$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft File: 252bb797-8be3-4178-8149-ed86949ba85a.mft (raw, json) Hash identifier: hX3TcI9RfhgkI5feiAuiPKCD38e20Awa0zzU/TlAz+E= Subject key identifier: 96:FF:57:D1:1C:6C:CF:41:DC:F6:56:CE:32:02:FB:50:A1:17:B5:91 Authority key identifier: 99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 Certificate issuer: /CN=252bb797-8be3-4178-8149-ed86949ba85a Certificate serial: 010D0C9F4328584D06A0A4BFD5EBB9156733AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft Manifest number: 010D0C9F432858487A2FF7DC32D4C8FDAFAE67AB Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 251e3654-fce7-3166-94e5-b4de0876ecca.roa (hash: sJn5XXUCsPYKxG7OR7Su1NsrUHFfrgF4dhLB4LySb88=) 2: 252bb797-8be3-4178-8149-ed86949ba85a.crl (hash: zTVKsOYpdCv0sBLjitZlUhtn7EXeWU0fjoAxNXKJb34=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a4:bf:d5:eb:b9:15:67:33:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bb797-8be3-4178-8149-ed86949ba85a Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=29ae3532-aed9-4d45-9bda-176ad9548c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:c1:e0:e1:85:0a:f7:8c:58:a7:99:31:6d: 53:13:7b:22:06:9f:ec:07:82:69:8c:c2:4c:2d:9f: 1d:6e:0f:b5:f9:d7:4e:68:35:6d:3b:03:c8:f5:7a: 63:61:1e:20:96:7f:8a:5d:33:0f:d4:ab:cb:dc:68: cd:a9:01:e2:ae:40:ae:2c:d1:19:a6:2b:a4:1f:82: 01:c1:f8:58:e7:72:d1:6e:50:40:50:06:d1:69:30: 1f:4d:9a:e2:1d:e8:06:d3:6e:b5:cf:2d:fa:e0:2c: 06:56:eb:32:53:24:9d:96:1f:30:4f:81:64:12:82: 81:fc:3e:0c:7c:10:80:92:88:cb:35:53:a3:5a:0d: b8:50:d5:a6:1c:6c:f1:3d:0c:ab:4e:a5:81:de:bb: 3e:83:9e:ac:0d:24:31:c0:e4:9d:5e:05:61:26:d1: 41:60:ee:14:89:9f:39:07:52:5f:83:9d:f6:3f:b5: 5b:46:15:58:94:fd:3a:b5:c9:b8:f5:cc:1f:75:db: e5:4f:cd:7a:3e:96:e8:10:c3:4c:0c:9b:c5:4c:87: 50:c0:d6:b8:8a:b1:0c:37:7b:43:a1:95:b2:83:30: cf:88:57:ee:09:02:ad:b6:6f:c1:e9:47:63:cf:0b: 09:de:f4:f2:23:13:7b:d8:be:92:c1:1e:53:17:43: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:57:D1:1C:6C:CF:41:DC:F6:56:CE:32:02:FB:50:A1:17:B5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.crl X509v3 Authority Key Identifier: keyid:99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6c:50:24:d4:88:4d:ac:70:52:91:5b:2b:f5:be:5f:87:45: 4c:81:8e:44:18:0e:c6:a3:c4:48:e2:36:86:1c:8c:d6:44:67: 37:cf:58:54:5a:1b:72:c6:3c:8f:0a:c8:08:bf:34:b0:5c:cb: 81:66:dc:2b:1a:db:58:e9:0a:02:15:4a:c5:89:74:72:95:4f: 89:3a:13:b0:fe:a4:c0:3a:1a:ec:ac:7f:7c:15:97:51:51:e8: 8f:c8:fe:2a:b1:e9:af:fd:6b:50:e6:09:44:2d:20:f5:a6:31: 36:0f:57:d4:85:19:67:65:5b:3a:e1:b8:87:bc:79:b2:76:5c: 90:c2:79:2a:3d:b9:02:68:58:8f:cc:7e:81:4a:f7:ea:1b:4b: 1e:b0:05:23:85:e6:50:9e:1f:40:2f:e9:29:64:e4:6e:cd:d2: d8:65:dc:d7:ac:51:e7:fb:cb:41:ec:d9:40:93:8f:52:d2:18: 8c:8e:2a:77:b7:f4:19:4f:cb:29:8c:e0:60:eb:7c:b5:38:b4: c5:be:1d:45:de:50:88:28:6c:d3:f2:02:6c:77:68:54:65:60: fd:be:4f:a8:88:82:22:4a:69:7f:89:ac:ea:6d:f8:e3:da:e8: 3d:c1:17:50:2e:63:c0:47:b3:56:ea:9f:d4:01:21:52:ac:f5: d9:9a:51:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKS/1eu5FWczqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmI3OTctOGJlMy00MTc4LTgxNDktZWQ4Njk0OWJh ODVhMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk MjlhZTM1MzItYWVkOS00ZDQ1LTliZGEtMTc2YWQ5NTQ4YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiDB4OGFCveMWKeZMW1TE3siBp/sB4JpjMJM LZ8dbg+1+ddOaDVtOwPI9XpjYR4gln+KXTMP1KvL3GjNqQHirkCuLNEZpiukH4IB wfhY53LRblBAUAbRaTAfTZriHegG0261zy364CwGVusyUySdlh8wT4FkEoKB/D4M fBCAkojLNVOjWg24UNWmHGzxPQyrTqWB3rs+g56sDSQxwOSdXgVhJtFBYO4UiZ85 B1Jfg532P7VbRhVYlP06tcm49cwfddvlT816PpboEMNMDJvFTIdQwNa4irEMN3tD oZWygzDPiFfuCQKttm/B6UdjzwsJ3vTyIxN72L6SwR5TF0NZ+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJb/V9EcbM9B3PZWzjIC+1ChF7WRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTJi Yjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2OTQ5YmE4NWEvMjUyYmI3OTctOGJlMy00 MTc4LTgxNDktZWQ4Njk0OWJhODVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUyYmI3OTctOGJlMy00MTc4LTgx NDktZWQ4Njk0OWJhODVhLzI1MmJiNzk3LThiZTMtNDE3OC04MTQ5LWVkODY5NDli YTg1YS5jcmwwHwYDVR0jBBgwFoAUmeqBcRJuRobZPXxv4dUbXpaeQEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTJiYjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2 OTQ5YmE4NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBibFAk1IhNrHBSkVsr9b5f h0VMgY5EGA7Go8RI4jaGHIzWRGc3z1hUWhtyxjyPCsgIvzSwXMuBZtwrGttY6QoC FUrFiXRylU+JOhOw/qTAOhrsrH98FZdRUeiPyP4qsemv/WtQ5glELSD1pjE2D1fU hRlnZVs64biHvHmydlyQwnkqPbkCaFiPzH6BSvfqG0sesAUjheZQnh9AL+kpZORu zdLYZdzXrFHn+8tB7NlAk49S0hiMjip3t/QZT8spjOBg63y1OLTFvh1F3lCIKGzT 8gJsd2hUZWD9vk+oiIIiSml/iazqbfjj2ug9wRdQLmPAR7NW6p/UASFSrPXZmlFI -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:57 2026 by rpki-client