$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft File: 1cf30977-73f6-4522-b061-66f0061f58dd.mft (raw, json) Hash identifier: WsxrVYnbBbVLQ4oTOfw6osZNtACvwV/7VrpEk/pZ1nw= Subject key identifier: E4:CC:7C:C6:F3:AC:1B:73:F9:1E:90:A8:27:DD:C4:EB:FE:6E:9E:F6 Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 Certificate issuer: /CN=1cf30977-73f6-4522-b061-66f0061f58dd Certificate serial: 010D0C9F4328584D06A0A33EF26626235AF4FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft Manifest number: 010D0C9F432858435D3B6876837249857343838C Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Wed 04 Mar 2026 17:00:00 +0000 Files and hashes: 1: 1cf30977-73f6-4522-b061-66f0061f58dd.crl (hash: wwnw08GIEgI/ma4pTbp8WoFvIF0fz1D/+fHirBV6pc0=) 2: c8823d7b-5ece-3489-b72b-ced743ec137b.roa (hash: 5+lZswLy1NP8vCm9BXsvIxDhrzsWlkxOXy26yvoDNdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a3:3e:f2:66:26:23:5a:f4:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 4 17:00:00 2026 GMT Subject: CN=6ad39f55-bfad-4470-b447-3f4722f93acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:c7:b1:86:5b:d8:da:53:a4:c6:78:c5:a5: 5f:36:b0:04:dc:4a:e2:03:fc:34:e1:29:96:34:9d: 07:28:02:8f:1f:f9:16:5b:cf:cb:42:68:ff:05:fc: c3:1f:d9:ec:14:39:bf:9e:d5:1b:12:30:1d:21:87: ec:a9:b3:0e:e1:d4:56:0f:08:c5:8c:d2:97:9a:cb: 4a:f6:cd:66:86:b0:e2:79:5e:a0:70:e0:cb:a2:3a: 4b:ee:58:8c:43:05:3f:77:49:22:d4:4a:f4:10:ec: f0:d2:cf:27:a7:98:94:e2:74:3c:66:4b:bc:9f:f5: a7:f9:b9:be:c7:2e:ba:58:c4:e6:a0:aa:4c:3d:c5: b4:8b:c9:c8:46:72:f1:34:e7:57:cc:ca:11:c6:5c: a6:f4:39:68:66:5f:1d:85:cb:06:c4:69:24:65:06: 99:60:67:7b:c0:87:f9:06:40:e9:83:28:a4:5f:b7: 01:de:39:6c:97:92:88:47:35:c0:fc:e0:d3:ee:b4: 20:95:cd:84:77:16:c9:31:f0:0e:46:f5:ea:1c:3a: 3e:f4:3e:38:88:6e:58:c2:89:89:90:8e:5b:47:d5: f0:39:1d:40:f3:c3:fd:ba:2e:ac:0c:6b:18:76:d6: 6f:ea:33:98:ae:59:68:56:04:c2:4d:97:6c:64:78: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:7C:C6:F3:AC:1B:73:F9:1E:90:A8:27:DD:C4:EB:FE:6E:9E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl X509v3 Authority Key Identifier: keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2a:b3:da:57:23:99:36:71:78:16:7b:55:ca:6a:51:d1:1e: 91:dd:ab:cb:c5:f9:fe:9d:86:fb:e1:a3:1c:60:13:f4:f4:df: 91:ac:16:33:dd:db:a3:09:66:df:f3:44:c8:78:2d:22:b4:3a: 36:06:b7:ae:2a:f4:7c:a4:a3:30:d6:60:89:e5:53:9c:c4:21: 13:3f:fe:9d:ed:06:60:67:83:19:d4:f0:05:d9:a3:b7:21:29: 64:e7:60:9e:1e:bc:3d:7e:1b:34:86:2f:e9:eb:c2:44:db:3a: 52:ed:32:37:de:00:f3:78:74:2f:c8:18:15:82:13:67:0c:ce: 82:de:f3:21:a0:d2:4d:d6:f3:41:bd:f9:8a:16:1e:2e:b0:8c: c0:70:84:b6:77:48:77:b3:ef:a9:68:46:af:fb:e0:7b:9b:65: fd:9b:d5:dd:45:27:8e:e3:0c:f6:57:13:5e:8d:07:45:20:41: 2e:6b:e5:32:f2:81:b1:5b:49:01:8c:df:2d:24:5f:81:b6:8b: 8e:cf:5d:6a:6a:0b:b5:f9:6b:0e:e5:a9:7c:01:2d:11:fe:24: 47:30:8b:60:d9:c9:b2:fd:3c:f1:07:ac:09:13:b7:00:60:2b: d5:e9:35:98:c9:e6:81:07:29:20:21:c5:70:50:dd:d8:79:6f: dd:44:57:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKM+8mYmI1r0/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1 OGRkMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwNDE3MDAwMFowLzEtMCsGA1UEAxMk NmFkMzlmNTUtYmZhZC00NDcwLWI0NDctM2Y0NzIyZjkzYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitzHsYZb2NpTpMZ4xaVfNrAE3EriA/w04SmW NJ0HKAKPH/kWW8/LQmj/BfzDH9nsFDm/ntUbEjAdIYfsqbMO4dRWDwjFjNKXmstK 9s1mhrDieV6gcODLojpL7liMQwU/d0ki1Er0EOzw0s8np5iU4nQ8Zku8n/Wn+bm+ xy66WMTmoKpMPcW0i8nIRnLxNOdXzMoRxlym9DloZl8dhcsGxGkkZQaZYGd7wIf5 BkDpgyikX7cB3jlsl5KIRzXA/ODT7rQglc2EdxbJMfAORvXqHDo+9D44iG5YwomJ kI5bR9XwOR1A88P9ui6sDGsYdtZv6jOYrlloVgTCTZdsZHhN9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOTMfMbzrBtz+R6QqCfdxOv+bp72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvMWNmMzA5NzctNzNmNi00 NTIyLWIwNjEtNjZmMDA2MWY1OGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw MDYxZjU4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvKrPaVyOZNnF4FntVympR 0R6R3avLxfn+nYb74aMcYBP09N+RrBYz3dujCWbf80TIeC0itDo2BreuKvR8pKMw 1mCJ5VOcxCETP/6d7QZgZ4MZ1PAF2aO3ISlk52CeHrw9fhs0hi/p68JE2zpS7TI3 3gDzeHQvyBgVghNnDM6C3vMhoNJN1vNBvfmKFh4usIzAcIS2d0h3s++paEav++B7 m2X9m9XdRSeO4wz2VxNejQdFIEEua+Uy8oGxW0kBjN8tJF+BtouOz11qagu1+WsO 5al8AS0R/iRHMItg2cmy/TzxB6wJE7cAYCvV6TWYyeaBBykgIcVwUN3YeW/dRFeh -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:36 2026 by rpki-client