$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft File: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft (raw, json) Hash identifier: 1rFjfsap4Z/TIwUQ7bS/tl+r/LMyVfoijoLrbepaYP4= Subject key identifier: D3:DA:70:CD:61:C7:22:BD:AC:3D:15:CC:35:D2:A0:37:68:F0:C4:9E Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584D062993C2AEABEBEE58F02F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft Manifest number: 010D0C9F4328584BC7EC849A397DD986C4316874 Signing time: Sun 01 Mar 2026 13:00:08 +0000 Manifest this update: Sun 01 Mar 2026 13:00:08 +0000 Manifest next update: Wed 04 Mar 2026 13:00:00 +0000 Files and hashes: 1: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl (hash: ll86ytJKc+2lAyMA5es6ABVzRhhS89k/uQFwvG8J9xM=) 2: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (hash: 8R1HoNbh5dix2jjnbX4TSIGtSWSaqTDMj/JPsIjfVeo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:29:93:c2:ae:ab:eb:ee:58:f0:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Mar 1 13:00:08 2026 GMT Not After : Mar 4 13:00:00 2026 GMT Subject: CN=f03d1073-83e8-4136-85a1-59df01d0ffb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:75:27:40:22:e2:39:80:71:91:4a:b0:f5: 56:21:ac:f8:f6:dc:70:a3:85:2e:71:96:a1:e6:3c: 65:c7:3b:65:76:2b:30:5a:a8:3d:b9:cc:4e:87:19: 61:34:ec:50:53:91:0d:3a:f1:7b:47:b6:c4:e5:cc: 69:43:09:a4:9f:ad:50:03:5c:e3:c8:e4:9c:8a:80: 1b:45:8a:5d:d2:1f:3c:f7:49:bb:4f:14:60:c8:a6: 21:41:86:d3:19:69:c1:76:0c:26:50:fb:46:b1:12: e5:9a:f6:2f:23:ec:5f:45:41:bb:e2:a9:72:1d:d4: 9d:0b:74:45:15:0c:5b:f5:ff:02:f6:f2:7b:ef:47: 21:c9:36:92:15:37:dd:84:d1:fd:3c:89:d8:90:bb: 86:1c:ad:3f:76:f1:e9:f0:25:8b:a7:ac:b0:6e:a5: 03:06:11:b9:00:5f:5a:a4:6f:ad:3b:c1:5c:ee:4c: 5d:e3:65:4c:20:92:1c:54:9e:50:4b:28:9c:d4:0e: 6f:34:53:6d:34:f7:07:5c:91:b6:dd:ac:e7:31:7e: 84:62:dc:96:9e:d5:8e:69:80:99:5f:63:64:e4:18: 4f:17:4e:37:8f:0c:07:cb:9a:a4:4a:9e:58:11:db: 1a:f9:25:aa:13:5a:26:27:d4:02:e4:57:6b:9e:f1: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:70:CD:61:C7:22:BD:AC:3D:15:CC:35:D2:A0:37:68:F0:C4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:06:19:0b:2f:dd:81:66:8b:d5:be:43:d2:25:e8:da:73:a7: bf:c8:b0:ff:e1:29:b7:24:5f:a0:15:ac:66:23:b4:6a:bf:ce: f3:4b:82:b6:ee:80:79:4e:f2:26:52:f5:ba:86:21:62:fa:ff: 24:6a:b4:10:96:25:f8:65:e3:14:91:58:47:da:6d:ab:ae:a0: 0f:e8:db:78:a9:8b:b6:2f:ee:e9:18:e3:f2:ad:91:72:ee:b3: 5c:b7:31:7c:be:af:a5:53:cb:e7:a9:48:43:b4:fd:b0:0d:87: f1:81:4e:97:7e:9a:fe:ef:8a:98:be:5f:6b:65:dd:27:78:5e: 84:49:52:0c:79:a4:d1:10:30:f0:5b:21:ed:7e:23:74:cf:4d: 99:a0:b0:8c:fd:79:dd:6b:2e:54:ea:b4:d3:61:3e:e9:9b:ea: b7:61:a8:8e:d9:f2:bd:35:15:19:f8:1e:4b:ed:a3:8a:93:06: 92:87:c1:23:81:68:0c:3d:ea:3b:84:38:0a:e9:79:fe:73:89: 37:f4:eb:ef:3e:48:38:9a:5a:af:1b:67:53:bb:c6:02:dc:f9: 58:84:7d:c1:36:24:ed:8d:2a:1e:d9:e1:65:8a:b9:49:78:20: 21:5f:50:00:86:9e:8d:1f:45:30:56:d2:98:91:78:bc:d5:6b: 87:65:b5:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GKZPCrqvr7ljwL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDMwMTEzMDAwOFoXDTI2MDMwNDEzMDAwMFowLzEtMCsGA1UEAxMk ZjAzZDEwNzMtODNlOC00MTM2LTg1YTEtNTlkZjAxZDBmZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBB1J0Ai4jmAcZFKsPVWIaz49txwo4UucZah 5jxlxztldiswWqg9ucxOhxlhNOxQU5ENOvF7R7bE5cxpQwmkn61QA1zjyOScioAb RYpd0h8890m7TxRgyKYhQYbTGWnBdgwmUPtGsRLlmvYvI+xfRUG74qlyHdSdC3RF FQxb9f8C9vJ770chyTaSFTfdhNH9PInYkLuGHK0/dvHp8CWLp6ywbqUDBhG5AF9a pG+tO8Fc7kxd42VMIJIcVJ5QSyic1A5vNFNtNPcHXJG23aznMX6EYtyWntWOaYCZ X2Nk5BhPF043jwwHy5qkSp5YEdsa+SWqE1omJ9QC5FdrnvGX9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNPacM1hxyK9rD0VzDXSoDdo8MSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvNGRjZGYxZjQtNWU2MC00 MzhkLTg5MzQtMGNhMjFkMGI0NWFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5BhkLL92BZovVvkPSJeja c6e/yLD/4Sm3JF+gFaxmI7Rqv87zS4K27oB5TvImUvW6hiFi+v8karQQliX4ZeMU kVhH2m2rrqAP6Nt4qYu2L+7pGOPyrZFy7rNctzF8vq+lU8vnqUhDtP2wDYfxgU6X fpr+74qYvl9rZd0neF6ESVIMeaTREDDwWyHtfiN0z02ZoLCM/Xnday5U6rTTYT7p m+q3YaiO2fK9NRUZ+B5L7aOKkwaSh8EjgWgMPeo7hDgK6Xn+c4k39OvvPkg4mlqv G2dTu8YC3PlYhH3BNiTtjSoe2eFlirlJeCAhX1AAhp6NH0UwVtKYkXi81WuHZbV6 -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:08 2026 by rpki-client