$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: rd43BV8jnxNlZbb2r3WEtVYHYl9/2OvUWDCS3eRCdtw= Subject key identifier: 8C:B2:A6:D9:92:63:37:17:83:48:C8:9F:98:FC:E4:29:91:04:DA:29 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584D0E6BCB030CB86D61C410BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF349 Signing time: Wed 04 Mar 2026 12:00:03 +0000 Manifest this update: Wed 04 Mar 2026 12:00:03 +0000 Manifest next update: Sat 07 Mar 2026 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: y4LqSVY9dE1szr7Yfe1ebzTXL/wzLKGecJnEZwvknhE=) 2: 7240f3c2-ab10-300d-8db2-697e0432d604.roa (hash: GY69p6056QP1vWN6xrdg0I9mPr2w90mzu5nrOdef+qE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:6b:cb:03:0c:b8:6d:61:c4:10:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Mar 4 12:00:03 2026 GMT Not After : Mar 7 12:00:00 2026 GMT Subject: CN=ccf12767-5bf1-41a9-ba89-c0c45f910c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:47:ac:c5:74:ac:8c:4f:83:ca:ec:74:f7: ab:15:c9:bd:b0:74:f3:d8:43:fc:0b:01:5c:c3:7c: 5c:71:eb:7c:21:90:cd:02:9b:d3:f8:17:6e:3e:ea: 33:a3:bb:40:28:d4:a0:14:29:2f:04:ff:a4:cd:b7: 47:48:c9:10:51:59:16:90:4e:01:8d:0b:b2:72:60: 12:28:21:88:e3:2f:47:d3:0e:a7:a2:ba:5a:fc:08: f2:4c:06:f0:2d:33:fe:bd:2f:7a:ee:e7:34:66:33: 80:7c:e0:2c:26:94:fc:d6:79:71:1c:21:05:65:27: 89:c4:10:fb:0f:61:ea:52:6e:ef:35:63:1a:ac:d9: 37:dd:ac:65:00:00:e9:30:39:31:37:9f:aa:02:5b: 72:67:7f:9c:9d:66:8f:99:e5:75:ae:2f:d2:68:19: 9a:df:d7:c6:1d:33:15:73:05:57:9d:f9:07:4d:69: 0b:42:54:d4:32:c7:63:b2:a8:ba:2e:06:98:c6:00: 86:25:0d:7b:c7:37:c4:07:b8:8d:ae:41:e9:a6:18: 46:d9:16:cb:a9:be:7d:b4:11:04:a2:bb:38:f9:32: 8f:47:46:89:a1:d8:b4:5b:fb:03:e8:78:31:e6:85: 31:f7:dd:43:14:85:9c:b4:50:00:24:dc:4f:38:ae: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B2:A6:D9:92:63:37:17:83:48:C8:9F:98:FC:E4:29:91:04:DA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ff:9c:7b:a4:39:72:a9:0c:6a:69:fb:e6:76:3e:80:22:40: f4:dd:83:15:91:dd:1e:39:7b:2f:c3:44:e9:39:17:57:80:a7: fb:02:00:c5:89:bf:d1:5b:25:39:b0:ae:e3:c5:c1:a6:b2:6e: 5f:64:c8:ab:8f:ad:20:3a:cd:0b:d0:8d:6d:74:e5:c0:6e:b5: bd:4c:77:0e:eb:d3:e8:8b:76:ff:75:1d:5d:b0:05:55:e7:66: ef:5b:2c:e1:e9:ab:d5:0a:4a:f5:0d:7a:35:f0:8d:df:87:e6: e8:b0:4c:69:ab:08:95:40:dc:3e:7e:78:23:56:27:d4:dd:61: 17:1b:b6:49:89:25:0e:70:22:0c:eb:6a:6a:ee:4f:d7:be:f7: 42:6e:f0:68:7f:bb:b6:53:f3:f4:42:ff:bb:f9:c4:e8:4c:12: 45:1b:cb:06:b1:5b:dc:9c:a2:9a:28:1a:07:9d:e7:44:be:cc: d4:51:84:51:59:fd:1f:6e:da:17:46:39:88:7e:a7:16:f2:2b: 3a:e8:38:cb:35:f8:5f:4d:66:7e:b0:01:af:81:a1:49:05:c1: 5a:88:12:46:c0:03:dd:1b:db:c4:41:52:11:99:1a:83:b3:25: 7a:52:8c:ed:85:90:0d:24:3f:39:de:5e:26:e5:20:eb:6d:77: 43:c0:53:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Oa8sDDLhtYcQQvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDMwNDEyMDAwM1oXDTI2MDMwNzEyMDAwMFowLzEtMCsGA1UEAxMk Y2NmMTI3NjctNWJmMS00MWE5LWJhODktYzBjNDVmOTEwYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif5HrMV0rIxPg8rsdPerFcm9sHTz2EP8CwFc w3xccet8IZDNApvT+BduPuozo7tAKNSgFCkvBP+kzbdHSMkQUVkWkE4BjQuycmAS KCGI4y9H0w6norpa/AjyTAbwLTP+vS967uc0ZjOAfOAsJpT81nlxHCEFZSeJxBD7 D2HqUm7vNWMarNk33axlAADpMDkxN5+qAltyZ3+cnWaPmeV1ri/SaBma39fGHTMV cwVXnfkHTWkLQlTUMsdjsqi6LgaYxgCGJQ17xzfEB7iNrkHpphhG2RbLqb59tBEE ors4+TKPR0aJodi0W/sD6Hgx5oUx991DFIWctFAAJNxPOK5JUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIyyptmSYzcXg0jIn5j85CmRBNopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo/5x7pDlyqQxqafvmdj6A IkD03YMVkd0eOXsvw0TpORdXgKf7AgDFib/RWyU5sK7jxcGmsm5fZMirj60gOs0L 0I1tdOXAbrW9THcO69Poi3b/dR1dsAVV52bvWyzh6avVCkr1DXo18I3fh+bosExp qwiVQNw+fngjVifU3WEXG7ZJiSUOcCIM62pq7k/XvvdCbvBof7u2U/P0Qv+7+cTo TBJFG8sGsVvcnKKaKBoHnedEvszUUYRRWf0fbtoXRjmIfqcW8is66DjLNfhfTWZ+ sAGvgaFJBcFaiBJGwAPdG9vEQVIRmRqDsyV6UozthZANJD853l4m5SDrbXdDwFMN -----END CERTIFICATE-----Generated at Wed Mar 4 20:58:22 2026 by rpki-client