$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft File: 945a7f76-bce3-4d85-a81e-c84df8d5197a.mft (raw, json) Hash identifier: EKPyGb+57DgTY8ZR8NbDFa+jat3t1UyXf2eXv3oYKOA= Subject key identifier: EB:67:F6:2C:0C:CC:82:4A:C1:48:AA:D5:A9:5E:86:44:D2:6F:E9:28 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584D05B276A11E1CB57812EC4950 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft Manifest number: 010D0C9F4328584073A84A0930399A0899841592 Signing time: Sun 01 Mar 2026 09:00:08 +0000 Manifest this update: Sun 01 Mar 2026 09:00:08 +0000 Manifest next update: Wed 04 Mar 2026 09:00:00 +0000 Files and hashes: 1: 1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa (hash: iWTmAfGlTz5wOrU5rVzzfBpNEOq30VfmQjjsNCkP6/c=) 2: 945a7f76-bce3-4d85-a81e-c84df8d5197a.crl (hash: JDZDF/8mS9tVev0NlLFMrFbclUPw1cLaE22E7agElqI=) 3: d60bda9b-5558-3804-a4dc-7ef1d9647130.roa (hash: sv5mpAM/x36QRPzSqJkFQRVyStRS7noWO+dwRIyoeGA=) 4: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (hash: O8pVBT/reeOsWMIoY8hUPHJREBN2fiOvV+NoX3hBRpo=) 5: f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa (hash: aP1TzM0K1CdjTm773aHl8IyOG1bMwuZ3CWYajYP3IuY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:b2:76:a1:1e:1c:b5:78:12:ec:49:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Mar 1 09:00:08 2026 GMT Not After : Mar 4 09:00:00 2026 GMT Subject: CN=286d54a6-b76e-4c44-b039-99fd87127210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:99:8f:45:a5:fd:c7:cb:1b:80:34:e8:df: aa:4d:ea:dd:6e:8f:5b:96:87:9a:ee:29:91:5f:85: 03:8a:63:98:b9:a1:8d:06:16:e2:35:1d:7a:6d:88: 71:1f:19:29:e9:a0:d7:91:41:ea:f1:36:96:8c:ba: 2b:ed:30:33:c2:86:56:40:10:d4:65:16:6b:c3:2c: 52:3c:45:87:e5:5f:c3:d2:fe:44:b8:e7:5b:2d:54: 90:08:3b:8b:a4:f5:e3:ad:43:b3:1e:5c:89:72:03: 61:d6:62:00:e8:3c:7c:e1:09:4a:9e:d7:3c:05:1d: bf:a0:6d:54:fb:d9:48:48:8b:34:a7:29:e9:86:7d: 73:01:77:05:e1:c4:54:69:fd:6f:e9:be:bc:d7:49: cd:85:75:9c:ca:e3:96:16:72:63:44:8f:fd:37:54: 7e:e3:64:f6:a8:70:4a:d5:a8:68:b4:3e:53:ac:db: c9:fd:74:91:40:6b:d2:7b:2d:8c:17:68:e1:fe:a6: dd:4c:f5:1c:fb:95:4e:e7:3c:c4:91:e5:1a:47:e5: 6e:99:b2:85:b9:82:06:76:b3:2b:e8:f2:f1:84:a6: f4:ac:e5:83:ee:7e:ee:17:40:e0:9e:25:e5:27:54: 76:22:6d:aa:1b:b5:0f:05:cb:fe:04:46:1a:c1:c9: e8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:67:F6:2C:0C:CC:82:4A:C1:48:AA:D5:A9:5E:86:44:D2:6F:E9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b3:40:b1:d9:fb:3a:29:25:3c:87:d8:ba:b9:35:6d:a2:43: e0:45:76:e9:9c:33:18:5b:8b:fb:bd:89:c6:02:c4:17:93:2a: 36:2b:24:51:e6:23:4d:9a:c4:8d:f2:ee:3e:b7:5c:db:66:09: 01:4f:11:3a:af:6a:64:be:a5:c4:27:00:21:66:53:da:1e:4a: 16:91:af:e4:45:e1:4c:2e:7c:f3:51:93:e4:f6:9a:91:b2:8e: 0a:f0:04:d2:55:3d:7b:33:c6:39:48:88:52:83:3c:32:72:c5: a3:68:53:63:d7:f9:cf:75:3b:cb:b0:bc:7c:58:9a:44:85:16: 7b:3d:8d:a8:f5:88:9e:28:a5:ff:2d:71:11:2f:c9:5c:5d:3a: e7:bc:9e:11:27:52:4a:c4:dc:ec:10:27:6e:f2:a8:d7:c9:f2: bf:26:f6:d9:ec:fb:8b:a9:df:56:ad:26:69:1d:a2:bf:cb:4c: 25:9a:f3:65:df:4b:35:24:3d:0e:50:06:7b:43:42:b0:f5:34: bf:ac:d8:e9:2c:11:f4:7d:32:ad:0f:59:52:f5:b5:74:cd:8d: bf:c2:ac:b3:99:01:65:5e:44:bb:85:76:83:69:ed:45:d7:15: 97:76:ad:fa:17:76:40:b1:e2:56:7d:e1:ab:d2:d1:b1:f7:e7: 2e:a2:85:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FsnahHhy1eBLsSVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI2MDMwMTA5MDAwOFoXDTI2MDMwNDA5MDAwMFowLzEtMCsGA1UEAxMk Mjg2ZDU0YTYtYjc2ZS00YzQ0LWIwMzktOTlmZDg3MTI3MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wyZj0Wl/cfLG4A06N+qTerdbo9bloea7imR X4UDimOYuaGNBhbiNR16bYhxHxkp6aDXkUHq8TaWjLor7TAzwoZWQBDUZRZrwyxS PEWH5V/D0v5EuOdbLVSQCDuLpPXjrUOzHlyJcgNh1mIA6Dx84QlKntc8BR2/oG1U +9lISIs0pynphn1zAXcF4cRUaf1v6b6810nNhXWcyuOWFnJjRI/9N1R+42T2qHBK 1ahotD5TrNvJ/XSRQGvSey2MF2jh/qbdTPUc+5VO5zzEkeUaR+VumbKFuYIGdrMr 6PLxhKb0rOWD7n7uF0DgniXlJ1R2Im2qG7UPBcv+BEYawcnoywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOtn9iwMzIJKwUiq1alehkTSb+koMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvOTQ1YTdmNzYtYmNlMy00 ZDg1LWE4MWUtYzg0ZGY4ZDUxOTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJs0Cx2fs6KSU8h9i6uTVt okPgRXbpnDMYW4v7vYnGAsQXkyo2KyRR5iNNmsSN8u4+t1zbZgkBTxE6r2pkvqXE JwAhZlPaHkoWka/kReFMLnzzUZPk9pqRso4K8ATSVT17M8Y5SIhSgzwycsWjaFNj 1/nPdTvLsLx8WJpEhRZ7PY2o9YieKKX/LXERL8lcXTrnvJ4RJ1JKxNzsECdu8qjX yfK/JvbZ7PuLqd9WrSZpHaK/y0wlmvNl30s1JD0OUAZ7Q0Kw9TS/rNjpLBH0fTKt D1lS9bV0zY2/wqyzmQFlXkS7hXaDae1F1xWXdq36F3ZAseJWfeGr0tGx9+cuooVQ -----END CERTIFICATE-----Generated at Sun Mar 1 22:31:00 2026 by rpki-client