$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft File: ac870f3e-b014-4387-bb59-63f4192b5665.mft (raw, json) Hash identifier: gaM9KaKtC47VAb+6LPa4V9Q97mzt0trsOl/jo9yfV2o= Subject key identifier: B4:FA:42:58:C2:45:D1:62:29:A8:59:54:60:69:35:C1:6C:75:1D:26 Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665 Certificate serial: 010D0C9F4328584D078EDD936107315CE19C6500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft Manifest number: 010D0C9F43285843C5670C91ACAFC11981795B66 Signing time: Mon 02 Mar 2026 01:00:04 +0000 Manifest this update: Mon 02 Mar 2026 01:00:04 +0000 Manifest next update: Wed 04 Mar 2026 01:00:00 +0000 Files and hashes: 1: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (hash: 7do8uvLF/N6InmIXU98NnmJFQUABir+Xni7c+SokohQ=) 2: ac870f3e-b014-4387-bb59-63f4192b5665.crl (hash: ujybVsWfUlXgdowWz60WRFuAioHXwr6Rp5DyQG9ZBEs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:8e:dd:93:61:07:31:5c:e1:9c:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665 Validity Not Before: Mar 2 01:00:04 2026 GMT Not After : Mar 4 01:00:00 2026 GMT Subject: CN=69ffe57d-cf5b-4ba5-a14e-a2203c84345e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:b9:62:4d:ec:33:86:d6:68:9e:4b:ef:5b: 6e:87:f5:18:ee:3f:9d:2b:d5:70:2d:b2:d8:45:44: d2:d4:dd:3d:78:01:6a:52:ae:5d:42:72:7b:5b:ef: 6a:18:6d:85:59:95:23:49:78:2b:45:e1:70:b0:11: a1:f6:24:03:e6:69:86:73:53:08:0f:c7:de:db:8f: f2:cc:2b:40:b5:65:83:09:e5:d1:7b:6e:9f:55:aa: 07:6e:7c:81:f2:9b:9d:52:fb:86:46:5a:42:38:92: c5:21:bb:a1:5e:18:88:9b:3c:f5:fb:1c:a1:44:8d: 10:5b:46:14:9b:62:b7:e0:45:f5:39:8c:b7:2e:a8: 5f:a1:86:be:ea:f8:d7:9c:60:94:73:cb:cc:24:ca: c9:cc:f5:af:8c:a1:f4:bd:92:17:46:ea:65:5c:9a: d8:ce:62:89:ed:6a:9f:2b:ee:3f:54:2f:09:90:c5: a0:e0:41:25:29:8d:f8:fb:76:08:de:af:9c:27:e2: 2a:82:fa:2f:cb:f5:49:69:7c:0a:32:c3:ae:4d:74: da:79:2b:50:53:7e:a9:f1:fe:20:6b:77:a2:14:bf: 3a:cf:d1:d7:5c:9b:de:e5:2a:90:de:d9:5b:c1:41: de:53:49:9e:1c:a1:02:1a:84:02:96:67:d2:1a:12: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:42:58:C2:45:D1:62:29:A8:59:54:60:69:35:C1:6C:75:1D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl X509v3 Authority Key Identifier: keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4e:8a:9e:ee:da:a0:0a:6a:88:d3:45:93:26:96:d4:a7:23: 54:24:02:92:eb:b6:8a:a4:8b:79:ee:5c:12:e0:0b:c7:79:10: 91:ca:c6:6e:57:6a:b5:a7:cc:45:15:6a:75:9f:9e:58:f7:98: 0f:59:fa:12:05:7c:0b:b9:c9:75:0e:b4:25:ef:ac:b9:0e:ba: f3:a6:88:d7:d6:48:bd:c3:e4:94:f5:80:7f:59:58:03:5c:81: f9:0e:ce:66:de:ef:72:db:c1:ff:7f:3c:05:7a:57:85:9c:af: 01:df:1b:b6:10:7c:13:14:e0:75:4c:26:e1:fd:00:80:4f:ba: 1f:e1:55:20:01:4f:b2:b6:c6:9d:97:33:72:3a:b8:d3:d8:df: 1d:c7:9e:2b:5b:a5:a8:69:8b:03:97:b8:16:ce:aa:65:f2:84: 44:c7:ad:8f:90:7c:a5:4f:d8:66:3b:fa:11:f4:98:ca:53:33: 54:0a:fe:a2:9e:41:8f:99:33:d9:74:a0:ee:b4:8c:60:60:13: a5:da:54:43:16:5a:00:65:4b:00:c8:1c:9a:b4:2f:e3:eb:61: 1c:c2:88:87:12:15:f8:dc:e0:59:30:d7:23:bd:35:8e:07:b6: f3:5a:01:b6:d3:d8:db:d6:38:7f:8d:0a:03:c0:8a:c4:3a:81: e4:5d:fb:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Hjt2TYQcxXOGcZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM4NzBmM2UtYjAxNC00Mzg3LWJiNTktNjNmNDE5MmI1 NjY1MB4XDTI2MDMwMjAxMDAwNFoXDTI2MDMwNDAxMDAwMFowLzEtMCsGA1UEAxMk NjlmZmU1N2QtY2Y1Yi00YmE1LWExNGUtYTIyMDNjODQzNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpW5Yk3sM4bWaJ5L71tuh/UY7j+dK9VwLbLY RUTS1N09eAFqUq5dQnJ7W+9qGG2FWZUjSXgrReFwsBGh9iQD5mmGc1MID8fe24/y zCtAtWWDCeXRe26fVaoHbnyB8pudUvuGRlpCOJLFIbuhXhiImzz1+xyhRI0QW0YU m2K34EX1OYy3LqhfoYa+6vjXnGCUc8vMJMrJzPWvjKH0vZIXRuplXJrYzmKJ7Wqf K+4/VC8JkMWg4EElKY34+3YI3q+cJ+Iqgvovy/VJaXwKMsOuTXTaeStQU36p8f4g a3eiFL86z9HXXJve5SqQ3tlbwUHeU0meHKECGoQClmfSGhJpBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLT6QljCRdFiKahZVGBpNcFsdR0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3 MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0MTkyYjU2NjUvYWM4NzBmM2UtYjAxNC00 Mzg3LWJiNTktNjNmNDE5MmI1NjY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4NzBmM2UtYjAxNC00Mzg3LWJi NTktNjNmNDE5MmI1NjY1L2FjODcwZjNlLWIwMTQtNDM4Ny1iYjU5LTYzZjQxOTJi NTY2NS5jcmwwHwYDVR0jBBgwFoAUr+waQxcWVf3AqPhLqFxA+OUeicYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0 MTkyYjU2NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByToqe7tqgCmqI00WTJpbU pyNUJAKS67aKpIt57lwS4AvHeRCRysZuV2q1p8xFFWp1n55Y95gPWfoSBXwLucl1 DrQl76y5DrrzpojX1ki9w+SU9YB/WVgDXIH5Ds5m3u9y28H/fzwFeleFnK8B3xu2 EHwTFOB1TCbh/QCAT7of4VUgAU+ytsadlzNyOrjT2N8dx54rW6WoaYsDl7gWzqpl 8oREx62PkHylT9hmO/oR9JjKUzNUCv6inkGPmTPZdKDutIxgYBOl2lRDFloAZUsA yByatC/j62EcwoiHEhX43OBZMNcjvTWOB7bzWgG209jb1jh/jQoDwIrEOoHkXfvu -----END CERTIFICATE-----Generated at Mon Mar 2 20:17:55 2026 by rpki-client