$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: LpMr8VvB0J4GYizIkqHNW548q9ItVsCi5sx4LjQtXYc= Subject key identifier: B1:3B:84:65:A8:59:89:28:D9:09:8B:B3:56:BE:C4:1D:9A:12:22:69 Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584D04E204CEAAFD69E2ED9A1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D321E Signing time: Sun 01 Mar 2026 02:00:09 +0000 Manifest this update: Sun 01 Mar 2026 02:00:09 +0000 Manifest next update: Wed 04 Mar 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: oiSBm5IvARVNAM/cHHWu/7BLxLyI98H3QLB/2Yr0KoU=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:04:ce:aa:fd:69:e2:ed:9a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Mar 1 02:00:09 2026 GMT Not After : Mar 4 02:00:00 2026 GMT Subject: CN=2ad4dc45-68ee-48d4-a393-a10d9c3b58b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cc:d5:94:56:bb:68:9c:01:1d:a5:08:f5:17: e7:2e:77:59:b9:de:8c:ce:98:81:ee:fe:b3:aa:81: db:9e:a4:0f:fb:49:53:e8:ec:5b:64:2a:77:4a:77: 1d:fd:dd:76:73:de:c8:f2:80:39:29:ae:88:03:ac: 10:40:d7:b1:a1:8c:ad:aa:e9:f4:bb:9c:f1:ec:9d: 68:e5:bb:e9:e2:a6:b2:b5:29:d4:1c:8f:a2:9a:15: b4:c5:57:4c:dd:4e:9e:17:23:79:c6:da:d6:b6:b4: 34:a1:86:9f:f4:8a:c1:a8:a4:84:dd:42:b2:c4:e6: 55:e0:2b:a3:1b:a8:9b:f3:45:2f:fd:fe:dc:e0:6d: 1c:3c:6f:0b:3c:8b:02:d9:62:a1:87:11:fa:35:14: 6a:52:53:47:e2:7a:1c:6c:42:2b:38:85:f6:67:5d: f8:8a:38:ae:15:4c:ff:3a:1e:7c:b8:9a:b4:f3:7e: a1:0c:ac:5e:41:17:a3:2d:5d:ef:00:ef:c9:67:94: bd:4f:ed:a2:26:50:51:e2:de:ab:61:08:95:51:c6: de:5b:2d:03:81:7d:b3:77:c7:ba:a2:1d:e2:0b:0a: e1:26:94:5b:ad:37:a0:ad:27:f0:aa:e2:48:30:71: 30:16:4b:6a:45:10:b9:b0:0b:91:17:53:37:17:7b: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:84:65:A8:59:89:28:D9:09:8B:B3:56:BE:C4:1D:9A:12:22:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d1:f8:6e:4f:70:22:b3:97:f4:04:11:7b:cc:a0:50:12:2a: 97:9b:bc:ad:26:af:bb:b0:3a:cc:f0:f6:3b:08:84:90:00:04: 54:1d:0f:b0:88:89:ef:0d:b7:20:40:6b:09:2f:b5:29:d3:87: 5e:52:cf:4b:74:4f:1c:7b:4f:78:1a:65:e4:f0:99:f1:22:a0: e6:d2:5e:e2:a7:33:53:5f:ac:26:2b:3f:3f:e7:f6:f2:4e:c1: 4a:54:1d:8b:7e:ab:54:b8:7e:01:d1:a6:e7:1f:b5:18:37:50: 91:f3:da:c2:a1:cd:18:46:f0:3d:d8:28:34:a8:b3:3e:8b:c0: 10:6c:e2:a9:74:0b:1c:03:be:2b:ba:c9:fa:f2:ea:30:a6:7c: 3c:dc:dd:38:da:d5:05:5c:2d:22:40:9b:dc:e2:3c:7b:65:49: 96:f0:38:7b:a6:75:4a:3a:93:df:56:dd:8b:67:6b:6f:6b:8b: ce:c4:2c:17:dc:09:bf:e5:5e:17:f9:22:79:bd:c4:c1:36:1d: ea:2b:f6:66:55:0a:d7:62:37:2c:31:da:b0:c5:61:9b:56:2a: cf:d9:25:76:86:4b:82:53:92:2d:cf:35:44:cf:09:dc:9e:4e: a5:65:d3:aa:a0:5b:0c:1f:02:9e:04:15:05:98:6b:7d:e9:f2: c7:b2:53:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0E4gTOqv1p4u2aHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDMwMTAyMDAwOVoXDTI2MDMwNDAyMDAwMFowLzEtMCsGA1UEAxMk MmFkNGRjNDUtNjhlZS00OGQ0LWEzOTMtYTEwZDljM2I1OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38zVlFa7aJwBHaUI9RfnLndZud6MzpiB7v6z qoHbnqQP+0lT6OxbZCp3Sncd/d12c97I8oA5Ka6IA6wQQNexoYytqun0u5zx7J1o 5bvp4qaytSnUHI+imhW0xVdM3U6eFyN5xtrWtrQ0oYaf9IrBqKSE3UKyxOZV4Cuj G6ib80Uv/f7c4G0cPG8LPIsC2WKhhxH6NRRqUlNH4nocbEIrOIX2Z134ijiuFUz/ Oh58uJq0836hDKxeQRejLV3vAO/JZ5S9T+2iJlBR4t6rYQiVUcbeWy0DgX2zd8e6 oh3iCwrhJpRbrTegrSfwquJIMHEwFktqRRC5sAuRF1M3F3uDpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLE7hGWoWYko2QmLs1a+xB2aEiJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBm0fhuT3Ais5f0BBF7zKBQ EiqXm7ytJq+7sDrM8PY7CISQAARUHQ+wiInvDbcgQGsJL7Up04deUs9LdE8ce094 GmXk8JnxIqDm0l7ipzNTX6wmKz8/5/byTsFKVB2LfqtUuH4B0abnH7UYN1CR89rC oc0YRvA92Cg0qLM+i8AQbOKpdAscA74rusn68uowpnw83N042tUFXC0iQJvc4jx7 ZUmW8Dh7pnVKOpPfVt2LZ2tva4vOxCwX3Am/5V4X+SJ5vcTBNh3qK/ZmVQrXYjcs MdqwxWGbVirP2SV2hkuCU5ItzzVEzwncnk6lZdOqoFsMHwKeBBUFmGt96fLHslMe -----END CERTIFICATE-----Generated at Sun Mar 1 20:43:23 2026 by rpki-client