$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: fSBwv72nb/gU4SduH5tT1GF+XNXYXNOvKk18FUL2EMI= Subject key identifier: 62:57:3B:C2:1D:DF:20:26:21:92:B5:E7:D6:BC:95:55:E6:62:73:1E Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584D0D7D9F81DC202D427547DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA953371C Signing time: Wed 04 Mar 2026 04:00:08 +0000 Manifest this update: Wed 04 Mar 2026 04:00:08 +0000 Manifest next update: Fri 06 Mar 2026 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: XslhchhLIQD41WBcZoFgPCEc4gmLQ8JjRbvVhexaeEs=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: OlMDtv/+hZWpDMdC8ePo8KhdliCHL2mpTztHf5Rw2aM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:7d:9f:81:dc:20:2d:42:75:47:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Mar 4 04:00:08 2026 GMT Not After : Mar 6 04:00:00 2026 GMT Subject: CN=4e8796a7-3532-4ebd-8981-c2d2b158745a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:26:cd:ca:1a:a6:35:b8:8f:1c:96:ca:0b: e6:ba:73:b9:06:d4:41:c1:6f:68:9b:95:ac:9b:4c: ea:2c:9e:0f:b3:6d:99:74:e5:96:4a:87:ef:93:3b: c1:f8:20:41:e8:8e:37:cb:ad:38:c7:44:1c:7e:d8: 53:ec:bf:f8:26:b9:b2:cb:82:c8:37:30:f4:c3:76: 87:80:cd:6b:a2:ee:0c:47:16:20:17:72:4f:50:49: 03:07:1a:1e:b2:d1:cd:cd:b8:16:5a:b5:c0:6e:fc: 30:35:01:fd:15:36:fa:1b:58:59:65:5e:8d:fb:c5: e8:ee:f9:bb:b8:4f:81:e9:83:ca:16:f4:f5:86:3a: 26:ba:95:a8:07:e2:c6:11:05:88:46:2d:36:7f:8c: 90:9a:3c:17:6c:c8:d2:e5:2a:c8:07:19:db:a5:58: fa:46:6d:f4:0a:62:1b:9b:c1:a2:e0:c6:c6:53:81: 33:d9:82:ac:1c:fe:b2:bc:5e:3c:2f:ba:01:fe:95: 1e:6d:9d:72:6a:0e:2e:26:9f:7d:0a:d9:00:b0:63: a8:e1:76:44:b8:33:4e:97:0b:e1:d3:80:11:1e:76: a8:94:cd:3f:74:a8:f4:7e:82:3d:f5:a3:41:db:46: bb:2d:d4:c0:ee:b4:f6:8a:35:0d:68:5a:79:6c:c4: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:57:3B:C2:1D:DF:20:26:21:92:B5:E7:D6:BC:95:55:E6:62:73:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:da:ad:a7:c7:a8:1d:94:97:2d:73:6d:4d:b7:1b:29:b7:dc: 95:ae:fa:dd:fc:22:ef:17:99:ec:04:0a:03:3c:db:3c:40:28: a8:24:87:ed:73:da:ec:8b:0a:cd:9c:69:db:dc:ba:b2:73:a5: 9a:2b:5b:96:66:11:23:bb:14:88:22:46:a0:d8:bd:7e:d3:6f: c5:b2:8c:f4:7b:86:60:eb:91:a3:df:d1:b2:cc:63:51:b8:ce: 8c:be:7a:8a:ea:9a:db:fb:e5:66:4d:ba:0f:1f:c0:90:00:89: 3b:82:60:49:7e:62:e9:77:fc:87:e9:2f:6e:81:e7:fe:76:df: 4e:b2:10:ec:1e:c9:19:21:9d:36:eb:b6:ae:85:2a:a6:4c:ff: b4:12:b4:c3:43:ed:46:c6:a2:e9:68:99:86:80:b6:95:65:7e: 34:e0:07:cf:9f:2f:31:d2:23:1d:e2:80:87:30:63:3d:47:66: 39:33:25:c6:45:99:f4:8f:85:cf:e4:9f:54:27:fa:21:f0:69: 0e:7e:3f:44:a3:6c:ed:58:50:24:98:39:28:19:93:71:6f:0f: fd:6d:04:31:d6:17:72:6f:88:65:c5:59:96:86:79:7d:fa:36: 9e:03:4e:b1:e7:fc:1e:6f:82:79:4e:1f:40:7c:cb:a2:52:55: cc:e5:6a:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0NfZ+B3CAtQnVH3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI2MDMwNDA0MDAwOFoXDTI2MDMwNjA0MDAwMFowLzEtMCsGA1UEAxMk NGU4Nzk2YTctMzUzMi00ZWJkLTg5ODEtYzJkMmIxNTg3NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyomzcoapjW4jxyWygvmunO5BtRBwW9om5Ws m0zqLJ4Ps22ZdOWWSofvkzvB+CBB6I43y604x0QcfthT7L/4Jrmyy4LINzD0w3aH gM1rou4MRxYgF3JPUEkDBxoestHNzbgWWrXAbvwwNQH9FTb6G1hZZV6N+8Xo7vm7 uE+B6YPKFvT1hjomupWoB+LGEQWIRi02f4yQmjwXbMjS5SrIBxnbpVj6Rm30CmIb m8Gi4MbGU4Ez2YKsHP6yvF48L7oB/pUebZ1yag4uJp99CtkAsGOo4XZEuDNOlwvh 04ARHnaolM0/dKj0foI99aNB20a7LdTA7rT2ijUNaFp5bMTlNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGJXO8Id3yAmIZK159a8lVXmYnMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQ2q2nx6gdlJctc21Ntxsp t9yVrvrd/CLvF5nsBAoDPNs8QCioJIftc9rsiwrNnGnb3Lqyc6WaK1uWZhEjuxSI Ikag2L1+02/Fsoz0e4Zg65Gj39GyzGNRuM6MvnqK6prb++VmTboPH8CQAIk7gmBJ fmLpd/yH6S9ugef+dt9OshDsHskZIZ0267auhSqmTP+0ErTDQ+1GxqLpaJmGgLaV ZX404AfPny8x0iMd4oCHMGM9R2Y5MyXGRZn0j4XP5J9UJ/oh8GkOfj9Eo2ztWFAk mDkoGZNxbw/9bQQx1hdyb4hlxVmWhnl9+jaeA06x5/web4J5Th9AfMuiUlXM5Wrj -----END CERTIFICATE-----Generated at Wed Mar 4 17:50:44 2026 by rpki-client