$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft File: d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft (raw, json) Hash identifier: iGutFddRmVL7Y6StNn5ScCMmKlSsrOPMIZupyqrMEpA= Subject key identifier: 70:6D:C1:0A:65:36:56:12:1C:52:7F:40:1A:4D:D3:82:10:7B:E9:4A Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584D0682E863E17DD335C0782080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft Manifest number: 010D0C9F43285840DAF369C653798922BCBA3035 Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Wed 04 Mar 2026 16:00:00 +0000 Files and hashes: 1: 1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa (hash: t1okz2ak8qsh1QdSp3s6hbgl3KUlgxzKSimPGsKUy+A=) 2: 84f1e976-515d-38d9-acb6-c0126c79dee6.roa (hash: QZ/VcsgzEc0ZKgZc0ScG7fqVXmhLKoOyMdq1QerU320=) 3: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (hash: XgH9/irEDfp4Ss+r6soEpyC24K9jXt8k8BhWkWO3Cyg=) 4: d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl (hash: FxZeTg6KRvXlbl5sP47CcKvP2CLcjjZEuechKgyML2U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:e8:63:e1:7d:d3:35:c0:78:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 4 16:00:00 2026 GMT Subject: CN=4b2d6f30-6013-43bf-bae4-0a5ac26ff34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:d6:b8:37:86:48:8a:53:5b:d1:ae:8d:ad: d3:b0:ca:9a:f8:2b:67:89:bf:70:fe:d6:c6:6f:7a: 00:92:94:43:c6:05:03:8a:b6:7a:f6:2e:84:d3:73: 23:d6:80:e8:7b:0b:53:e0:c0:11:92:20:47:40:2e: d5:6d:3e:cd:69:09:b1:01:c3:5e:53:b3:6b:3b:0a: 92:e1:8d:09:c5:02:fb:6a:b7:4e:83:cc:af:3e:e8: 12:2d:1c:82:7e:b8:76:40:1d:4a:3b:8e:be:02:51: ef:a9:28:c4:9c:d6:67:7b:61:56:68:4b:91:9b:cb: ec:37:1c:73:68:8d:25:62:02:a7:26:d5:8f:ae:a1: d5:a3:af:b4:8a:d3:21:fa:0b:09:8a:2b:44:6e:e3: 41:c5:ff:e0:5f:72:e0:68:5e:2a:9b:ab:b8:0b:51: 37:03:a5:f8:5f:bc:be:5e:8a:f1:82:57:6f:e9:1b: 22:ac:92:23:a2:8c:8c:be:e2:b0:fd:f2:25:47:db: ff:2b:71:a1:db:73:9e:4f:c2:66:eb:7b:86:aa:50: ad:be:cb:1b:0e:18:0d:47:5e:c2:09:68:d5:df:2d: 8c:9c:32:67:bd:11:96:81:00:12:71:b7:06:5e:fc: 31:76:6a:aa:81:2c:40:c3:a7:f2:4a:64:11:1d:75: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6D:C1:0A:65:36:56:12:1C:52:7F:40:1A:4D:D3:82:10:7B:E9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:79:e0:7a:55:ac:60:3b:17:03:56:2d:5e:dc:d6:82:7d:2c: 65:27:02:62:5a:fd:32:f8:99:33:f1:06:55:41:b5:70:d2:95: 3f:ca:c1:06:cb:5e:a8:a3:26:83:74:dd:51:7a:b4:e4:1f:86: 53:d8:43:40:ed:16:28:e6:2a:57:5a:ef:bf:40:5d:18:bb:fe: 26:d1:03:b7:10:29:e5:89:50:d9:d6:00:3d:4f:af:73:29:8f: 01:20:7c:34:6f:f7:ca:9f:f3:22:e5:13:10:0b:8b:47:2b:32: e2:ab:e8:04:79:b0:a3:38:73:1a:0f:2e:63:8e:73:5d:46:60: 6b:11:d0:d2:06:2c:bf:ee:c6:9c:d4:91:c5:f5:05:8a:16:3e: bd:1a:04:96:cb:ae:49:ff:fc:9b:b4:1b:02:c9:e3:8b:ce:10: 7d:a3:b8:d6:72:6a:88:d1:cf:65:3a:42:59:0b:da:64:05:7f: 4d:81:46:b3:42:e6:0f:58:f8:38:04:b2:28:59:49:ce:ce:d4: 07:fb:5a:5d:a8:0c:9c:0b:63:b8:73:a8:b7:bd:2b:7c:1f:d2: 03:a6:7f:fc:0d:3c:b9:7e:1f:fb:65:14:ff:3c:c0:aa:94:4b: d9:aa:3d:49:d3:96:63:9a:11:81:ac:ef:70:4b:a4:a6:c2:2e: bf:db:a9:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gguhj4X3TNcB4IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwNDE2MDAwMFowLzEtMCsGA1UEAxMk NGIyZDZmMzAtNjAxMy00M2JmLWJhZTQtMGE1YWMyNmZmMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlrWuDeGSIpTW9Guja3TsMqa+Ctnib9w/tbG b3oAkpRDxgUDirZ69i6E03Mj1oDoewtT4MARkiBHQC7VbT7NaQmxAcNeU7NrOwqS 4Y0JxQL7ardOg8yvPugSLRyCfrh2QB1KO46+AlHvqSjEnNZne2FWaEuRm8vsNxxz aI0lYgKnJtWPrqHVo6+0itMh+gsJiitEbuNBxf/gX3LgaF4qm6u4C1E3A6X4X7y+ Xorxgldv6RsirJIjooyMvuKw/fIlR9v/K3Gh23OeT8Jm63uGqlCtvssbDhgNR17C CWjV3y2MnDJnvRGWgQAScbcGXvwxdmqqgSxAw6fySmQRHXWGUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHBtwQplNlYSHFJ/QBpN04IQe+lKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvZDcyOGI0ZmQtNmU4Yi00 NmM3LWI1OGUtODFmZGVhNmJlNjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzeeB6VaxgOxcDVi1e3NaC fSxlJwJiWv0y+Jkz8QZVQbVw0pU/ysEGy16ooyaDdN1RerTkH4ZT2ENA7RYo5ipX Wu+/QF0Yu/4m0QO3ECnliVDZ1gA9T69zKY8BIHw0b/fKn/Mi5RMQC4tHKzLiq+gE ebCjOHMaDy5jjnNdRmBrEdDSBiy/7sac1JHF9QWKFj69GgSWy65J//ybtBsCyeOL zhB9o7jWcmqI0c9lOkJZC9pkBX9NgUazQuYPWPg4BLIoWUnOztQH+1pdqAycC2O4 c6i3vSt8H9IDpn/8DTy5fh/7ZRT/PMCqlEvZqj1J05ZjmhGBrO9wS6Smwi6/26nN -----END CERTIFICATE-----Generated at Mon Mar 2 00:55:59 2026 by rpki-client