:eb:aa:65:8c:c4:c2:8f:bc:b8:ad:71:91:5e: a2:43:51:4b:a2:07:e6:e3:5b:81:8d:b5:6c:8f:86: fb:0c:bc:22:cf:0f:dc:77:b0:d8:d2:5f:d3:87:16: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:03:69:78:EF:4A:4C:33:25:B9:80:9A:FD:8F:CF:76:E8:95:01:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:75:d2:26:f1:5c:bf:80:35:90:df:56:fe:3c:48:14:32:ba: fe:eb:96:8c:92:f4:87:f9:94:39:9c:17:44:03:23:d8:54:bc: 8c:3f:22:e9:17:3f:c2:1d:90:58:7f:a5:00:68:af:c8:ee:0e: 45:a4:6b:83:1b:66:47:8b:6e:d6:6d:b5:74:de:85:11:83:83: 5d:2a:91:cb:db:b2:cf:84:50:b4:4c:c6:35:ce:e6:28:ac:d8: 73:d9:e4:46:3a:d4:8f:d8:43:31:81:4b:e6:a0:a7:c3:cb:66: 2d:41:69:75:76:48:d9:55:f5:7e:50:51:b6:cc:da:97:e0:18: bd:ff:1e:a7:57:96:0f:87:87:b2:f1:fa:0e:7f:9a:4e:ba:a9: f1:e1:f7:39:40:ba:b4:90:a5:7a:c4:9b:b6:a8:2a:23:b3:81: 85:c9:ea:19:71:18:29:70:06:d3:9f:e4:aa:9d:f0:91:04:6f: d5:8f:2c:d0:84:81:f6:35:9a:6e:46:c4:57:be:ce:2a:e9:85: 39:84:a9:07:ba:0d:1d:f3:e6:64:b0:bd:3d:f2:ce:bd:83:48: 1f:18:7e:c5:bf:21:c7:9b:18:21:b2:3d:e8:05:f7:1b:19:a5: a4:fd:17:27:cf:91:e3:55:51:46:6d:ba:fb:c9:10:be:72:2b: 76:08:1a:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Imt/Qa9dNzpV6MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI2MDMwMjEwMDAwNFoXDTI2MDMwNDEwMDAwMFowLzEtMCsGA1UEAxMk MTE3YmIzMWYtNzFiMi00YzgwLWI2MTgtMjBjZGNlZGRlYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0hNiHpcwUF0950rk2l8QlnL43qU3CNFI6v c0126HPK/ERIoK0GeJelBMTHUQE630G/y1t88HB6r5UFBuOwF0mr6/y7LV6xkOU9 oNO4I2HvX52BAPZ5Ilh9kpVTkpVMR0P/rYmNwJxXWpOdCZx5J8KmUWQRKo8sXkFW 4lArwhhWGmXwRz2LPXSM8HQVVde+5jZ4kZtpAUuvgweS7vM7YhCi9U1jBTdd4dBG PJbV4pBrbm1P19vue5opE9MWYvKAMpyvXYsk5bUMHkhou8PcptDlnOuqZYzEwo+8 uK1xkV6iQ1FLogfm41uBjbVsj4b7DLwizw/cd7DY0l/ThxbWyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJsDaXjvSkwzJbmAmv2Pz3bolQF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvZGQ2MzhhNjYtMTU3ZC00 YjM3LWI0ODctYzJiNWY0ZGJlOTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANddIm8Vy/gDWQ31b+PEgU Mrr+65aMkvSH+ZQ5nBdEAyPYVLyMPyLpFz/CHZBYf6UAaK/I7g5FpGuDG2ZHi27W bbV03oURg4NdKpHL27LPhFC0TMY1zuYorNhz2eRGOtSP2EMxgUvmoKfDy2YtQWl1 dkjZVfV+UFG2zNqX4Bi9/x6nV5YPh4ey8foOf5pOuqnx4fc5QLq0kKV6xJu2qCoj s4GFyeoZcRgpcAbTn+SqnfCRBG/VjyzQhIH2NZpuRsRXvs4q6YU5hKkHug0d8+Zk sL098s69g0gfGH7FvyHHmxghsj3oBfcbGaWk/Rcnz5HjVVFGbbr7yRC+cit2CBoS -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:51 2026 by rpki-client