$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft File: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft (raw, json) Hash identifier: eG2KUfg3MUKHipKRB3pyEC4FV0VOOA7Eit4IuFIVkHI= Subject key identifier: F6:2A:29:AB:22:42:0C:7A:E8:6F:81:F2:39:62:53:45:26:D1:6E:77 Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Certificate issuer: /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Certificate serial: 010D0C9F4328584D06A0A636FAA4D799324B7C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft Manifest number: 010D0C9F4328584AB6D97DEA626003C5D3B1F3D5 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Wed 04 Mar 2026 17:00:00 +0000 Files and hashes: 1: 1dace265-d08a-36e1-8cec-c84e5147a33c.roa (hash: G5h24bysTCzBQiMa09BuzW8Zzg1/cWw9ME/xF/ZIzls=) 2: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl (hash: sEvCRb3TBUWT7gZqoCmnUVhMjqYm+ukhftwnIEQPREY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a6:36:fa:a4:d7:99:32:4b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 4 17:00:00 2026 GMT Subject: CN=94cb218e-4588-40b9-9e09-ef10bf090180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:27:d1:a6:7a:b5:1e:dd:ed:89:e0:ec:fa: 5e:4f:4a:ce:3b:dc:1f:c4:29:6c:b5:07:d8:56:d0: 90:a9:76:16:78:3c:a0:57:73:77:60:95:17:b7:25: 4d:e3:40:eb:99:22:bb:51:71:67:e3:70:2f:2c:22: e8:74:47:d4:8c:10:7a:eb:f5:0d:a0:9c:9a:a7:16: 8e:87:6f:86:f7:59:c8:dc:ae:ec:b1:20:a5:de:72: 3f:9f:ff:e1:08:27:15:1d:da:98:86:db:c0:40:e9: 0b:c4:7f:74:91:7b:83:9e:66:ac:37:d0:eb:48:13: cc:fe:75:b2:2b:67:84:fd:0b:f8:97:8b:0b:dc:e7: 9a:d5:e0:13:ac:f3:e3:52:be:88:d6:7b:07:89:ef: 72:37:12:7f:f7:3b:18:db:ce:8f:a7:a7:7d:c2:1e: 8e:5e:76:5f:97:15:09:24:9e:2c:f7:9d:29:ab:9f: b2:03:c3:b4:a7:ea:00:9d:b0:b0:a2:a0:3a:15:88: 6f:9c:6a:cf:89:3d:79:e7:d1:27:8c:a8:98:33:f6: 11:00:f6:62:ef:6e:cd:ce:a2:db:86:cb:cf:dd:20: 09:da:29:5e:fd:16:df:f4:63:32:f0:58:9b:42:57: 14:e0:c9:b2:48:b0:6a:9f:0b:31:b3:b9:2a:78:26: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:29:AB:22:42:0C:7A:E8:6F:81:F2:39:62:53:45:26:D1:6E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl X509v3 Authority Key Identifier: keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:35:fe:60:3a:dd:3d:18:98:d7:78:02:80:fc:94:cb:b2:96: cc:7c:9f:08:a0:79:7e:6f:e6:e9:a1:5a:2a:0e:4a:b1:ef:22: 60:04:08:61:0f:3f:c7:31:3c:99:1d:f1:7c:16:69:da:7d:d0: 8b:1b:fe:dd:42:cc:94:19:47:bb:65:02:39:a6:37:be:af:df: c7:a8:be:60:c4:0e:07:ba:16:a9:64:85:61:c6:9f:1d:d4:56: 78:52:f5:18:aa:55:4a:e2:27:77:0e:ee:8b:98:98:a5:2e:52: ab:39:04:91:d3:9a:31:ac:a0:3f:fc:3d:73:67:1f:6c:a2:47: ed:09:18:e3:0c:b5:83:cc:63:99:61:03:f1:8e:83:ba:8b:e0: db:f1:6a:ba:61:ac:90:aa:12:5c:62:53:1e:6c:32:20:e8:5c: d9:e3:c8:c2:a6:aa:7e:b2:ba:4b:a8:f6:2c:77:53:9b:06:13: a7:f6:3a:b4:5f:59:9b:83:8d:b1:eb:01:e3:96:89:0e:91:45: f6:12:1a:0f:bb:63:e7:fe:36:4f:15:48:e1:79:87:ff:fb:a9: 68:7c:29:59:71:be:d8:5d:c4:ee:1a:86:31:41:f8:ff:eb:7b: 2d:56:c1:33:22:57:01:2f:d3:bb:77:33:ce:bf:ed:97:bf:73: a5:cb:34:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKY2+qTXmTJLfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkNTcyMzktNjE3Ni00YzhkLTlhN2UtZjlmZWEzODBh MWEyMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwNDE3MDAwMFowLzEtMCsGA1UEAxMk OTRjYjIxOGUtNDU4OC00MGI5LTllMDktZWYxMGJmMDkwMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowsn0aZ6tR7d7Yng7PpeT0rOO9wfxClstQfY VtCQqXYWeDygV3N3YJUXtyVN40DrmSK7UXFn43AvLCLodEfUjBB66/UNoJyapxaO h2+G91nI3K7ssSCl3nI/n//hCCcVHdqYhtvAQOkLxH90kXuDnmasN9DrSBPM/nWy K2eE/Qv4l4sL3Oea1eATrPPjUr6I1nsHie9yNxJ/9zsY286Pp6d9wh6OXnZflxUJ JJ4s950pq5+yA8O0p+oAnbCwoqA6FYhvnGrPiT1559EnjKiYM/YRAPZi727NzqLb hsvP3SAJ2ile/Rbf9GMy8FibQlcU4MmySLBqnwsxs7kqeCb/BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPYqKasiQgx66G+B8jliU0Um0W53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1 NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4MGExYTIvZDFkNTcyMzktNjE3Ni00 YzhkLTlhN2UtZjlmZWEzODBhMWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFkNTcyMzktNjE3Ni00YzhkLTlh N2UtZjlmZWEzODBhMWEyL2QxZDU3MjM5LTYxNzYtNGM4ZC05YTdlLWY5ZmVhMzgw YTFhMi5jcmwwHwYDVR0jBBgwFoAUbQ4ZiGQYg+GAjUh5zVEjiC5ZN6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZl YTM4MGExYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsNf5gOt09GJjXeAKA/JTL spbMfJ8IoHl+b+bpoVoqDkqx7yJgBAhhDz/HMTyZHfF8FmnafdCLG/7dQsyUGUe7 ZQI5pje+r9/HqL5gxA4HuhapZIVhxp8d1FZ4UvUYqlVK4id3Du6LmJilLlKrOQSR 05oxrKA//D1zZx9sokftCRjjDLWDzGOZYQPxjoO6i+Db8Wq6YayQqhJcYlMebDIg 6FzZ48jCpqp+srpLqPYsd1ObBhOn9jq0X1mbg42x6wHjlokOkUX2EhoPu2Pn/jZP FUjheYf/+6lofClZcb7YXcTuGoYxQfj/63stVsEzIlcBL9O7dzPOv+2Xv3OlyzQ+ -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:19 2026 by rpki-client