$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft File: c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft (raw, json) Hash identifier: cMMq2FMTD9xwEDcf9roWfyP3Zf4mQpVqEcOHGm8OjTs= Subject key identifier: B3:9E:8B:A1:81:C5:1E:1A:F0:82:4D:2C:F1:92:68:CC:8B:19:60:23 Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Certificate serial: 010D0C9F4328584D0823C22E581A0F374D9005D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft Manifest number: 010D0C9F4328584073A8414D073A3A5F6413B220 Signing time: Mon 02 Mar 2026 06:00:04 +0000 Manifest this update: Mon 02 Mar 2026 06:00:04 +0000 Manifest next update: Wed 04 Mar 2026 06:00:00 +0000 Files and hashes: 1: 6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (hash: PBemWiBUpwCD8m9rR5CSN1crj43T/YeGKQQO4sQM+FM=) 2: c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl (hash: koQvzzueoKMbQqX8V82ecgfADuFep1s0qVJoTys4Bl4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:23:c2:2e:58:1a:0f:37:4d:90:05:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Validity Not Before: Mar 2 06:00:04 2026 GMT Not After : Mar 4 06:00:00 2026 GMT Subject: CN=1fa0cd41-c441-4687-9ca8-48a9ad5bf9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:ac:49:e8:dd:4f:f8:92:2f:56:b9:50:0b: 38:00:02:90:cf:e5:ea:62:a9:8f:43:3c:43:e3:fa: d1:fd:45:4a:dd:e4:57:4b:46:ef:39:bf:22:09:d1: 46:b9:30:08:6e:a4:4c:3e:9e:39:6a:0f:0e:f3:e3: d5:43:e4:8e:8b:48:fd:2f:b8:2b:07:39:1c:7d:58: f9:1b:72:f8:e9:75:22:d3:22:0b:7d:ac:97:62:7c: 90:f0:d1:24:9e:c6:d4:c6:b5:46:16:a4:c7:98:81: a7:2a:79:d7:fc:fa:cc:17:7d:70:55:ad:e8:95:fc: ea:0f:66:58:f3:05:4b:28:60:fa:56:ca:e4:c8:c4: 2d:90:ed:da:fe:28:18:1e:86:b5:7a:2a:70:1a:b1: 02:3b:2a:5e:51:fc:d2:70:45:d7:2c:1a:3a:6c:c0: 94:5f:73:7d:07:99:52:5b:4b:e1:fa:d0:68:12:b3: aa:f2:22:6c:b9:e1:e7:63:60:9e:94:4c:c4:8b:10: 1a:43:72:9d:c4:36:7e:ab:cc:8e:22:39:43:9f:9b: c6:e0:b1:c6:eb:3b:7d:06:3f:c9:3c:da:7b:23:f9: 0a:02:47:35:fa:3d:2b:9f:a5:6f:47:6c:2b:d9:d1: f9:d1:7a:f4:24:b7:16:96:84:04:20:a2:f6:8b:af: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9E:8B:A1:81:C5:1E:1A:F0:82:4D:2C:F1:92:68:CC:8B:19:60:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl X509v3 Authority Key Identifier: keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:97:55:4b:0e:6c:8f:95:4d:1f:49:00:13:9a:be:f6:7f: 89:e5:a4:5d:14:2e:50:36:16:db:dd:63:8b:ec:96:be:e3:28: 47:30:dc:bc:c6:71:54:09:58:ed:55:4a:b4:29:9d:be:64:6a: 55:ab:6a:d5:fb:f4:5d:0d:1b:cd:b5:cd:5e:99:8b:fa:ce:fb: 81:0f:1f:4b:79:21:da:83:2e:e8:8c:82:ee:95:ef:cf:7b:96: 90:54:76:fc:c0:40:29:f5:3b:12:3f:ac:df:f6:78:fe:0e:90: d2:a4:10:a2:53:00:16:c1:39:11:ef:23:89:9e:ca:ba:79:f9: de:95:31:cc:f1:46:99:be:42:3d:30:71:7e:74:f3:a0:1d:ce: 0d:8e:c1:f3:c4:ac:84:e0:c6:b5:8c:d2:b6:ed:c3:9d:44:b8: b5:46:a9:31:eb:bd:9f:02:21:9f:55:49:f0:f3:0c:8f:5b:b2: e4:c7:c3:cf:ec:cc:72:8d:d0:e0:83:15:91:61:96:0b:bd:a2: 28:b0:a9:46:7b:57:c5:b1:14:dd:7c:d7:d0:b3:7e:aa:b7:8e: ba:2d:3b:35:83:7e:0e:7e:c8:4a:23:ee:c2:2b:49:68:bf:28: 21:8a:53:48:01:cd:5c:12:a5:60:d8:03:32:8a:df:90:54:dc: 14:ac:36:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0II8IuWBoPN02QBdcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU4ZjkyZjgtNGQ4ZC00MWRhLWFmOWQtZDhmZGVjMmUz MDI1MB4XDTI2MDMwMjA2MDAwNFoXDTI2MDMwNDA2MDAwMFowLzEtMCsGA1UEAxMk MWZhMGNkNDEtYzQ0MS00Njg3LTljYTgtNDhhOWFkNWJmOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOysSejdT/iSL1a5UAs4AAKQz+XqYqmPQzxD 4/rR/UVK3eRXS0bvOb8iCdFGuTAIbqRMPp45ag8O8+PVQ+SOi0j9L7grBzkcfVj5 G3L46XUi0yILfayXYnyQ8NEknsbUxrVGFqTHmIGnKnnX/PrMF31wVa3olfzqD2ZY 8wVLKGD6VsrkyMQtkO3a/igYHoa1eipwGrECOypeUfzScEXXLBo6bMCUX3N9B5lS W0vh+tBoErOq8iJsueHnY2CelEzEixAaQ3KdxDZ+q8yOIjlDn5vG4LHG6zt9Bj/J PNp7I/kKAkc1+j0rn6VvR2wr2dH50Xr0JLcWloQEIKL2i687RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLOei6GBxR4a8IJNLPGSaMyLGWAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThm OTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZkZWMyZTMwMjUvYzU4ZjkyZjgtNGQ4ZC00 MWRhLWFmOWQtZDhmZGVjMmUzMDI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzU4ZjkyZjgtNGQ4ZC00MWRhLWFm OWQtZDhmZGVjMmUzMDI1L2M1OGY5MmY4LTRkOGQtNDFkYS1hZjlkLWQ4ZmRlYzJl MzAyNS5jcmwwHwYDVR0jBBgwFoAU9Sjz5U6mIGVXx3o+OKrQMZOGC5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThmOTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZk ZWMyZTMwMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/gpdVSw5sj5VNH0kAE5q+ 9n+J5aRdFC5QNhbb3WOL7Ja+4yhHMNy8xnFUCVjtVUq0KZ2+ZGpVq2rV+/RdDRvN tc1emYv6zvuBDx9LeSHagy7ojILule/Pe5aQVHb8wEAp9TsSP6zf9nj+DpDSpBCi UwAWwTkR7yOJnsq6efnelTHM8UaZvkI9MHF+dPOgHc4NjsHzxKyE4Ma1jNK27cOd RLi1Rqkx672fAiGfVUnw8wyPW7Lkx8PP7MxyjdDggxWRYZYLvaIosKlGe1fFsRTd fNfQs36qt466LTs1g34OfshKI+7CK0lovyghilNIAc1cEqVg2AMyit+QVNwUrDa7 -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:06 2026 by rpki-client