$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft File: a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft (raw, json) Hash identifier: v9ikwClguepDmLuur7Lpjd0B/2WB9ivKWyRccF0zv24= Subject key identifier: 68:D4:B5:91:86:34:8A:D0:32:BD:7D:C2:74:37:58:4C:CA:4B:38:2E Authority key identifier: 34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 Certificate issuer: /CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Certificate serial: 010D0C9F4328584D06DC348B008DBA48077CDA60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft Manifest number: 010D0C9F4328584B66F92A46BDA7C1973DEC9955 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl (hash: 6QGZEw2VeOY//299haIO6qLg0ZZtCqXbGkLpibaTe/A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:34:8b:00:8d:ba:48:07:7c:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=7dafc332-d37a-4015-8afe-17925a480629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:98:7f:2d:20:6f:db:de:f1:68:b9:51:dd: e2:bf:65:17:c1:9e:90:9c:cc:85:33:8a:11:8c:fb: e1:ee:dd:a7:40:57:00:9c:bd:f7:a2:4c:61:bc:93: 0e:da:95:87:f7:7e:70:b0:76:5a:bc:62:98:8d:a8: a9:0f:f1:d4:6e:0f:7b:5a:b6:a1:d4:5e:8a:ab:de: 3a:ad:f2:22:0e:a9:71:74:97:bf:da:b0:46:e0:fb: 81:54:22:02:c3:c5:c9:3a:b9:9a:dc:e0:31:91:07: 17:5e:86:a8:d5:37:d4:a2:08:31:b4:7c:a4:0c:6a: f6:a3:89:33:a9:0e:09:ef:9d:68:9f:d9:99:7a:6b: 6b:75:5d:cc:1e:fb:1f:5d:7f:31:96:67:90:b9:d7: 13:d6:c6:47:da:07:eb:62:10:6b:95:42:e0:cf:8a: 9a:5c:46:75:bd:d9:3b:69:11:b6:df:55:0a:4d:ec: c2:a8:2f:00:c3:6e:2e:93:8c:d2:d3:39:1f:19:2c: c1:fb:3b:17:79:e2:d9:27:35:a5:ff:e8:e9:49:f7: af:fb:6d:f6:8c:8d:ff:05:8b:48:10:0b:69:8e:d3: 5d:7a:38:b3:60:55:0d:ff:ef:0e:0b:5d:cd:0b:d3: 57:3c:86:6a:0e:31:3f:4d:8c:91:6d:2b:87:c3:b8: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D4:B5:91:86:34:8A:D0:32:BD:7D:C2:74:37:58:4C:CA:4B:38:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl X509v3 Authority Key Identifier: keyid:34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:75:7e:5c:b9:73:67:17:aa:02:78:53:38:36:53:b6:c0:b6: b8:72:08:61:a4:ea:b0:eb:69:4c:ce:06:c8:d0:a0:86:b1:61: 30:1d:f9:42:6e:e0:fc:a5:b2:8e:f6:44:8e:26:db:6e:36:f8: d7:e4:88:f9:74:44:d5:13:c4:9c:8c:37:5b:e8:07:5a:d4:87: 5a:70:8e:aa:69:fc:2a:e5:90:ad:3e:2d:87:b2:e6:45:4f:16: b4:81:1b:cc:03:b8:66:47:a6:ec:1f:86:0c:d8:3b:ec:2c:0b: d5:01:16:8e:1f:6d:ad:f5:72:1c:3d:82:f0:29:e3:b8:55:d2: 3d:2e:82:5c:7e:df:41:cb:9f:08:b3:52:1d:16:6d:8c:97:9b: b5:f5:fd:64:15:88:0c:01:e8:78:17:bc:92:ed:ec:f5:de:d9: 64:ac:d1:33:2f:11:31:f7:5e:60:41:a8:6c:58:fd:b3:a6:3f: 95:d4:6b:ae:e9:aa:e4:52:e7:21:dc:63:90:cc:44:42:ee:e4: ea:fb:30:ed:4f:d3:76:76:52:07:d6:46:9b:4b:ae:85:f5:c5: a2:65:c2:38:7a:35:fb:84:db:82:94:73:b0:55:9a:94:1a:1e: aa:57:89:54:2f:12:dc:9a:cf:60:70:8c:05:54:cf:1c:6f:5b: ed:df:13:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DSLAI26SAd82mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5MGM4MGEtZDZmYi00YjMzLWE1NzQtZDVlYjFiNTEw ZDAwMB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk N2RhZmMzMzItZDM3YS00MDE1LThhZmUtMTc5MjVhNDgwNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM+Yfy0gb9ve8Wi5Ud3iv2UXwZ6QnMyFM4oR jPvh7t2nQFcAnL33okxhvJMO2pWH935wsHZavGKYjaipD/HUbg97Wrah1F6Kq946 rfIiDqlxdJe/2rBG4PuBVCICw8XJOrma3OAxkQcXXoao1TfUoggxtHykDGr2o4kz qQ4J751on9mZemtrdV3MHvsfXX8xlmeQudcT1sZH2gfrYhBrlULgz4qaXEZ1vdk7 aRG231UKTezCqC8Aw24uk4zS0zkfGSzB+zsXeeLZJzWl/+jpSfev+232jI3/BYtI EAtpjtNdejizYFUN/+8OC13NC9NXPIZqDjE/TYyRbSuHw7ij0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGjUtZGGNIrQMr19wnQ3WEzKSzguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkw YzgwYS1kNmZiLTRiMzMtYTU3NC1kNWViMWI1MTBkMDAvYTI5MGM4MGEtZDZmYi00 YjMzLWE1NzQtZDVlYjFiNTEwZDAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTI5MGM4MGEtZDZmYi00YjMzLWE1 NzQtZDVlYjFiNTEwZDAwL2EyOTBjODBhLWQ2ZmItNGIzMy1hNTc0LWQ1ZWIxYjUx MGQwMC5jcmwwHwYDVR0jBBgwFoAUNEHkXj/tPMdyUh4xK1CB5rC9Z1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkwYzgwYS1kNmZiLTRiMzMtYTU3NC1kNWVi MWI1MTBkMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARdX5cuXNnF6oCeFM4NlO2 wLa4cghhpOqw62lMzgbI0KCGsWEwHflCbuD8pbKO9kSOJttuNvjX5Ij5dETVE8Sc jDdb6Ada1IdacI6qafwq5ZCtPi2HsuZFTxa0gRvMA7hmR6bsH4YM2DvsLAvVARaO H22t9XIcPYLwKeO4VdI9LoJcft9By58Is1IdFm2Ml5u19f1kFYgMAeh4F7yS7ez1 3tlkrNEzLxEx915gQahsWP2zpj+V1Guu6arkUuch3GOQzERC7uTq+zDtT9N2dlIH 1kabS66F9cWiZcI4ejX7hNuClHOwVZqUGh6qV4lULxLcms9gcIwFVM8cb1vt3xMt -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:35 2026 by rpki-client