$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: tGi58SXRBuGXjxHiMNN5+u0wJYqlO+fmsu3Bba27CRc= Subject key identifier: 91:8F:36:D0:75:32:B1:51:66:2E:2C:3D:FB:03:80:C1:64:45:E8:4D Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584D06FA0A50B5C565FF1249E410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3CC3 Signing time: Sun 01 Mar 2026 20:00:09 +0000 Manifest this update: Sun 01 Mar 2026 20:00:09 +0000 Manifest next update: Wed 04 Mar 2026 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: aJKgvLPcID8nhKKpkprw6rlhsd0cjsG685qYT0p4jsg=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: 00y9pJFSSWFnxWTS2wYnpN9l9RGLozGVBHftTkeR3SE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:fa:0a:50:b5:c5:65:ff:12:49:e4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Mar 1 20:00:09 2026 GMT Not After : Mar 4 20:00:00 2026 GMT Subject: CN=c88f1bf1-1862-4469-8e9a-f2b7b8c3808d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:a5:b0:8e:ef:ac:14:74:27:14:0c:8d:76: 8a:57:84:37:35:df:b8:48:fb:c9:44:18:97:93:14: 92:9c:c1:b7:ac:a4:bb:5a:76:07:0e:99:1c:7d:f9: b9:2b:21:73:1a:26:23:81:37:ec:ec:2f:71:01:df: 94:87:ec:ee:ba:f6:4e:42:65:5b:bc:3d:41:a5:2a: d2:a6:a0:19:b5:3f:2a:ea:5b:a1:3e:c1:8f:36:6d: d3:14:02:0f:60:f4:ea:65:6b:fb:82:47:a0:7e:dd: 06:44:3b:59:37:7b:ef:93:c8:4b:23:29:eb:f0:94: af:77:08:a2:22:5e:6f:1f:4b:47:c2:9b:6f:e9:0b: 0f:5f:a1:00:e7:95:df:d2:fd:4d:f4:51:df:9d:20: cd:74:a9:d8:de:a5:7c:32:fe:06:3a:97:ef:51:74: e6:0b:57:74:86:95:ec:5c:76:22:cf:9c:2f:13:ba: b5:eb:e6:85:33:7f:76:2a:db:28:52:01:d8:3a:91: c6:80:15:18:1b:9d:cc:39:f4:c6:3f:02:be:83:ef: 7a:23:45:f5:e6:37:ae:65:2d:6b:6a:dc:17:ce:b2: ad:7c:3b:c5:b1:da:b6:34:0e:52:41:7e:a7:55:7b: 0e:53:ec:a8:2d:89:d8:9f:6d:14:22:d6:82:08:d8: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8F:36:D0:75:32:B1:51:66:2E:2C:3D:FB:03:80:C1:64:45:E8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:36:bb:37:a5:11:22:e2:f8:f4:45:65:58:ec:96:af:fd: 14:5f:27:f0:4a:87:a9:ea:a8:b2:34:44:e6:d7:33:62:62:f7: af:f2:30:fa:2c:a2:19:52:41:60:90:74:01:8d:84:01:89:e1: db:c1:43:dc:a5:44:10:67:c1:fe:ab:25:b8:ea:df:ec:a5:80: c6:3b:bd:21:aa:be:ae:3b:8d:6e:ab:20:bc:1f:0d:fe:3c:55: c5:03:52:bb:72:41:9d:84:91:9d:37:1f:1e:4e:d0:42:5e:9b: 48:0f:6f:aa:33:4f:54:b8:b4:74:43:9a:ab:bf:f0:1f:f5:72: 0b:51:67:53:27:c0:43:b3:3d:73:39:45:33:54:40:bb:ea:7e: 3a:03:f3:88:5d:4f:ce:37:ab:fc:90:62:27:dc:a8:91:de:e7: d8:7f:cc:ff:c4:d4:62:26:ec:9d:00:87:d0:bd:fa:6c:89:60: 45:c5:a9:e9:ad:77:9c:99:5d:89:5b:d6:a1:9b:79:16:d4:82: 1b:b1:6a:94:e6:cd:17:aa:ba:dd:47:4b:ae:9f:67:32:52:ca: c3:81:cd:9e:00:51:81:7b:7d:92:e8:95:73:6d:a0:a5:2b:ef: 83:c4:c5:1e:9d:46:0c:72:94:ec:46:90:4a:8d:5f:b6:9c:5f: 7b:2a:5a:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G+gpQtcVl/xJJ5BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDMwMTIwMDAwOVoXDTI2MDMwNDIwMDAwMFowLzEtMCsGA1UEAxMk Yzg4ZjFiZjEtMTg2Mi00NDY5LThlOWEtZjJiN2I4YzM4MDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpGlsI7vrBR0JxQMjXaKV4Q3Nd+4SPvJRBiX kxSSnMG3rKS7WnYHDpkcffm5KyFzGiYjgTfs7C9xAd+Uh+zuuvZOQmVbvD1BpSrS pqAZtT8q6luhPsGPNm3TFAIPYPTqZWv7gkegft0GRDtZN3vvk8hLIynr8JSvdwii Il5vH0tHwptv6QsPX6EA55Xf0v1N9FHfnSDNdKnY3qV8Mv4GOpfvUXTmC1d0hpXs XHYiz5wvE7q16+aFM392KtsoUgHYOpHGgBUYG53MOfTGPwK+g+96I0X15jeuZS1r atwXzrKtfDvFsdq2NA5SQX6nVXsOU+yoLYnYn20UItaCCNiPvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJGPNtB1MrFRZi4sPfsDgMFkRehNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfKza7N6URIuL49EVlWOyW r/0UXyfwSoep6qiyNETm1zNiYvev8jD6LKIZUkFgkHQBjYQBieHbwUPcpUQQZ8H+ qyW46t/spYDGO70hqr6uO41uqyC8Hw3+PFXFA1K7ckGdhJGdNx8eTtBCXptID2+q M09UuLR0Q5qrv/Af9XILUWdTJ8BDsz1zOUUzVEC76n46A/OIXU/ON6v8kGIn3KiR 3ufYf8z/xNRiJuydAIfQvfpsiWBFxanprXecmV2JW9ahm3kW1IIbsWqU5s0Xqrrd R0uun2cyUsrDgc2eAFGBe32S6JVzbaClK++DxMUenUYMcpTsRpBKjV+2nF97Klof -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:09 2026 by rpki-client