$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: /yq7rrbmGItvbvOFElZCSZ+dP2EeqgxEwXT+zy0Dhb4= Subject key identifier: E1:17:BE:09:F1:DA:1A:9F:B5:73:AA:E3:F2:2E:1D:EF:D6:B3:58:89 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584D06DC31F263F14DD6660DFE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7740 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: w+d+9Ok8V2EU1fkzg+w80epER23TbyQ1zoGrWPzuV90=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: lCbOazsmpH46ZUjzw750wMm4tNbeZOLIe+R7KffQ1OI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:31:f2:63:f1:4d:d6:66:0d:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=21b74351-f0d4-4d18-b9b4-919482c59c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:75:82:49:61:a0:df:5c:47:5c:6b:44:fc: 92:8b:53:dd:8a:52:f4:58:60:e5:c0:71:13:02:5a: 8d:b5:f9:ba:fc:fa:5a:b6:9d:0e:ba:44:cd:52:4f: 33:c7:b0:b0:ad:41:31:79:f8:4a:6b:87:d1:40:5b: 8d:52:99:cb:07:76:f1:e3:d1:33:00:f0:59:2d:17: 4f:7f:27:e6:94:cd:8f:a4:c4:2b:0b:32:bd:e7:a5: 30:11:23:67:d2:ca:50:09:7e:32:33:47:7a:8c:63: b6:ee:6e:b4:de:10:25:6a:b9:7d:cf:23:4e:86:00: b5:b7:6a:2e:4c:32:60:3c:0a:94:81:89:28:ff:90: b2:0e:f8:8e:be:10:78:6f:67:92:6b:cc:90:93:fc: f7:1f:ae:7a:ee:2e:f8:f7:85:33:5e:c8:70:cb:5c: ea:0b:6e:97:df:13:c0:fc:f5:a7:04:9a:dc:b4:cd: 2b:05:2a:57:a2:35:8b:eb:c6:c7:a7:9f:34:0a:0d: 9d:d4:b2:c9:6e:40:95:da:8e:ea:66:db:36:66:b9: 90:a0:64:34:63:43:6b:fc:93:ea:be:f5:9b:28:9c: fa:0b:58:32:33:eb:1c:19:19:91:8a:9c:3d:6c:82: be:19:f7:f0:0c:b4:a2:ba:dc:d4:9e:a4:e9:c4:9b: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:17:BE:09:F1:DA:1A:9F:B5:73:AA:E3:F2:2E:1D:EF:D6:B3:58:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:cd:ab:5c:69:fe:72:ff:b8:a0:7b:7d:58:5f:a9:73:96:c3: 3f:e1:0f:88:e9:9b:90:4c:fb:14:8c:a5:ac:0f:3d:07:66:97: 95:b7:2a:69:a2:34:74:1c:f1:fc:07:59:d1:6c:58:57:35:96: c5:15:18:4c:bd:16:ed:4a:2f:dc:d5:ce:72:ed:fd:74:53:b6: 90:a2:2e:f7:c3:82:68:17:58:ea:e8:81:90:82:2e:02:00:2b: 82:41:53:69:00:fa:26:48:f0:ae:d8:a3:87:9a:68:21:1b:bf: ce:93:59:89:eb:5a:d7:80:4d:6b:06:44:44:bf:99:a1:64:59: 09:42:ee:5d:58:13:e3:05:a3:5b:27:5f:b5:20:74:0a:b1:ef: 8a:d4:96:be:9a:0c:cb:b6:7a:e5:46:a6:8c:d3:76:77:67:d7: 27:62:67:53:62:cc:81:e8:d8:d3:89:e7:2a:45:ad:bb:56:ba: f4:c4:77:f7:3f:90:80:1f:81:96:a6:b7:b1:e8:be:62:77:e8: ab:2f:f1:84:57:dc:b9:51:95:1a:bc:dc:fa:c5:7e:f6:66:9f: 2c:dc:c5:2e:ee:69:41:ac:2c:b4:26:ae:20:55:33:6f:03:85: e8:3d:1e:3c:ff:2f:f2:2d:b2:99:7e:b2:61:09:1f:6b:4f:23: 62:a8:ca:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DHyY/FN1mYN/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk MjFiNzQzNTEtZjBkNC00ZDE4LWI5YjQtOTE5NDgyYzU5YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdF1gklhoN9cR1xrRPySi1PdilL0WGDlwHET AlqNtfm6/Ppatp0OukTNUk8zx7CwrUExefhKa4fRQFuNUpnLB3bx49EzAPBZLRdP fyfmlM2PpMQrCzK956UwESNn0spQCX4yM0d6jGO27m603hAlarl9zyNOhgC1t2ou TDJgPAqUgYko/5CyDviOvhB4b2eSa8yQk/z3H6567i7494UzXshwy1zqC26X3xPA /PWnBJrctM0rBSpXojWL68bHp580Cg2d1LLJbkCV2o7qZts2ZrmQoGQ0Y0Nr/JPq vvWbKJz6C1gyM+scGRmRipw9bIK+GffwDLSiutzUnqTpxJtHOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOEXvgnx2hqftXOq4/IuHe/Ws1iJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrzatcaf5y/7ige31YX6lz lsM/4Q+I6ZuQTPsUjKWsDz0HZpeVtyppojR0HPH8B1nRbFhXNZbFFRhMvRbtSi/c 1c5y7f10U7aQoi73w4JoF1jq6IGQgi4CACuCQVNpAPomSPCu2KOHmmghG7/Ok1mJ 61rXgE1rBkREv5mhZFkJQu5dWBPjBaNbJ1+1IHQKse+K1Ja+mgzLtnrlRqaM03Z3 Z9cnYmdTYsyB6NjTiecqRa27Vrr0xHf3P5CAH4GWprex6L5id+irL/GEV9y5UZUa vNz6xX72Zp8s3MUu7mlBrCy0Jq4gVTNvA4XoPR48/y/yLbKZfrJhCR9rTyNiqMpf -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:55 2026 by rpki-client