$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft File: 2da00291-9798-4c46-adc8-0fe85d9e6c31.mft (raw, json) Hash identifier: 6URc+BRjeL8Nldoqp5n9UGOu+P78d1rFTBAKnLWKS4w= Subject key identifier: 32:25:A6:CA:B4:47:FE:F8:09:3E:ED:63:42:14:E2:A6:5E:F1:BA:6C Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD Certificate issuer: /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31 Certificate serial: 010D0C9F4328584D051D9057BAE7B54C7B3BDF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft Manifest number: 010D0C9F4328584B8127443E5AE304761D1896D5 Signing time: Sun 01 Mar 2026 04:00:08 +0000 Manifest this update: Sun 01 Mar 2026 04:00:08 +0000 Manifest next update: Tue 03 Mar 2026 04:00:00 +0000 Files and hashes: 1: 017f82d2-8fcc-3ffe-917e-340f3336d850.roa (hash: L0OU0ZaFf3CzEoSFhvp9Yc/7nhFzXQLdPg9TneE71tU=) 2: 2da00291-9798-4c46-adc8-0fe85d9e6c31.crl (hash: 7iN1og8IbDkW1Ju8ZZxq3AXh9RWiI4+4yDjme/QQ0ho=) 3: 8dd52655-4484-3807-b864-9eb3294c1922.roa (hash: ynyyEd4yfzLuc/tazFXgoBrqfy6TJhNNDdEXZViASTo=) 4: 91908aa0-f606-3ddb-bdcf-a1261a9a638a.roa (hash: CkZ7ubjqg673JsIpjFzFbJTDpiED5tlXAdIqgVEXSIY=) 5: e5abe283-61fd-3f8b-9722-85ccbed835f7.roa (hash: Z3+O7YhR2n4RtfNdeJgfN3sRUZlaCefqAwH0UfXXXJI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:1d:90:57:ba:e7:b5:4c:7b:3b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31 Validity Not Before: Mar 1 04:00:08 2026 GMT Not After : Mar 3 04:00:00 2026 GMT Subject: CN=129bfacb-75b4-4cb2-9b3a-46ae7bab391c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:1c:89:78:80:09:c4:37:8f:fc:b1:b6:3d: eb:d9:95:8b:c3:80:7d:03:cf:0c:76:4a:d7:3d:5a: 8d:5f:1c:32:2b:32:65:c1:04:63:a2:4f:6e:6d:6e: 70:3d:96:7b:dc:69:a0:7e:6a:27:d9:13:38:0b:da: b1:10:dd:5b:5c:3c:d7:9e:c2:49:8f:84:40:3e:31: 8c:0c:1f:f6:6d:80:ae:b6:6d:b1:de:0c:6c:6c:ff: 71:e7:57:7b:fe:66:f2:9c:6a:32:5c:86:d1:fe:7c: d0:a8:77:db:6f:5a:6c:25:c9:64:9f:c1:37:0c:d4: 0a:c0:06:40:b6:e8:b9:09:6f:c4:f0:3e:46:5b:d5: e1:92:ed:89:7a:b1:40:6c:7c:fb:d1:49:d3:bf:7f: 06:10:aa:ad:62:3f:e6:8e:e2:8a:00:bd:05:3d:28: 4f:c6:21:ab:5e:a3:dd:32:57:5d:fe:51:bd:1b:f4: 76:58:12:75:40:84:fe:53:18:1d:b0:a8:e5:29:41: 14:7f:a1:6b:b3:ab:ef:7e:5a:a9:03:9d:39:f1:69: ca:55:57:68:30:77:3c:aa:bb:83:4d:07:62:4f:07: 27:df:0f:1f:08:80:68:d9:45:5d:53:9f:06:88:02: 18:46:49:0a:85:54:5b:08:ea:54:dc:01:8c:75:99: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:A6:CA:B4:47:FE:F8:09:3E:ED:63:42:14:E2:A6:5E:F1:BA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl X509v3 Authority Key Identifier: keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:69:20:39:89:96:d2:c4:7b:a9:e7:17:f0:98:9f:3a:59:d1: 22:cb:4a:b9:a5:8b:22:72:d9:48:bf:13:57:1e:d8:32:26:8e: fc:40:3a:be:90:0f:33:28:66:a2:38:3a:0b:5d:10:7b:dd:ff: 9c:de:88:25:4d:25:47:93:e6:7f:ab:c2:a6:8e:99:ae:9c:c7: 54:4a:8a:57:c6:b1:d0:4d:8e:b2:9c:73:89:9a:21:0c:ec:68: d4:f0:9e:0e:8e:d7:e7:6b:bb:9b:0f:5a:60:30:52:a6:2e:1a: 43:0c:d5:6b:03:95:f7:87:65:a7:5a:db:56:f5:37:00:f3:0d: bf:e1:55:10:3e:88:63:df:1e:25:bf:00:1d:e0:96:e0:6f:16: 76:50:83:2a:a2:a2:e6:90:19:42:cd:dc:38:05:95:f9:cb:6c: 32:f3:76:42:d9:70:88:18:1d:24:6a:23:f6:8d:18:b3:80:4b: 82:92:fd:c8:65:7e:74:d0:52:14:ff:f0:6a:90:fb:ee:31:ec: b1:77:60:4a:56:96:03:52:a2:f3:37:02:f0:2a:1c:28:60:b6: 40:39:c8:00:12:31:60:9d:88:f0:8e:91:8f:cd:8e:53:da:b3: 92:2a:cf:38:14:fa:12:e1:3f:31:e3:32:b0:6f:df:ac:cf:05: 56:0c:6b:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FHZBXuue1THs73wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhMDAyOTEtOTc5OC00YzQ2LWFkYzgtMGZlODVkOWU2 YzMxMB4XDTI2MDMwMTA0MDAwOFoXDTI2MDMwMzA0MDAwMFowLzEtMCsGA1UEAxMk MTI5YmZhY2ItNzViNC00Y2IyLTliM2EtNDZhZTdiYWIzOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFEciXiACcQ3j/yxtj3r2ZWLw4B9A88MdkrX PVqNXxwyKzJlwQRjok9ubW5wPZZ73Gmgfmon2RM4C9qxEN1bXDzXnsJJj4RAPjGM DB/2bYCutm2x3gxsbP9x51d7/mbynGoyXIbR/nzQqHfbb1psJclkn8E3DNQKwAZA tui5CW/E8D5GW9Xhku2JerFAbHz70UnTv38GEKqtYj/mjuKKAL0FPShPxiGrXqPd Mldd/lG9G/R2WBJ1QIT+UxgdsKjlKUEUf6Frs6vvflqpA5058WnKVVdoMHc8qruD TQdiTwcn3w8fCIBo2UVdU58GiAIYRkkKhVRbCOpU3AGMdZmjIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDIlpsq0R/74CT7tY0IU4qZe8bpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZGEw MDI5MS05Nzk4LTRjNDYtYWRjOC0wZmU4NWQ5ZTZjMzEvMmRhMDAyOTEtOTc5OC00 YzQ2LWFkYzgtMGZlODVkOWU2YzMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmRhMDAyOTEtOTc5OC00YzQ2LWFk YzgtMGZlODVkOWU2YzMxLzJkYTAwMjkxLTk3OTgtNGM0Ni1hZGM4LTBmZTg1ZDll NmMzMS5jcmwwHwYDVR0jBBgwFoAUpFg/KBRXul6NiGzj2f/Jnoj9Z80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZGEwMDI5MS05Nzk4LTRjNDYtYWRjOC0wZmU4 NWQ5ZTZjMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiaSA5iZbSxHup5xfwmJ86 WdEiy0q5pYsictlIvxNXHtgyJo78QDq+kA8zKGaiODoLXRB73f+c3oglTSVHk+Z/ q8KmjpmunMdUSopXxrHQTY6ynHOJmiEM7GjU8J4Ojtfna7ubD1pgMFKmLhpDDNVr A5X3h2WnWttW9TcA8w2/4VUQPohj3x4lvwAd4JbgbxZ2UIMqoqLmkBlCzdw4BZX5 y2wy83ZC2XCIGB0kaiP2jRizgEuCkv3IZX500FIU//BqkPvuMeyxd2BKVpYDUqLz NwLwKhwoYLZAOcgAEjFgnYjwjpGPzY5T2rOSKs84FPoS4T8x4zKwb9+szwVWDGu6 -----END CERTIFICATE-----Generated at Mon Mar 2 00:26:17 2026 by rpki-client