$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: D8j2bf8ucyVd9cXgmCxBfMXiWUTcO/pUvuYrfzpAUWY= Subject key identifier: BC:7C:90:C6:AB:B9:3F:8A:00:DC:02:83:E0:35:09:64:57:7F:33:CA Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584D06A0A629F70D3B4FD4EFB800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D7011 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Wed 04 Mar 2026 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: u+7Do7tGHdgyZWSmpOsyWLenIGntJdnx5O20GJmm3BU=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: GzGL6/AtKoFdRniuMRD1Nanf8sN2JNKP+jKZ8vYIlpk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a6:29:f7:0d:3b:4f:d4:ef:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 4 17:00:00 2026 GMT Subject: CN=0c3660cc-702d-480f-9422-83812f6f8a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:73:fa:a0:c1:9c:79:27:bb:f9:af:94:b7: ff:be:7f:a5:31:e7:3b:b8:8b:80:bd:68:aa:26:86: e8:9a:01:1d:02:4f:ca:9c:77:7f:16:72:45:b8:72: b6:2e:9e:1b:3a:ac:37:1f:6f:44:de:20:16:c4:b9: e4:ee:1e:9f:6f:fc:aa:db:6f:39:f2:3a:72:0a:ba: 43:21:ce:9a:95:a5:4a:4c:84:f1:4e:d2:b4:dc:98: 29:33:d8:d0:f1:41:59:1a:d6:a3:ed:ef:c9:78:2e: 95:07:9c:10:57:52:ff:c1:36:a2:3d:be:c5:7d:73: 65:e2:9f:64:30:2b:44:2a:bb:0b:96:57:87:83:2c: ed:3c:ae:00:94:56:e0:f2:1e:d3:ad:aa:6d:04:31: 85:e3:b8:af:08:00:f1:58:80:29:77:f9:f5:2c:26: b1:31:79:4d:0a:c4:38:53:67:f9:bd:5a:b1:c8:fe: f3:0f:af:19:b6:58:84:58:eb:b6:1e:8a:df:49:25: 7f:ba:14:d0:6f:a5:60:ca:21:5c:d2:ad:66:ee:c4: de:16:92:8a:47:d3:8f:78:d0:eb:f1:f0:74:c2:db: b9:4d:8c:32:5e:3e:ef:a8:d6:f1:91:96:db:c5:f4: 64:d8:27:86:0e:b9:a2:73:8c:58:2d:eb:8e:dd:4d: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7C:90:C6:AB:B9:3F:8A:00:DC:02:83:E0:35:09:64:57:7F:33:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9a:3b:cf:ee:42:8c:c2:45:f6:b0:42:ca:b3:c4:6f:43:1f: 3b:c6:b7:bf:df:12:a8:e6:7f:99:3a:eb:75:18:9f:de:da:bb: 27:3d:b4:96:c0:d2:0c:17:4b:ca:b9:82:71:8f:a9:ef:e9:1a: 6f:58:26:9f:5d:c6:af:48:60:54:81:a6:92:55:d5:cc:51:57: e2:09:8c:cb:db:28:a4:66:87:f9:81:d0:73:f0:97:57:73:f3: 19:48:e5:be:ee:59:4e:75:d8:95:87:ea:1d:5b:c7:42:78:e4: fd:02:c0:c7:11:d8:32:c0:22:b4:92:90:c2:35:54:eb:b1:2f: cc:bf:0b:75:54:94:04:c7:a0:69:8e:73:38:6b:a3:06:82:8f: ae:1d:b9:ae:e9:1f:86:3a:62:22:bf:09:14:da:6d:c7:25:18: 7a:ce:98:64:31:ac:28:79:d3:e3:61:29:da:6e:d5:e3:df:69: ac:0e:22:b0:53:4a:a3:ef:55:b9:c9:bb:f0:25:57:00:6e:99: 02:e2:b7:cf:e7:37:16:d0:9b:a2:92:11:49:06:38:d1:36:ec: 8b:c6:c3:bb:a9:90:d9:00:85:83:85:7b:17:8e:4f:80:db:5b: d3:dc:d9:66:38:17:25:0f:42:39:00:f7:8e:f5:71:60:b0:71: 6d:02:a5:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKYp9w07T9TvuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwNDE3MDAwMFowLzEtMCsGA1UEAxMk MGMzNjYwY2MtNzAyZC00ODBmLTk0MjItODM4MTJmNmY4YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgtz+qDBnHknu/mvlLf/vn+lMec7uIuAvWiq JobomgEdAk/KnHd/FnJFuHK2Lp4bOqw3H29E3iAWxLnk7h6fb/yq22858jpyCrpD Ic6alaVKTITxTtK03JgpM9jQ8UFZGtaj7e/JeC6VB5wQV1L/wTaiPb7FfXNl4p9k MCtEKrsLlleHgyztPK4AlFbg8h7TraptBDGF47ivCADxWIApd/n1LCaxMXlNCsQ4 U2f5vVqxyP7zD68ZtliEWOu2HorfSSV/uhTQb6VgyiFc0q1m7sTeFpKKR9OPeNDr 8fB0wtu5TYwyXj7vqNbxkZbbxfRk2CeGDrmic4xYLeuO3U2nzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLx8kMaruT+KANwCg+A1CWRXfzPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjmjvP7kKMwkX2sELKs8Rv Qx87xre/3xKo5n+ZOut1GJ/e2rsnPbSWwNIMF0vKuYJxj6nv6RpvWCafXcavSGBU gaaSVdXMUVfiCYzL2yikZof5gdBz8JdXc/MZSOW+7llOddiVh+odW8dCeOT9AsDH EdgywCK0kpDCNVTrsS/Mvwt1VJQEx6BpjnM4a6MGgo+uHbmu6R+GOmIivwkU2m3H JRh6zphkMawoedPjYSnabtXj32msDiKwU0qj71W5ybvwJVcAbpkC4rfP5zcW0Jui khFJBjjRNuyLxsO7qZDZAIWDhXsXjk+A21vT3NlmOBclD0I5APeO9XFgsHFtAqUz -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:56 2026 by rpki-client