$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft File: f5354d62-8c66-4153-8fd6-c06a9dacd989.mft (raw, json) Hash identifier: ZflGk7XyaHKybHATnDrpkIPMXfok/A78QwplOMMnano= Subject key identifier: 6C:CF:04:DF:9D:26:9A:5F:7A:8F:B4:72:F7:3E:57:B8:21:A3:C4:8E Authority key identifier: 27:7F:52:E8:44:B7:9E:C3:0D:D7:87:5A:3E:AB:C3:54:41:53:FD:C3 Certificate issuer: /CN=f5354d62-8c66-4153-8fd6-c06a9dacd989 Certificate serial: 010D0C9F4328584D08D66F796E858B1FCF61E000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft Manifest number: 010D0C9F432858497537F58625BF9F0C9D3627F3 Signing time: Mon 02 Mar 2026 12:00:03 +0000 Manifest this update: Mon 02 Mar 2026 12:00:03 +0000 Manifest next update: Thu 05 Mar 2026 12:00:00 +0000 Files and hashes: 1: 4b39d8e0-9717-37c7-bbb1-ba3db870f61f.roa (hash: li+Om+HU3SgL359PD932MFX3nxOlS4YWEhcz9uuxpXY=) 2: f5354d62-8c66-4153-8fd6-c06a9dacd989.crl (hash: AZx1Ccizgug9DimpPS7lv8qJ+wdkdYXen1zXEb09ISI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:d6:6f:79:6e:85:8b:1f:cf:61:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5354d62-8c66-4153-8fd6-c06a9dacd989 Validity Not Before: Mar 2 12:00:03 2026 GMT Not After : Mar 5 12:00:00 2026 GMT Subject: CN=bac1a751-36e4-4e11-85c4-f2b6f8af57f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:30:32:6c:c5:65:4b:88:d9:2a:b0:ef:b6: d8:69:e8:98:b4:8f:a7:51:d5:7c:95:ca:20:af:b3: ad:5f:35:a3:af:98:49:a0:a5:4c:a6:b2:46:53:ab: 2a:71:d9:e0:71:35:55:3b:49:55:65:fb:50:aa:7c: d4:56:4a:f6:31:0b:7f:c9:65:9a:1f:52:9a:fb:7e: b4:96:9a:67:bd:77:34:24:7d:e5:fb:c3:a2:df:e4: 56:5f:51:9f:41:a3:31:95:12:e3:72:49:eb:78:6e: 7f:85:b8:14:99:a6:95:9b:fd:0f:ac:f0:ee:be:66: 78:1d:ec:51:3f:6f:f3:6a:f4:51:33:6b:a5:af:30: a8:06:91:2a:be:11:1e:57:12:b8:bc:69:82:f8:1c: 3c:ce:79:4c:16:df:ce:7b:4c:c0:a0:eb:31:be:8c: 5e:64:96:9f:d9:28:e4:b8:85:c7:d0:60:c3:8b:0a: bb:db:81:9e:14:a1:1d:4b:97:e0:2a:7c:69:6a:48: cc:e1:2d:f8:fc:77:32:0a:65:c7:c0:ab:e4:2e:74: 93:64:4b:a5:bc:db:ed:1c:7d:f2:b5:03:86:3c:1d: 3b:76:1d:40:42:80:7e:1d:76:cc:4d:18:c5:cf:e3: 19:fa:64:7f:05:fa:5f:c1:07:47:43:e1:75:55:8e: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CF:04:DF:9D:26:9A:5F:7A:8F:B4:72:F7:3E:57:B8:21:A3:C4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.crl X509v3 Authority Key Identifier: keyid:27:7F:52:E8:44:B7:9E:C3:0D:D7:87:5A:3E:AB:C3:54:41:53:FD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fe:99:ea:80:ba:a3:dc:f6:4c:c5:eb:22:b9:ab:96:ef:ac: 99:df:d2:92:7e:27:b9:3c:0d:87:11:c8:cc:1b:dc:1b:a2:3d: 46:df:fc:0b:28:38:37:92:c8:ae:07:47:24:03:cc:ce:c9:8c: 00:2a:d9:e1:c9:f9:01:a2:46:ee:40:94:77:d1:17:9c:00:70: 8a:58:4b:30:00:7a:56:23:9a:d6:ab:98:ea:aa:c9:84:d9:99: 9c:9b:c7:3b:46:1f:09:04:8b:82:8d:1e:c8:6b:ed:02:8e:bd: 77:5f:15:1a:f3:2e:17:56:f4:68:73:06:c2:c2:77:a1:84:5a: ac:49:0b:43:5a:95:84:45:49:29:80:20:5e:77:43:26:74:52: c5:49:04:ad:50:6b:45:2d:19:86:64:36:12:9e:15:53:da:b9: 71:f9:73:86:75:a9:27:10:f1:ed:b1:07:74:1e:4b:f3:1b:48: 76:f1:de:3a:e8:09:13:49:08:0d:eb:66:b6:2c:ec:4b:ed:06: 25:57:ae:0b:6c:e1:49:65:b6:6f:b3:57:c3:90:56:63:58:5a: 59:04:6d:af:ca:70:d3:f7:da:5a:c8:95:d5:b9:db:d4:79:05: 45:cf:e6:08:dd:1e:57:52:15:f0:40:3e:18:09:8e:23:e3:0a: e6:2c:61:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0I1m95boWLH89h4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUzNTRkNjItOGM2Ni00MTUzLThmZDYtYzA2YTlkYWNk OTg5MB4XDTI2MDMwMjEyMDAwM1oXDTI2MDMwNTEyMDAwMFowLzEtMCsGA1UEAxMk YmFjMWE3NTEtMzZlNC00ZTExLTg1YzQtZjJiNmY4YWY1N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34YwMmzFZUuI2Sqw77bYaeiYtI+nUdV8lcog r7OtXzWjr5hJoKVMprJGU6sqcdngcTVVO0lVZftQqnzUVkr2MQt/yWWaH1Ka+360 lppnvXc0JH3l+8Oi3+RWX1GfQaMxlRLjcknreG5/hbgUmaaVm/0PrPDuvmZ4HexR P2/zavRRM2ulrzCoBpEqvhEeVxK4vGmC+Bw8znlMFt/Oe0zAoOsxvoxeZJaf2Sjk uIXH0GDDiwq724GeFKEdS5fgKnxpakjM4S34/HcyCmXHwKvkLnSTZEulvNvtHH3y tQOGPB07dh1AQoB+HXbMTRjFz+MZ+mR/BfpfwQdHQ+F1VY7z4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGzPBN+dJppfeo+0cvc+V7gho8SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTM1 NGQ2Mi04YzY2LTQxNTMtOGZkNi1jMDZhOWRhY2Q5ODkvZjUzNTRkNjItOGM2Ni00 MTUzLThmZDYtYzA2YTlkYWNkOTg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUzNTRkNjItOGM2Ni00MTUzLThm ZDYtYzA2YTlkYWNkOTg5L2Y1MzU0ZDYyLThjNjYtNDE1My04ZmQ2LWMwNmE5ZGFj ZDk4OS5jcmwwHwYDVR0jBBgwFoAUJ39S6ES3nsMN14daPqvDVEFT/cMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTM1NGQ2Mi04YzY2LTQxNTMtOGZkNi1jMDZh OWRhY2Q5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK/pnqgLqj3PZMxesiuauW 76yZ39KSfie5PA2HEcjMG9wboj1G3/wLKDg3ksiuB0ckA8zOyYwAKtnhyfkBokbu QJR30RecAHCKWEswAHpWI5rWq5jqqsmE2Zmcm8c7Rh8JBIuCjR7Ia+0Cjr13XxUa 8y4XVvRocwbCwnehhFqsSQtDWpWERUkpgCBed0MmdFLFSQStUGtFLRmGZDYSnhVT 2rlx+XOGdaknEPHtsQd0HkvzG0h28d466AkTSQgN62a2LOxL7QYlV64LbOFJZbZv s1fDkFZjWFpZBG2vynDT99payJXVudvUeQVFz+YI3R5XUhXwQD4YCY4j4wrmLGGc -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:26 2026 by rpki-client