$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft File: 05a654f5-4306-42f8-a547-0a21265d5db2.mft (raw, json) Hash identifier: IhhMXQZjC/kmaETCXz7wy8cphbsKAtEUJ0VsMUhpVks= Subject key identifier: B4:EF:F7:A0:6B:EF:D9:58:FA:00:E5:43:2B:E6:91:B1:B8:58:73:88 Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2 Certificate serial: 010D0C9F4328584D30F81A034597CD639D426D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft Manifest number: 010D0C9F432858435A7F9DBD78B167B2D88E9E3F Signing time: Mon 16 Mar 2026 21:00:12 +0000 Manifest this update: Mon 16 Mar 2026 21:00:12 +0000 Manifest next update: Thu 19 Mar 2026 21:00:00 +0000 Files and hashes: 1: 05a654f5-4306-42f8-a547-0a21265d5db2.crl (hash: wJ/xZQA1JlrHXrTzf2fMFEr7czD05Eq8zbF0u813/No=) 2: 4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa (hash: mN/Vb7IXH3BCGFyp0uRGu0YBIK3CYlnmYKRfQ+iCgRQ=) 3: 630c9798-0269-3e7f-bafe-971b39e013ea.roa (hash: e0zcGs9e/zf7rNMf4Qp/JTxzjbGLCZvnSnksNhDr3U8=) 4: ab74b855-05a7-38a0-abdd-eb5284021c0a.roa (hash: UDkOv5rPLKChYhMRzq6BINXQjUNWkQHX0lrR6mLwTys=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:f8:1a:03:45:97:cd:63:9d:42:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Validity Not Before: Mar 16 21:00:12 2026 GMT Not After : Mar 19 21:00:00 2026 GMT Subject: CN=5edbe53b-1f4b-4826-968e-dd47410d05e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:e0:fb:ff:9c:f4:53:94:f7:c0:df:34:40: d7:ec:f4:a2:b1:60:f2:1d:c3:54:85:8f:0d:ec:2e: 88:d9:24:b9:bd:10:eb:78:37:f9:7b:a4:22:3e:f4: 1a:27:88:32:db:e4:1a:2c:a1:77:e0:22:f0:f2:f2: cf:ec:f5:24:1b:60:11:c3:56:d4:46:46:c2:54:ad: 51:0b:96:33:88:0b:c0:32:2c:57:d3:06:af:e9:10: fd:ea:91:5a:73:1b:74:a3:31:98:74:f4:a7:99:45: 33:b1:97:ee:78:5b:e5:10:be:5e:46:5f:91:05:71: 1b:db:93:3d:b6:c2:a8:ab:2d:38:8e:c8:83:00:95: d6:f0:ad:ea:72:da:60:e6:4f:ca:e2:07:ea:ef:48: dd:84:e2:d7:66:0e:9c:e8:d6:72:67:80:9e:79:7a: cb:b0:1d:46:ef:00:b6:36:3b:d3:3b:fe:5f:43:35: 7d:12:87:1c:92:8d:01:4a:03:ae:20:68:a4:76:79: fd:f0:b7:7a:78:7c:ce:e5:13:0b:79:c3:6b:f3:0b: 26:9b:2f:cc:ea:b7:e7:a7:4b:f5:bb:be:4b:8f:e0: a3:37:f3:07:eb:ae:02:e7:03:a0:00:1f:0a:bd:30: d6:75:79:c2:91:aa:9f:da:a8:58:8e:0f:d3:ec:27: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EF:F7:A0:6B:EF:D9:58:FA:00:E5:43:2B:E6:91:B1:B8:58:73:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl X509v3 Authority Key Identifier: keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6a:8c:60:1c:04:ae:56:c5:92:ee:dc:8a:05:ad:75:78:5f: 57:73:04:2a:8a:a5:d2:95:4c:bb:87:c8:24:40:c8:a8:48:35: a8:dd:d4:5b:0a:8f:60:a5:c6:4a:10:89:e6:d9:42:65:b3:49: 3b:25:a3:27:8c:24:c1:d7:98:fa:62:98:1f:3c:b7:81:3d:fe: df:75:8a:18:9d:24:2e:89:53:78:52:62:1e:1f:ae:37:73:a2: 79:dd:7a:3d:36:bf:8a:d0:68:d8:6d:3c:5e:83:cf:17:c0:4d: 24:48:8c:93:f4:7b:08:c3:5d:8c:2e:3f:fa:e2:8d:38:18:9e: 38:f9:ff:76:76:12:80:89:1c:56:18:cc:e6:42:a7:7c:48:35: cf:10:21:44:e6:56:6b:fb:77:86:71:1b:f7:64:6c:8a:39:ed: 7b:08:54:10:31:90:24:08:81:fd:14:f1:d2:9a:b6:92:0c:8c: 53:66:8d:2d:24:ef:03:70:68:80:51:18:84:8c:2b:3e:5f:ef: 0c:16:bf:25:2a:e7:07:f9:9e:dc:d9:8a:26:47:8c:fc:80:16: 4c:98:4a:63:25:a3:46:87:06:cb:12:67:31:f7:e2:c3:aa:55: 01:99:99:94:b4:41:98:f9:21:c9:fc:c7:73:dc:8c:21:42:90: 3c:82:5a:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0w+BoDRZfNY51CbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1 ZGIyMB4XDTI2MDMxNjIxMDAxMloXDTI2MDMxOTIxMDAwMFowLzEtMCsGA1UEAxMk NWVkYmU1M2ItMWY0Yi00ODI2LTk2OGUtZGQ0NzQxMGQwNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Hg+/+c9FOU98DfNEDX7PSisWDyHcNUhY8N 7C6I2SS5vRDreDf5e6QiPvQaJ4gy2+QaLKF34CLw8vLP7PUkG2ARw1bURkbCVK1R C5YziAvAMixX0wav6RD96pFacxt0ozGYdPSnmUUzsZfueFvlEL5eRl+RBXEb25M9 tsKoqy04jsiDAJXW8K3qctpg5k/K4gfq70jdhOLXZg6c6NZyZ4CeeXrLsB1G7wC2 NjvTO/5fQzV9Eoccko0BSgOuIGikdnn98Ld6eHzO5RMLecNr8wsmmy/M6rfnp0v1 u75Lj+CjN/MH664C5wOgAB8KvTDWdXnCkaqf2qhYjg/T7CfnWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLTv96Br79lY+gDlQyvmkbG4WHOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2 NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvMDVhNjU0ZjUtNDMwNi00 MmY4LWE1NDctMGEyMTI2NWQ1ZGIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDVhNjU0ZjUtNDMwNi00MmY4LWE1 NDctMGEyMTI2NWQ1ZGIyLzA1YTY1NGY1LTQzMDYtNDJmOC1hNTQ3LTBhMjEyNjVk NWRiMi5jcmwwHwYDVR0jBBgwFoAUcqZ1c3d2/kvn4Dnlhd2Pwvp/3WMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIx MjY1ZDVkYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAaoxgHASuVsWS7tyKBa11 eF9XcwQqiqXSlUy7h8gkQMioSDWo3dRbCo9gpcZKEInm2UJls0k7JaMnjCTB15j6 YpgfPLeBPf7fdYoYnSQuiVN4UmIeH643c6J53Xo9Nr+K0GjYbTxeg88XwE0kSIyT 9HsIw12MLj/64o04GJ44+f92dhKAiRxWGMzmQqd8SDXPECFE5lZr+3eGcRv3ZGyK Oe17CFQQMZAkCIH9FPHSmraSDIxTZo0tJO8DcGiAURiEjCs+X+8MFr8lKucH+Z7c 2YomR4z8gBZMmEpjJaNGhwbLEmcx9+LDqlUBmZmUtEGY+SHJ/Mdz3IwhQpA8glqN -----END CERTIFICATE-----Generated at Mon Mar 16 23:13:36 2026 by rpki-client