$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft File: 302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft (raw, json) Hash identifier: CirW8/PZni6d1YX4XLRJ8kDXAkjn/xM0pW3AanDfkvY= Subject key identifier: 36:7E:24:BB:BE:B5:D4:79:69:85:4B:C1:0C:0C:93:64:05:15:64:11 Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC Certificate issuer: /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2 Certificate serial: 010D0C9F4328584D0559125AEC2D5E602B2E3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft Manifest number: 010D0C9F4328584073A841D5A6149577F7745AAB Signing time: Sun 01 Mar 2026 06:00:03 +0000 Manifest this update: Sun 01 Mar 2026 06:00:03 +0000 Manifest next update: Wed 04 Mar 2026 06:00:00 +0000 Files and hashes: 1: 302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl (hash: QdZDa9vv34W9AjCdbGb6F+wXHc1tHVdJKUbG/mQbyeo=) 2: c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa (hash: 46q7iVAQyXC+2pCQKq6aXjeVWPHxG0fA5T3ZnFvwtdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:59:12:5a:ec:2d:5e:60:2b:2e:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2 Validity Not Before: Mar 1 06:00:03 2026 GMT Not After : Mar 4 06:00:00 2026 GMT Subject: CN=9df7e5e3-db22-42fe-a817-98f08731de5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:29:b8:85:36:a0:ab:78:7b:02:6b:89:66: 8d:5b:a2:ff:eb:c5:f1:39:f3:b4:0f:e7:d2:bf:29: 61:85:0c:03:62:d1:22:9f:01:d2:94:dc:7e:0b:fa: ba:5c:57:c3:a0:ea:62:f4:82:a9:da:fd:6b:65:e6: 11:67:b5:b1:15:35:14:f5:64:a7:e5:fa:a2:0e:a3: 00:3f:79:cc:86:7a:02:2c:62:4b:51:ad:8d:61:ed: 4e:67:1f:a1:b2:58:a6:82:b8:3f:c4:62:1e:d1:98: 26:79:5e:b7:83:13:70:84:3e:2e:68:e4:97:70:f8: 3a:a7:2a:19:9b:80:2e:08:2f:f6:57:f9:88:33:e3: 1e:33:84:5f:b8:0c:8d:69:12:75:38:06:ec:c3:30: d1:e6:82:24:cf:98:b4:ce:a0:3d:a0:3c:38:d5:91: 78:f7:34:fc:1c:68:00:1c:69:16:1f:6e:9c:5a:07: 7c:35:0e:8d:23:8f:5e:74:e4:01:41:5b:11:8c:6f: 47:80:0f:41:14:99:ea:1e:44:d8:a4:8f:46:87:1e: b2:90:61:7a:02:b0:ca:b6:99:d4:ec:2f:a6:b9:60: fd:4f:41:5e:db:5f:b1:66:b0:d6:e6:c0:bb:dc:dd: 16:e4:1e:22:14:48:eb:df:92:90:76:4e:b2:25:ae: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:24:BB:BE:B5:D4:79:69:85:4B:C1:0C:0C:93:64:05:15:64:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl X509v3 Authority Key Identifier: keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a9:e4:31:f1:c6:a1:1c:c2:ad:28:75:90:73:fc:fd:0d:f6: de:88:09:42:1a:01:65:c7:6b:d2:96:92:50:fb:a1:ef:b8:fa: 11:b7:ad:9a:c8:25:90:c4:77:fc:7a:40:59:4a:0e:00:08:c3: 53:40:9e:48:74:91:77:77:f3:b9:16:4a:a5:49:a1:d8:fc:fe: da:34:c3:46:d5:28:b1:76:c8:1f:ab:da:ab:1e:b1:0a:b0:11: 1d:5b:c7:1a:95:fd:f6:ac:43:6b:32:5e:2e:28:05:98:02:f1: dc:8a:4c:a8:d1:2b:df:5c:ef:8f:23:ac:70:70:17:c0:da:56: cc:f5:c8:e9:c4:41:a8:15:69:5a:08:9c:0a:0f:c8:c0:c8:47: 95:49:bd:e8:87:70:82:f2:c7:dd:00:bd:43:c5:67:fe:2c:b7: ce:1a:da:76:37:54:d9:1e:19:92:72:8a:de:10:10:3b:f1:46: 0e:69:e5:29:3f:c6:8a:9f:5e:41:30:df:99:52:41:44:2c:5c: d8:16:85:af:1d:48:c3:74:21:2f:d7:1b:4e:0c:73:b9:e7:f8: cd:a6:24:f6:66:ea:c4:26:88:07:55:98:8d:ce:a1:de:c4:d6: 9f:4a:73:b4:c8:0a:66:c6:e2:e3:1b:53:19:2d:08:f7:57:6f: 07:77:e5:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FWRJa7C1eYCsuNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAyMTExYmUtYjk1NC00YzVlLWFjOWItNGY4NWMzYzEx ZmUyMB4XDTI2MDMwMTA2MDAwM1oXDTI2MDMwNDA2MDAwMFowLzEtMCsGA1UEAxMk OWRmN2U1ZTMtZGIyMi00MmZlLWE4MTctOThmMDg3MzFkZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ApuIU2oKt4ewJriWaNW6L/68XxOfO0D+fS vylhhQwDYtEinwHSlNx+C/q6XFfDoOpi9IKp2v1rZeYRZ7WxFTUU9WSn5fqiDqMA P3nMhnoCLGJLUa2NYe1OZx+hslimgrg/xGIe0ZgmeV63gxNwhD4uaOSXcPg6pyoZ m4AuCC/2V/mIM+MeM4RfuAyNaRJ1OAbswzDR5oIkz5i0zqA9oDw41ZF49zT8HGgA HGkWH26cWgd8NQ6NI49edOQBQVsRjG9HgA9BFJnqHkTYpI9Ghx6ykGF6ArDKtpnU 7C+muWD9T0Fe21+xZrDW5sC73N0W5B4iFEjr35KQdk6yJa6+TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDZ+JLu+tdR5aYVLwQwMk2QFFWQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMDIx MTFiZS1iOTU0LTRjNWUtYWM5Yi00Zjg1YzNjMTFmZTIvMzAyMTExYmUtYjk1NC00 YzVlLWFjOWItNGY4NWMzYzExZmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzAyMTExYmUtYjk1NC00YzVlLWFj OWItNGY4NWMzYzExZmUyLzMwMjExMWJlLWI5NTQtNGM1ZS1hYzliLTRmODVjM2Mx MWZlMi5jcmwwHwYDVR0jBBgwFoAUyFKA3kjxP0SpblZpaxNrBBJTmqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMDIxMTFiZS1iOTU0LTRjNWUtYWM5Yi00Zjg1 YzNjMTFmZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWqeQx8cahHMKtKHWQc/z9 DfbeiAlCGgFlx2vSlpJQ+6HvuPoRt62ayCWQxHf8ekBZSg4ACMNTQJ5IdJF3d/O5 FkqlSaHY/P7aNMNG1Sixdsgfq9qrHrEKsBEdW8calf32rENrMl4uKAWYAvHcikyo 0SvfXO+PI6xwcBfA2lbM9cjpxEGoFWlaCJwKD8jAyEeVSb3oh3CC8sfdAL1DxWf+ LLfOGtp2N1TZHhmScoreEBA78UYOaeUpP8aKn15BMN+ZUkFELFzYFoWvHUjDdCEv 1xtODHO55/jNpiT2ZurEJogHVZiNzqHexNafSnO0yApmxuLjG1MZLQj3V28Hd+W1 -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:08 2026 by rpki-client