$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft File: 1c939443-d4d3-4122-9e02-8422f40f90c5.mft (raw, json) Hash identifier: fBVcnDpsDgG5Bva+IXeG+P7gbN4+H0PxH8S1yB7U+Ww= Subject key identifier: 9E:EE:E4:24:AD:EA:52:09:BB:8C:09:F1:8D:E9:2C:42:1B:3A:E9:E4 Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Certificate issuer: /CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Certificate serial: 010D0C9F4328584D066515CE03D09C3BE68409C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft Manifest number: 010D0C9F432858430ED6AE4515AF570837AF1969 Signing time: Sun 01 Mar 2026 15:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:00:03 +0000 Manifest next update: Wed 04 Mar 2026 15:00:00 +0000 Files and hashes: 1: 1c939443-d4d3-4122-9e02-8422f40f90c5.crl (hash: lZScS3CwO9b7TG7cppC2CSmlMojWL22pwdvAQa2RrtY=) 2: 6fccbf45-4871-3804-845f-da32fb15f471.roa (hash: kuv86ybT/mV55P+2N5Jd2Hr/O/mEew3JRaTkDwGO+Qo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:65:15:ce:03:d0:9c:3b:e6:84:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Validity Not Before: Mar 1 15:00:03 2026 GMT Not After : Mar 4 15:00:00 2026 GMT Subject: CN=db498b62-b3ae-4594-9ff0-cf7b594aca56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:0d:7d:dc:55:43:0d:bf:2b:34:a5:a7:af: 93:59:92:27:5a:59:18:12:ad:45:13:d1:6a:96:83: 08:b7:43:6d:85:b5:d1:a8:bc:52:1c:49:a5:6b:da: 83:e9:8d:76:ae:fd:bd:fb:4f:53:6c:18:38:93:e9: f0:88:f3:10:6d:ef:e2:c1:5b:14:40:99:fb:c8:24: 48:be:b0:00:fb:ed:29:69:80:40:3f:7e:27:68:7a: ed:64:55:b8:af:0a:90:83:6e:6b:21:62:14:c9:c0: fc:53:9f:92:eb:cb:57:69:42:18:93:98:81:4d:77: 04:f2:6a:e1:11:ea:51:cb:f8:48:a3:0a:ca:d0:d1: 7f:f2:e4:cb:a9:1f:f2:b6:2f:34:40:b0:2c:ab:4a: 1a:30:59:c2:88:dc:6b:f5:47:db:40:5f:f4:70:28: 46:3b:97:66:70:79:70:3a:3a:d6:52:b4:ba:f9:c7: 96:7b:ed:f6:5b:09:7d:c2:4e:04:a4:db:6f:80:5a: 80:fc:98:01:bc:46:8d:ec:67:a8:91:1f:80:98:a2: 9e:8e:4d:12:55:47:96:dc:cb:98:dd:9e:15:e3:b2: 9b:b2:0f:dc:e4:b4:bd:21:3a:dd:9d:3d:25:a5:c2: b9:e3:94:dd:9f:de:15:6c:e3:d5:25:bb:9d:3e:31: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:E4:24:AD:EA:52:09:BB:8C:09:F1:8D:E9:2C:42:1B:3A:E9:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl X509v3 Authority Key Identifier: keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0d:1a:78:78:cc:e3:22:9d:76:ce:5d:7e:e2:1c:cb:df:ae: e9:6c:97:64:07:9b:b9:76:8c:71:81:50:cb:2e:c7:c4:98:ab: d7:6c:84:7a:cc:ba:f9:6a:6d:05:b1:fa:d5:6f:03:06:1f:d1: fa:a3:c2:64:de:3c:70:7d:b1:e1:bf:1b:28:85:09:f4:b5:36: 45:c9:25:f4:29:11:46:f6:be:90:b4:c0:af:38:19:a0:5b:a3: a7:05:b6:df:70:fe:6e:86:7d:fc:0f:fd:ba:cb:19:34:1f:5a: ea:f6:d1:f2:85:8b:e4:bc:04:95:3d:d9:38:7b:c7:56:b0:a3: 48:45:56:5d:ce:10:9b:cc:ce:49:65:5c:c3:a3:60:a7:84:31: 2a:96:4d:fb:68:6b:96:ec:c6:9d:bf:18:30:17:41:0d:cb:b5: 6d:5c:16:28:da:aa:1c:6c:a6:a5:7c:a4:6d:fc:66:63:ff:6a: 5b:b7:7c:3d:91:91:d3:a3:a6:fb:16:da:93:a5:79:d5:8e:27: d9:be:6b:f3:7d:36:45:f3:e6:85:73:19:7a:78:5f:08:b1:f9: af:4f:dd:55:e3:3d:71:b9:56:21:3a:38:93:1f:09:32:15:56: 73:39:27:f4:b4:a8:97:17:9a:54:27:18:ef:06:1f:be:6f:7c: f5:d2:4f:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GZRXOA9CcO+aECcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5 MGM1MB4XDTI2MDMwMTE1MDAwM1oXDTI2MDMwNDE1MDAwMFowLzEtMCsGA1UEAxMk ZGI0OThiNjItYjNhZS00NTk0LTlmZjAtY2Y3YjU5NGFjYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwNfdxVQw2/KzSlp6+TWZInWlkYEq1FE9Fq loMIt0NthbXRqLxSHEmla9qD6Y12rv29+09TbBg4k+nwiPMQbe/iwVsUQJn7yCRI vrAA++0paYBAP34naHrtZFW4rwqQg25rIWIUycD8U5+S68tXaUIYk5iBTXcE8mrh EepRy/hIowrK0NF/8uTLqR/yti80QLAsq0oaMFnCiNxr9UfbQF/0cChGO5dmcHlw OjrWUrS6+ceWe+32Wwl9wk4EpNtvgFqA/JgBvEaN7GeokR+AmKKejk0SVUeW3MuY 3Z4V47Kbsg/c5LS9ITrdnT0lpcK545Tdn94VbOPVJbudPjFzMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ7u5CSt6lIJu4wJ8Y3pLEIbOunkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzkz OTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMWM5Mzk0NDMtZDRkMy00 MTIyLTllMDItODQyMmY0MGY5MGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM5Mzk0NDMtZDRkMy00MTIyLTll MDItODQyMmY0MGY5MGM1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05ZTAyLTg0MjJmNDBm OTBjNS5jcmwwHwYDVR0jBBgwFoAUcwBMVZEDoAnEK13od5gZ5m1HdWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIy ZjQwZjkwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGDRp4eMzjIp12zl1+4hzL 367pbJdkB5u5doxxgVDLLsfEmKvXbIR6zLr5am0FsfrVbwMGH9H6o8Jk3jxwfbHh vxsohQn0tTZFySX0KRFG9r6QtMCvOBmgW6OnBbbfcP5uhn38D/26yxk0H1rq9tHy hYvkvASVPdk4e8dWsKNIRVZdzhCbzM5JZVzDo2CnhDEqlk37aGuW7MadvxgwF0EN y7VtXBYo2qocbKalfKRt/GZj/2pbt3w9kZHTo6b7FtqTpXnVjifZvmvzfTZF8+aF cxl6eF8IsfmvT91V4z1xuVYhOjiTHwkyFVZzOSf0tKiXF5pUJxjvBh++b3z10k9m -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:23 2026 by rpki-client