$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft File: 1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft (raw, json) Hash identifier: th+MeJCWqmt23RA9lfMFbyS8eRe552a5BGmhfxWArcI= Subject key identifier: 14:6C:8D:F4:F2:EE:63:36:D3:17:3B:72:04:35:E7:3C:42:DF:FF:BC Authority key identifier: 8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41 Certificate issuer: /CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313 Certificate serial: 010D0C9F4328584D06BE6D23FA97C054179AC128 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft Manifest number: 010D0C9F4328584A8FD9CB0132F172FCCDF19867 Signing time: Sun 01 Mar 2026 18:00:04 +0000 Manifest this update: Sun 01 Mar 2026 18:00:04 +0000 Manifest next update: Wed 04 Mar 2026 18:00:00 +0000 Files and hashes: 1: 1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl (hash: xq0Ktjvoz71huFhS/1Wc1hEq6u1H0Nt3ePxPTbJcdR4=) 2: 510d5549-a9f8-3043-82be-cf52d15d49bc.roa (hash: 73r7M9gOQ/9LgjCgQ83V4Uhe8zCVgPrQWggRF/8sExE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:be:6d:23:fa:97:c0:54:17:9a:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313 Validity Not Before: Mar 1 18:00:04 2026 GMT Not After : Mar 4 18:00:00 2026 GMT Subject: CN=d75d8470-211b-4aa2-af60-b5eb477b3456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:cd:14:1d:fe:c1:00:27:82:f3:e9:66:f9: 93:01:9f:99:f9:61:8f:9a:3f:cd:97:ed:62:63:4a: 92:73:fa:22:b6:fc:65:53:97:f2:40:09:fc:59:be: 1f:59:fc:de:cc:38:9e:bc:89:6d:67:9c:cc:8f:7d: 10:20:01:b5:f1:c2:2b:1e:76:1f:67:b4:fe:1c:ed: 96:2d:2a:c7:67:9d:f0:be:43:cd:ca:d6:d0:fa:cf: 2f:ae:e0:16:65:8f:25:a7:bd:10:2d:9c:c7:e6:2f: ff:fb:51:4a:13:2d:87:10:f4:6c:70:ce:b0:89:7d: ee:53:23:12:a7:0c:e2:57:78:e3:33:20:ca:49:73: 92:31:ce:87:a7:ec:e5:d6:fc:a4:d1:76:07:27:b4: 3e:ec:04:a4:1b:bc:e6:51:eb:0c:58:54:98:fa:95: 0f:33:0b:65:85:55:ab:54:e3:c1:59:65:0f:06:c0: ff:43:dd:29:15:9f:a8:40:fa:21:a4:3f:0a:98:01: 26:2f:01:d1:14:8a:86:66:4c:3a:c2:0f:25:4f:8f: aa:39:aa:67:46:c0:f7:a9:9a:5e:ff:01:71:66:1d: e7:c5:40:aa:20:c0:f1:5d:9b:ed:52:d8:77:2e:61: 90:76:da:97:df:a2:d5:2a:1d:4e:bc:da:86:32:af: 3b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:8D:F4:F2:EE:63:36:D3:17:3B:72:04:35:E7:3C:42:DF:FF:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl X509v3 Authority Key Identifier: keyid:8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c4:70:1a:87:c6:1f:0f:91:6e:fc:74:0e:09:f8:23:65:3f: 86:1a:da:f0:09:5d:21:b1:df:40:92:6c:6c:54:1b:0f:6a:2f: 09:41:2a:4c:60:65:f3:f2:85:39:3b:64:0a:2c:f8:b3:8c:5a: 5c:69:af:05:31:83:78:cf:b8:1f:14:5a:10:26:c1:9b:ed:74: 75:25:03:75:0b:0c:30:fb:72:27:48:87:23:33:fa:48:10:e7: 3e:69:2e:5e:b9:fe:7a:73:16:9f:a9:66:42:35:a1:1b:91:79: 3a:32:c5:0f:e6:1f:16:33:69:57:ae:3b:00:5d:2f:57:46:26: e5:24:07:16:b8:b5:04:2a:c3:a6:36:2a:21:70:82:83:73:7c: 3a:9c:5e:8d:22:7c:e6:8b:82:46:9d:c3:77:08:30:f3:f2:27: a5:cd:20:cf:ae:d5:c6:2d:80:88:86:cf:c3:14:f0:70:d9:4e: e7:96:84:f4:88:93:44:6c:3c:ca:48:ae:d7:81:77:f6:ed:3b: 68:9e:5f:f7:76:63:93:16:ce:90:c1:04:11:2f:3f:c3:c8:c7: f1:af:25:29:34:69:33:54:e5:45:24:74:74:20:61:30:25:84: df:4c:1e:b3:7c:ba:d9:14:66:8f:0e:2a:f4:0c:52:ac:b2:eb: 69:b6:08:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gvm0j+pfAVBeawSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0NDk4YzctNzBlMi00Y2E0LWIxOGYtNGExMDdkMGE2 MzEzMB4XDTI2MDMwMTE4MDAwNFoXDTI2MDMwNDE4MDAwMFowLzEtMCsGA1UEAxMk ZDc1ZDg0NzAtMjExYi00YWEyLWFmNjAtYjVlYjQ3N2IzNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu/NFB3+wQAngvPpZvmTAZ+Z+WGPmj/Nl+1i Y0qSc/oitvxlU5fyQAn8Wb4fWfzezDievIltZ5zMj30QIAG18cIrHnYfZ7T+HO2W LSrHZ53wvkPNytbQ+s8vruAWZY8lp70QLZzH5i//+1FKEy2HEPRscM6wiX3uUyMS pwziV3jjMyDKSXOSMc6Hp+zl1vyk0XYHJ7Q+7ASkG7zmUesMWFSY+pUPMwtlhVWr VOPBWWUPBsD/Q90pFZ+oQPohpD8KmAEmLwHRFIqGZkw6wg8lT4+qOapnRsD3qZpe /wFxZh3nxUCqIMDxXZvtUth3LmGQdtqX36LVKh1OvNqGMq878QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBRsjfTy7mM20xc7cgQ15zxC3/+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYTQ0 OThjNy03MGUyLTRjYTQtYjE4Zi00YTEwN2QwYTYzMTMvMWE0NDk4YzctNzBlMi00 Y2E0LWIxOGYtNGExMDdkMGE2MzEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWE0NDk4YzctNzBlMi00Y2E0LWIx OGYtNGExMDdkMGE2MzEzLzFhNDQ5OGM3LTcwZTItNGNhNC1iMThmLTRhMTA3ZDBh NjMxMy5jcmwwHwYDVR0jBBgwFoAUivgyJrvGUFCFsTMX0pcIqnelHkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYTQ0OThjNy03MGUyLTRjYTQtYjE4Zi00YTEw N2QwYTYzMTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnxHAah8YfD5Fu/HQOCfgj ZT+GGtrwCV0hsd9AkmxsVBsPai8JQSpMYGXz8oU5O2QKLPizjFpcaa8FMYN4z7gf FFoQJsGb7XR1JQN1Cwww+3InSIcjM/pIEOc+aS5euf56cxafqWZCNaEbkXk6MsUP 5h8WM2lXrjsAXS9XRiblJAcWuLUEKsOmNiohcIKDc3w6nF6NInzmi4JGncN3CDDz 8ielzSDPrtXGLYCIhs/DFPBw2U7nloT0iJNEbDzKSK7XgXf27Ttonl/3dmOTFs6Q wQQRLz/DyMfxryUpNGkzVOVFJHR0IGEwJYTfTB6zfLrZFGaPDir0DFKssutptggt -----END CERTIFICATE-----Generated at Mon Mar 2 00:55:09 2026 by rpki-client