$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft File: a295a695-e91a-4c5a-8a31-a920a42ea44d.mft (raw, json) Hash identifier: BSTWyTIAmgvrwlTqWLNrut0GGZN6rYz27BDDgPvrPLQ= Subject key identifier: 1D:02:82:A7:60:DE:5F:C0:3F:E1:70:E6:88:E9:A3:CA:26:09:4E:C4 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584D078EDD12DFFDC0573009E5E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft Manifest number: 010D0C9F43285849ABC8124D60A5EBB8636DE14F Signing time: Mon 02 Mar 2026 01:00:04 +0000 Manifest this update: Mon 02 Mar 2026 01:00:04 +0000 Manifest next update: Thu 05 Mar 2026 01:00:00 +0000 Files and hashes: 1: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (hash: 0kr8XYrbUDr24Qoi9f5QHf0U+2Q0ahZW+LGizjUPB44=) 2: a295a695-e91a-4c5a-8a31-a920a42ea44d.crl (hash: HC7yhwEFsFORbQ1XGXPVo01O0BdVkbgS6OaQaRMWHrQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:8e:dd:12:df:fd:c0:57:30:09:e5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Mar 2 01:00:04 2026 GMT Not After : Mar 5 01:00:00 2026 GMT Subject: CN=444aaa81-4cbb-469d-a60a-5d0483f3f8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:50:98:b4:62:83:2f:52:27:bd:bb:bd:7e: 63:ba:c8:53:dd:d7:52:0b:df:eb:ba:46:4d:89:63: e4:bd:aa:24:27:d5:f6:a0:71:0b:5b:2e:c0:3f:42: 53:e8:59:19:36:90:51:a2:59:11:09:16:27:b0:12: fa:9b:51:c8:1b:94:63:66:64:1e:b5:c2:a2:fe:6b: 91:93:fd:01:1b:14:71:74:ce:f7:39:45:3f:e5:60: 29:64:cd:87:ef:c2:3b:9d:f6:b7:ff:90:01:52:ba: 5c:17:2b:22:b5:df:d1:75:88:3f:e1:0f:6b:e8:e1: 5d:da:18:04:d0:b4:bc:a4:5b:2e:4b:a7:fe:b9:c1: 20:1a:8c:18:9d:67:ac:17:91:15:70:3c:16:40:fe: b2:e3:03:92:03:0d:ee:cb:b2:fc:b2:35:bc:7e:95: 12:9b:1b:d2:0a:08:5b:1f:76:30:59:45:fc:99:ac: 7b:3c:d4:3b:40:ef:cf:9b:bb:cc:60:9c:c4:de:78: a1:c7:83:fd:80:63:cf:61:41:52:53:85:d0:90:04: fd:b8:88:92:4b:36:07:d7:de:41:26:fc:86:c5:22: 12:34:b0:d8:e2:d6:7c:85:b2:f8:71:af:f9:0c:8e: 7e:df:ee:3d:5f:b1:30:96:95:e5:ee:82:c1:4e:3f: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:02:82:A7:60:DE:5F:C0:3F:E1:70:E6:88:E9:A3:CA:26:09:4E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d9:03:a0:10:90:81:53:10:89:f5:a4:07:e5:58:fe:10:22: d8:07:02:f0:44:54:ba:f4:2a:1b:bf:27:0e:92:46:18:2b:20: ce:93:64:2b:ef:d9:8e:77:e8:b4:3a:e3:1d:39:c2:d2:e0:d5: 9d:ed:f0:ae:a0:bf:90:17:88:96:c8:6c:8a:32:66:f2:4c:c9: dc:1a:b3:33:ea:4f:0a:99:86:a1:ef:18:f7:57:71:8c:a7:00: 13:1e:48:cd:e5:6f:d2:68:47:e8:eb:63:04:b1:37:2e:f5:1f: 46:df:8d:a6:ba:11:1e:bc:3c:bb:ab:65:4e:de:72:56:87:41: a3:9d:33:f9:5a:1d:bb:f9:3c:81:21:26:ba:bb:5b:2d:69:1a: 29:ac:91:a8:eb:0c:77:bd:2a:f7:e1:5a:62:2b:72:21:8b:9b: 2f:4d:ec:81:68:d2:fc:87:dc:77:90:c6:37:bb:a5:ac:2a:3c: 4c:40:8a:03:69:37:03:1f:da:40:0e:23:d3:a6:d5:5f:a8:e0: e3:f6:dd:f2:e2:c7:2f:da:a7:75:0d:96:82:07:6d:58:2f:fa: f7:dd:ce:43:79:9c:de:33:e3:1f:81:1c:bd:50:58:6e:9c:57: 26:81:5f:11:ee:87:7e:86:cb:de:4e:27:6d:5c:a9:11:b5:2a: 79:14:8d:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Hjt0S3/3AVzAJ5egwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDMwMjAxMDAwNFoXDTI2MDMwNTAxMDAwMFowLzEtMCsGA1UEAxMk NDQ0YWFhODEtNGNiYi00NjlkLWE2MGEtNWQwNDgzZjNmOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk5QmLRigy9SJ727vX5jushT3ddSC9/rukZN iWPkvaokJ9X2oHELWy7AP0JT6FkZNpBRolkRCRYnsBL6m1HIG5RjZmQetcKi/muR k/0BGxRxdM73OUU/5WApZM2H78I7nfa3/5ABUrpcFysitd/RdYg/4Q9r6OFd2hgE 0LS8pFsuS6f+ucEgGowYnWesF5EVcDwWQP6y4wOSAw3uy7L8sjW8fpUSmxvSCghb H3YwWUX8max7PNQ7QO/Pm7vMYJzE3nihx4P9gGPPYUFSU4XQkAT9uIiSSzYH195B JvyGxSISNLDY4tZ8hbL4ca/5DI5+3+49X7EwlpXl7oLBTj/cNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB0Cgqdg3l/AP+Fw5ojpo8omCU7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvYTI5NWE2OTUtZTkxYS00 YzVhLThhMzEtYTkyMGE0MmVhNDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw2QOgEJCBUxCJ9aQH5Vj+ ECLYBwLwRFS69CobvycOkkYYKyDOk2Qr79mOd+i0OuMdOcLS4NWd7fCuoL+QF4iW yGyKMmbyTMncGrMz6k8KmYah7xj3V3GMpwATHkjN5W/SaEfo62MEsTcu9R9G342m uhEevDy7q2VO3nJWh0GjnTP5Wh27+TyBISa6u1staRoprJGo6wx3vSr34VpiK3Ih i5svTeyBaNL8h9x3kMY3u6WsKjxMQIoDaTcDH9pADiPTptVfqODj9t3y4scv2qd1 DZaCB21YL/r33c5DeZzeM+MfgRy9UFhunFcmgV8R7od+hsveTidtXKkRtSp5FI0N -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:28 2026 by rpki-client