$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft File: bff64bc2-33e0-4980-b94c-1b0369245ea4.mft (raw, json) Hash identifier: pbtNvlD5zOCYTBXCTgl3L6/i8HBuLLzgTAchuTlmq1E= Subject key identifier: EA:2A:B1:A0:45:AA:D8:17:53:44:DF:D8:BD:48:0F:34:86:BB:D0:64 Authority key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 Certificate issuer: /CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Certificate serial: 010D0C9F4328584D06A0A55572E4569EF04F3AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft Manifest number: 010D0C9F4328584A76A2C44F62F6A11836988B71 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa (hash: HV/6ByaJ7gwIkuNWTBoVyWgaUO6IAltCU3WkACjZcd4=) 2: bff64bc2-33e0-4980-b94c-1b0369245ea4.crl (hash: rHfkQgQKmSMTp9Yxk7fdwTIJqvRv0BCshzrA9nGd29c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a5:55:72:e4:56:9e:f0:4f:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=7d904c3c-d6fc-4c89-b0ea-2f13bee17d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:1e:ad:78:ca:f0:b4:11:bf:3d:08:dc:0e: 6a:8b:03:53:0f:2c:42:3e:e0:f7:82:2d:03:a1:d2: f3:11:1e:a5:cf:eb:22:d3:91:96:fa:29:dc:ce:f8: 8d:33:8d:68:5f:f9:31:8d:ae:6c:9a:cf:f9:ed:ed: ea:b6:f3:83:5b:2c:cd:67:02:a8:42:dc:60:b4:e9: ba:58:2e:1a:36:ab:af:9a:6c:bb:60:9a:c3:ec:db: d6:47:9b:79:bc:b2:56:c9:cb:be:5a:23:1f:b4:ce: 5d:55:ba:71:29:0e:35:78:ae:e5:a7:12:ef:2e:9b: 8d:b2:8b:1b:2e:e9:fb:3b:1c:ec:f3:2d:df:cf:10: 97:dd:d0:49:99:e4:a5:eb:68:fc:cf:97:f9:f0:e2: a9:b8:97:e9:10:da:d4:e7:66:14:7a:50:df:d9:1f: db:b7:88:5e:7d:eb:ef:5a:74:9e:8e:b1:1e:06:fb: 7b:ce:e6:c0:13:71:04:ba:b5:0b:d2:7f:c2:42:55: 6d:81:ed:c6:23:3d:28:9a:82:6d:92:96:eb:fc:83: c1:94:55:f9:9a:cf:8e:a2:2b:3b:c7:87:c9:ea:1d: 30:5c:90:18:8a:74:44:0d:87:c7:d1:fa:34:87:9d: c0:26:c9:e0:6e:c1:94:97:ee:42:29:dd:f6:f2:b1: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:B1:A0:45:AA:D8:17:53:44:DF:D8:BD:48:0F:34:86:BB:D0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl X509v3 Authority Key Identifier: keyid:FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7f:22:3c:db:4b:c4:66:40:13:dc:59:b8:40:15:4a:b4:5c: 7e:49:0b:85:8c:60:95:d1:66:c6:84:e5:5a:9a:f7:c8:03:fc: 74:0f:ba:9d:b4:42:23:f1:8b:1b:c7:49:33:85:c3:77:e1:a6: e1:2d:a4:48:ef:4d:a1:1a:20:a1:60:75:5d:5a:a4:b5:be:dc: df:ed:57:4f:3a:a5:35:1f:d7:b7:de:91:3a:82:93:88:06:f5: d3:29:e0:34:b7:04:ac:c5:73:0b:0b:09:8d:f5:88:1c:d0:da: 06:b1:35:48:d8:cf:cc:55:85:8c:49:89:86:cd:83:2e:6d:de: 39:a9:8a:e1:53:56:8b:48:78:ab:7c:5a:8b:83:8b:02:f2:ff: c7:12:f9:db:86:34:0b:ce:be:7c:16:24:ee:eb:12:58:de:f8: a0:29:51:2f:f2:09:a9:38:8f:1d:71:0f:1c:92:21:a4:46:bb: f5:00:3f:60:23:ce:2c:8d:54:a9:49:eb:46:5e:85:39:46:b5: af:92:ae:7e:cd:8c:63:fe:14:5a:e7:6b:72:73:a9:87:f8:69: c7:2b:db:5e:4a:ab:a2:06:b5:cf:4b:cb:eb:08:72:4b:26:c1: 6a:e8:27:dc:69:fd:cb:85:8c:e7:0d:56:b9:59:ed:3a:12:88: ae:2e:5f:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKVVcuRWnvBPOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmNjRiYzItMzNlMC00OTgwLWI5NGMtMWIwMzY5MjQ1 ZWE0MB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk N2Q5MDRjM2MtZDZmYy00Yzg5LWIwZWEtMmYxM2JlZTE3ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgYerXjK8LQRvz0I3A5qiwNTDyxCPuD3gi0D odLzER6lz+si05GW+inczviNM41oX/kxja5sms/57e3qtvODWyzNZwKoQtxgtOm6 WC4aNquvmmy7YJrD7NvWR5t5vLJWycu+WiMftM5dVbpxKQ41eK7lpxLvLpuNsosb Lun7Oxzs8y3fzxCX3dBJmeSl62j8z5f58OKpuJfpENrU52YUelDf2R/bt4hefevv WnSejrEeBvt7zubAE3EEurUL0n/CQlVtge3GIz0omoJtkpbr/IPBlFX5ms+Oois7 x4fJ6h0wXJAYinREDYfH0fo0h53AJsngbsGUl+5CKd328rHS1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOoqsaBFqtgXU0Tf2L1IDzSGu9BkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2 NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAzNjkyNDVlYTQvYmZmNjRiYzItMzNlMC00 OTgwLWI5NGMtMWIwMzY5MjQ1ZWE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmZmNjRiYzItMzNlMC00OTgwLWI5 NGMtMWIwMzY5MjQ1ZWE0L2JmZjY0YmMyLTMzZTAtNDk4MC1iOTRjLTFiMDM2OTI0 NWVhNC5jcmwwHwYDVR0jBBgwFoAU+/JLb1yHY5hObo4gfkVD6eU9DHcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAz NjkyNDVlYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOfyI820vEZkAT3Fm4QBVK tFx+SQuFjGCV0WbGhOVamvfIA/x0D7qdtEIj8Ysbx0kzhcN34abhLaRI702hGiCh YHVdWqS1vtzf7VdPOqU1H9e33pE6gpOIBvXTKeA0twSsxXMLCwmN9Ygc0NoGsTVI 2M/MVYWMSYmGzYMubd45qYrhU1aLSHirfFqLg4sC8v/HEvnbhjQLzr58FiTu6xJY 3vigKVEv8gmpOI8dcQ8ckiGkRrv1AD9gI84sjVSpSetGXoU5RrWvkq5+zYxj/hRa 52tyc6mH+GnHK9teSquiBrXPS8vrCHJLJsFq6Cfcaf3LhYznDVa5We06EoiuLl8X -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:24 2026 by rpki-client