$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft File: c42e23f5-032b-4670-8e05-b4b0477e4388.mft (raw, json) Hash identifier: V+nKRU1sw8dME/T1lQ8EH8jeEMQ3bVWuEM0r8zrur4Q= Subject key identifier: 86:6A:B6:58:41:09:BA:FD:1B:78:A6:48:91:26:DE:72:D3:E2:EC:B7 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F4328584D0682EC2ECAB74416BBF2F480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft Manifest number: 010D0C9F4328584389B3BAF0D09E548527ADC37E Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Wed 04 Mar 2026 16:00:00 +0000 Files and hashes: 1: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (hash: G7di9qDwnjekSTTQOgF8SKtTPmq0OnghVABf9KbTSJc=) 2: c42e23f5-032b-4670-8e05-b4b0477e4388.crl (hash: ZAZ6D9k5BLk8e6aqI1IwsCkftUlR9wvr0OgGlSrOwa4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:ec:2e:ca:b7:44:16:bb:f2:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 4 16:00:00 2026 GMT Subject: CN=90d4815e-682a-40a7-9101-75e5fc219493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:35:77:d5:6a:eb:d7:aa:61:5e:fd:32:07: ff:bf:2b:81:bd:0f:bb:e3:46:af:14:86:6e:d2:63: 08:5e:e4:f1:2c:56:6f:07:e5:07:af:9e:23:67:b5: 63:59:29:db:f7:bd:fe:eb:b6:18:d1:d4:99:07:20: ba:1b:0f:de:4f:cf:49:1f:e7:af:06:0d:1b:a3:cd: 31:40:31:1d:14:b4:02:59:91:ce:ef:d7:c3:e7:3e: 50:db:8a:9e:f0:c1:cf:55:b3:fd:fc:99:ca:1c:11: 19:26:36:e6:e2:0f:34:82:7d:e3:f1:ef:9f:3f:de: 00:bc:2b:5b:77:17:21:d7:1f:cf:1d:e7:a2:c4:58: 73:0b:09:75:d2:90:ff:e2:4d:5e:25:48:dc:7a:95: c3:d1:6c:1f:e7:e9:3b:3c:92:cd:a2:d4:57:c3:8f: bb:1e:41:9d:2e:79:ca:9a:cb:a4:65:2a:74:6c:e8: 08:1a:9e:37:8f:36:c5:ec:33:2c:a3:dc:33:36:b7: 3a:bd:29:68:6e:18:2a:de:da:3d:0b:7a:90:b9:fb: 19:ec:b8:03:4d:5a:4c:55:7c:78:ad:05:e7:e1:4c: 0c:7e:41:16:bd:36:73:35:2c:d8:98:5c:0d:d2:2c: 7b:de:cc:bb:e2:da:ec:59:6e:e9:d4:77:fd:61:77: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6A:B6:58:41:09:BA:FD:1B:78:A6:48:91:26:DE:72:D3:E2:EC:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:18:b2:22:7b:59:64:47:0b:2c:c1:f5:ee:a5:c8:fe:18:7e: 80:45:2f:be:f7:a7:ed:38:29:16:0b:58:3e:74:26:dd:e7:cd: 5c:e0:00:e1:8d:06:bc:30:85:a0:ac:79:ea:10:bd:4f:31:f6: c0:26:ed:30:e0:38:8f:90:d9:eb:20:33:98:14:6d:54:a3:ce: 59:ff:45:05:ff:ee:b4:b4:1d:c8:06:02:ad:45:bd:ca:b0:76: 15:be:fa:9a:df:ed:dc:fe:67:71:ad:30:5a:c6:da:c3:bc:b6: ba:11:cd:c5:d8:18:e4:64:8f:ae:08:f9:3e:74:6a:e5:3e:c8: 89:c7:4f:49:e3:ba:86:5f:10:91:90:29:50:ad:f9:40:11:37: 2c:08:48:e6:91:58:2c:ca:c1:8a:57:8a:0a:1f:0f:53:7b:e3: f0:f6:02:8b:29:2b:8c:43:83:0c:17:8a:9b:b8:9a:a8:9f:65: a3:20:56:76:51:75:f8:e6:26:fe:23:28:7f:e4:ca:37:59:61: de:af:a7:60:f2:5b:f7:8c:39:a2:0a:e2:f0:b9:bc:28:90:8b: 33:b3:eb:5f:7b:b8:15:d9:82:41:58:a8:08:74:1f:c1:0d:53: e7:e3:a1:30:7a:e7:e7:bf:f8:6e:38:f7:a1:c7:44:f2:cc:78: f8:56:4d:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GguwuyrdEFrvy9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwNDE2MDAwMFowLzEtMCsGA1UEAxMk OTBkNDgxNWUtNjgyYS00MGE3LTkxMDEtNzVlNWZjMjE5NDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY81d9Vq69eqYV79Mgf/vyuBvQ+740avFIZu 0mMIXuTxLFZvB+UHr54jZ7VjWSnb973+67YY0dSZByC6Gw/eT89JH+evBg0bo80x QDEdFLQCWZHO79fD5z5Q24qe8MHPVbP9/JnKHBEZJjbm4g80gn3j8e+fP94AvCtb dxch1x/PHeeixFhzCwl10pD/4k1eJUjcepXD0Wwf5+k7PJLNotRXw4+7HkGdLnnK msukZSp0bOgIGp43jzbF7DMso9wzNrc6vSlobhgq3to9C3qQufsZ7LgDTVpMVXx4 rQXn4UwMfkEWvTZzNSzYmFwN0ix73sy74trsWW7p1Hf9YXcLpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIZqtlhBCbr9G3imSJEm3nLT4uy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvYzQyZTIzZjUtMDMyYi00 NjcwLThlMDUtYjRiMDQ3N2U0Mzg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkGLIie1lkRwsswfXupcj+ GH6ARS++96ftOCkWC1g+dCbd581c4ADhjQa8MIWgrHnqEL1PMfbAJu0w4DiPkNnr IDOYFG1Uo85Z/0UF/+60tB3IBgKtRb3KsHYVvvqa3+3c/mdxrTBaxtrDvLa6Ec3F 2BjkZI+uCPk+dGrlPsiJx09J47qGXxCRkClQrflAETcsCEjmkVgsysGKV4oKHw9T e+Pw9gKLKSuMQ4MMF4qbuJqon2WjIFZ2UXX45ib+Iyh/5Mo3WWHer6dg8lv3jDmi CuLwubwokIszs+tfe7gV2YJBWKgIdB/BDVPn46Eweufnv/huOPehx0TyzHj4Vk3a -----END CERTIFICATE-----Generated at Sun Mar 1 20:31:28 2026 by rpki-client