$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: SYJSMH1TA/A5fgnPEyN1a1ahqSiKIaMRkupJA73o55A= Subject key identifier: 40:48:83:3D:65:E1:F5:D8:B3:8F:9F:E6:2F:A7:FA:1D:89:A5:CD:3F Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584D0911FC2621B8590CCC6E6C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB431 Signing time: Mon 02 Mar 2026 14:00:04 +0000 Manifest this update: Mon 02 Mar 2026 14:00:04 +0000 Manifest next update: Thu 05 Mar 2026 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: afFWaXKORU+vK9Nr2KGMzdQOCJ0rTagj3wE8Eun2Wcc=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: 6TWo0rZ8MSkH7yVaFJ/8jjRbw56n3rqI4ME3SbmQoR4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:11:fc:26:21:b8:59:0c:cc:6e:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Mar 2 14:00:04 2026 GMT Not After : Mar 5 14:00:00 2026 GMT Subject: CN=fe2e565d-3f91-46ec-8320-957435a74265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:49:ff:df:3c:4f:81:05:dd:c0:8d:04:cb: 8a:cb:73:af:32:3b:1d:11:5a:55:91:52:ab:fa:4b: 0f:70:ce:45:4a:cc:9e:59:ae:d1:a0:08:4a:12:0a: 6f:2d:54:e0:12:92:87:1a:ef:b3:8f:3f:a1:dc:b8: d3:65:b9:8d:be:2a:a0:f5:3a:c8:7f:2d:27:ea:cd: 3f:6f:31:71:fd:8c:85:88:28:4b:7d:07:c2:25:73: b2:60:f0:5a:50:55:ad:32:cd:ec:93:81:b6:64:42: 7d:f7:ae:58:7d:fc:cd:72:cd:15:89:f6:c1:5e:5c: 04:91:9e:41:08:44:ff:a4:61:38:13:ce:b1:24:3e: 01:ed:09:8a:cf:ef:29:38:86:20:7f:40:a9:41:9d: 27:72:22:ac:cd:0f:fe:ff:0c:97:bd:47:33:75:02: aa:28:5a:9b:c5:31:3f:a5:12:e4:99:d6:b6:3a:e1: f9:51:7f:e2:87:d6:25:1a:20:7e:ac:a8:7e:b3:d3: f6:5c:fb:fe:ec:38:bf:03:46:89:ab:cf:55:1d:f1: e4:9c:56:0c:11:45:4b:2c:69:eb:91:9d:dc:98:2d: 0d:c4:0d:a4:a6:f4:cd:b7:b8:4f:d2:48:18:cc:17: 58:9b:4f:fe:0d:15:b7:30:df:82:7c:7a:16:90:00: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:83:3D:65:E1:F5:D8:B3:8F:9F:E6:2F:A7:FA:1D:89:A5:CD:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:dc:4e:b5:77:43:42:2d:8f:cd:05:f0:2b:33:b9:40:e1:78: 76:f6:d3:b6:4b:a7:56:51:f9:9e:1b:0c:c7:4d:03:6d:4b:be: a5:c7:85:07:dc:c5:fe:81:ee:1f:20:0c:0e:75:97:ac:23:7f: 19:8b:02:0f:03:26:d5:d0:91:5d:06:c9:27:8d:a9:c9:f2:32: 1d:02:a2:d6:b2:99:1f:cf:1a:c3:aa:20:ff:dd:5e:fe:53:a8: 54:06:e4:72:b6:ed:0d:02:7f:11:eb:43:db:0d:9c:d9:b7:31: 2a:ad:4e:34:b8:41:15:ec:16:3b:a6:87:5b:6e:39:0a:ba:6a: b0:59:58:80:9d:8e:59:58:be:4f:53:9a:f0:03:f0:9f:4f:35: 41:8d:83:87:65:92:e1:14:37:33:7a:c7:28:4f:88:9d:fa:15: 5e:bb:03:8e:21:cb:31:9d:19:4d:80:85:36:83:84:18:2c:9d: 8f:90:8d:a1:c2:13:0e:e5:e2:cc:61:19:bf:e6:05:6f:96:c3: ff:0c:3e:a3:1c:64:a1:ef:e8:c7:70:bf:7b:03:18:71:0a:98: 1b:c1:9b:43:08:23:b3:cf:00:4a:5a:4c:b1:e6:ec:ed:15:f4: 3f:dc:e9:e0:70:f1:dd:60:15:62:bb:cb:9e:fc:49:97:15:6d: a9:fb:b1:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0JEfwmIbhZDMxubAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI2MDMwMjE0MDAwNFoXDTI2MDMwNTE0MDAwMFowLzEtMCsGA1UEAxMk ZmUyZTU2NWQtM2Y5MS00NmVjLTgzMjAtOTU3NDM1YTc0MjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyVJ/988T4EF3cCNBMuKy3OvMjsdEVpVkVKr +ksPcM5FSsyeWa7RoAhKEgpvLVTgEpKHGu+zjz+h3LjTZbmNviqg9TrIfy0n6s0/ bzFx/YyFiChLfQfCJXOyYPBaUFWtMs3sk4G2ZEJ9965YffzNcs0VifbBXlwEkZ5B CET/pGE4E86xJD4B7QmKz+8pOIYgf0CpQZ0nciKszQ/+/wyXvUczdQKqKFqbxTE/ pRLkmda2OuH5UX/ih9YlGiB+rKh+s9P2XPv+7Di/A0aJq89VHfHknFYMEUVLLGnr kZ3cmC0NxA2kpvTNt7hP0kgYzBdYm0/+DRW3MN+CfHoWkAAHpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEBIgz1l4fXYs4+f5i+n+h2Jpc0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBV3E61d0NCLY/NBfArM7lA 4Xh29tO2S6dWUfmeGwzHTQNtS76lx4UH3MX+ge4fIAwOdZesI38ZiwIPAybV0JFd BsknjanJ8jIdAqLWspkfzxrDqiD/3V7+U6hUBuRytu0NAn8R60PbDZzZtzEqrU40 uEEV7BY7podbbjkKumqwWViAnY5ZWL5PU5rwA/CfTzVBjYOHZZLhFDczescoT4id +hVeuwOOIcsxnRlNgIU2g4QYLJ2PkI2hwhMO5eLMYRm/5gVvlsP/DD6jHGSh7+jH cL97AxhxCpgbwZtDCCOzzwBKWkyx5uztFfQ/3OngcPHdYBViu8ue/EmXFW2p+7G2 -----END CERTIFICATE-----Generated at Mon Mar 2 16:02:50 2026 by rpki-client