$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft File: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft (raw, json) Hash identifier: PmP12KfiqepS2mlLmpHj3RICLknORsQIaIu0UuZUHVc= Subject key identifier: 5D:27:E7:3E:61:9B:87:F7:2E:3C:38:BE:2A:B1:AA:C5:FE:65:67:0A Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F4328584D044D12EEE2260932E0A2F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft Manifest number: 010D0C9F43285844428AC3B86B4E57E2FE15F2A6 Signing time: Sat 28 Feb 2026 21:00:03 +0000 Manifest this update: Sat 28 Feb 2026 21:00:03 +0000 Manifest next update: Mon 02 Mar 2026 21:00:00 +0000 Files and hashes: 1: 9a56588a-a022-38cf-a593-5622658a6eae.roa (hash: yoWcoAp5xQMcp7yl+ESZYZtNvrQR/z8Z2C0DdQOhKKs=) 2: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl (hash: /MZ0rSeYBZNopKqtqLc4j8LFOz1Uppx/wH7vvJu8qXw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:4d:12:ee:e2:26:09:32:e0:a2:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Feb 28 21:00:03 2026 GMT Not After : Mar 2 21:00:00 2026 GMT Subject: CN=98c93ee9-e2f5-4931-9761-a12e7fd8b8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:a8:53:4b:27:cd:6c:5e:ee:af:6a:c7:b0: 9b:eb:d9:53:5b:b1:18:0f:15:11:67:fd:67:10:8d: 9e:d3:2d:a7:ac:00:5d:d8:53:b7:d1:94:e9:12:f2: 1d:ee:16:7d:68:93:6f:bd:6d:3f:1a:d4:6d:9f:aa: f9:fc:8b:45:02:ae:95:88:37:db:94:a4:69:4d:c4: cd:38:d3:7d:57:3d:d7:ea:f5:9d:09:3e:8e:7f:22: df:f2:bc:3f:9f:6d:1f:49:25:59:a1:70:02:d9:4c: 91:ce:61:fb:b4:c1:79:d7:70:12:69:c1:79:22:5e: 28:71:6a:bf:cd:bf:95:6a:cc:14:a2:83:06:48:43: 5c:b3:74:71:7c:03:8a:e8:79:83:b1:63:2f:24:fc: 8b:a7:a0:1c:72:06:40:ca:44:c4:8f:8b:2d:ed:64: a7:2a:62:49:c7:e2:72:87:8b:a1:4b:25:7e:31:cd: 5c:27:98:ae:5f:83:b1:8b:c6:02:32:ff:6c:25:11: 82:bc:9c:f3:b8:c3:e5:6d:ef:c3:13:3d:c2:c7:d6: 0c:bf:85:04:84:7e:2a:70:f4:45:10:62:7b:75:06: ad:2a:f9:7e:67:a6:42:d7:cd:26:22:9f:50:6a:1d: cc:2a:06:67:73:61:8e:ba:62:a0:4c:2d:b1:e4:8e: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:27:E7:3E:61:9B:87:F7:2E:3C:38:BE:2A:B1:AA:C5:FE:65:67:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:44:6a:63:e0:e9:ff:fa:35:8a:05:c7:c8:17:d4:84:1f: a3:3d:c0:9d:19:25:1e:cb:b6:4c:2a:30:7e:38:84:01:d5:5a: cd:29:74:76:02:da:2a:5e:00:5b:73:b6:74:9e:1d:bd:c1:bf: 3c:97:ed:ac:0a:c5:03:67:59:65:ae:72:d7:7c:46:eb:00:7a: 82:6e:11:b1:13:71:d5:99:0e:c7:19:65:e7:05:1b:c1:b6:19: d2:0e:5b:ad:e1:0f:db:45:4f:26:30:64:cb:92:93:5f:ca:0a: e1:a8:a6:0f:35:bf:49:7b:9f:85:b0:9c:a0:5f:39:40:c0:de: 83:a4:73:99:3a:1d:d3:b9:e5:ca:af:38:34:0e:21:34:6d:ee: d9:5b:ed:69:16:7e:f3:fc:62:ca:cf:5e:e6:a5:25:ab:be:05: cf:d9:39:03:9c:19:06:95:02:f8:3a:e5:ab:74:3e:0d:71:c7: f4:6b:1d:da:7b:a5:27:e6:2f:68:29:c3:af:13:35:83:ce:43: 1a:6a:ca:3d:23:60:c5:c7:5f:cf:1c:c6:84:14:31:cb:92:82: ef:7d:eb:6a:49:5c:00:61:92:d1:a5:c8:d4:1e:93:65:86:a9: e0:9e:2d:aa:28:21:d7:29:6f:f6:7a:37:44:86:43:be:04:60: 36:1f:7c:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0ETRLu4iYJMuCi8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI2MDIyODIxMDAwM1oXDTI2MDMwMjIxMDAwMFowLzEtMCsGA1UEAxMk OThjOTNlZTktZTJmNS00OTMxLTk3NjEtYTEyZTdmZDhiOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/moU0snzWxe7q9qx7Cb69lTW7EYDxURZ/1n EI2e0y2nrABd2FO30ZTpEvId7hZ9aJNvvW0/GtRtn6r5/ItFAq6ViDfblKRpTcTN ONN9Vz3X6vWdCT6OfyLf8rw/n20fSSVZoXAC2UyRzmH7tMF513ASacF5Il4ocWq/ zb+VaswUooMGSENcs3RxfAOK6HmDsWMvJPyLp6AccgZAykTEj4st7WSnKmJJx+Jy h4uhSyV+Mc1cJ5iuX4Oxi8YCMv9sJRGCvJzzuMPlbe/DEz3Cx9YMv4UEhH4qcPRF EGJ7dQatKvl+Z6ZC180mIp9Qah3MKgZnc2GOumKgTC2x5I6GxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF0n5z5hm4f3Ljw4viqxqsX+ZWcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvYTUyZjNiNDItMmMxOS00 MTQxLThkOGEtZmE4NGIzZDZhNDllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK+URqY+Dp//o1igXHyBfU hB+jPcCdGSUey7ZMKjB+OIQB1VrNKXR2AtoqXgBbc7Z0nh29wb88l+2sCsUDZ1ll rnLXfEbrAHqCbhGxE3HVmQ7HGWXnBRvBthnSDlut4Q/bRU8mMGTLkpNfygrhqKYP Nb9Je5+FsJygXzlAwN6DpHOZOh3TueXKrzg0DiE0be7ZW+1pFn7z/GLKz17mpSWr vgXP2TkDnBkGlQL4OuWrdD4Nccf0ax3ae6Un5i9oKcOvEzWDzkMaaso9I2DFx1/P HMaEFDHLkoLvfetqSVwAYZLRpcjUHpNlhqngni2qKCHXKW/2ejdEhkO+BGA2H3wr -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:26 2026 by rpki-client