$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft File: 1def28a9-0b42-43a8-9407-32d9e4a0540e.mft (raw, json) Hash identifier: gijJhoq8M9d9DOCrjy3osgX1HmQXB0zf6MelgnrI8+k= Subject key identifier: DC:53:97:86:FC:AC:0A:41:C6:4C:EF:38:BD:79:6C:4B:7B:AF:07:2E Authority key identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A Certificate issuer: /CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Certificate serial: 010D0C9F4328584D06DC30CF4DD9D8F0EADF1B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft Manifest number: 010D0C9F432858461D024F0D2A50BFF390B86F09 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Wed 04 Mar 2026 19:00:00 +0000 Files and hashes: 1: 1def28a9-0b42-43a8-9407-32d9e4a0540e.crl (hash: wbO3XhL/KcEgmZYFr6X8AISbrwZxChRbZVQ6PdttiKU=) 2: 496afc45-c760-3f66-b7b7-c85288ce00c9.roa (hash: vlxG89+n4l9LzOv+n8xIcwFbMU/fI/eVBU9pxlZuV3E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:30:cf:4d:d9:d8:f0:ea:df:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 4 19:00:00 2026 GMT Subject: CN=f32c5423-75f5-4275-9b57-e7f5091f1354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:e0:39:1e:ee:0d:b3:8f:76:27:a5:19:24: b4:13:77:6a:76:99:52:bc:34:66:66:58:9d:36:05: fe:db:81:d1:19:5c:13:83:fc:a0:cd:a5:60:2f:13: 0d:9c:e8:e7:a2:49:6b:a7:b2:bc:23:7a:d7:10:71: 69:fa:dd:7a:b7:b8:0d:e1:ee:e2:14:b9:fd:71:16: 56:ee:36:65:9a:95:34:e7:a4:65:74:0c:82:43:91: 49:98:1e:79:ca:32:9f:be:5c:ed:d4:66:9c:c4:ed: e5:97:0c:28:fe:35:63:5d:13:29:12:69:f4:9f:2a: de:1e:a8:22:0e:da:16:ef:37:49:02:aa:7f:8d:bc: 28:5a:95:b9:ba:c9:99:eb:e9:4e:e6:82:02:89:cc: 8d:83:30:f4:35:c7:4b:d9:5e:25:41:4b:b7:54:af: 1d:f6:9f:45:d2:3d:44:43:9e:2c:ad:71:e3:e6:dc: 42:e8:6b:7b:07:e3:50:d0:45:54:32:72:e9:af:48: ab:53:9c:0b:09:9c:0b:88:31:67:c7:58:fd:c7:56: a3:63:13:41:25:1a:c4:2b:9d:c3:4f:34:67:44:64: a8:e5:d2:9a:ba:2f:65:d0:a9:cd:7b:54:be:f0:5a: f0:3b:4b:e9:35:89:94:49:98:c2:74:c7:21:5d:db: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:97:86:FC:AC:0A:41:C6:4C:EF:38:BD:79:6C:4B:7B:AF:07:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl X509v3 Authority Key Identifier: keyid:4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4c:86:66:7b:50:66:3b:1a:ec:2f:5e:85:68:29:7b:3d:29: 8a:f1:06:b6:dc:f2:7c:7d:39:30:92:20:3a:c8:03:f4:9f:05: 25:8d:15:27:cb:82:94:16:d2:d3:8a:e8:23:62:11:20:12:f0: cb:6e:c4:6f:31:df:d8:3f:e7:12:0a:18:19:11:a5:8c:74:b1: 84:5e:ed:00:1d:d8:fc:e3:f3:26:db:a5:22:b5:e6:d0:a3:0e: fa:89:59:61:4a:91:22:2e:93:92:64:bc:bf:5a:92:76:d5:e7: 58:d6:f6:9c:87:47:c1:96:23:55:63:b8:0e:90:b9:48:2a:e1: 0a:86:27:af:7d:ec:7a:15:b4:34:fc:9c:26:34:de:d5:e7:94: bd:a5:3f:f6:0e:40:4a:d5:81:e6:67:4b:68:9f:b8:c2:8a:f7: e0:d5:41:ac:5b:04:21:e9:4a:ad:51:b2:25:76:da:55:50:54: d9:e2:d7:6e:a4:10:2a:cd:09:16:eb:e7:79:b4:df:f5:74:05: 65:e8:94:81:92:d3:1d:48:29:4f:ea:e8:5e:d9:42:9d:a2:23: 32:1d:87:2c:98:08:99:a0:00:eb:be:44:c8:b6:0e:64:84:29: 68:b6:36:5b:95:a4:8a:42:98:95:dc:67:af:e4:46:ba:cd:f5: be:56:a8:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DDPTdnY8OrfG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlZjI4YTktMGI0Mi00M2E4LTk0MDctMzJkOWU0YTA1 NDBlMB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwNDE5MDAwMFowLzEtMCsGA1UEAxMk ZjMyYzU0MjMtNzVmNS00Mjc1LTliNTctZTdmNTA5MWYxMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJPgOR7uDbOPdielGSS0E3dqdplSvDRmZlid NgX+24HRGVwTg/ygzaVgLxMNnOjnoklrp7K8I3rXEHFp+t16t7gN4e7iFLn9cRZW 7jZlmpU056RldAyCQ5FJmB55yjKfvlzt1GacxO3llwwo/jVjXRMpEmn0nyreHqgi DtoW7zdJAqp/jbwoWpW5usmZ6+lO5oICicyNgzD0NcdL2V4lQUu3VK8d9p9F0j1E Q54srXHj5txC6Gt7B+NQ0EVUMnLpr0irU5wLCZwLiDFnx1j9x1ajYxNBJRrEK53D TzRnRGSo5dKaui9l0KnNe1S+8FrwO0vpNYmUSZjCdMchXdvhsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNxTl4b8rApBxkzvOL15bEt7rwcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZGVm MjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5ZTRhMDU0MGUvMWRlZjI4YTktMGI0Mi00 M2E4LTk0MDctMzJkOWU0YTA1NDBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWRlZjI4YTktMGI0Mi00M2E4LTk0 MDctMzJkOWU0YTA1NDBlLzFkZWYyOGE5LTBiNDItNDNhOC05NDA3LTMyZDllNGEw NTQwZS5jcmwwHwYDVR0jBBgwFoAUSqvfTLC3DA2k0BrXdhd2Rv1IpHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZGVmMjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5 ZTRhMDU0MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYTIZme1BmOxrsL16FaCl7 PSmK8Qa23PJ8fTkwkiA6yAP0nwUljRUny4KUFtLTiugjYhEgEvDLbsRvMd/YP+cS ChgZEaWMdLGEXu0AHdj84/Mm26UitebQow76iVlhSpEiLpOSZLy/WpJ21edY1vac h0fBliNVY7gOkLlIKuEKhievfex6FbQ0/JwmNN7V55S9pT/2DkBK1YHmZ0ton7jC ivfg1UGsWwQh6UqtUbIldtpVUFTZ4tdupBAqzQkW6+d5tN/1dAVl6JSBktMdSClP 6uhe2UKdoiMyHYcsmAiZoADrvkTItg5khClotjZblaSKQpiV3Gev5Ea6zfW+VqgD -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:18 2026 by rpki-client