$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft File: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft (raw, json) Hash identifier: 67Cn1pc+JJkFUxiUIAZmLi0j3dUiaxqlGc/C+WPpRe0= Subject key identifier: 64:E3:B1:32:D6:FE:F2:E4:27:F5:4F:A0:90:57:11:E4:9B:94:92:5E Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F Certificate issuer: /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Certificate serial: 010D0C9F4328584D08B8A5EDCEF325427FA72C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft Manifest number: 010D0C9F4328584CCE1A458B83B939037D0FD615 Signing time: Mon 02 Mar 2026 11:00:04 +0000 Manifest this update: Mon 02 Mar 2026 11:00:04 +0000 Manifest next update: Wed 04 Mar 2026 11:00:00 +0000 Files and hashes: 1: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl (hash: 63xauq39i8fcAlqUGYq5EMXK8Bmo8Yr1gfA/aOVl/cU=) 2: 57b08375-edfa-3ca6-816f-7c71735f8648.roa (hash: k5FwQpPl6DMx7/gfbMw9Q/N9m05beJRdBfkKImxnPaI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:b8:a5:ed:ce:f3:25:42:7f:a7:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Validity Not Before: Mar 2 11:00:04 2026 GMT Not After : Mar 4 11:00:00 2026 GMT Subject: CN=0049db4c-3d7c-4aba-86db-50d9a9f7dd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:74:9c:7a:a6:89:b9:97:8b:6a:d2:e3:2f:54: 23:0e:bf:d2:57:5e:92:6d:41:5b:92:0c:89:60:11: 65:c2:82:6b:62:4a:49:a7:2e:86:39:80:3f:41:52: d2:08:67:fb:26:3c:41:40:f8:38:fb:6f:e2:52:b7: bd:7e:f6:66:04:49:ed:a2:9b:8c:94:5e:61:4f:3a: db:c3:ac:5b:b5:7a:eb:01:a5:c3:a6:5e:91:9a:96: 0f:52:e3:5d:42:6c:f7:62:33:20:0a:6b:a9:c3:50: ff:c7:09:f3:bd:67:d2:81:e1:5d:5e:5e:4a:52:e2: 08:e1:95:b6:ab:6e:bd:c1:a2:12:e1:36:36:52:81: be:57:91:7b:8d:d8:78:56:60:4e:5e:59:f2:aa:7d: 4c:30:ae:d5:b0:d9:81:1f:50:cc:44:39:ca:1a:42: e0:ee:44:90:b5:d6:15:07:38:a1:0a:91:90:37:66: 54:e4:49:09:d7:31:65:68:58:42:9b:1d:89:24:45: 8c:3a:93:80:68:9d:53:18:ca:f8:a3:b3:1c:0b:6a: 26:36:77:ef:34:09:d5:94:74:66:b4:e9:ff:da:91: f9:34:b7:7e:97:90:00:f4:bb:9a:50:3e:43:41:1a: 1f:d5:53:45:0a:5d:ae:fe:d0:4f:e2:07:ad:58:8b: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:B1:32:D6:FE:F2:E4:27:F5:4F:A0:90:57:11:E4:9B:94:92:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl X509v3 Authority Key Identifier: keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:13:5c:20:36:c2:25:ed:a9:ff:77:a8:8e:f9:d7:4a:a5:2c: e9:7c:eb:c6:ca:d7:31:94:2a:ac:c6:b2:73:7c:36:43:15:02: 11:9d:12:bf:6a:80:04:b3:e3:75:77:d4:93:b2:33:26:94:8b: c2:75:4b:47:a1:e5:95:f1:9d:89:d2:3c:1b:4f:fe:ff:57:b7: b7:9f:5b:1d:93:97:65:0a:be:b3:6c:85:a6:96:40:44:b0:45: b1:14:42:5e:52:59:54:49:43:95:7f:2d:cc:d7:c9:d2:d5:5e: 5c:f4:ae:77:e9:0f:4a:a3:90:c2:98:3f:83:9f:1d:94:39:9e: 8d:a0:25:49:f4:22:32:a7:2b:26:0a:28:55:b9:a6:1d:da:39: 1b:a3:c8:ca:b7:8d:dc:21:1e:ea:02:86:db:59:7a:4a:e2:45: 06:29:fe:93:88:06:21:5f:fc:42:65:ad:c5:55:a0:f1:1a:e2: 33:74:ac:21:0c:e3:ec:ba:7b:48:b5:80:9c:21:c5:9c:ac:d6: b3:8f:ff:8c:42:48:d7:df:7f:ee:90:be:ee:3d:b9:a1:6d:b9: f7:10:64:6d:44:99:9c:d5:f7:7a:8f:34:88:88:23:39:43:57: c1:89:e4:3b:6f:50:ad:35:b5:a9:dc:d5:ee:cb:fb:a1:be:ba: d4:f2:d5:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0IuKXtzvMlQn+nLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMWQ4OGMtNGIxZC00YThhLTgzMTktNWQ3ODRlOTk1 YmUyMB4XDTI2MDMwMjExMDAwNFoXDTI2MDMwNDExMDAwMFowLzEtMCsGA1UEAxMk MDA0OWRiNGMtM2Q3Yy00YWJhLTg2ZGItNTBkOWE5ZjdkZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHSceqaJuZeLatLjL1QjDr/SV16SbUFbkgyJ YBFlwoJrYkpJpy6GOYA/QVLSCGf7JjxBQPg4+2/iUre9fvZmBEntopuMlF5hTzrb w6xbtXrrAaXDpl6RmpYPUuNdQmz3YjMgCmupw1D/xwnzvWfSgeFdXl5KUuII4ZW2 q269waIS4TY2UoG+V5F7jdh4VmBOXlnyqn1MMK7VsNmBH1DMRDnKGkLg7kSQtdYV BzihCpGQN2ZU5EkJ1zFlaFhCmx2JJEWMOpOAaJ1TGMr4o7McC2omNnfvNAnVlHRm tOn/2pH5NLd+l5AA9LuaUD5DQRof1VNFCl2u/tBP4getWIsVAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGTjsTLW/vLkJ/VPoJBXEeSblJJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYx ZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4NGU5OTViZTIvMWRmMWQ4OGMtNGIxZC00 YThhLTgzMTktNWQ3ODRlOTk1YmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWRmMWQ4OGMtNGIxZC00YThhLTgz MTktNWQ3ODRlOTk1YmUyLzFkZjFkODhjLTRiMWQtNGE4YS04MzE5LTVkNzg0ZTk5 NWJlMi5jcmwwHwYDVR0jBBgwFoAUO4o8adHio5sJm2d2r75YFyzbC08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYxZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4 NGU5OTViZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaE1wgNsIl7an/d6iO+ddK pSzpfOvGytcxlCqsxrJzfDZDFQIRnRK/aoAEs+N1d9STsjMmlIvCdUtHoeWV8Z2J 0jwbT/7/V7e3n1sdk5dlCr6zbIWmlkBEsEWxFEJeUllUSUOVfy3M18nS1V5c9K53 6Q9Ko5DCmD+Dnx2UOZ6NoCVJ9CIypysmCihVuaYd2jkbo8jKt43cIR7qAobbWXpK 4kUGKf6TiAYhX/xCZa3FVaDxGuIzdKwhDOPsuntItYCcIcWcrNazj/+MQkjX33/u kL7uPbmhbbn3EGRtRJmc1fd6jzSIiCM5Q1fBieQ7b1CtNbWp3NXuy/uhvrrU8tX3 -----END CERTIFICATE-----Generated at Tue Mar 3 10:47:30 2026 by rpki-client