$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: Y83S1yzwGCGvSNC1hqgFxJSwg+pI8Bj5vjYgvkVq4Lg= Subject key identifier: F9:C3:CE:51:5E:78:55:75:10:12:74:53:DA:47:27:A8:77:D2:68:F3 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584D0B2A0075E531A2F3E9458780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D86E Signing time: Tue 03 Mar 2026 08:00:04 +0000 Manifest this update: Tue 03 Mar 2026 08:00:04 +0000 Manifest next update: Fri 06 Mar 2026 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: jJzyIYgzkAauoM2IUG86Rczhfqoxhu/iMtcMSq7RtX4=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: U2sKzJh1gDvnXZT2RkMeaodkrWDO/QcSpua0lvsBmRE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:2a:00:75:e5:31:a2:f3:e9:45:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Mar 3 08:00:04 2026 GMT Not After : Mar 6 08:00:00 2026 GMT Subject: CN=f551164a-710b-43e2-bffc-71ff49f40907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:4e:25:36:e6:61:0a:06:09:a5:2a:42:e6: b6:ec:e1:c9:8f:59:c5:9d:d2:41:d8:d0:e8:fe:50: ef:01:9c:cf:53:2e:b0:71:74:ea:0a:ca:a7:f0:71: a5:15:19:d8:3f:5d:6d:4c:0d:8f:ef:22:ea:16:be: fc:76:a4:33:6a:31:5d:6d:3d:7e:20:8a:cb:a5:46: cd:17:83:67:9c:28:7a:db:92:27:69:48:26:59:31: a1:fb:2d:d6:f9:81:44:9b:48:5d:c3:2c:64:bf:18: 1f:d5:23:c4:67:74:1f:a7:65:cc:ec:1f:a6:81:3d: a6:36:13:19:a9:3b:54:f9:36:10:76:63:91:33:16: a7:07:4f:33:a3:91:5e:6d:2f:e4:80:78:68:40:e3: 9d:7c:f2:be:82:1f:0d:66:1b:86:fe:c3:8f:4b:65: 1c:b3:59:36:9c:c7:06:84:69:6c:68:94:ad:c7:f0: 9d:f1:42:25:00:40:4b:e1:6c:a0:16:e0:c3:8f:06: c3:87:fb:fb:58:2b:e9:5f:08:cf:1f:b8:2c:64:c5: 15:ab:7b:79:60:7d:a9:89:10:4f:d3:92:12:2f:01: b5:86:98:9d:b3:63:44:9b:05:f6:bb:7d:32:2b:73: 48:b5:de:10:c4:94:f7:1f:5c:68:fe:c1:5a:d3:76: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C3:CE:51:5E:78:55:75:10:12:74:53:DA:47:27:A8:77:D2:68:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d0:1a:5b:62:5b:c6:7c:a7:86:b0:b1:b8:78:a6:64:4a:84: 0b:87:06:b7:6a:e9:cd:b8:17:b1:29:11:f1:2e:e5:f8:40:37: 24:66:2b:ea:fb:15:93:e8:94:9b:ff:9b:a9:a7:d8:31:ea:96: 3c:87:df:b6:57:9f:67:5b:17:32:91:a7:99:31:33:b4:d6:05: 69:8f:1b:07:6a:d9:4b:08:11:4f:55:57:c8:45:7d:2f:16:67: e1:79:b9:23:34:93:68:6d:68:f2:ab:60:c1:4d:62:8b:d0:ec: 3f:a2:f2:97:75:27:f4:31:c6:e3:46:cb:b2:33:ad:8b:9d:0f: 1b:9c:f5:79:2c:a4:07:3a:ff:6e:22:0f:1b:d4:e5:69:7d:70: a5:2e:cd:77:b0:7d:75:ce:25:66:b1:5c:8a:bd:47:cd:5d:4a: c3:2f:50:3e:b6:0c:b7:06:46:9f:f2:c3:22:86:6b:c7:f5:c2: a3:dd:bd:32:e7:a9:1c:c8:0a:ab:36:52:c1:13:6f:2e:8f:23: 52:8e:8f:24:d9:d8:84:27:d1:bd:54:6e:b8:15:52:a0:11:1a: 10:79:ae:0c:a1:d0:9c:3e:16:81:0e:47:22:41:5d:be:08:c4: f3:3a:67:48:2e:06:f9:de:c2:c5:b3:e3:ed:af:8e:80:10:68: ef:34:c9:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0LKgB15TGi8+lFh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI2MDMwMzA4MDAwNFoXDTI2MDMwNjA4MDAwMFowLzEtMCsGA1UEAxMk ZjU1MTE2NGEtNzEwYi00M2UyLWJmZmMtNzFmZjQ5ZjQwOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAittOJTbmYQoGCaUqQua27OHJj1nFndJB2NDo /lDvAZzPUy6wcXTqCsqn8HGlFRnYP11tTA2P7yLqFr78dqQzajFdbT1+IIrLpUbN F4NnnCh625InaUgmWTGh+y3W+YFEm0hdwyxkvxgf1SPEZ3Qfp2XM7B+mgT2mNhMZ qTtU+TYQdmORMxanB08zo5FebS/kgHhoQOOdfPK+gh8NZhuG/sOPS2Ucs1k2nMcG hGlsaJStx/Cd8UIlAEBL4WygFuDDjwbDh/v7WCvpXwjPH7gsZMUVq3t5YH2piRBP 05ISLwG1hpids2NEmwX2u30yK3NItd4QxJT3H1xo/sFa03ZAlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPnDzlFeeFV1EBJ0U9pHJ6h30mjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv0BpbYlvGfKeGsLG4eKZk SoQLhwa3aunNuBexKRHxLuX4QDckZivq+xWT6JSb/5upp9gx6pY8h9+2V59nWxcy kaeZMTO01gVpjxsHatlLCBFPVVfIRX0vFmfhebkjNJNobWjyq2DBTWKL0Ow/ovKX dSf0McbjRsuyM62LnQ8bnPV5LKQHOv9uIg8b1OVpfXClLs13sH11ziVmsVyKvUfN XUrDL1A+tgy3Bkaf8sMihmvH9cKj3b0y56kcyAqrNlLBE28ujyNSjo8k2diEJ9G9 VG64FVKgERoQea4ModCcPhaBDkciQV2+CMTzOmdILgb53sLFs+Ptr46AEGjvNMk/ -----END CERTIFICATE-----Generated at Tue Mar 3 11:58:32 2026 by rpki-client