$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61/30d15eb7-ac7c-450a-9b73-f00c52f82a61.mft File: 30d15eb7-ac7c-450a-9b73-f00c52f82a61.mft (raw, json) Hash identifier: fa5JIO8EOFHEE3ECaGZFJ25aC5BxDEjaghT1TEiwHR4= Subject key identifier: D4:C9:98:A4:84:88:3D:DC:7E:C4:37:4F:AB:88:53:29:84:CB:C9:9C Authority key identifier: D9:5E:92:97:D1:CB:B9:EA:17:1B:53:A0:61:28:B1:B4:20:29:14:41 Certificate issuer: /CN=30d15eb7-ac7c-450a-9b73-f00c52f82a61 Certificate serial: 010D0C9F4328584D06FA077BF82844CE1550C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61/30d15eb7-ac7c-450a-9b73-f00c52f82a61.mft Manifest number: 010D0C9F4328584BDC55B00DB70B0768918450ED Signing time: Sun 01 Mar 2026 20:00:09 +0000 Manifest this update: Sun 01 Mar 2026 20:00:09 +0000 Manifest next update: Tue 03 Mar 2026 20:00:00 +0000 Files and hashes: 1: 30d15eb7-ac7c-450a-9b73-f00c52f82a61.crl (hash: 0Aj4ERcjooFESlyTySPVhm3qQHb7SezD5dvLWrfFtmc=) 2: fe0b88a6-1035-39fd-93b9-1758a1b0d853.roa (hash: FlT5qyatFWmQ7ztrTHU/PQyKovHlPqSSzwmOGQxqMrk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61/30d15eb7-ac7c-450a-9b73-f00c52f82a61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61/30d15eb7-ac7c-450a-9b73-f00c52f82a61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:fa:07:7b:f8:28:44:ce:15:50:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d15eb7-ac7c-450a-9b73-f00c52f82a61 Validity Not Before: Mar 1 20:00:09 2026 GMT Not After : Mar 3 20:00:00 2026 GMT Subject: CN=91ab38f5-98c5-47e5-bcdb-9b6f6752261d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:bb:5a:3a:92:3f:d8:ec:b3:e7:9f:4d:df: 0d:10:95:7a:a7:de:76:9c:69:e0:d6:8e:3f:e3:ef: b9:08:c2:8b:41:af:22:a7:35:c8:ba:66:f1:c8:a2: 08:f5:07:f9:ae:10:b5:69:01:cd:57:90:aa:53:ea: dc:e9:1d:9d:39:cb:18:8b:39:65:31:5f:c1:d8:b8: 16:5a:6c:7c:3f:7d:64:d6:36:85:7a:dc:3d:c5:31: 2b:c9:6e:ed:44:d9:ca:af:d3:79:65:da:a6:73:72: b0:6c:31:df:bd:73:3e:12:46:8e:a9:ed:a9:14:62: 81:2e:63:fd:d8:4c:9d:b1:ed:b4:ab:c6:c9:4d:b8: e8:22:d8:4f:55:04:69:75:cd:c3:e8:c2:71:51:5a: 75:eb:b7:eb:aa:c8:4c:f5:64:c1:ce:36:d5:b8:23: de:b6:32:56:20:ad:f7:20:e0:a3:51:09:1e:5a:2c: 6a:69:cf:fa:e6:aa:74:cd:70:be:db:ab:17:08:05: 05:18:f8:66:62:9a:5e:aa:80:59:6e:d8:da:a9:32: c3:1f:03:ca:3d:21:87:07:3c:bc:2d:d8:d3:e1:c3: 5d:4a:1b:ce:17:57:41:23:65:29:0e:b4:a6:29:4c: 00:3e:78:a2:a9:9a:4f:81:3c:aa:b0:17:03:e8:5d: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C9:98:A4:84:88:3D:DC:7E:C4:37:4F:AB:88:53:29:84:CB:C9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61/30d15eb7-ac7c-450a-9b73-f00c52f82a61.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61/30d15eb7-ac7c-450a-9b73-f00c52f82a61.crl X509v3 Authority Key Identifier: keyid:D9:5E:92:97:D1:CB:B9:EA:17:1B:53:A0:61:28:B1:B4:20:29:14:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/30d15eb7-ac7c-450a-9b73-f00c52f82a61.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:2f:5c:db:21:00:60:b2:f8:d9:9c:54:6a:82:36:8b:00:41: 8d:83:c5:32:6f:81:b7:69:8d:a5:6e:89:74:ca:b7:9a:9e:6d: 39:c9:fa:50:61:e6:83:1a:8d:81:f3:f8:4f:4d:12:82:9f:2c: 0d:50:e9:96:42:00:f3:83:7b:63:a7:6c:8b:9f:0e:4a:78:2a: da:e6:1f:e8:76:fd:f5:64:cc:94:ea:ec:1e:ad:ce:35:4a:20: e2:22:45:07:9b:58:f3:bf:2d:a1:a4:95:f6:7a:0f:bf:93:33: b5:e8:60:c3:41:c8:35:b0:b7:2c:41:7f:8c:69:c9:67:68:cf: c6:c0:56:04:d4:e6:58:e8:ab:5a:51:b6:d8:05:de:d2:86:98: 7b:85:6e:1f:be:32:fa:8f:ff:41:73:8f:57:32:6d:5c:e4:93: 35:b2:f7:04:87:d6:04:1e:d5:7b:ce:9f:d1:2f:e6:06:ff:ff: 01:6d:05:c9:f9:89:43:56:d3:c8:66:5f:fa:55:a0:08:a9:22: 0f:01:a0:e3:fc:2e:bc:bc:0f:32:40:84:cc:a9:f9:5a:be:dc: 5a:b5:0c:cc:3c:6a:91:7b:ad:91:c5:e1:cd:c7:78:87:17:c1: 0a:ca:26:90:2b:3b:74:88:f8:76:22:57:c5:88:d0:7b:ac:00: eb:09:f5:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G+gd7+ChEzhVQyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkMTVlYjctYWM3Yy00NTBhLTliNzMtZjAwYzUyZjgy YTYxMB4XDTI2MDMwMTIwMDAwOVoXDTI2MDMwMzIwMDAwMFowLzEtMCsGA1UEAxMk OTFhYjM4ZjUtOThjNS00N2U1LWJjZGItOWI2ZjY3NTIyNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQK7WjqSP9jss+efTd8NEJV6p952nGng1o4/ 4++5CMKLQa8ipzXIumbxyKII9Qf5rhC1aQHNV5CqU+rc6R2dOcsYizllMV/B2LgW Wmx8P31k1jaFetw9xTEryW7tRNnKr9N5Zdqmc3KwbDHfvXM+EkaOqe2pFGKBLmP9 2Eydse20q8bJTbjoIthPVQRpdc3D6MJxUVp167frqshM9WTBzjbVuCPetjJWIK33 IOCjUQkeWixqac/65qp0zXC+26sXCAUFGPhmYppeqoBZbtjaqTLDHwPKPSGHBzy8 LdjT4cNdShvOF1dBI2UpDrSmKUwAPniiqZpPgTyqsBcD6F2uzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNTJmKSEiD3cfsQ3T6uIUymEy8mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMGQx NWViNy1hYzdjLTQ1MGEtOWI3My1mMDBjNTJmODJhNjEvMzBkMTVlYjctYWM3Yy00 NTBhLTliNzMtZjAwYzUyZjgyYTYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzBkMTVlYjctYWM3Yy00NTBhLTli NzMtZjAwYzUyZjgyYTYxLzMwZDE1ZWI3LWFjN2MtNDUwYS05YjczLWYwMGM1MmY4 MmE2MS5jcmwwHwYDVR0jBBgwFoAU2V6Sl9HLueoXG1OgYSixtCApFEEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMGQxNWViNy1hYzdjLTQ1MGEtOWI3My1mMDBj NTJmODJhNjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCML1zbIQBgsvjZnFRqgjaL AEGNg8Uyb4G3aY2lbol0yreanm05yfpQYeaDGo2B8/hPTRKCnywNUOmWQgDzg3tj p2yLnw5KeCra5h/odv31ZMyU6uwerc41SiDiIkUHm1jzvy2hpJX2eg+/kzO16GDD Qcg1sLcsQX+MaclnaM/GwFYE1OZY6KtaUbbYBd7Shph7hW4fvjL6j/9Bc49XMm1c 5JM1svcEh9YEHtV7zp/RL+YG//8BbQXJ+YlDVtPIZl/6VaAIqSIPAaDj/C68vA8y QITMqflavtxatQzMPGqRe62RxeHNx3iHF8EKyiaQKzt0iPh2IlfFiNB7rADrCfXh -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:06 2026 by rpki-client