$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft File: df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft (raw, json) Hash identifier: coxY/iqBryNdo5YhNFeB03kV2K2MMHqdQSqYpwzjpRo= Subject key identifier: CC:77:88:4E:86:0F:BA:7B:BF:74:92:50:0A:80:DC:58:73:A9:3F:76 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584D073594F3E40A5E23D132A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft Manifest number: 010D0C9F43285845464B28A2C2FBF55DA9F9C863 Signing time: Sun 01 Mar 2026 22:00:09 +0000 Manifest this update: Sun 01 Mar 2026 22:00:09 +0000 Manifest next update: Tue 03 Mar 2026 22:00:00 +0000 Files and hashes: 1: 0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa (hash: QmICnx8K2WLpmN4ktoXGzv57dyTInUPkv9iKJ8MkHaw=) 2: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (hash: PxO6PEVlVvl7AnlqebtqDTe2/ih3XVxS/oPpzcLkjiw=) 3: bda6574d-81c2-38f7-b624-cdc878c38860.roa (hash: 2yccE74TQK4XOi0nvATVTAnB2dHu23ogFBjcBEatTGE=) 4: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (hash: 9Lkefmgl47QqslRUHLsAHs4eTEVmoUQPuSxg9oDTarU=) 5: df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl (hash: wWyM2nFsggKoiK/3mpNB3vBFm16W6U5BNC52XhnqorU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:35:94:f3:e4:0a:5e:23:d1:32:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Mar 1 22:00:09 2026 GMT Not After : Mar 3 22:00:00 2026 GMT Subject: CN=4a9fa9af-7c62-4bc0-96f8-8daa9be38a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:fc:c9:5a:24:12:82:34:b0:fd:ec:cc:83: 7a:c2:9f:5e:f6:bd:e2:9b:f8:03:8a:38:83:b8:4d: 35:75:01:bc:e8:be:84:ec:e0:10:6b:4d:44:71:a5: 57:95:24:9d:e8:2e:02:07:55:6a:70:84:fe:25:d7: a8:9f:04:0e:38:55:a0:33:b5:22:67:c7:b8:e2:91: ed:67:08:b6:72:11:cd:1f:e3:f8:62:c6:79:01:30: ec:ce:b8:74:d2:c3:47:50:30:87:b5:bd:06:04:55: 52:88:d6:a6:f6:bd:21:cc:ad:5b:09:c2:05:3a:d9: f2:ba:79:59:01:eb:93:ea:90:5b:8f:70:26:8b:03: 03:a0:b7:e3:d1:95:b1:60:af:22:0e:1f:8a:ea:82: a3:83:9b:63:99:fc:50:0c:81:a7:39:d7:d4:38:fc: 6e:03:8d:16:f0:12:8b:73:6d:15:e7:0b:36:8e:35: 08:83:33:5b:de:47:2c:16:1b:e3:92:d9:fc:76:d3: c6:90:17:c6:16:ac:58:75:11:63:bc:a1:f1:39:e7: 64:e0:c2:45:e9:91:b6:7f:ec:79:dc:13:5e:be:2c: c7:73:85:ad:91:a6:64:76:f8:66:84:ac:6e:39:ef: f7:45:31:db:68:01:9b:d5:2e:7e:73:99:fb:40:d7: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:77:88:4E:86:0F:BA:7B:BF:74:92:50:0A:80:DC:58:73:A9:3F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6b:3c:21:42:d4:f7:71:35:ef:8e:50:07:db:ad:01:1a:21: 5b:ae:76:7d:8a:8e:a9:4f:50:6d:c8:a8:04:4e:c4:63:a5:19: 73:46:68:ac:d6:54:1e:89:62:26:94:07:6a:c2:58:65:90:9c: fc:57:9d:0b:a1:2d:71:92:b4:e3:33:f5:ab:8f:83:5c:b6:ef: 74:a8:0c:e7:73:39:ae:40:cf:b8:bd:22:fc:85:f8:e6:01:ca: 05:08:0b:c4:cc:cf:b4:4f:13:73:da:22:64:09:71:ab:90:e2: 99:31:7f:91:73:91:2a:7c:10:98:6e:65:d9:df:74:6f:0c:81: 1b:df:8d:d1:62:81:72:4d:00:57:0f:d4:58:e4:b3:c1:f5:11: c4:39:21:bf:15:15:5b:3d:10:a2:13:ec:08:9c:f6:9a:c8:f7: f9:e1:21:93:6a:9e:3d:9f:84:09:46:6c:58:ec:77:45:2d:dc: 7b:dc:68:bd:50:f1:b3:03:ad:eb:23:c7:d8:13:0e:d4:f9:eb: 93:b7:b1:88:20:3f:1c:3c:e2:90:8e:dc:5d:d8:bb:58:65:d0: a9:cc:76:f2:79:f4:0f:95:88:a2:65:c9:1b:b4:b2:ec:4a:56: 67:8b:11:03:ff:53:31:bc:4c:3a:e3:0d:19:a1:4a:39:bf:96: a0:ad:96:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HNZTz5ApeI9EypIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI2MDMwMTIyMDAwOVoXDTI2MDMwMzIyMDAwMFowLzEtMCsGA1UEAxMk NGE5ZmE5YWYtN2M2Mi00YmMwLTk2ZjgtOGRhYTliZTM4YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW78yVokEoI0sP3szIN6wp9e9r3im/gDijiD uE01dQG86L6E7OAQa01EcaVXlSSd6C4CB1VqcIT+JdeonwQOOFWgM7UiZ8e44pHt Zwi2chHNH+P4YsZ5ATDszrh00sNHUDCHtb0GBFVSiNam9r0hzK1bCcIFOtnyunlZ AeuT6pBbj3AmiwMDoLfj0ZWxYK8iDh+K6oKjg5tjmfxQDIGnOdfUOPxuA40W8BKL c20V5ws2jjUIgzNb3kcsFhvjktn8dtPGkBfGFqxYdRFjvKHxOedk4MJF6ZG2f+x5 3BNevizHc4WtkaZkdvhmhKxuOe/3RTHbaAGb1S5+c5n7QNfgEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMx3iE6GD7p7v3SSUAqA3FhzqT92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGYyZDJhNTItNWNhNy00 YTM2LTg0OWYtYTdkNmI4NzZlNjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYazwhQtT3cTXvjlAH260B GiFbrnZ9io6pT1BtyKgETsRjpRlzRmis1lQeiWImlAdqwlhlkJz8V50LoS1xkrTj M/Wrj4Nctu90qAznczmuQM+4vSL8hfjmAcoFCAvEzM+0TxNz2iJkCXGrkOKZMX+R c5EqfBCYbmXZ33RvDIEb343RYoFyTQBXD9RY5LPB9RHEOSG/FRVbPRCiE+wInPaa yPf54SGTap49n4QJRmxY7HdFLdx73Gi9UPGzA63rI8fYEw7U+euTt7GIID8cPOKQ jtxd2LtYZdCpzHbyefQPlYiiZckbtLLsSlZnixED/1MxvEw64w0ZoUo5v5agrZb1 -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:18 2026 by rpki-client