$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft File: 88d13a4f-a038-4d71-9494-9d48fef32c35.mft (raw, json) Hash identifier: JUa++N84qCaVxgsZ+vm4NgHah1TAXuHLh4AHQFgMwTM= Subject key identifier: D7:23:D8:30:EE:0B:A9:9C:62:0D:9F:42:DF:8B:8A:E5:A1:9F:EB:47 Authority key identifier: 59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 Certificate issuer: /CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Certificate serial: 010D0C9F4328584D060BBFFC27A30370B8B676D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft Manifest number: 010D0C9F4328584A1462E2890A10EA2C98908955 Signing time: Sun 01 Mar 2026 12:00:03 +0000 Manifest this update: Sun 01 Mar 2026 12:00:03 +0000 Manifest next update: Wed 04 Mar 2026 12:00:00 +0000 Files and hashes: 1: 88d13a4f-a038-4d71-9494-9d48fef32c35.crl (hash: OTm8/8FE23lLyW67jcpQngq7b3mGyGiJjJ70gyOjDfo=) 2: eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa (hash: fn1PrpoYaPnvx1MT7KOodwcPxH/r4dSTPHv1xVjJgQg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:0b:bf:fc:27:a3:03:70:b8:b6:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Validity Not Before: Mar 1 12:00:03 2026 GMT Not After : Mar 4 12:00:00 2026 GMT Subject: CN=a2fd4126-72e3-489d-85f0-31912b3fbfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:3c:7e:cb:80:ff:26:61:dc:f3:26:7e:06: 54:2d:26:41:15:59:21:4d:ef:dc:19:81:f0:c6:de: f5:e9:dc:c5:55:03:a4:ac:fd:cc:c3:58:9b:af:7c: 47:86:65:1d:c3:b1:c4:e9:13:52:91:db:14:93:b7: f3:2e:e9:c1:46:b4:cf:27:21:e1:a4:8a:4c:58:28: 17:16:14:21:d9:65:d9:bd:e4:94:cc:91:56:5a:d1: 13:04:17:21:7e:d6:2a:06:88:79:b8:42:d5:bf:ee: c2:55:85:49:4a:e0:09:e4:e7:de:6b:63:ef:56:6a: ee:19:17:e9:94:a4:6e:70:de:1a:17:81:fc:f9:09: df:26:71:3b:94:0c:fd:42:a4:80:83:6e:9a:be:66: f4:d1:87:a0:52:96:be:aa:3e:ed:23:d4:b7:e2:52: c2:b9:72:00:af:b9:9f:56:dc:39:8f:e6:4b:fb:7a: f4:52:2d:75:9e:eb:28:57:d5:e2:d6:7b:f9:ca:73: 08:d3:db:c2:3b:ab:4c:8d:f8:c3:c6:ee:2f:19:0a: 05:54:89:4d:1f:e6:0e:f4:8b:7d:ee:2c:71:62:54: 2c:49:56:2b:35:c8:66:59:ac:fd:79:fd:1f:f5:39: 6b:c5:cb:07:73:6c:83:6b:61:d8:ab:ff:81:9c:33: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:D8:30:EE:0B:A9:9C:62:0D:9F:42:DF:8B:8A:E5:A1:9F:EB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl X509v3 Authority Key Identifier: keyid:59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:02:17:e0:a6:38:17:c6:3e:d0:58:18:af:0c:20:72:b2:e4: d4:2d:b1:bb:63:10:f2:b6:97:8c:a0:53:ca:a6:b8:51:fc:63: 25:cc:77:62:46:3b:2a:7d:8b:37:8d:71:68:c2:b8:64:98:95: 5f:6f:b7:07:86:f3:52:e2:5b:6d:d1:07:e9:c6:44:02:ca:8c: d5:be:ab:a2:68:9b:45:60:74:bd:6c:96:a0:9b:a9:fe:7c:43: 7c:7e:69:80:e4:c6:d6:6d:d4:df:53:df:13:41:37:0c:fe:b7: 21:76:04:fe:b7:a7:f6:e6:df:ad:67:3a:82:dc:85:11:fc:ee: 22:cf:39:d9:50:8c:71:04:80:0c:e3:48:16:53:95:50:5b:48: 78:44:fa:5e:c7:25:12:03:65:74:b9:1f:9d:05:1d:44:10:c8: 26:3f:5f:19:80:af:f2:3e:24:80:d7:ab:e8:23:02:a4:4a:9d: e3:a4:9d:4b:01:be:1b:b6:7b:59:cb:3d:08:d9:20:32:57:ed: 92:cd:17:7e:db:2f:bc:13:40:69:35:34:f9:03:8f:17:b8:54: 19:45:0a:50:5c:eb:82:93:17:c7:99:78:4c:54:83:79:81:82: 6e:01:64:9c:0b:73:ac:46:cf:d7:b2:85:9c:da:87:89:57:8f: 09:56:79:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GC7/8J6MDcLi2dtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkMTNhNGYtYTAzOC00ZDcxLTk0OTQtOWQ0OGZlZjMy YzM1MB4XDTI2MDMwMTEyMDAwM1oXDTI2MDMwNDEyMDAwMFowLzEtMCsGA1UEAxMk YTJmZDQxMjYtNzJlMy00ODlkLTg1ZjAtMzE5MTJiM2ZiZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hY8fsuA/yZh3PMmfgZULSZBFVkhTe/cGYHw xt716dzFVQOkrP3Mw1ibr3xHhmUdw7HE6RNSkdsUk7fzLunBRrTPJyHhpIpMWCgX FhQh2WXZveSUzJFWWtETBBchftYqBoh5uELVv+7CVYVJSuAJ5Ofea2PvVmruGRfp lKRucN4aF4H8+QnfJnE7lAz9QqSAg26avmb00YegUpa+qj7tI9S34lLCuXIAr7mf Vtw5j+ZL+3r0Ui11nusoV9Xi1nv5ynMI09vCO6tMjfjDxu4vGQoFVIlNH+YO9It9 7ixxYlQsSVYrNchmWaz9ef0f9TlrxcsHc2yDa2HYq/+BnDN9jQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNcj2DDuC6mcYg2fQt+LiuWhn+tHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84OGQx M2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4ZmVmMzJjMzUvODhkMTNhNGYtYTAzOC00 ZDcxLTk0OTQtOWQ0OGZlZjMyYzM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODhkMTNhNGYtYTAzOC00ZDcxLTk0 OTQtOWQ0OGZlZjMyYzM1Lzg4ZDEzYTRmLWEwMzgtNGQ3MS05NDk0LTlkNDhmZWYz MmMzNS5jcmwwHwYDVR0jBBgwFoAUWeKwUyEXZQKPVQZ09Hb2BvuPcoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84OGQxM2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4 ZmVmMzJjMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaAhfgpjgXxj7QWBivDCBy suTULbG7YxDytpeMoFPKprhR/GMlzHdiRjsqfYs3jXFowrhkmJVfb7cHhvNS4ltt 0QfpxkQCyozVvquiaJtFYHS9bJagm6n+fEN8fmmA5MbWbdTfU98TQTcM/rchdgT+ t6f25t+tZzqC3IUR/O4izznZUIxxBIAM40gWU5VQW0h4RPpexyUSA2V0uR+dBR1E EMgmP18ZgK/yPiSA16voIwKkSp3jpJ1LAb4btntZyz0I2SAyV+2SzRd+2y+8E0Bp NTT5A48XuFQZRQpQXOuCkxfHmXhMVIN5gYJuAWScC3OsRs/XsoWc2oeJV48JVnnL -----END CERTIFICATE-----Generated at Sun Mar 1 21:10:10 2026 by rpki-client