$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft File: 1cf30977-73f6-4522-b061-66f0061f58dd.mft (raw, json) Hash identifier: V+1o2rM6x2xdzAD9oNQKP66RDaep3WWxVJMy0Fh1fhc= Subject key identifier: 1D:D1:D0:A8:60:16:95:3B:C1:DD:36:75:9F:EE:FD:78:81:45:DD:CB Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 Certificate issuer: /CN=1cf30977-73f6-4522-b061-66f0061f58dd Certificate serial: 010D0C9F4328584D3080E8C10D7209A5EA962C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft Manifest number: 010D0C9F432858435D3B6876837249857343839C Signing time: Mon 16 Mar 2026 17:00:04 +0000 Manifest this update: Mon 16 Mar 2026 17:00:04 +0000 Manifest next update: Wed 18 Mar 2026 17:00:00 +0000 Files and hashes: 1: 1cf30977-73f6-4522-b061-66f0061f58dd.crl (hash: yvNkMPQQeNp8nBH9mIG0FdTpYNWV+yU/cVhb7giJB4w=) 2: c8823d7b-5ece-3489-b72b-ced743ec137b.roa (hash: 5+lZswLy1NP8vCm9BXsvIxDhrzsWlkxOXy26yvoDNdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:80:e8:c1:0d:72:09:a5:ea:96:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd Validity Not Before: Mar 16 17:00:04 2026 GMT Not After : Mar 18 17:00:00 2026 GMT Subject: CN=59acfe04-4673-4458-92f8-ed8ab897222b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:8e:87:33:91:86:6d:7a:93:84:86:71:50: b2:45:ba:46:ab:6d:20:7c:bf:a0:5c:bd:09:45:e5: 0d:6d:61:fc:11:19:c5:d7:a1:7d:4b:58:52:e7:7b: 09:de:9a:c8:dd:02:de:fd:4b:84:6b:42:c3:76:cc: 77:4b:f2:ed:be:9f:9a:6a:39:a1:61:0c:98:45:b6: 67:5e:d7:9f:83:c3:ad:5d:0e:73:9e:cf:9e:a2:4b: 52:4a:98:c3:67:0c:60:6d:08:7a:5f:1b:92:95:1f: 89:24:f3:1d:2d:51:f5:5d:a7:26:9b:d1:45:2c:c6: c8:4a:74:fa:8e:ab:84:d1:b9:e8:0a:85:39:8b:c0: 3f:1b:33:36:d0:d7:6f:4a:a8:e8:2b:52:84:ff:a1: dd:41:67:8e:60:95:a6:75:df:a6:a4:1c:bb:2c:0d: dd:bc:c6:bc:1e:bd:a4:0a:6e:8e:e1:a4:0f:b0:02: 4d:fb:a8:a4:69:0c:f0:b3:a8:46:8e:0b:1d:19:c7: 36:24:59:36:40:c4:47:42:fe:1b:88:42:fb:3f:0a: a9:99:53:ea:a9:ac:3c:8b:90:85:25:cb:bf:1a:a6: a0:df:df:83:c4:cb:72:0a:1d:d5:0f:41:44:e9:a5: 9c:fe:88:90:7a:d6:65:1e:3e:a5:93:78:a1:48:bb: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D1:D0:A8:60:16:95:3B:C1:DD:36:75:9F:EE:FD:78:81:45:DD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl X509v3 Authority Key Identifier: keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:eb:4b:9b:2c:92:52:33:fa:11:4a:89:5d:c8:8b:dd:26:b2: a3:52:cd:fa:37:a3:4f:36:b3:72:e6:07:a5:a5:46:db:46:b7: b3:f4:89:0d:aa:44:ba:6e:fe:21:0e:7a:1f:b0:20:3f:cc:df: ea:ee:a2:84:b3:dd:1e:f7:b0:10:7b:45:33:8d:46:43:34:8d: b0:4b:8f:db:63:62:62:03:a9:88:52:c4:17:ea:49:52:ee:dd: ee:5f:13:6b:de:0b:74:93:98:0d:f0:02:e8:f5:a3:49:84:2c: ae:68:6c:ee:97:f0:db:a4:84:9b:41:29:50:f9:86:27:fc:54: 76:be:79:3d:1a:10:13:3e:4a:ec:46:ad:b0:1c:3c:7e:e4:e8: a2:52:c0:f6:22:40:e7:44:a9:f7:58:c0:1d:0e:53:2d:cf:78: b3:10:c7:4e:75:e4:e5:5c:ff:0f:84:1e:01:ec:2a:f3:3c:24: 57:f9:07:90:59:ef:17:4f:85:ae:97:04:f0:d8:1a:72:ac:d8: 42:b3:a5:20:5c:f8:58:fb:4c:20:c9:cc:a4:ff:fc:d5:e9:06: 8c:57:b4:6f:b6:3e:df:9e:c3:4c:16:8f:fd:93:b5:b0:df:b1: 25:3e:d8:7e:97:82:ee:11:0d:65:15:21:21:1d:56:e5:30:cb: 25:74:83:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0wgOjBDXIJpeqWLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1 OGRkMB4XDTI2MDMxNjE3MDAwNFoXDTI2MDMxODE3MDAwMFowLzEtMCsGA1UEAxMk NTlhY2ZlMDQtNDY3My00NDU4LTkyZjgtZWQ4YWI4OTcyMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+uOhzORhm16k4SGcVCyRbpGq20gfL+gXL0J ReUNbWH8ERnF16F9S1hS53sJ3prI3QLe/UuEa0LDdsx3S/Ltvp+aajmhYQyYRbZn Xtefg8OtXQ5zns+eoktSSpjDZwxgbQh6XxuSlR+JJPMdLVH1Xacmm9FFLMbISnT6 jquE0bnoCoU5i8A/GzM20NdvSqjoK1KE/6HdQWeOYJWmdd+mpBy7LA3dvMa8Hr2k Cm6O4aQPsAJN+6ikaQzws6hGjgsdGcc2JFk2QMRHQv4biEL7PwqpmVPqqaw8i5CF Jcu/Gqag39+DxMtyCh3VD0FE6aWc/oiQetZlHj6lk3ihSLsNLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB3R0KhgFpU7wd02dZ/u/XiBRd3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvMWNmMzA5NzctNzNmNi00 NTIyLWIwNjEtNjZmMDA2MWY1OGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw MDYxZjU4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe60ubLJJSM/oRSoldyIvd JrKjUs36N6NPNrNy5gelpUbbRrez9IkNqkS6bv4hDnofsCA/zN/q7qKEs90e97AQ e0UzjUZDNI2wS4/bY2JiA6mIUsQX6klS7t3uXxNr3gt0k5gN8ALo9aNJhCyuaGzu l/DbpISbQSlQ+YYn/FR2vnk9GhATPkrsRq2wHDx+5OiiUsD2IkDnRKn3WMAdDlMt z3izEMdOdeTlXP8PhB4B7CrzPCRX+QeQWe8XT4WulwTw2BpyrNhCs6UgXPhY+0wg ycyk//zV6QaMV7Rvtj7fnsNMFo/9k7Ww37ElPth+l4LuEQ1lFSEhHVblMMsldIPw -----END CERTIFICATE-----Generated at Mon Mar 16 23:13:20 2026 by rpki-client