$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: 0e2vcD6TPRPIxbGWCJ2rqXMbFq39z2K4ZLOiigKa78o= Subject key identifier: C2:D6:8F:1B:BE:F5:56:4E:E8:B4:1A:AC:85:4B:DB:1D:7A:BE:24:96 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584D06475C2EFD471643A949BFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602AD45 Signing time: Sun 01 Mar 2026 14:00:09 +0000 Manifest this update: Sun 01 Mar 2026 14:00:09 +0000 Manifest next update: Wed 04 Mar 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: Ts7DFXQBUbbs+FpjxdVKQtKW+FLVJBm/2TgufNFH8L8=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: GvwJhUVamqGgc2f0gJv6mWUhBE+a3phznUtGlkhWR94=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:5c:2e:fd:47:16:43:a9:49:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Mar 1 14:00:09 2026 GMT Not After : Mar 4 14:00:00 2026 GMT Subject: CN=cff29a3f-09a4-4ac5-a9c7-d45173de4903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:4c:62:fb:ed:a0:6e:c4:b7:b3:c9:b6:17: d0:f3:a8:65:2e:3c:21:18:03:3e:9b:98:85:1b:5a: 3b:38:cc:b7:3d:85:ad:3b:cb:75:78:67:2c:bc:45: e5:de:7f:21:91:4d:07:b9:bd:25:c3:1b:25:86:5d: 42:f6:08:ae:f6:44:b2:30:a4:25:08:75:76:23:42: ab:32:b8:7b:b6:21:1a:7e:ca:53:3f:77:f5:8a:5b: 1e:4b:3f:e2:96:2c:2c:12:1a:55:e8:0a:aa:d4:0f: a3:5c:85:87:88:b0:d6:a6:46:f0:6b:70:28:ee:b6: f5:3e:66:49:a5:eb:76:2f:5e:94:b0:69:bb:b6:d5: cd:73:cc:9a:ab:62:75:5c:4f:a8:03:35:79:72:3a: ce:82:07:43:a7:00:20:ec:08:9b:8c:ed:9e:81:aa: 3a:43:82:8a:2b:d7:ad:e3:f4:99:0b:64:29:8e:06: 13:cb:d7:17:29:e6:a9:2c:c1:fb:11:4c:1d:84:0e: 3d:64:d1:33:cf:0e:0f:ec:53:c9:4c:57:06:7c:16: 64:80:0e:e7:b8:34:35:e7:62:7f:38:ab:70:a1:95: 6b:8e:07:d2:e2:a2:48:88:fb:84:0a:23:e0:95:c5: 06:fe:bd:70:4a:fd:08:91:1f:76:b8:8e:75:de:38: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D6:8F:1B:BE:F5:56:4E:E8:B4:1A:AC:85:4B:DB:1D:7A:BE:24:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3d:21:49:ff:d5:cc:ed:9e:82:17:c3:32:fe:4d:a5:fb:01: e2:72:d1:c7:7f:3c:45:44:ca:d9:bf:00:d9:ea:61:d7:2a:8e: 5c:60:fb:aa:24:50:ca:e8:fd:73:83:16:5b:89:99:51:67:b0: c2:bf:20:4c:93:f8:ac:bb:a5:63:f3:a1:a7:d3:ae:b8:d9:4b: 39:6b:64:c2:e3:0f:72:6e:8d:b1:ed:b4:f3:d0:59:f5:76:4d: fb:6e:79:d8:ff:31:d1:fa:23:56:3d:50:4b:b4:ba:f7:e6:c5: 7d:ea:50:2d:45:d0:51:db:f0:78:77:76:20:49:3b:12:89:9f: fa:29:65:14:26:3b:0b:e9:d4:0b:16:c4:ad:6b:07:02:65:79: 47:5d:9e:83:35:61:40:26:f2:5b:10:1f:33:c4:d7:db:4f:ed: c8:b8:68:2a:84:55:1f:bf:10:f4:6c:b5:bf:6c:66:08:64:90: b1:8a:cd:6d:83:a3:d8:5f:22:32:1c:12:df:d4:6e:60:4c:46: b9:16:e1:f1:1e:b3:1e:2f:b1:b2:06:4f:65:d4:2c:f4:94:ee: 6f:fe:89:f1:d4:22:c5:d8:70:a1:3a:34:96:44:a0:d0:4d:7c: 48:8c:2e:0b:9e:cd:72:02:4a:b5:a9:5d:cc:31:6f:34:44:11: 59:1a:14:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GR1wu/UcWQ6lJv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDMwMTE0MDAwOVoXDTI2MDMwNDE0MDAwMFowLzEtMCsGA1UEAxMk Y2ZmMjlhM2YtMDlhNC00YWM1LWE5YzctZDQ1MTczZGU0OTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0xMYvvtoG7Et7PJthfQ86hlLjwhGAM+m5iF G1o7OMy3PYWtO8t1eGcsvEXl3n8hkU0Hub0lwxslhl1C9giu9kSyMKQlCHV2I0Kr Mrh7tiEafspTP3f1ilseSz/iliwsEhpV6Aqq1A+jXIWHiLDWpkbwa3Ao7rb1PmZJ pet2L16UsGm7ttXNc8yaq2J1XE+oAzV5cjrOggdDpwAg7AibjO2egao6Q4KKK9et 4/SZC2QpjgYTy9cXKeapLMH7EUwdhA49ZNEzzw4P7FPJTFcGfBZkgA7nuDQ152J/ OKtwoZVrjgfS4qJIiPuECiPglcUG/r1wSv0IkR92uI513jjYVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMLWjxu+9VZO6LQarIVL2x16viSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnPSFJ/9XM7Z6CF8My/k2l +wHictHHfzxFRMrZvwDZ6mHXKo5cYPuqJFDK6P1zgxZbiZlRZ7DCvyBMk/isu6Vj 86Gn06642Us5a2TC4w9ybo2x7bTz0Fn1dk37bnnY/zHR+iNWPVBLtLr35sV96lAt RdBR2/B4d3YgSTsSiZ/6KWUUJjsL6dQLFsStawcCZXlHXZ6DNWFAJvJbEB8zxNfb T+3IuGgqhFUfvxD0bLW/bGYIZJCxis1tg6PYXyIyHBLf1G5gTEa5FuHxHrMeL7Gy Bk9l1Cz0lO5v/onx1CLF2HChOjSWRKDQTXxIjC4Lns1yAkq1qV3MMW80RBFZGhSo -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:20 2026 by rpki-client