$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft File: 0638a41c-1a08-44d2-a17c-c5272b5171a2.mft (raw, json) Hash identifier: 7lf/6i3RfYARcRdmlN93/2a6PyAoJQ+chuEoeV0/JSk= Subject key identifier: 7B:11:57:4D:EE:75:B3:90:CD:42:9F:AD:07:60:1E:8B:56:6D:F6:DF Authority key identifier: C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 Certificate issuer: /CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Certificate serial: 010D0C9F4328584D096B5608C798EC3A10C5BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft Manifest number: 010D0C9F4328584CBB5019137B0BA11639FA06DD Signing time: Mon 02 Mar 2026 17:00:04 +0000 Manifest this update: Mon 02 Mar 2026 17:00:04 +0000 Manifest next update: Thu 05 Mar 2026 17:00:00 +0000 Files and hashes: 1: 0638a41c-1a08-44d2-a17c-c5272b5171a2.crl (hash: NKzqm8ldA16qbjT4/peXlMyIuHZuPUKHMGTbtVIrS4U=) 2: bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa (hash: A/IyjIDkgJYHjd03t5hyTA2G0anGzaLlTDp3mkPCU0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:6b:56:08:c7:98:ec:3a:10:c5:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Validity Not Before: Mar 2 17:00:04 2026 GMT Not After : Mar 5 17:00:00 2026 GMT Subject: CN=242757ed-feaf-4365-b3aa-8d451eec4019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:3c:34:af:a1:35:7d:00:81:7c:f4:62:0b: 5c:cf:a0:63:95:ad:78:59:16:12:54:8e:38:f5:7e: 0e:7e:e0:57:d7:60:a6:d7:0b:a9:04:51:60:19:96: 83:5d:cc:10:46:7b:2e:56:82:65:15:38:aa:74:4f: 20:ba:01:a4:7a:57:07:ce:a3:0b:82:68:d5:ae:88: e2:01:d3:2c:f0:32:2c:76:b8:d9:ea:dc:d5:c4:ff: 5c:f9:0a:c2:f6:f7:0a:40:27:fe:2d:38:b9:2b:92: 63:c1:c9:f4:cb:6a:36:68:86:cd:be:e0:7c:95:dc: b5:26:be:54:4a:4b:77:ae:04:c8:08:6e:e4:67:6a: 1b:b4:0c:7f:79:81:4a:92:d7:70:b9:31:78:92:6a: 5b:ce:ae:87:70:ce:c9:58:87:a3:f8:7e:33:ff:67: 7a:09:a1:46:d9:50:fa:a5:3d:7d:e6:4e:2f:89:11: ee:e6:39:a5:87:72:04:18:e0:76:47:92:14:3f:b5: ce:78:31:68:13:0c:08:34:a1:f6:46:fc:fb:28:68: d1:fe:26:98:93:7d:31:b2:fd:e8:d1:09:db:05:44: 13:b9:73:d1:0f:57:db:ec:8f:83:fe:8c:2a:cd:70: e5:a7:73:7f:2d:9a:64:1e:23:cf:e7:af:93:9f:6d: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:57:4D:EE:75:B3:90:CD:42:9F:AD:07:60:1E:8B:56:6D:F6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl X509v3 Authority Key Identifier: keyid:C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0a:a5:d3:11:05:af:3d:8a:ce:2c:6d:43:a4:84:6a:48:05: 60:56:09:6b:e6:a3:94:c1:cd:e0:47:83:f0:4a:a0:81:19:66: 56:77:9d:a8:fb:70:a4:56:4e:69:da:0c:81:fb:fb:d3:7e:57: e1:da:a1:76:c4:3d:d1:23:bf:6c:3e:73:c8:e4:b2:85:c4:a6: 57:fc:57:03:f8:e0:37:53:ea:4f:f1:72:aa:6d:1c:55:e6:a8: 87:95:75:42:a3:49:83:8e:5f:94:79:33:e2:48:e0:2b:54:c2: 9f:1a:60:41:3d:96:00:05:c7:7a:f0:0e:0f:da:b4:43:65:e4: 6c:1b:93:bf:0b:c5:ee:3a:51:da:ad:ab:4c:4e:1a:7f:d2:6d: 85:50:1a:5d:0b:65:79:77:51:25:f9:a2:8b:2a:fc:44:fe:a4: 54:85:2d:c9:d5:dd:dd:e7:cc:3b:c1:b2:90:e9:e8:a8:8e:e6: 8f:c3:4b:a6:72:bb:8a:9e:54:8f:2c:cb:c5:32:82:da:6a:9e: 35:24:69:7a:a7:0b:33:5f:3f:1a:28:9d:8f:7a:fb:19:3d:b7: a2:40:1f:8a:3a:1f:36:a4:80:e9:47:60:ce:fd:78:a6:fa:9f: 54:59:31:11:ea:4a:3a:5e:52:71:fa:c3:89:98:c6:8b:84:46: f0:db:43:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Ja1YIx5jsOhDFvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzOGE0MWMtMWEwOC00NGQyLWExN2MtYzUyNzJiNTE3 MWEyMB4XDTI2MDMwMjE3MDAwNFoXDTI2MDMwNTE3MDAwMFowLzEtMCsGA1UEAxMk MjQyNzU3ZWQtZmVhZi00MzY1LWIzYWEtOGQ0NTFlZWM0MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuU8NK+hNX0AgXz0Ygtcz6Bjla14WRYSVI44 9X4OfuBX12Cm1wupBFFgGZaDXcwQRnsuVoJlFTiqdE8gugGkelcHzqMLgmjVroji AdMs8DIsdrjZ6tzVxP9c+QrC9vcKQCf+LTi5K5Jjwcn0y2o2aIbNvuB8ldy1Jr5U Skt3rgTICG7kZ2obtAx/eYFKktdwuTF4kmpbzq6HcM7JWIej+H4z/2d6CaFG2VD6 pT195k4viRHu5jmlh3IEGOB2R5IUP7XOeDFoEwwINKH2Rvz7KGjR/iaYk30xsv3o 0QnbBUQTuXPRD1fb7I+D/owqzXDlp3N/LZpkHiPP56+Tn20BzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHsRV03udbOQzUKfrQdgHotWbfbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4 YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3MmI1MTcxYTIvMDYzOGE0MWMtMWEwOC00 NGQyLWExN2MtYzUyNzJiNTE3MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDYzOGE0MWMtMWEwOC00NGQyLWEx N2MtYzUyNzJiNTE3MWEyLzA2MzhhNDFjLTFhMDgtNDRkMi1hMTdjLWM1MjcyYjUx NzFhMi5jcmwwHwYDVR0jBBgwFoAUwfc/0nXM3+n/BxsH4IvsBm8o0pAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3 MmI1MTcxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5CqXTEQWvPYrOLG1DpIRq SAVgVglr5qOUwc3gR4PwSqCBGWZWd52o+3CkVk5p2gyB+/vTflfh2qF2xD3RI79s PnPI5LKFxKZX/FcD+OA3U+pP8XKqbRxV5qiHlXVCo0mDjl+UeTPiSOArVMKfGmBB PZYABcd68A4P2rRDZeRsG5O/C8XuOlHaratMThp/0m2FUBpdC2V5d1El+aKLKvxE /qRUhS3J1d3d58w7wbKQ6eiojuaPw0umcruKnlSPLMvFMoLaap41JGl6pwszXz8a KJ2PevsZPbeiQB+KOh82pIDpR2DO/Xim+p9UWTER6ko6XlJx+sOJmMaLhEbw20MI -----END CERTIFICATE-----Generated at Tue Mar 3 10:49:56 2026 by rpki-client