$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft File: 68875259-2927-45e7-be12-9528b42e0e51.mft (raw, json) Hash identifier: ogY4eEqdtLzrzti/IrCqokUDZS0DiS6aFFNOpyhRN7k= Subject key identifier: 7D:63:15:78:45:38:E4:01:C1:2E:04:21:E0:64:CB:E6:8E:97:4B:7E Authority key identifier: 9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB Certificate issuer: /CN=68875259-2927-45e7-be12-9528b42e0e51 Certificate serial: 010D0C9F4328584D06475B3ED33E6B600DC79630 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft Manifest number: 010D0C9F432858499F48DD655B9D761880EDBF45 Signing time: Sun 01 Mar 2026 14:00:09 +0000 Manifest this update: Sun 01 Mar 2026 14:00:09 +0000 Manifest next update: Wed 04 Mar 2026 14:00:00 +0000 Files and hashes: 1: 68875259-2927-45e7-be12-9528b42e0e51.crl (hash: 57c83Obq5ZADXgT6fBrlwCfzyO3wvVLf6ObsJn8/L8I=) 2: de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa (hash: /CAI/t21CCx47/a193F1NvxGimy6zTbxNNbmX595loo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:5b:3e:d3:3e:6b:60:0d:c7:96:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68875259-2927-45e7-be12-9528b42e0e51 Validity Not Before: Mar 1 14:00:09 2026 GMT Not After : Mar 4 14:00:00 2026 GMT Subject: CN=dfa27e2b-e5f3-41ae-8b71-d4087abcd93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:5a:20:3c:bc:56:46:66:c3:23:c2:c0:52: 5c:8b:7d:bf:68:a6:12:7b:14:99:ea:f3:e3:22:eb: b9:81:ea:c3:b1:23:93:1f:56:a4:e2:0f:13:f1:3f: 92:f3:25:33:be:8c:59:aa:8c:ba:3a:89:a5:5f:d4: 78:7f:e7:cd:20:c5:cc:53:d6:93:ba:87:07:d8:ae: 08:ca:c1:a4:a9:64:b0:35:45:7e:09:c3:5a:98:c1: 0d:63:8f:ee:47:b9:8b:42:3b:7b:52:a9:7a:3d:fd: 76:8e:ab:ae:4a:64:50:3d:4a:f4:a0:15:ef:65:f8: b5:35:3c:f4:82:c9:3c:54:28:b1:2a:b2:c7:26:49: 3e:a6:f7:65:66:3d:d3:e0:2f:0d:3a:eb:44:3d:58: 0d:59:0c:1c:dd:ec:89:7b:7b:f7:eb:b0:bb:48:1e: 1b:13:8e:44:1c:da:89:0e:3b:5c:c1:f2:97:32:53: 5c:a6:b0:f9:1e:c4:24:fc:23:3a:fc:03:69:25:5e: de:f9:22:0f:eb:76:50:94:6c:23:26:62:27:a8:dc: 1a:58:89:2d:e5:31:df:79:10:ec:b7:12:ac:6f:8d: c2:5e:ab:d7:ad:e5:a9:25:cb:d6:c4:a1:d6:83:bf: 6f:b2:d0:57:cb:88:69:10:5a:2b:df:07:f8:91:7a: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:15:78:45:38:E4:01:C1:2E:04:21:E0:64:CB:E6:8E:97:4B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl X509v3 Authority Key Identifier: keyid:9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:dc:f4:e1:a8:d0:da:ee:62:91:5e:b4:df:3c:fb:10:22:95: 5b:be:8f:af:da:56:9b:ec:b9:79:bd:80:75:2a:58:7b:bc:7b: 96:48:9b:57:6f:b9:74:87:ef:6a:8f:61:35:46:41:7e:84:97: 35:dc:c7:e4:d1:86:84:f2:d7:40:6c:40:28:9e:0c:8e:33:66: 9b:2c:44:e7:75:78:36:9b:b1:78:48:42:8d:1b:c3:9e:20:b7: 27:95:41:3a:b0:4d:15:5c:8e:a5:44:0c:ab:cd:dc:cd:3e:06: 20:96:4a:97:18:31:c1:fb:10:a5:55:44:d9:6b:df:02:9b:7e: ab:15:7e:85:41:34:94:a1:10:f9:c3:6f:59:7f:0d:19:aa:6c: 82:54:f6:1a:07:71:84:5a:cc:61:e5:55:02:42:63:df:01:0c: f9:46:35:4a:ce:0c:17:b7:1b:e6:a0:d8:84:6b:48:ef:39:6a: 06:e4:0d:1b:36:7a:19:e9:21:1f:ec:75:e3:ef:ca:7c:f9:6c: db:38:1f:22:cf:04:72:87:02:da:d2:2e:a3:4a:db:24:85:38: 23:4e:47:22:0f:09:99:89:38:69:de:00:40:23:7a:8b:93:7c: 4d:3d:dd:e0:b1:12:12:4e:c5:46:1b:03:36:f1:af:5b:4e:a1: ed:7b:bb:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GR1s+0z5rYA3HljAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4NzUyNTktMjkyNy00NWU3LWJlMTItOTUyOGI0MmUw ZTUxMB4XDTI2MDMwMTE0MDAwOVoXDTI2MDMwNDE0MDAwMFowLzEtMCsGA1UEAxMk ZGZhMjdlMmItZTVmMy00MWFlLThiNzEtZDQwODdhYmNkOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn69aIDy8VkZmwyPCwFJci32/aKYSexSZ6vPj Iuu5gerDsSOTH1ak4g8T8T+S8yUzvoxZqoy6OomlX9R4f+fNIMXMU9aTuocH2K4I ysGkqWSwNUV+CcNamMENY4/uR7mLQjt7Uql6Pf12jquuSmRQPUr0oBXvZfi1NTz0 gsk8VCixKrLHJkk+pvdlZj3T4C8NOutEPVgNWQwc3eyJe3v367C7SB4bE45EHNqJ DjtcwfKXMlNcprD5HsQk/CM6/ANpJV7e+SIP63ZQlGwjJmInqNwaWIkt5THfeRDs txKsb43CXqvXreWpJcvWxKHWg79vstBXy4hpEFor3wf4kXoY/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH1jFXhFOOQBwS4EIeBky+aOl0t+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3 NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4YjQyZTBlNTEvNjg4NzUyNTktMjkyNy00 NWU3LWJlMTItOTUyOGI0MmUwZTUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjg4NzUyNTktMjkyNy00NWU3LWJl MTItOTUyOGI0MmUwZTUxLzY4ODc1MjU5LTI5MjctNDVlNy1iZTEyLTk1MjhiNDJl MGU1MS5jcmwwHwYDVR0jBBgwFoAUn9/SRwQXIr/HvAiIkpaDEv8iz/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4 YjQyZTBlNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC63PThqNDa7mKRXrTfPPsQ IpVbvo+v2lab7Ll5vYB1Klh7vHuWSJtXb7l0h+9qj2E1RkF+hJc13Mfk0YaE8tdA bEAongyOM2abLETndXg2m7F4SEKNG8OeILcnlUE6sE0VXI6lRAyrzdzNPgYglkqX GDHB+xClVUTZa98Cm36rFX6FQTSUoRD5w29Zfw0ZqmyCVPYaB3GEWsxh5VUCQmPf AQz5RjVKzgwXtxvmoNiEa0jvOWoG5A0bNnoZ6SEf7HXj78p8+WzbOB8izwRyhwLa 0i6jStskhTgjTkciDwmZiThp3gBAI3qLk3xNPd3gsRISTsVGGwM28a9bTqHte7s6 -----END CERTIFICATE-----Generated at Mon Mar 2 14:39:01 2026 by rpki-client