$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft File: b94e0278-7f16-4317-8890-88ac004494dc.mft (raw, json) Hash identifier: qiQi9t/edF/CcPuGCPHu2gd9Fik0ftPvrO5nNJVupTI= Subject key identifier: 40:05:52:D0:82:7B:E8:82:40:5E:76:26:60:43:8E:0A:E6:5D:BA:CC Authority key identifier: 8A:5F:8F:1F:12:D4:4B:A5:56:6D:C1:71:60:0F:87:D2:81:59:64:66 Certificate issuer: /CN=b94e0278-7f16-4317-8890-88ac004494dc Certificate serial: 010D0C9F4328584D07ACA5CCC092B1D0ACA9F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft Manifest number: 010D0C9F4328584AA44AD36068057BBC3FA9C4D1 Signing time: Mon 02 Mar 2026 02:00:03 +0000 Manifest this update: Mon 02 Mar 2026 02:00:03 +0000 Manifest next update: Wed 04 Mar 2026 02:00:00 +0000 Files and hashes: 1: b94e0278-7f16-4317-8890-88ac004494dc.crl (hash: /HeYbHLiWCpYZEK4djeSLKoIn0rUL3va6Mb8JLgWBpo=) 2: e66b647d-b635-3cf0-b9e9-6d7c5b4e2b8d.roa (hash: D8Y1x3ZXMxfTCka8jmPa2lDMXUB9fclKasswdn252mc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:a5:cc:c0:92:b1:d0:ac:a9:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94e0278-7f16-4317-8890-88ac004494dc Validity Not Before: Mar 2 02:00:03 2026 GMT Not After : Mar 4 02:00:00 2026 GMT Subject: CN=0a62b909-4896-4491-8649-d61ce0ca9410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:3e:7e:9b:a5:28:b5:73:88:e3:e3:ce:d1: 6a:9a:a1:6e:8b:73:09:18:83:f4:52:3d:54:71:41: ce:70:02:6f:ee:b8:77:09:e6:63:83:53:06:77:db: 63:e6:84:50:a0:db:e5:f2:8e:db:c9:fb:28:ee:2a: 74:09:92:39:5b:29:6b:19:62:22:e7:6e:44:62:a4: c4:c5:db:a1:f9:bd:8c:5f:65:6d:b4:4f:33:15:8d: 0d:9b:79:ec:ea:1b:63:be:d8:be:9e:b3:40:52:2c: ae:24:31:07:1d:c0:47:aa:a6:ca:08:49:42:b1:55: 69:b4:ef:85:c3:e2:c3:1b:a9:76:70:01:c4:8e:75: 9d:5c:25:31:f7:4b:2a:a2:c5:46:dd:5a:47:5a:55: d5:9e:46:d2:c1:3d:a1:6d:05:d2:72:55:03:da:6a: 79:ad:b3:cc:9f:60:9d:09:89:18:90:c6:44:50:97: b8:45:c5:7b:d5:68:df:b3:cd:c8:9b:28:b6:46:0b: 5b:87:e7:cb:05:55:70:33:59:52:0d:ce:96:39:5a: 03:10:0a:e7:9e:f4:a8:50:ec:18:93:00:c3:8c:5b: 31:4b:4d:f5:31:81:57:c4:6b:14:bd:ed:29:7d:08: 82:57:4d:2b:40:3a:46:9f:33:86:0f:c6:e2:ea:ec: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:52:D0:82:7B:E8:82:40:5E:76:26:60:43:8E:0A:E6:5D:BA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.crl X509v3 Authority Key Identifier: keyid:8A:5F:8F:1F:12:D4:4B:A5:56:6D:C1:71:60:0F:87:D2:81:59:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:28:64:ec:bf:5e:f4:64:fb:44:25:57:d9:2a:96:8c:c3:1a: 59:b9:ea:8c:5e:0b:5e:4a:56:26:27:a0:ec:75:a4:96:3e:83: ff:38:97:d2:8a:f6:02:1c:e4:c4:25:42:c0:9d:24:58:1c:04: e7:d6:02:01:de:22:93:ff:5e:b4:72:11:37:64:e6:26:ee:68: cc:b4:c7:7c:7c:02:9b:56:9f:41:7b:c5:78:e1:6b:a4:95:71: 2b:19:a3:b8:6d:34:35:66:15:e6:9a:21:93:39:cc:3b:49:ef: 3a:a7:7f:63:27:b5:63:ff:da:0f:2a:7e:84:7c:80:0f:84:e4: 51:8a:83:9a:a8:2e:a5:32:ac:e3:29:39:f8:13:5b:dc:ef:3b: 6b:15:60:ac:1e:41:af:d3:0e:b2:0a:3e:2f:8f:83:0b:c1:22: 5a:c4:c0:c8:84:a2:c9:cf:f4:bc:33:01:07:2a:d4:47:98:b9: aa:3b:0d:e0:71:f5:85:56:2a:c2:2e:30:dc:58:7d:d7:ea:ad: 88:3f:d6:ab:e5:88:3a:a8:d7:6e:37:79:50:c5:7b:75:df:d5: 03:cb:42:bc:4a:b8:3e:ad:16:f0:69:63:02:2c:bf:7d:96:0d: ad:35:2a:e7:7e:8a:a5:39:fd:4e:17:14:c6:15:84:29:8c:20: f9:59:98:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HrKXMwJKx0Kyp9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk0ZTAyNzgtN2YxNi00MzE3LTg4OTAtODhhYzAwNDQ5 NGRjMB4XDTI2MDMwMjAyMDAwM1oXDTI2MDMwNDAyMDAwMFowLzEtMCsGA1UEAxMk MGE2MmI5MDktNDg5Ni00NDkxLTg2NDktZDYxY2UwY2E5NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0+fpulKLVziOPjztFqmqFui3MJGIP0Uj1U cUHOcAJv7rh3CeZjg1MGd9tj5oRQoNvl8o7byfso7ip0CZI5WylrGWIi525EYqTE xduh+b2MX2VttE8zFY0Nm3ns6htjvti+nrNAUiyuJDEHHcBHqqbKCElCsVVptO+F w+LDG6l2cAHEjnWdXCUx90sqosVG3VpHWlXVnkbSwT2hbQXSclUD2mp5rbPMn2Cd CYkYkMZEUJe4RcV71Wjfs83Imyi2Rgtbh+fLBVVwM1lSDc6WOVoDEArnnvSoUOwY kwDDjFsxS031MYFXxGsUve0pfQiCV00rQDpGnzOGD8bi6uwAeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEAFUtCCe+iCQF52JmBDjgrmXbrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOTRl MDI3OC03ZjE2LTQzMTctODg5MC04OGFjMDA0NDk0ZGMvYjk0ZTAyNzgtN2YxNi00 MzE3LTg4OTAtODhhYzAwNDQ5NGRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjk0ZTAyNzgtN2YxNi00MzE3LTg4 OTAtODhhYzAwNDQ5NGRjL2I5NGUwMjc4LTdmMTYtNDMxNy04ODkwLTg4YWMwMDQ0 OTRkYy5jcmwwHwYDVR0jBBgwFoAUil+PHxLUS6VWbcFxYA+H0oFZZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOTRlMDI3OC03ZjE2LTQzMTctODg5MC04OGFj MDA0NDk0ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgKGTsv170ZPtEJVfZKpaM wxpZueqMXgteSlYmJ6DsdaSWPoP/OJfSivYCHOTEJULAnSRYHATn1gIB3iKT/160 chE3ZOYm7mjMtMd8fAKbVp9Be8V44WuklXErGaO4bTQ1ZhXmmiGTOcw7Se86p39j J7Vj/9oPKn6EfIAPhORRioOaqC6lMqzjKTn4E1vc7ztrFWCsHkGv0w6yCj4vj4ML wSJaxMDIhKLJz/S8MwEHKtRHmLmqOw3gcfWFVirCLjDcWH3X6q2IP9ar5Yg6qNdu N3lQxXt139UDy0K8Srg+rRbwaWMCLL99lg2tNSrnfoqlOf1OFxTGFYQpjCD5WZh4 -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:16 2026 by rpki-client