$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: L6z2sgYaUQe+LNISQFVI6ZkIop+zlCOlqBm4OPlZaC8= Subject key identifier: 40:A2:21:6C:14:3F:D7:AC:55:DE:59:26:60:EC:7F:0C:AC:5F:A4:76 Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584D051D8FB1D64C1B0BFA9F63C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA9533719 Signing time: Sun 01 Mar 2026 04:00:08 +0000 Manifest this update: Sun 01 Mar 2026 04:00:08 +0000 Manifest next update: Wed 04 Mar 2026 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: XslhchhLIQD41WBcZoFgPCEc4gmLQ8JjRbvVhexaeEs=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: N9W/weTKnEzD9/TVWpXpA5gw+Pcc/uSFG3dyXTg8i1Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:1d:8f:b1:d6:4c:1b:0b:fa:9f:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Mar 1 04:00:08 2026 GMT Not After : Mar 4 04:00:00 2026 GMT Subject: CN=f03daa44-67e6-4e2f-9b86-e086e4cdabc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:63:fa:26:79:f6:00:8e:e3:da:1d:b7:9a: 1d:71:b8:58:34:07:c0:f5:f8:85:ba:d1:d5:b0:47: 8c:62:6e:12:11:aa:2b:3c:1a:b6:21:04:25:ce:56: 69:34:13:a4:4c:4a:5f:6c:9b:58:22:c3:16:f5:6c: 5a:49:27:4a:28:aa:28:13:9f:22:77:39:ea:82:68: 1d:2f:25:86:b7:0e:46:30:46:29:72:30:2e:86:b3: 0c:7c:54:6f:db:0e:88:05:06:cd:33:df:fa:45:99: 70:43:88:5e:77:57:23:81:2c:a8:33:05:4c:21:9a: 0a:17:35:c8:e5:ab:cc:0a:34:e2:c7:59:bc:82:22: 51:af:97:76:3d:2b:d3:47:6d:55:95:9d:6b:2c:bd: b4:99:50:f7:56:8c:b3:ea:6c:a7:1c:89:c4:0e:b5: 28:be:09:c1:1b:96:7b:05:06:25:43:43:e6:9b:3f: a5:e8:ee:9e:c7:4f:78:f0:59:36:29:e1:2e:2e:7c: 95:ec:1f:6a:75:d9:aa:fe:d7:65:80:23:f0:c6:c7: 1c:56:6d:3d:9e:a0:b1:d2:d7:00:98:ea:62:ac:53: d8:65:6d:26:99:0a:0f:45:8d:de:88:bb:c1:6f:55: d2:7d:a7:f3:b0:49:e2:60:87:c5:a9:14:dc:6d:54: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:21:6C:14:3F:D7:AC:55:DE:59:26:60:EC:7F:0C:AC:5F:A4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:73:9e:16:eb:84:d0:a9:17:74:a2:5e:42:16:fa:9a:a6:14: 5e:b4:fd:25:f7:cd:74:52:76:35:04:88:70:7b:f9:f4:4d:aa: eb:e8:f9:76:9c:90:89:38:c3:08:47:d0:97:ea:ec:2a:37:5d: 6b:70:74:91:35:93:b2:80:b5:e2:ae:13:60:23:55:ee:26:15: 93:ac:b3:7d:f3:8b:32:31:38:82:e5:f4:46:f4:00:13:fc:85: 66:d1:a1:17:9b:8a:a7:23:11:fc:e0:ce:f4:e8:16:c4:d1:34: 10:64:b0:5f:70:c9:63:21:ab:6c:cf:70:d7:d9:f4:b9:1c:6d: f4:0e:c2:15:dd:8a:cd:cd:17:e2:cc:8f:38:81:c5:04:9a:cb: 96:97:3d:bf:ad:93:34:2e:97:c9:ad:1f:b8:a5:62:cc:9e:64: 64:32:79:ad:c6:55:95:94:1a:e2:40:f2:62:11:6d:37:b1:45: f2:0b:e0:64:6a:cc:f2:32:56:87:78:bb:41:e3:60:e0:0c:80: 18:73:05:09:cf:e9:08:8f:10:ed:d3:3f:65:a1:98:3a:6b:cf: 5d:f6:d9:de:bc:03:8f:73:ed:e6:58:4b:ec:1f:8f:e7:0d:5f: 10:d6:d1:fd:91:c5:91:6a:d1:b3:ae:2a:5d:d8:7e:b4:4d:4c: b9:39:5a:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FHY+x1kwbC/qfY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI2MDMwMTA0MDAwOFoXDTI2MDMwNDA0MDAwMFowLzEtMCsGA1UEAxMk ZjAzZGFhNDQtNjdlNi00ZTJmLTliODYtZTA4NmU0Y2RhYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdlj+iZ59gCO49odt5odcbhYNAfA9fiFutHV sEeMYm4SEaorPBq2IQQlzlZpNBOkTEpfbJtYIsMW9WxaSSdKKKooE58idznqgmgd LyWGtw5GMEYpcjAuhrMMfFRv2w6IBQbNM9/6RZlwQ4hed1cjgSyoMwVMIZoKFzXI 5avMCjTix1m8giJRr5d2PSvTR21VlZ1rLL20mVD3Voyz6mynHInEDrUovgnBG5Z7 BQYlQ0Pmmz+l6O6ex0948Fk2KeEuLnyV7B9qddmq/tdlgCPwxsccVm09nqCx0tcA mOpirFPYZW0mmQoPRY3eiLvBb1XSfafzsEniYIfFqRTcbVTedQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFECiIWwUP9esVd5ZJmDsfwysX6R2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApc54W64TQqRd0ol5CFvqa phRetP0l9810UnY1BIhwe/n0Tarr6Pl2nJCJOMMIR9CX6uwqN11rcHSRNZOygLXi rhNgI1XuJhWTrLN984syMTiC5fRG9AAT/IVm0aEXm4qnIxH84M706BbE0TQQZLBf cMljIatsz3DX2fS5HG30DsIV3YrNzRfizI84gcUEmsuWlz2/rZM0LpfJrR+4pWLM nmRkMnmtxlWVlBriQPJiEW03sUXyC+BkaszyMlaHeLtB42DgDIAYcwUJz+kIjxDt 0z9loZg6a89d9tnevAOPc+3mWEvsH4/nDV8Q1tH9kcWRatGzripd2H60TUy5OVoM -----END CERTIFICATE-----Generated at Sun Mar 1 20:42:04 2026 by rpki-client