$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft File: a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json) Hash identifier: dubB6srGfer8ppDEp8BBd6qsMTta9GyNIwf7X39zd2k= Subject key identifier: F2:71:3F:B4:FE:AC:38:81:74:3C:E2:D4:C8:CA:56:02:5D:3B:6E:7C Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584D0735964DCB1EC28C3F2B4F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft Manifest number: 010D0C9F432858496598AC39FE13BB942B9EE016 Signing time: Sun 01 Mar 2026 22:00:09 +0000 Manifest this update: Sun 01 Mar 2026 22:00:09 +0000 Manifest next update: Tue 03 Mar 2026 22:00:00 +0000 Files and hashes: 1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: Ry3LGNAGKEd19lxfRFyohb0A1d3XF4MBZumm3MJB+g0=) 2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: KcB8BEGKm/uvpZcI6ascLbSNqTekc6W8m+JeAgfEyus=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:35:96:4d:cb:1e:c2:8c:3f:2b:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Mar 1 22:00:09 2026 GMT Not After : Mar 3 22:00:00 2026 GMT Subject: CN=f766fafd-9d35-4ce2-8dd0-f7db6af325b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:fb:f9:fe:ab:c1:59:f0:1f:24:4f:a6:6b: cb:e1:fe:a5:76:cf:06:f6:49:7d:a1:f3:70:86:e9: 5e:36:c4:30:e1:e7:93:7c:75:9e:59:7f:ed:73:fb: 69:79:33:81:3c:6d:a5:36:8f:5b:a3:16:ae:a4:a0: f1:da:f7:4b:7d:bf:73:ce:79:93:b5:12:0c:d6:71: d7:5e:e7:04:38:54:78:f6:00:58:68:bb:e0:d7:92: 36:d3:fe:df:df:1d:0c:96:c8:4b:79:10:1f:41:03: 43:fd:08:7e:21:aa:af:82:08:44:a0:6f:3d:66:91: 0d:57:f6:53:11:db:ca:e3:87:f4:b7:4b:6e:ed:66: e7:b3:86:7e:40:2e:17:0c:06:61:51:12:ff:00:f7: 60:4f:a9:6a:0a:92:f9:77:d8:02:71:d8:ff:50:0a: e5:bf:43:51:39:30:e3:18:6f:5d:5d:85:37:1e:85: ef:89:c1:cd:4f:3e:3b:53:b0:b0:46:4e:28:d9:13: 08:48:8d:d5:92:ee:8e:72:5d:61:a9:07:94:47:be: 17:4a:33:a3:91:e3:ce:ea:b0:53:7f:a5:dc:2d:e7: 98:67:be:a2:e4:8b:4b:55:41:36:16:2e:1b:45:6c: 2e:13:24:d6:06:e8:1d:f5:ee:81:53:88:cd:1a:41: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:71:3F:B4:FE:AC:38:81:74:3C:E2:D4:C8:CA:56:02:5D:3B:6E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f8:f5:4d:80:48:ac:8c:02:cf:3a:e5:60:da:ef:32:d3:7e: 12:ee:41:56:b4:3d:4c:44:54:cc:47:c6:07:6e:2b:72:67:8f: 67:d8:50:68:e2:1f:18:5c:5b:c8:81:09:8d:81:66:60:5e:d7: 0c:b2:2e:fb:e0:59:e9:45:31:39:70:7a:56:9f:36:81:96:bb: 97:58:36:ac:3f:67:2e:2a:30:c9:5b:c9:f2:71:7b:36:eb:6a: 7c:a9:9e:cb:36:06:f7:ed:af:85:34:92:6d:94:68:d8:9c:e1: b8:d6:bb:1c:d7:be:bc:08:81:21:2f:84:6e:a9:0e:1e:da:4a: 7f:be:7f:67:56:f7:00:82:80:d2:f5:5f:ae:70:46:59:65:26: 19:e1:27:55:4c:03:71:74:34:2c:a1:42:43:96:8c:51:6b:fc: b2:1d:55:8c:81:12:76:7e:17:d6:05:33:1c:09:fc:90:8b:1b: 88:af:51:c3:2d:fc:27:17:89:22:46:9f:9b:29:18:4b:8c:cd: 07:3a:93:03:3a:88:56:51:25:fe:11:5e:fd:f7:bd:52:95:39: 6a:f3:b5:0d:13:26:b8:3a:69:70:7d:f0:9e:98:71:b2:01:77: 28:93:64:e6:00:91:f0:d2:24:32:3b:df:96:f0:4e:bf:c0:68: 18:a1:50:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HNZZNyx7CjD8rTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI2MDMwMTIyMDAwOVoXDTI2MDMwMzIyMDAwMFowLzEtMCsGA1UEAxMk Zjc2NmZhZmQtOWQzNS00Y2UyLThkZDAtZjdkYjZhZjMyNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbP7+f6rwVnwHyRPpmvL4f6lds8G9kl9ofNw huleNsQw4eeTfHWeWX/tc/tpeTOBPG2lNo9boxaupKDx2vdLfb9zznmTtRIM1nHX XucEOFR49gBYaLvg15I20/7f3x0MlshLeRAfQQND/Qh+IaqvgghEoG89ZpENV/ZT EdvK44f0t0tu7Wbns4Z+QC4XDAZhURL/APdgT6lqCpL5d9gCcdj/UArlv0NROTDj GG9dXYU3HoXvicHNTz47U7CwRk4o2RMISI3Vku6Ocl1hqQeUR74XSjOjkePO6rBT f6XcLeeYZ76i5ItLVUE2Fi4bRWwuEyTWBugd9e6BU4jNGkF7eQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPJxP7T+rDiBdDzi1MjKVgJdO258MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk4N2M0NDYtNWZjMi00 NGIwLTlhNDEtNjUyOTZkOTBkMGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAS+PVNgEisjALPOuVg2u8y 034S7kFWtD1MRFTMR8YHbityZ49n2FBo4h8YXFvIgQmNgWZgXtcMsi774FnpRTE5 cHpWnzaBlruXWDasP2cuKjDJW8nycXs262p8qZ7LNgb37a+FNJJtlGjYnOG41rsc 1768CIEhL4RuqQ4e2kp/vn9nVvcAgoDS9V+ucEZZZSYZ4SdVTANxdDQsoUJDloxR a/yyHVWMgRJ2fhfWBTMcCfyQixuIr1HDLfwnF4kiRp+bKRhLjM0HOpMDOohWUSX+ EV79971SlTlq87UNEya4OmlwffCemHGyAXcok2TmAJHw0iQyO9+W8E6/wGgYoVBw -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:32 2026 by rpki-client