$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft File: 2fd6704c-2109-476c-8d4f-fea2428a7b88.mft (raw, json) Hash identifier: qUDDSGhiuGXsES6KvEpoS/GmEg7jPrCzSk8iblCE4F0= Subject key identifier: 35:F8:59:EF:1C:19:54:2E:06:C3:BF:5A:13:82:83:3A:D3:BA:AF:53 Authority key identifier: EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C Certificate issuer: /CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Certificate serial: 010D0C9F4328584D06A0A5053A13487AC37BC000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft Manifest number: 010D0C9F43285841854021A083A391EE824E5D22 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 2fd6704c-2109-476c-8d4f-fea2428a7b88.crl (hash: fCr2/KRgT3oTDsF+uy9Xl+cBzCHB0AoHJ9pkt8X5WYw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a5:05:3a:13:48:7a:c3:7b:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=508046d1-7ba6-472b-8149-affdf5a0b22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:5e:19:c3:54:d8:04:04:57:42:d6:b8:97: 42:03:45:75:a8:63:a9:8f:29:6e:fc:c8:8b:cc:bc: 1c:4f:fa:0d:2f:78:7f:5e:7f:b9:35:8f:53:73:95: 11:5e:35:ed:aa:94:cc:b4:a4:e3:d2:96:c9:b3:c6: e1:05:bd:cb:47:a2:a8:31:04:6b:9e:9b:90:0f:ed: d2:e0:b4:1b:20:7c:d1:2d:65:9e:42:e8:d3:28:97: f3:25:d6:08:48:54:1a:ee:2b:29:22:d6:2f:8a:00: 62:0d:fe:67:c5:05:13:0c:7a:65:7f:6e:77:5c:bf: 25:86:c4:c4:73:e3:06:38:bf:d7:0c:07:72:4e:8a: b6:a0:dc:e7:5b:8c:62:03:81:6f:35:81:7b:57:4d: f1:d4:5e:aa:1c:ed:92:d6:d0:ff:bb:74:75:2b:90: c9:24:ad:ce:58:fa:8d:cf:76:17:1c:19:e5:25:0e: 4b:f3:65:2e:4e:70:5c:12:2a:cf:5b:07:f7:2b:c6: 17:ea:ed:0c:76:c9:7f:fe:32:14:b1:10:e1:57:c9: ec:17:fd:5c:ec:ab:ce:db:04:1e:6a:42:45:4e:60: 97:92:f3:00:c1:3b:65:ca:10:4a:b4:11:13:23:e7: 2b:d1:de:89:7d:17:39:63:3d:76:2d:56:9d:ae:64: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:59:EF:1C:19:54:2E:06:C3:BF:5A:13:82:83:3A:D3:BA:AF:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl X509v3 Authority Key Identifier: keyid:EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d9:e6:4a:93:8c:b4:a9:bd:3d:6d:eb:66:b5:62:f2:22:0a: 89:6f:e1:19:ff:3a:2b:5a:92:12:d9:ea:46:16:f1:07:9f:5f: 7a:27:57:ed:9a:c5:b1:46:df:e1:89:22:3f:3e:25:65:fb:fc: 28:e2:02:30:f9:6d:ea:60:1a:d3:a5:87:f3:11:c9:93:5f:a8: 96:7c:3e:b6:f4:4d:99:33:96:4f:6f:80:de:f4:33:a8:2f:01: d8:cd:16:8e:08:3d:4b:9e:48:89:dc:c5:6f:b6:bb:50:92:b3: b7:a2:50:b2:dc:bb:5a:5a:1b:5e:94:39:cf:d1:20:f0:e1:e9: e5:6c:c8:aa:c6:bb:39:cc:63:ee:00:83:31:37:31:ae:32:ce: a7:1d:24:a9:55:b3:ad:cf:bb:83:d6:b7:f2:0d:8d:d7:d6:b6: 3e:72:3b:b6:db:c2:0d:ba:0e:f9:6c:6e:56:c9:2a:57:92:43: 72:98:80:46:47:40:3c:4e:3d:93:30:ba:ab:64:4f:e5:f4:8e: 4d:8d:70:0d:07:12:52:42:e5:1f:57:dc:69:ac:40:80:92:e9: c0:e7:a8:71:f5:7a:6e:d7:23:f7:69:f9:ef:b9:e0:d9:e9:b7: b4:c4:b6:c1:fe:f4:13:5b:82:c7:fd:a9:8f:af:bc:31:46:3a: c1:87:b1:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKUFOhNIesN7wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkNjcwNGMtMjEwOS00NzZjLThkNGYtZmVhMjQyOGE3 Yjg4MB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk NTA4MDQ2ZDEtN2JhNi00NzJiLTgxNDktYWZmZGY1YTBiMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvpeGcNU2AQEV0LWuJdCA0V1qGOpjylu/MiL zLwcT/oNL3h/Xn+5NY9Tc5URXjXtqpTMtKTj0pbJs8bhBb3LR6KoMQRrnpuQD+3S 4LQbIHzRLWWeQujTKJfzJdYISFQa7ispItYvigBiDf5nxQUTDHplf253XL8lhsTE c+MGOL/XDAdyToq2oNznW4xiA4FvNYF7V03x1F6qHO2S1tD/u3R1K5DJJK3OWPqN z3YXHBnlJQ5L82UuTnBcEirPWwf3K8YX6u0Mdsl//jIUsRDhV8nsF/1c7KvO2wQe akJFTmCXkvMAwTtlyhBKtBETI+cr0d6JfRc5Yz12LVadrmSVGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDX4We8cGVQuBsO/WhOCgzrTuq9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2 NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEyNDI4YTdiODgvMmZkNjcwNGMtMjEwOS00 NzZjLThkNGYtZmVhMjQyOGE3Yjg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmZkNjcwNGMtMjEwOS00NzZjLThk NGYtZmVhMjQyOGE3Yjg4LzJmZDY3MDRjLTIxMDktNDc2Yy04ZDRmLWZlYTI0Mjhh N2I4OC5jcmwwHwYDVR0jBBgwFoAU6tIef6ddHKfLWzrg49H33przLXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEy NDI4YTdiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv2eZKk4y0qb09betmtWLy IgqJb+EZ/zorWpIS2epGFvEHn196J1ftmsWxRt/hiSI/PiVl+/wo4gIw+W3qYBrT pYfzEcmTX6iWfD629E2ZM5ZPb4De9DOoLwHYzRaOCD1LnkiJ3MVvtrtQkrO3olCy 3LtaWhtelDnP0SDw4enlbMiqxrs5zGPuAIMxNzGuMs6nHSSpVbOtz7uD1rfyDY3X 1rY+cju228INug75bG5WySpXkkNymIBGR0A8Tj2TMLqrZE/l9I5NjXANBxJSQuUf V9xprECAkunA56hx9Xpu1yP3afnvueDZ6be0xLbB/vQTW4LH/amPr7wxRjrBh7HR -----END CERTIFICATE-----Generated at Mon Mar 2 06:27:17 2026 by rpki-client