$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft File: 03f68bb7-1e42-452b-a9a1-99c7586beba0.mft (raw, json) Hash identifier: zc2EQWHh8xh6q/fbeRSMfZCvXKGI88pty0yeFdN26MA= Subject key identifier: 2D:E7:D1:76:E9:DE:E2:85:FD:D3:B6:BF:35:BF:25:9D:C8:A3:9A:18 Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59 Certificate issuer: /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0 Certificate serial: 010D0C9F4328584D0682E975A72EEAAFC74ABB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft Manifest number: 010D0C9F4328584391CA53DB29CE3E3E8F375ACE Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Tue 03 Mar 2026 16:00:00 +0000 Files and hashes: 1: 03f68bb7-1e42-452b-a9a1-99c7586beba0.crl (hash: BBUjI2cYKqyS/QESOzAbBh7TfcI730YzBqrc2MuAcis=) 2: 4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa (hash: b91NXo8BbJ6wcU0e3jgly+0qYAlwZWuKIFPjHQB/Bb8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:e9:75:a7:2e:ea:af:c7:4a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0 Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 3 16:00:00 2026 GMT Subject: CN=cb213479-a4ae-4bbe-a732-9a922af40dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:06:bb:53:d4:c5:a2:84:a6:11:b5:45:56: c7:ac:64:16:bb:75:d7:57:a3:09:22:dd:e9:5c:db: 8c:1a:ad:19:89:13:4a:8c:8d:f2:8a:94:07:b5:10: da:4e:e8:fa:f1:65:5f:52:e4:61:b4:50:ef:86:ac: 71:81:9d:4d:36:e9:98:2d:94:b1:13:fd:c7:3a:1a: 5a:0a:f7:c9:5b:e5:a1:6c:aa:bc:f4:64:20:bb:1c: 37:4f:1e:64:dd:bd:a5:7d:6a:42:52:e8:aa:5e:5e: d5:de:9e:42:0d:06:b4:7a:c4:8c:5c:84:32:8a:43: 1a:07:f8:6b:dd:20:9b:1d:4e:08:70:c1:c1:4f:0e: b2:28:1f:60:b2:dc:4f:c6:4f:8c:a6:3c:f0:d9:eb: f3:07:85:99:b3:aa:57:44:be:b2:d0:14:d0:db:ae: 5a:d6:65:e3:54:7d:8d:f1:4a:52:f5:f5:f1:1d:f1: e2:f8:e1:38:e6:f7:96:97:e3:ae:e0:c6:66:ee:db: 75:c4:65:d4:68:46:23:c8:f8:da:de:cc:ca:90:ab: 46:c7:f3:63:b7:be:85:77:c9:1d:43:09:f7:23:8b: 35:b7:38:e3:12:85:85:89:c1:ed:eb:7d:cf:7d:14: 47:8e:ff:fc:9b:5a:6d:c5:76:f0:b4:cb:22:69:d8: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E7:D1:76:E9:DE:E2:85:FD:D3:B6:BF:35:BF:25:9D:C8:A3:9A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl X509v3 Authority Key Identifier: keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b0:ce:da:ce:04:8e:e8:1c:80:d2:c6:52:52:57:40:bf:73: 3f:a2:fc:e2:18:50:40:52:1c:d1:1c:66:4e:7b:52:e9:72:ba: 3c:48:a1:97:e1:d1:c5:f7:9b:f7:10:ce:be:8c:52:3a:3e:a9: b3:d6:35:94:39:7c:e9:cd:69:38:29:7a:44:bf:df:54:0f:ae: c7:40:f2:3c:62:ba:76:27:e4:b5:6d:cb:64:ee:5a:db:d4:7d: ce:17:b6:aa:26:a0:cb:06:84:96:ea:c9:59:98:06:15:a3:f1: 6d:65:a1:90:cd:4a:67:b1:eb:e4:ed:3a:56:a6:3f:2a:41:13: 2e:dd:b7:29:7f:36:3f:89:77:a5:53:36:99:11:48:a2:a5:97: a5:c4:40:03:89:f2:ed:69:a5:35:b5:fc:09:4c:b0:91:29:74: 9c:08:48:fc:13:89:97:c0:df:3c:3f:c5:e7:06:52:75:49:4c: c2:de:d2:99:76:c7:e8:cf:c2:f0:06:f4:d1:3f:96:d4:d0:ae: 2c:99:0a:37:71:27:57:82:17:93:21:71:57:aa:6e:1d:c9:1c: d9:02:79:23:d8:27:f1:0f:6e:c1:ed:fc:96:62:a0:89:07:dd: 76:b8:fd:50:72:3b:8c:da:d3:d8:0d:18:b7:14:76:d2:b1:07: 45:57:00:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Ggul1py7qr8dKu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNmNjhiYjctMWU0Mi00NTJiLWE5YTEtOTljNzU4NmJl YmEwMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwMzE2MDAwMFowLzEtMCsGA1UEAxMk Y2IyMTM0NzktYTRhZS00YmJlLWE3MzItOWE5MjJhZjQwZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtMGu1PUxaKEphG1RVbHrGQWu3XXV6MJIt3p XNuMGq0ZiRNKjI3yipQHtRDaTuj68WVfUuRhtFDvhqxxgZ1NNumYLZSxE/3HOhpa CvfJW+WhbKq89GQguxw3Tx5k3b2lfWpCUuiqXl7V3p5CDQa0esSMXIQyikMaB/hr 3SCbHU4IcMHBTw6yKB9gstxPxk+Mpjzw2evzB4WZs6pXRL6y0BTQ265a1mXjVH2N 8UpS9fXxHfHi+OE45veWl+Ou4MZm7tt1xGXUaEYjyPja3szKkKtGx/Njt76Fd8kd Qwn3I4s1tzjjEoWFicHt633PfRRHjv/8m1ptxXbwtMsiadgHnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC3n0Xbp3uKF/dO2vzW/JZ3Io5oYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2 OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3NTg2YmViYTAvMDNmNjhiYjctMWU0Mi00 NTJiLWE5YTEtOTljNzU4NmJlYmEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNmNjhiYjctMWU0Mi00NTJiLWE5 YTEtOTljNzU4NmJlYmEwLzAzZjY4YmI3LTFlNDItNDUyYi1hOWExLTk5Yzc1ODZi ZWJhMC5jcmwwHwYDVR0jBBgwFoAUSv4UcYhi1ik6o3u+cxOtoeiMSVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3 NTg2YmViYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbsM7azgSO6ByA0sZSUldA v3M/ovziGFBAUhzRHGZOe1Lpcro8SKGX4dHF95v3EM6+jFI6Pqmz1jWUOXzpzWk4 KXpEv99UD67HQPI8Yrp2J+S1bctk7lrb1H3OF7aqJqDLBoSW6slZmAYVo/FtZaGQ zUpnsevk7TpWpj8qQRMu3bcpfzY/iXelUzaZEUiipZelxEADifLtaaU1tfwJTLCR KXScCEj8E4mXwN88P8XnBlJ1SUzC3tKZdsfoz8LwBvTRP5bU0K4smQo3cSdXgheT IXFXqm4dyRzZAnkj2CfxD27B7fyWYqCJB912uP1QcjuM2tPYDRi3FHbSsQdFVwCp -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:30 2026 by rpki-client