$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: UZvK3P80oDXfKrVjYSKp/2vI3qN4+KmsAQdnERVFSII= Subject key identifier: D2:0B:75:B3:3B:2C:52:F4:32:7A:A4:6E:1C:22:DC:26:B6:19:21:0C Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584D06BE6B28099F8D0A5E4B4880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F992 Signing time: Sun 01 Mar 2026 18:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:00:04 +0000 Manifest next update: Wed 04 Mar 2026 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: iqnko39agkn+vhmUhP3YEBS3UChhS7RjvQtY2Wz/mxE=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: wg5Am+1eVK9nWXq7A9G558av0ekJ3XZxNJVWWK13oqU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:be:6b:28:09:9f:8d:0a:5e:4b:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Mar 1 18:00:04 2026 GMT Not After : Mar 4 18:00:00 2026 GMT Subject: CN=8fe1f956-4493-4bac-a019-9b23f00d280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:c1:46:e9:8b:d2:8d:e1:b4:3b:a7:e3:47: e4:fa:82:5d:a7:69:78:51:cb:76:72:1c:ec:d9:89: e1:f6:77:52:de:e3:f8:f0:32:7a:1a:b5:72:6c:72: 18:51:21:f5:e1:1a:f4:e4:62:d8:17:b4:94:da:42: b0:62:a9:fa:ce:77:51:7d:02:c7:cc:83:db:45:cd: f4:4e:f0:ea:48:18:13:16:a8:d1:d3:2f:a1:33:1e: 1e:58:e7:73:1d:27:f1:f7:49:3d:cf:ea:13:8f:78: 0f:90:59:11:08:f1:25:2d:42:01:7f:b2:73:ad:24: 3a:f6:b1:00:f1:32:5d:42:62:53:19:03:c0:ff:f9: 1e:da:29:68:31:05:a2:0e:ba:0f:3f:bc:fb:47:a9: 5d:0b:f0:0c:c5:fc:a2:58:18:c2:3c:89:b7:e6:85: 9a:b4:7f:e7:ea:af:90:f8:70:8f:d0:aa:84:34:66: 24:2b:22:35:b1:bd:43:2e:4a:7d:92:b8:b3:65:26: 7e:b1:76:40:aa:71:19:29:4f:6d:8f:3f:29:1b:9c: 78:e0:73:e5:e2:c6:7e:02:0d:4e:30:55:35:c4:a0: 80:75:b3:40:ee:c4:02:b5:c0:53:32:2f:55:62:2f: 4f:a3:e1:75:67:9b:e8:f0:06:08:ca:c5:1b:f4:28: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:75:B3:3B:2C:52:F4:32:7A:A4:6E:1C:22:DC:26:B6:19:21:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:66:ee:8c:15:90:22:6e:b2:ee:4c:1c:28:f3:c5:e5:4a:09: e2:d4:31:3d:9c:6c:87:11:37:68:4c:6e:1b:e0:98:aa:f9:70: cd:55:cd:53:64:ce:4f:7f:0f:25:4c:53:6b:3a:b5:ef:69:25: 3b:40:4c:cf:b4:30:67:fd:d0:62:db:76:34:29:11:b8:69:f4: 71:5a:bf:b5:0a:f9:e4:6a:dd:ca:70:8a:13:f8:31:96:e3:94: 41:91:48:3b:13:1b:72:d9:6e:35:8b:97:2e:e3:46:47:16:b0: d5:49:a8:43:34:22:cb:46:d7:2f:25:b8:25:e7:99:f0:0c:63: 89:c2:fe:f1:90:14:e1:52:a4:79:c2:04:5f:9b:b5:9c:92:cc: ca:f3:47:46:95:67:6d:a0:3f:20:b6:6e:01:a9:9c:46:b3:2f: 92:2f:61:bc:f0:df:16:48:6f:2e:58:fa:20:c9:34:83:9d:1a: 79:9a:2a:5d:ad:57:59:43:df:f3:ff:0e:28:70:67:9a:12:98: ae:16:ba:29:ba:ce:63:2f:4f:57:6f:a9:7a:9a:40:a8:70:7f: 82:aa:fd:1f:c6:62:40:bb:7f:38:e4:72:81:be:47:f2:f2:7b: df:b9:29:50:c4:cc:78:ae:6f:89:54:fb:9d:d8:02:bd:e8:34: f6:da:cc:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GvmsoCZ+NCl5LSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDMwMTE4MDAwNFoXDTI2MDMwNDE4MDAwMFowLzEtMCsGA1UEAxMk OGZlMWY5NTYtNDQ5My00YmFjLWEwMTktOWIyM2YwMGQyODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0vBRumL0o3htDun40fk+oJdp2l4Uct2chzs 2Ynh9ndS3uP48DJ6GrVybHIYUSH14Rr05GLYF7SU2kKwYqn6zndRfQLHzIPbRc30 TvDqSBgTFqjR0y+hMx4eWOdzHSfx90k9z+oTj3gPkFkRCPElLUIBf7JzrSQ69rEA 8TJdQmJTGQPA//ke2iloMQWiDroPP7z7R6ldC/AMxfyiWBjCPIm35oWatH/n6q+Q +HCP0KqENGYkKyI1sb1DLkp9krizZSZ+sXZAqnEZKU9tjz8pG5x44HPl4sZ+Ag1O MFU1xKCAdbNA7sQCtcBTMi9VYi9Po+F1Z5vo8AYIysUb9CgYIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNILdbM7LFL0Mnqkbhwi3Ca2GSEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLZu6MFZAibrLuTBwo88Xl Sgni1DE9nGyHETdoTG4b4Jiq+XDNVc1TZM5Pfw8lTFNrOrXvaSU7QEzPtDBn/dBi 23Y0KRG4afRxWr+1Cvnkat3KcIoT+DGW45RBkUg7Exty2W41i5cu40ZHFrDVSahD NCLLRtcvJbgl55nwDGOJwv7xkBThUqR5wgRfm7WckszK80dGlWdtoD8gtm4BqZxG sy+SL2G88N8WSG8uWPogyTSDnRp5mipdrVdZQ9/z/w4ocGeaEpiuFropus5jL09X b6l6mkCocH+Cqv0fxmJAu3845HKBvkfy8nvfuSlQxMx4rm+JVPud2AK96DT22swc -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:47 2026 by rpki-client