$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft File: 2a29d871-a08a-4114-af86-3cc6d04de0e1.mft (raw, json) Hash identifier: kR2fBWQBq6DgRBh9fIgsm/tL+aNlnD2eR+F5gihi0QQ= Subject key identifier: A4:21:72:90:77:CF:49:1E:0D:B7:42:FC:EE:19:17:AA:E8:D8:05:DC Authority key identifier: 36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 Certificate issuer: /CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Certificate serial: 010D0C9F4328584D0682E869CE70A0D5F28AD04C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft Manifest number: 010D0C9F4328584B6106719C2859B48B53AAC51E Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Tue 03 Mar 2026 16:00:00 +0000 Files and hashes: 1: 2a29d871-a08a-4114-af86-3cc6d04de0e1.crl (hash: FL2mZwHOABVjDD2mW/xMJHDYwLPVAFHQ0KmjRVnFnpM=) 2: 3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa (hash: HD4cMlCwzA6icjMLK08m88Tgc+s+7/claZZctxKHaeg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:e8:69:ce:70:a0:d5:f2:8a:d0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 3 16:00:00 2026 GMT Subject: CN=3082b487-bd2e-47aa-9155-ac1e48e99ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:2a:6d:f7:bb:ee:38:1d:00:20:2a:c7:9e: a8:fb:a0:38:6c:32:4b:42:d1:63:be:11:a4:8e:bf: aa:3f:8c:3f:ec:93:38:0f:cf:c8:68:d1:b7:85:7a: 8e:ca:dc:47:db:1c:80:c0:1b:73:0e:97:e6:d8:57: e8:2e:3e:93:d5:80:9a:92:83:50:0d:38:25:80:2e: ad:96:81:0e:e3:25:a1:f5:5a:54:01:d0:95:62:ca: aa:93:9c:51:ef:72:f3:ab:2e:d0:f8:8a:b0:61:de: 0f:be:21:0d:0e:74:11:46:85:f5:77:76:3d:cd:48: 2b:fd:20:5b:52:51:e5:45:33:56:e3:f7:08:af:26: bb:29:95:f3:30:f2:73:69:a2:db:2b:d0:b0:43:01: 57:49:99:f3:b1:98:de:16:1d:07:21:68:78:86:00: af:66:d0:4d:a3:74:b9:0a:e2:fb:28:f8:f3:c5:3d: a3:ba:68:be:3d:bb:7d:6f:a2:93:29:8c:d5:de:f3: 11:3c:98:7e:ad:e6:57:4f:50:4c:55:c0:aa:28:ff: 96:20:45:ee:e1:d5:45:03:df:22:ea:2f:23:01:d4: b5:a7:23:1e:48:dc:c2:b5:08:a2:92:35:e5:49:68: ed:94:12:08:54:25:7c:38:f9:39:18:d0:f6:e2:a4: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:72:90:77:CF:49:1E:0D:B7:42:FC:EE:19:17:AA:E8:D8:05:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl X509v3 Authority Key Identifier: keyid:36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:45:f7:57:f4:83:bc:07:16:e1:4e:7f:24:83:19:5b:b0:cf: a4:d9:ea:1e:0e:c7:9f:8e:fa:5f:0c:4b:bf:ac:52:9a:72:db: 29:c1:42:17:97:15:5e:ee:0c:14:10:fa:99:92:98:40:c3:1c: 0e:0c:0b:b6:54:f7:82:23:77:e7:5e:90:89:78:e3:55:3c:33: 6c:9e:26:5e:ee:90:0b:48:b1:12:06:f3:8a:17:1b:0a:fc:1b: 17:b7:06:08:59:da:cb:e9:03:50:7b:a9:4b:d3:2f:d8:b2:56: d6:46:4c:77:f1:69:11:80:ae:9a:e6:df:6c:3c:a0:e8:b9:23: c9:6a:d0:84:07:65:ef:f4:7b:5f:b8:4e:d7:c9:1e:20:ba:11: 38:4f:8a:8b:c8:3e:9c:0b:1f:03:31:4b:8f:45:d3:2b:04:cd: f9:f8:e4:5f:fb:3a:c2:49:aa:43:66:c6:37:42:19:b8:11:d3: 16:61:c8:64:2d:8c:12:8a:85:81:a4:4e:22:0e:45:aa:03:c7: b9:32:c4:59:16:74:03:eb:85:d9:d4:fc:f2:9e:38:c2:1f:8b: 95:ad:0e:93:21:d9:13:9c:35:72:6b:88:4a:92:52:3d:06:61: 54:e0:d9:04:32:72:78:15:e6:81:96:9f:28:5a:d4:01:3d:3e: 62:10:ab:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GguhpznCg1fKK0EwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOWQ4NzEtYTA4YS00MTE0LWFmODYtM2NjNmQwNGRl MGUxMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwMzE2MDAwMFowLzEtMCsGA1UEAxMk MzA4MmI0ODctYmQyZS00N2FhLTkxNTUtYWMxZTQ4ZTk5ZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJoqbfe77jgdACAqx56o+6A4bDJLQtFjvhGk jr+qP4w/7JM4D8/IaNG3hXqOytxH2xyAwBtzDpfm2FfoLj6T1YCakoNQDTglgC6t loEO4yWh9VpUAdCVYsqqk5xR73Lzqy7Q+IqwYd4PviENDnQRRoX1d3Y9zUgr/SBb UlHlRTNW4/cIrya7KZXzMPJzaaLbK9CwQwFXSZnzsZjeFh0HIWh4hgCvZtBNo3S5 CuL7KPjzxT2jumi+Pbt9b6KTKYzV3vMRPJh+reZXT1BMVcCqKP+WIEXu4dVFA98i 6i8jAdS1pyMeSNzCtQiikjXlSWjtlBIIVCV8OPk5GND24qRyiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKQhcpB3z0keDbdC/O4ZF6ro2AXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5 ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2ZDA0ZGUwZTEvMmEyOWQ4NzEtYTA4YS00 MTE0LWFmODYtM2NjNmQwNGRlMGUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmEyOWQ4NzEtYTA4YS00MTE0LWFm ODYtM2NjNmQwNGRlMGUxLzJhMjlkODcxLWEwOGEtNDExNC1hZjg2LTNjYzZkMDRk ZTBlMS5jcmwwHwYDVR0jBBgwFoAUNqECD3qHkM7KFhMPC6avuEeW9jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2 ZDA0ZGUwZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZRfdX9IO8BxbhTn8kgxlb sM+k2eoeDsefjvpfDEu/rFKactspwUIXlxVe7gwUEPqZkphAwxwODAu2VPeCI3fn XpCJeONVPDNsniZe7pALSLESBvOKFxsK/BsXtwYIWdrL6QNQe6lL0y/YslbWRkx3 8WkRgK6a5t9sPKDouSPJatCEB2Xv9HtfuE7XyR4guhE4T4qLyD6cCx8DMUuPRdMr BM35+ORf+zrCSapDZsY3Qhm4EdMWYchkLYwSioWBpE4iDkWqA8e5MsRZFnQD64XZ 1PzynjjCH4uVrQ6TIdkTnDVya4hKklI9BmFU4NkEMnJ4FeaBlp8oWtQBPT5iEKul -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:09 2026 by rpki-client