$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft File: 980354e2-3c42-4edd-9777-d1d6e1642181.mft (raw, json) Hash identifier: qVqEPNGRYo0ekUWNXbikf+aQQ+bFtsJS2RYZ5Mmnqgg= Subject key identifier: 55:71:A7:1E:2B:4C:0F:A7:74:59:FC:90:9C:4B:87:AB:7D:0D:58:45 Authority key identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Certificate issuer: /CN=980354e2-3c42-4edd-9777-d1d6e1642181 Certificate serial: 010D0C9F4328584D147848575CE5BE32A61C46C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft Manifest number: 010D0C9F43285849AD78CF93C793CC28B5A42B5F Signing time: Fri 06 Mar 2026 16:00:03 +0000 Manifest this update: Fri 06 Mar 2026 16:00:03 +0000 Manifest next update: Mon 09 Mar 2026 16:00:00 +0000 Files and hashes: 1: 9133a9df-5488-32e9-9f31-295fa33ac5e5.roa (hash: fKIK9Mp11T3UMiUY4qxBcJIu32t3ffCxvTMdiu7nZfE=) 2: 980354e2-3c42-4edd-9777-d1d6e1642181.crl (hash: 9ICUltqX3whiAnw/8MTC8oDL80wdUWWFtOQFgQJECho=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:78:48:57:5c:e5:be:32:a6:1c:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980354e2-3c42-4edd-9777-d1d6e1642181 Validity Not Before: Mar 6 16:00:03 2026 GMT Not After : Mar 9 16:00:00 2026 GMT Subject: CN=537744fb-f30b-44fa-bd92-88bd2b55d466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:e7:bb:c8:e2:a6:b6:16:79:8e:af:b0:d5: 35:e5:e4:b2:ab:92:fe:61:e2:f6:52:8b:ba:a9:f3: fb:a1:6b:08:72:14:b6:fe:39:b4:49:9c:5b:3c:dc: 5e:bb:cf:6b:8f:57:8f:00:68:88:b3:35:8f:4d:44: 28:7d:43:29:7e:bb:23:2e:24:c1:b1:3c:b7:54:f0: 72:b5:ea:1f:92:20:29:4b:8c:91:09:aa:29:9a:02: b1:38:97:e9:96:47:30:83:2c:74:ed:cb:43:18:b8: 37:4f:a8:48:50:b4:1a:5c:b6:81:42:35:38:a6:08: 70:f4:95:2c:45:ac:65:bd:c1:1e:7b:28:c1:db:fe: c0:09:25:25:e3:2c:b9:50:31:74:03:d0:93:fe:97: ab:d8:40:63:81:9b:49:98:0c:66:e1:7a:33:b5:fb: 71:d2:19:44:44:2e:f1:ab:b0:b4:d5:76:72:17:5d: 0a:ea:fb:60:52:a3:37:9c:79:a9:ce:4c:d1:6b:63: e1:d6:65:49:f6:2b:dc:52:4c:cb:53:70:57:a6:4a: 9c:41:e3:c8:f8:37:8f:42:cb:76:cb:cc:ab:a9:63: 85:c1:c7:d5:9a:b8:ae:87:08:85:8d:56:1b:3a:b4: cd:f4:aa:96:c8:74:9d:99:64:81:ab:b1:8d:7d:99: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:A7:1E:2B:4C:0F:A7:74:59:FC:90:9C:4B:87:AB:7D:0D:58:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.crl X509v3 Authority Key Identifier: keyid:F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:59:bf:42:c4:31:11:48:a2:a8:1d:82:fb:70:bf:c3:3d:4e: 43:ae:85:b7:b2:27:54:6f:be:ca:3e:b9:14:c9:e9:1d:cf:63: 2a:f6:9f:a0:a8:94:ad:a6:15:83:ba:f6:7f:f6:21:98:c3:42: d0:5e:67:aa:65:cc:d9:c9:27:6d:a1:82:06:06:80:c4:4c:a0: ff:4d:86:03:63:aa:30:a9:d8:cf:ea:38:c8:be:5d:47:e4:fd: 87:3f:5e:c6:73:61:4f:df:f2:04:94:3a:c0:d5:d4:09:7e:d1: 26:e4:0a:bf:b6:03:e4:df:87:6f:c1:25:4f:21:03:e0:75:52: 40:62:5c:c6:23:6f:63:07:ae:2e:c0:01:4e:57:98:f6:ce:b1: 0d:d4:c4:45:a6:c6:11:e7:9e:ee:64:02:b0:1d:fd:38:ae:94: 4d:f1:6d:e9:30:d6:62:4a:42:19:34:81:0d:a2:e7:d2:fd:de: 78:be:10:73:4f:96:48:43:b4:af:27:b1:ab:7d:c0:f9:ca:13: 69:6e:16:a0:a2:68:c1:f3:1a:e5:48:4e:6b:23:b9:6f:06:37: 5f:4c:0f:a2:f7:0b:b7:f5:2c:37:48:ef:84:43:c4:e3:65:ec: 6d:14:39:ad:47:ec:de:d2:5e:19:23:c6:b5:30:a5:53:17:a6: fe:92:d5:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0UeEhXXOW+MqYcRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgwMzU0ZTItM2M0Mi00ZWRkLTk3NzctZDFkNmUxNjQy MTgxMB4XDTI2MDMwNjE2MDAwM1oXDTI2MDMwOTE2MDAwMFowLzEtMCsGA1UEAxMk NTM3NzQ0ZmItZjMwYi00NGZhLWJkOTItODhiZDJiNTVkNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC3nu8jiprYWeY6vsNU15eSyq5L+YeL2Uou6 qfP7oWsIchS2/jm0SZxbPNxeu89rj1ePAGiIszWPTUQofUMpfrsjLiTBsTy3VPBy teofkiApS4yRCaopmgKxOJfplkcwgyx07ctDGLg3T6hIULQaXLaBQjU4pghw9JUs RaxlvcEeeyjB2/7ACSUl4yy5UDF0A9CT/per2EBjgZtJmAxm4Xoztftx0hlERC7x q7C01XZyF10K6vtgUqM3nHmpzkzRa2Ph1mVJ9ivcUkzLU3BXpkqcQePI+DePQst2 y8yrqWOFwcfVmriuhwiFjVYbOrTN9KqWyHSdmWSBq7GNfZmbPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFVxpx4rTA+ndFn8kJxLh6t9DVhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ODAz NTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2NDIxODEvOTgwMzU0ZTItM2M0Mi00 ZWRkLTk3NzctZDFkNmUxNjQyMTgxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTgwMzU0ZTItM2M0Mi00ZWRkLTk3 NzctZDFkNmUxNjQyMTgxLzk4MDM1NGUyLTNjNDItNGVkZC05Nzc3LWQxZDZlMTY0 MjE4MS5jcmwwHwYDVR0jBBgwFoAU9F+fm3bfWBOrgF55Zdv3TykqLQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2 ZTE2NDIxODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQWb9CxDERSKKoHYL7cL/D PU5DroW3sidUb77KPrkUyekdz2Mq9p+gqJStphWDuvZ/9iGYw0LQXmeqZczZySdt oYIGBoDETKD/TYYDY6owqdjP6jjIvl1H5P2HP17Gc2FP3/IElDrA1dQJftEm5Aq/ tgPk34dvwSVPIQPgdVJAYlzGI29jB64uwAFOV5j2zrEN1MRFpsYR557uZAKwHf04 rpRN8W3pMNZiSkIZNIENoufS/d54vhBzT5ZIQ7SvJ7GrfcD5yhNpbhagomjB8xrl SE5rI7lvBjdfTA+i9wu39Sw3SO+EQ8TjZextFDmtR+ze0l4ZI8a1MKVTF6b+ktUz -----END CERTIFICATE-----Generated at Sat Mar 7 16:53:04 2026 by rpki-client