$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft File: 968bda65-4161-4dee-a348-29486c17acb2.mft (raw, json) Hash identifier: k8p921KBK74+wOLvR9uH3FE1P84K9ccx48BCO/Dcsw0= Subject key identifier: 85:D7:A1:2F:78:5E:50:6F:BD:E4:92:27:08:97:78:B3:99:31:AF:1D Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584D055A1D86B3DD8843F4950298 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft Manifest number: 010D0C9F4328584AA202387BD97139280BBB7A60 Signing time: Sun 01 Mar 2026 06:02:08 +0000 Manifest this update: Sun 01 Mar 2026 06:02:08 +0000 Manifest next update: Tue 03 Mar 2026 06:00:00 +0000 Files and hashes: 1: 968bda65-4161-4dee-a348-29486c17acb2.crl (hash: QK/wtAaurMcYwny848shfJ3bAX+KTQlQvW0x5AnCzBI=) 2: c1539d45-e25a-3367-9754-f7eba01827f3.roa (hash: 45SqOZk6iszKF8cl96PyuGy9RnbFa1SKpmxZjXecy5U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:5a:1d:86:b3:dd:88:43:f4:95:02:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Mar 1 06:02:08 2026 GMT Not After : Mar 3 06:00:00 2026 GMT Subject: CN=18989a9e-29c0-45bb-b79b-effebe1e4c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3d:c3:9a:4e:2c:6a:61:d8:f0:8e:d2:d2:61: ba:da:74:e2:69:77:2b:bd:59:e6:58:1f:0c:c6:8f: 7f:af:70:ac:fc:2b:95:38:da:c2:84:c4:5f:6a:51: 12:9a:7c:5d:6c:16:e2:de:5e:6c:ff:33:17:8d:52: f4:ba:36:99:2f:f4:88:c6:b1:e4:09:38:31:93:e7: 99:1e:24:26:02:3b:96:be:f1:5b:06:16:58:0d:61: ee:45:11:99:b2:57:ea:a5:8c:38:43:57:7a:87:f4: 7f:4d:6b:8a:02:43:24:bd:41:d1:86:ad:a0:8f:55: ad:fa:1a:2a:e6:96:ba:5b:98:e0:56:ac:ed:27:12: 41:9e:94:dc:9a:84:50:c5:0a:87:2f:1e:45:b3:32: 2e:15:a2:1a:72:0c:8c:f2:6c:e5:86:05:6a:ee:15: 8f:dc:d7:64:0b:e0:89:e9:a1:f7:12:b0:94:67:20: 3a:c2:36:64:32:36:b6:c2:d4:b2:5d:ae:c3:6f:cb: c0:af:7a:fb:ce:b6:fd:7d:cc:be:1a:b2:d5:27:ac: 90:b9:ab:40:90:c3:db:f5:48:46:f2:7f:97:b2:c2: 5f:78:be:9a:d5:c7:14:b7:5e:e4:f1:c4:22:5f:cb: 89:93:47:3e:10:2d:7d:b6:29:12:bb:c4:b5:04:7f: 33:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:A1:2F:78:5E:50:6F:BD:E4:92:27:08:97:78:B3:99:31:AF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:71:88:13:22:7f:01:3a:6f:5b:22:7a:f2:48:2e:58:81:e1: 16:c5:51:15:1a:91:da:28:48:2f:fc:61:21:6a:e6:80:9f:8d: 18:c5:7b:65:4a:34:2c:80:65:81:49:93:13:fe:ff:52:d5:07: 0c:57:df:50:89:f0:38:8e:8b:61:43:bd:a9:34:fc:f1:17:52: 2b:da:12:23:91:88:c7:ae:01:b1:f3:e4:a0:ac:87:4e:2d:74: dd:62:16:2a:5e:ec:76:49:94:9d:1b:01:05:63:c3:dc:db:4a: 24:31:1a:ec:08:b6:68:14:e1:9e:4d:79:91:be:af:cb:d3:c1: b7:18:80:df:ff:bb:4a:b6:68:8b:95:b9:20:b8:46:d0:69:3f: de:cc:d8:32:36:11:ff:dd:b8:5f:b2:c7:42:4c:6e:a1:fa:40: 27:6a:b2:5d:61:f7:6d:ca:ac:8a:a8:7b:84:3c:3a:24:7f:e9: 95:7e:fe:0b:9b:7c:c0:11:e0:c0:3d:ea:c9:b2:20:c6:56:7d: 83:2b:c5:54:a0:c5:f3:50:80:7b:e6:45:d5:ae:2c:4d:bf:e9: ba:27:1b:50:d5:03:26:41:b3:2e:ea:68:12:82:c0:02:f4:8d: e9:29:76:2d:66:71:07:37:45:31:24:24:9a:d7:b8:1a:82:09: 86:ac:bf:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FWh2Gs92IQ/SVApgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI2MDMwMTA2MDIwOFoXDTI2MDMwMzA2MDAwMFowLzEtMCsGA1UEAxMk MTg5ODlhOWUtMjljMC00NWJiLWI3OWItZWZmZWJlMWU0YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+z3Dmk4samHY8I7S0mG62nTiaXcrvVnmWB8M xo9/r3Cs/CuVONrChMRfalESmnxdbBbi3l5s/zMXjVL0ujaZL/SIxrHkCTgxk+eZ HiQmAjuWvvFbBhZYDWHuRRGZslfqpYw4Q1d6h/R/TWuKAkMkvUHRhq2gj1Wt+hoq 5pa6W5jgVqztJxJBnpTcmoRQxQqHLx5FszIuFaIacgyM8mzlhgVq7hWP3NdkC+CJ 6aH3ErCUZyA6wjZkMja2wtSyXa7Db8vAr3r7zrb9fcy+GrLVJ6yQuatAkMPb9UhG 8n+XssJfeL6a1ccUt17k8cQiX8uJk0c+EC19tikSu8S1BH8zawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIXXoS94XlBvveSSJwiXeLOZMa8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvOTY4YmRhNjUtNDE2MS00 ZGVlLWEzNDgtMjk0ODZjMTdhY2IyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGcYgTIn8BOm9bInrySC5Y geEWxVEVGpHaKEgv/GEhauaAn40YxXtlSjQsgGWBSZMT/v9S1QcMV99QifA4joth Q72pNPzxF1Ir2hIjkYjHrgGx8+SgrIdOLXTdYhYqXux2SZSdGwEFY8Pc20okMRrs CLZoFOGeTXmRvq/L08G3GIDf/7tKtmiLlbkguEbQaT/ezNgyNhH/3bhfssdCTG6h +kAnarJdYfdtyqyKqHuEPDokf+mVfv4Lm3zAEeDAPerJsiDGVn2DK8VUoMXzUIB7 5kXVrixNv+m6JxtQ1QMmQbMu6mgSgsAC9I3pKXYtZnEHN0UxJCSa17gaggmGrL/d -----END CERTIFICATE-----Generated at Mon Mar 2 03:13:55 2026 by rpki-client