$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft File: 686dfae3-1a9a-4471-9592-9f404f78a8dc.mft (raw, json) Hash identifier: rSoh+KnM5lkVIAYVSclldu1q4iJS2Tme7f7327DRSOM= Subject key identifier: 29:B7:4A:9D:34:DC:0A:D1:24:00:13:71:A1:A6:78:2F:BD:0C:0A:70 Authority key identifier: 67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF Certificate issuer: /CN=686dfae3-1a9a-4471-9592-9f404f78a8dc Certificate serial: 010D0C9F4328584D0717BFDB2463EF4B07EB7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft Manifest number: 010D0C9F4328584BD9B1B7C9B5399A0EE08F4372 Signing time: Sun 01 Mar 2026 21:00:04 +0000 Manifest this update: Sun 01 Mar 2026 21:00:04 +0000 Manifest next update: Wed 04 Mar 2026 21:00:00 +0000 Files and hashes: 1: 686dfae3-1a9a-4471-9592-9f404f78a8dc.crl (hash: WfZfbRzOjsXUU2FREpEcdSBkvgXeNr3Org+i78TwnKY=) 2: f0606dda-d4ec-3600-8b92-ec65128be8dd.roa (hash: yj97ra5d18uRkA+R8c6uzaI1xgmq9bT/ZaD7GdBOrqo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:17:bf:db:24:63:ef:4b:07:eb:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686dfae3-1a9a-4471-9592-9f404f78a8dc Validity Not Before: Mar 1 21:00:04 2026 GMT Not After : Mar 4 21:00:00 2026 GMT Subject: CN=289b957c-bf34-4f76-ab9b-dea045509256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:e4:bc:0f:a8:e0:22:33:88:06:a4:ed:99: 83:eb:fa:80:de:de:92:ee:e2:9e:df:1b:b3:64:50: a1:4e:9d:18:8b:6e:da:9c:7e:57:74:08:57:cd:ac: 1c:14:c9:d2:63:ea:43:2f:38:9e:fb:7e:3f:3e:01: a7:59:e7:5e:55:37:46:27:ff:97:d6:f1:f7:f5:09: 4d:d5:01:1e:a1:0a:16:3f:8d:36:a8:01:93:98:87: 3d:6f:ef:63:2a:87:8c:0a:70:68:03:c5:1c:10:2b: 64:6a:6d:5c:e8:a7:b8:d6:2d:9d:b3:c3:c2:ab:88: 53:e7:8b:5c:ff:da:5a:59:8e:3c:b4:c1:26:f4:33: c2:a2:b9:2f:e3:eb:11:9c:89:27:78:e9:22:11:f8: 33:78:c1:7f:af:f5:81:48:7b:71:4b:57:c9:6f:e8: df:47:1c:e4:d5:c0:2f:a3:74:8e:2e:ac:2f:1c:93: 87:65:56:5b:ba:04:ad:10:75:15:2e:56:eb:f7:5f: c0:0e:bb:6e:88:d7:c4:33:7c:36:c5:1f:f7:3a:47: f3:86:fd:0f:6a:eb:06:56:fb:20:ad:4d:e0:80:72: fc:6e:75:4a:83:57:e7:cc:2e:21:c4:9f:ff:ee:94: a1:76:eb:96:63:c8:77:75:da:16:9b:0d:32:55:4e: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B7:4A:9D:34:DC:0A:D1:24:00:13:71:A1:A6:78:2F:BD:0C:0A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.crl X509v3 Authority Key Identifier: keyid:67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:e2:d6:fa:c9:f4:94:c1:b6:a2:e3:8c:8d:9c:50:74:81:f1: 9d:fe:59:cb:72:82:d7:f8:49:4f:7b:1e:4e:8e:51:34:f8:54: 2b:cc:ba:39:b0:13:9b:a2:0e:e7:ee:0a:e6:e8:59:43:7d:32: 1a:75:a0:c6:84:c6:cf:61:88:d0:04:d0:f7:cd:72:aa:e7:55: be:55:ce:60:64:bf:2c:c3:b0:05:ab:7a:d4:ac:5f:a6:8b:a3: 4b:51:4c:d7:e2:df:d8:24:58:72:8d:d0:cb:0f:f7:08:5b:77: 2c:95:a3:bd:4c:04:77:c5:da:85:f6:5a:e9:a1:ca:d7:bc:ad: 9e:8a:93:d3:7c:73:1f:b1:c0:40:54:0b:5b:94:68:e7:52:a0: 88:d0:a3:2b:d6:6b:32:3f:b7:13:26:bc:70:b8:74:02:e1:86: 27:76:bc:7e:33:77:2a:fa:3e:d0:17:22:7e:53:de:88:d2:aa: 7a:de:08:08:34:14:87:72:5f:f9:a1:46:63:d2:da:b3:eb:5c: 9d:cc:dc:45:c9:3a:da:c1:85:d1:a3:22:a7:e2:2f:eb:56:62: 7a:b8:35:8f:c0:69:83:60:38:d3:32:80:dc:0c:d7:27:16:b6: 8c:aa:3f:00:cd:a6:c6:3f:72:dc:57:17:b5:13:17:3d:28:bf: 09:09:19:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HF7/bJGPvSwfrcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2ZGZhZTMtMWE5YS00NDcxLTk1OTItOWY0MDRmNzhh OGRjMB4XDTI2MDMwMTIxMDAwNFoXDTI2MDMwNDIxMDAwMFowLzEtMCsGA1UEAxMk Mjg5Yjk1N2MtYmYzNC00Zjc2LWFiOWItZGVhMDQ1NTA5MjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVHkvA+o4CIziAak7ZmD6/qA3t6S7uKe3xuz ZFChTp0Yi27anH5XdAhXzawcFMnSY+pDLzie+34/PgGnWedeVTdGJ/+X1vH39QlN 1QEeoQoWP402qAGTmIc9b+9jKoeMCnBoA8UcECtkam1c6Ke41i2ds8PCq4hT54tc /9paWY48tMEm9DPCorkv4+sRnIkneOkiEfgzeMF/r/WBSHtxS1fJb+jfRxzk1cAv o3SOLqwvHJOHZVZbugStEHUVLlbr91/ADrtuiNfEM3w2xR/3Okfzhv0PausGVvsg rU3ggHL8bnVKg1fnzC4hxJ//7pShduuWY8h3ddoWmw0yVU58rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCm3Sp003ArRJAATcaGmeC+9DApwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ODZk ZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQwNGY3OGE4ZGMvNjg2ZGZhZTMtMWE5YS00 NDcxLTk1OTItOWY0MDRmNzhhOGRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjg2ZGZhZTMtMWE5YS00NDcxLTk1 OTItOWY0MDRmNzhhOGRjLzY4NmRmYWUzLTFhOWEtNDQ3MS05NTkyLTlmNDA0Zjc4 YThkYy5jcmwwHwYDVR0jBBgwFoAUZ7awZhFExDDiWdA5yK3Z9PYzuq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82ODZkZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQw NGY3OGE4ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDN4tb6yfSUwbai44yNnFB0 gfGd/lnLcoLX+ElPex5OjlE0+FQrzLo5sBObog7n7grm6FlDfTIadaDGhMbPYYjQ BND3zXKq51W+Vc5gZL8sw7AFq3rUrF+mi6NLUUzX4t/YJFhyjdDLD/cIW3cslaO9 TAR3xdqF9lrpocrXvK2eipPTfHMfscBAVAtblGjnUqCI0KMr1msyP7cTJrxwuHQC 4YYndrx+M3cq+j7QFyJ+U96I0qp63ggINBSHcl/5oUZj0tqz61ydzNxFyTrawYXR oyKn4i/rVmJ6uDWPwGmDYDjTMoDcDNcnFraMqj8AzabGP3LcVxe1Exc9KL8JCRkA -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:12 2026 by rpki-client