$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft File: d96f592a-8fa9-4ec8-a272-b56c2537919c.mft (raw, json) Hash identifier: KN40TQPRetu7r/s0W5JuhmHpO5k9f5ZPdSNNKfhGRFQ= Subject key identifier: AD:8A:6E:3C:06:3A:AE:60:17:F3:0F:EA:9A:2F:3B:26:E0:15:FA:10 Authority key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Certificate issuer: /CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Certificate serial: 010D0C9F4328584D073595B8AADD7AB941905C30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft Manifest number: 010D0C9F4328584A1582B65E164CAB3B965D3F2D Signing time: Sun 01 Mar 2026 22:00:09 +0000 Manifest this update: Sun 01 Mar 2026 22:00:09 +0000 Manifest next update: Wed 04 Mar 2026 22:00:00 +0000 Files and hashes: 1: 4006a66d-6da1-3667-95e8-2ae868c8c68e.roa (hash: 3PudoqA3Oj4WwJRvaD1qvd9S96Nht8HJ5dwtoCxBZrc=) 2: d96f592a-8fa9-4ec8-a272-b56c2537919c.crl (hash: I3gWD65DFCLFPK8dHmY+ZKWNuoCqiAIMhLdisp7+cL4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:35:95:b8:aa:dd:7a:b9:41:90:5c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Validity Not Before: Mar 1 22:00:09 2026 GMT Not After : Mar 4 22:00:00 2026 GMT Subject: CN=cd95c2d8-c08d-4894-8000-eaeec9a96001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:dc:45:a7:d9:6a:5a:d2:56:29:9c:63:1e: 3e:87:70:d8:77:ed:47:09:fe:9f:cd:f9:b7:f4:fd: e5:f6:3f:f3:18:98:c8:d3:39:6e:b7:44:4d:70:70: 30:a5:9f:28:dd:bb:24:2a:a2:a1:a9:0b:23:18:f7: 53:16:b7:e4:36:b2:65:a3:16:8d:54:2b:ce:4f:69: 4d:cd:cf:f5:e4:7e:3c:17:be:5e:61:d7:1b:50:cb: 61:f6:44:af:df:85:23:be:20:76:fe:2b:a5:a1:96: 51:a6:3b:35:f7:e4:27:2d:7e:42:65:ec:86:8e:05: 64:49:64:26:0b:e6:19:0e:8b:59:a0:5f:ef:05:a3: 81:79:ee:a5:3e:b9:20:59:86:5b:87:33:cc:36:fd: b5:01:8a:d0:71:d3:a9:46:da:25:53:ef:51:de:c9: ed:73:2a:04:93:12:91:9f:85:39:b7:5a:4b:e4:19: 00:b9:1c:09:dc:34:e9:f4:3d:3e:14:a6:45:0f:3c: cb:8d:18:f9:61:ae:b5:e0:77:9f:d8:1a:fb:79:f7: f9:26:53:6c:75:21:79:25:a7:8d:ca:15:7e:91:b6: 91:4b:b4:2f:fb:c0:c5:df:00:02:25:d6:d9:9d:1b: 79:c4:7e:6c:e8:67:96:e9:67:5d:24:cc:e7:ca:71: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8A:6E:3C:06:3A:AE:60:17:F3:0F:EA:9A:2F:3B:26:E0:15:FA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl X509v3 Authority Key Identifier: keyid:14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d0:7e:f1:25:2a:29:de:12:ee:e5:55:49:57:d7:1f:2d:c4: 9d:11:ee:59:bb:1b:6c:e0:bf:c6:20:e9:8d:df:1b:1a:52:09: cf:93:d1:40:53:91:36:7f:de:d2:5a:f6:8e:8f:51:9f:59:1b: 49:d9:3a:47:76:f0:18:09:0e:c6:1a:fd:9d:33:16:6c:bd:ca: a2:61:08:61:1e:fb:3b:98:b5:94:16:c6:85:13:90:f3:62:45: 5f:a5:8b:4c:4e:41:5b:70:35:e2:2c:04:c1:33:1e:41:55:95: 6e:12:bf:0c:5f:f0:2d:33:2a:c6:01:5b:f1:34:1c:34:db:a9: 0c:24:75:5f:9e:1f:fa:53:72:af:32:89:2a:e3:af:6b:0a:9c: 5a:71:9c:df:a0:74:f1:7d:12:10:f0:19:99:24:b0:e2:d1:62: 31:fe:22:79:6b:db:8a:d5:1d:12:59:44:ad:96:35:20:2a:6a: fc:a7:78:b6:71:ec:e5:24:ea:3e:65:ba:aa:b0:f5:f5:fa:c5: 64:e8:9b:77:d1:59:22:6c:c4:84:cb:7a:92:ca:09:d4:82:23: 52:09:95:7d:57:0e:33:c0:fd:da:ed:55:68:01:6f:c0:8f:3e: 32:ff:34:eb:b1:2a:a5:2f:62:96:41:fb:48:f5:d4:33:ee:07: f5:00:58:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HNZW4qt16uUGQXDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5 MTljMB4XDTI2MDMwMTIyMDAwOVoXDTI2MDMwNDIyMDAwMFowLzEtMCsGA1UEAxMk Y2Q5NWMyZDgtYzA4ZC00ODk0LTgwMDAtZWFlZWM5YTk2MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvDcRafZalrSVimcYx4+h3DYd+1HCf6fzfm3 9P3l9j/zGJjI0zlut0RNcHAwpZ8o3bskKqKhqQsjGPdTFrfkNrJloxaNVCvOT2lN zc/15H48F75eYdcbUMth9kSv34UjviB2/iuloZZRpjs19+QnLX5CZeyGjgVkSWQm C+YZDotZoF/vBaOBee6lPrkgWYZbhzPMNv21AYrQcdOpRtolU+9R3sntcyoEkxKR n4U5t1pL5BkAuRwJ3DTp9D0+FKZFDzzLjRj5Ya614Hef2Br7eff5JlNsdSF5JaeN yhV+kbaRS7Qv+8DF3wACJdbZnRt5xH5s6GeW6WddJMznynGrkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK2KbjwGOq5gF/MP6povOybgFfoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZm NTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvZDk2ZjU5MmEtOGZhOS00 ZWM4LWEyNzItYjU2YzI1Mzc5MTljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDk2ZjU5MmEtOGZhOS00ZWM4LWEy NzItYjU2YzI1Mzc5MTljL2Q5NmY1OTJhLThmYTktNGVjOC1hMjcyLWI1NmMyNTM3 OTE5Yy5jcmwwHwYDVR0jBBgwFoAUFJ7+v2rZASg6Fn5McNNjQUeAQvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZj MjUzNzkxOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe0H7xJSop3hLu5VVJV9cf LcSdEe5Zuxts4L/GIOmN3xsaUgnPk9FAU5E2f97SWvaOj1GfWRtJ2TpHdvAYCQ7G Gv2dMxZsvcqiYQhhHvs7mLWUFsaFE5DzYkVfpYtMTkFbcDXiLATBMx5BVZVuEr8M X/AtMyrGAVvxNBw026kMJHVfnh/6U3KvMokq469rCpxacZzfoHTxfRIQ8BmZJLDi 0WIx/iJ5a9uK1R0SWUStljUgKmr8p3i2cezlJOo+ZbqqsPX1+sVk6Jt30VkibMSE y3qSygnUgiNSCZV9Vw4zwP3a7VVoAW/Ajz4y/zTrsSqlL2KWQftI9dQz7gf1AFg1 -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:05 2026 by rpki-client