$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: zh7x3/lLhuSHPeCiZh54wwf0omAYYgksSKBuR5ekB3I= Subject key identifier: 25:CE:8F:C2:C5:E6:C0:DB:B4:19:4C:53:3E:F7:D8:30:93:BA:6B:B5 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584D092FC68F6F411073558CB720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1F17 Signing time: Mon 02 Mar 2026 15:00:04 +0000 Manifest this update: Mon 02 Mar 2026 15:00:04 +0000 Manifest next update: Thu 05 Mar 2026 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: /QR2fhl2t3/XaXRbkF9w6sO4YCpvN30oupoJXaOlZow=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: BzXuMSdLxndeXjxGI7ClT8vfNOR8onuoV3JKX0KBW5Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:2f:c6:8f:6f:41:10:73:55:8c:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Mar 2 15:00:04 2026 GMT Not After : Mar 5 15:00:00 2026 GMT Subject: CN=e54eaab0-4f99-4026-8324-55658bd5beae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:65:52:f6:ce:f0:01:d3:35:73:99:09:68: c8:bd:62:d9:7d:08:d1:a7:cc:37:4b:1d:52:4c:d8: cd:44:47:87:41:07:a7:9a:6b:36:76:4e:74:30:a6: aa:5b:0c:50:b3:03:83:59:69:0c:45:1c:d0:37:3e: eb:ed:b7:d5:02:34:2c:ae:55:f6:a6:ae:fd:96:78: 27:59:d0:59:51:fa:3d:12:be:4d:26:3c:27:d5:87: 17:c5:bb:46:bf:a6:bb:b5:8e:34:2b:94:05:94:c9: 15:14:8b:37:36:42:bb:69:ca:15:34:8c:ce:7d:ca: 73:c2:8a:2d:e1:42:73:59:34:52:6d:1a:d1:3c:33: 14:da:64:e0:fc:2e:4f:82:65:22:90:09:0c:9b:df: f7:40:10:de:df:f1:2a:1d:d8:b8:81:18:18:23:c8: 63:2a:09:67:6c:18:cd:4a:bc:82:6f:95:31:97:9d: 6c:e7:14:fe:1e:d9:b7:a4:15:5b:31:42:1e:05:c9: a5:9b:20:cf:f1:e1:aa:f3:e8:89:68:39:09:4c:85: 02:4b:6b:14:55:ba:0d:bb:0a:83:dd:aa:1c:43:3c: 3a:2c:44:0b:63:1e:b8:7d:9e:4d:d5:ed:8a:7f:67: 63:d6:e2:cf:fd:10:7a:30:47:2e:bd:09:ca:9e:68: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:8F:C2:C5:E6:C0:DB:B4:19:4C:53:3E:F7:D8:30:93:BA:6B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:98:e0:de:8d:07:01:db:0c:f6:10:83:25:b1:97:fe:3a:9c: 6c:3f:00:f5:db:3d:da:71:3d:ee:a5:78:e8:26:2b:8e:10:9f: 9e:ef:f3:f4:fc:d9:02:3b:cf:93:f2:67:4c:03:cb:2f:f9:14: 19:c4:ac:c6:c6:fc:82:b6:11:69:02:b1:93:ad:d5:a3:82:87: 7a:16:9b:55:4c:a6:cd:b6:31:97:a3:12:17:26:c2:e4:cd:be: eb:bb:e1:7e:2e:5c:38:ff:d8:4a:1d:16:b9:df:f9:2b:d1:b4: 5e:35:c2:63:7f:f6:2e:8b:b9:b4:4b:98:57:fb:f6:fb:bb:ef: fd:56:d6:b9:f8:f9:e8:9e:a0:98:ea:fb:15:50:72:91:73:2a: 83:72:c8:3d:a5:87:b2:b9:d6:bf:d6:3a:74:e6:ac:6a:71:01: 7e:33:3c:43:a1:70:61:77:68:b7:70:bb:13:e3:b4:a0:20:d3: 26:1a:d3:98:f2:4b:19:2b:98:0b:15:cf:9d:a5:dc:d8:9b:a8: 63:11:fa:c3:fc:56:bf:37:42:ae:00:a4:29:65:3d:65:50:bd: 4a:42:cd:b1:67:c2:57:29:bf:b2:0a:d8:b6:98:2a:97:e6:d6: ee:a1:e2:29:4b:fa:d8:63:e7:63:13:6c:2e:bb:94:92:eb:76: 8f:46:fc:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0JL8aPb0EQc1WMtyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI2MDMwMjE1MDAwNFoXDTI2MDMwNTE1MDAwMFowLzEtMCsGA1UEAxMk ZTU0ZWFhYjAtNGY5OS00MDI2LTgzMjQtNTU2NThiZDViZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFdlUvbO8AHTNXOZCWjIvWLZfQjRp8w3Sx1S TNjNREeHQQenmms2dk50MKaqWwxQswODWWkMRRzQNz7r7bfVAjQsrlX2pq79lngn WdBZUfo9Er5NJjwn1YcXxbtGv6a7tY40K5QFlMkVFIs3NkK7acoVNIzOfcpzwoot 4UJzWTRSbRrRPDMU2mTg/C5PgmUikAkMm9/3QBDe3/EqHdi4gRgYI8hjKglnbBjN SryCb5Uxl51s5xT+Htm3pBVbMUIeBcmlmyDP8eGq8+iJaDkJTIUCS2sUVboNuwqD 3aocQzw6LEQLYx64fZ5N1e2Kf2dj1uLP/RB6MEcuvQnKnmhhzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCXOj8LF5sDbtBlMUz732DCTumu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAumODejQcB2wz2EIMlsZf+ OpxsPwD12z3acT3upXjoJiuOEJ+e7/P0/NkCO8+T8mdMA8sv+RQZxKzGxvyCthFp ArGTrdWjgod6FptVTKbNtjGXoxIXJsLkzb7ru+F+Llw4/9hKHRa53/kr0bReNcJj f/Yui7m0S5hX+/b7u+/9Vta5+PnonqCY6vsVUHKRcyqDcsg9pYeyuda/1jp05qxq cQF+MzxDoXBhd2i3cLsT47SgINMmGtOY8ksZK5gLFc+dpdzYm6hjEfrD/Fa/N0Ku AKQpZT1lUL1KQs2xZ8JXKb+yCti2mCqX5tbuoeIpS/rYY+djE2wuu5SS63aPRvzz -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:53 2026 by rpki-client