$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: cGHRj8f9ebkSu8J23+j/8brSDj1bQyMrXM6HdW83ztI= Subject key identifier: 9C:52:9A:F4:46:94:50:11:56:51:1B:93:D8:92:56:F2:06:49:26:22 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584D117209FDF818964BF5DC50C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602AD49 Signing time: Thu 05 Mar 2026 14:00:04 +0000 Manifest this update: Thu 05 Mar 2026 14:00:04 +0000 Manifest next update: Sun 08 Mar 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: FokLP2f63QA0BSReXkLp7WTrt8J3CYUExyMldKGL4MA=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: GvwJhUVamqGgc2f0gJv6mWUhBE+a3phznUtGlkhWR94=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:09:fd:f8:18:96:4b:f5:dc:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Mar 5 14:00:04 2026 GMT Not After : Mar 8 14:00:00 2026 GMT Subject: CN=063456e1-b6b3-4cca-9fc1-dbabc126e383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:34:c5:c0:d1:a0:68:8d:f2:60:e8:30:4d: 22:04:27:7d:73:ab:84:6d:b1:1a:b5:b7:af:96:60: cf:d3:f4:fd:79:d2:db:82:1e:08:5d:61:aa:45:28: 9a:a1:e1:61:a8:ce:1f:56:b3:aa:3d:1e:c8:20:e9: 74:b2:70:f9:c6:27:36:c9:90:c1:6e:b0:47:a3:9e: 81:ba:92:d6:f7:45:0f:44:ee:62:01:02:94:a4:e8: 99:fc:a3:4e:1c:e7:39:7b:1c:5d:b4:2d:3d:b9:40: 37:e2:f1:21:6c:a1:7e:a7:61:c1:d2:3b:1d:22:99: 6e:af:18:8c:00:5d:5c:c5:cc:24:58:eb:39:07:4c: 9e:3b:68:b0:eb:ec:52:06:7d:23:08:45:04:24:e2: 6d:b0:8c:7a:2c:1c:f5:ed:2e:7f:1d:88:a5:a8:c8: 10:29:04:2f:c5:ca:4c:e5:ae:23:95:67:44:75:47: 0b:84:51:0c:53:f8:80:5d:3b:70:af:90:e5:f0:a5: 17:88:43:ae:48:4d:4b:83:ec:2b:da:14:f8:f1:39: f6:eb:d4:2b:7b:89:8b:86:57:0e:c1:44:8d:ed:29: 40:5b:6d:3e:59:43:85:45:ff:9d:3c:9a:3e:db:50: 18:01:1d:f3:ae:51:de:78:e6:e9:1f:ba:e2:01:7d: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:52:9A:F4:46:94:50:11:56:51:1B:93:D8:92:56:F2:06:49:26:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5c:00:78:c1:ea:45:60:9a:68:b7:7a:ba:42:f8:8a:fc:36: 12:af:c1:86:8b:c2:f2:46:17:69:28:9d:f2:40:a9:c9:ca:b7: a3:05:17:ac:55:5e:71:d1:f2:a7:01:16:01:b5:c0:e8:ad:31: 25:c8:af:14:60:3f:cd:88:e6:a0:6a:d2:41:be:d0:89:4c:3c: a4:ce:fa:d2:f8:91:85:fe:78:82:c9:c2:e1:db:87:01:6d:57: a0:30:d2:ee:02:14:ed:c9:c3:e7:27:96:30:eb:3f:c5:e1:42: fd:de:95:76:5e:01:e0:74:ee:08:53:ba:61:d7:fd:bb:cc:51: ec:ee:0f:5e:8e:ed:29:4d:84:cb:5e:47:2f:67:3c:cb:9b:a6: 1d:3a:dd:41:a5:2c:53:2f:ab:7b:39:ef:74:33:5a:09:e0:93: fc:07:55:f8:ec:6d:ca:9e:43:be:f3:73:81:9f:80:13:4e:ef: b4:ba:1b:7b:35:d1:1f:b7:19:9f:b8:91:0f:24:b8:fa:30:5d: fd:69:15:44:f8:3c:e8:05:3b:48:3e:16:f1:16:7f:6b:79:aa: c1:12:a1:3a:bd:bd:b5:62:f0:85:30:88:68:59:ee:e3:c6:d0: c6:a0:7f:72:d5:e7:aa:98:4f:41:19:49:68:22:93:ea:1a:4c: 46:99:40:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Rcgn9+BiWS/XcUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDMwNTE0MDAwNFoXDTI2MDMwODE0MDAwMFowLzEtMCsGA1UEAxMk MDYzNDU2ZTEtYjZiMy00Y2NhLTlmYzEtZGJhYmMxMjZlMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyag0xcDRoGiN8mDoME0iBCd9c6uEbbEatbev lmDP0/T9edLbgh4IXWGqRSiaoeFhqM4fVrOqPR7IIOl0snD5xic2yZDBbrBHo56B upLW90UPRO5iAQKUpOiZ/KNOHOc5exxdtC09uUA34vEhbKF+p2HB0jsdIplurxiM AF1cxcwkWOs5B0yeO2iw6+xSBn0jCEUEJOJtsIx6LBz17S5/HYilqMgQKQQvxcpM 5a4jlWdEdUcLhFEMU/iAXTtwr5Dl8KUXiEOuSE1Lg+wr2hT48Tn269Qre4mLhlcO wUSN7SlAW20+WUOFRf+dPJo+21AYAR3zrlHeeObpH7riAX2NWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJxSmvRGlFARVlEbk9iSVvIGSSYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/XAB4wepFYJpot3q6QviK /DYSr8GGi8LyRhdpKJ3yQKnJyrejBResVV5x0fKnARYBtcDorTElyK8UYD/NiOag atJBvtCJTDykzvrS+JGF/niCycLh24cBbVegMNLuAhTtycPnJ5Yw6z/F4UL93pV2 XgHgdO4IU7ph1/27zFHs7g9eju0pTYTLXkcvZzzLm6YdOt1BpSxTL6t7Oe90M1oJ 4JP8B1X47G3KnkO+83OBn4ATTu+0uht7NdEftxmfuJEPJLj6MF39aRVE+DzoBTtI PhbxFn9rearBEqE6vb21YvCFMIhoWe7jxtDGoH9y1eeqmE9BGUloIpPqGkxGmUAU -----END CERTIFICATE-----Generated at Thu Mar 5 15:52:45 2026 by rpki-client