$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json) Hash identifier: +k5ksTNmSxAA4DRqyw+dZ8UJeTDKjQCTWd2cPWt4JD4= Subject key identifier: ED:97:90:EE:11:74:D4:74:BB:2D:44:B9:3A:D9:FA:F5:0D:4E:E8:76 Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Certificate serial: 7D5056F9945CE3C1A53AF7F1A2FBC3257F970C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft Manifest number: 05A0 Signing time: Sat 28 Mar 2026 07:17:19 +0000 Manifest this update: Sat 28 Mar 2026 07:12:19 +0000 Manifest next update: Sun 29 Mar 2026 10:43:19 +0000 Files and hashes: 1: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=) 2: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=) 3: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=) 4: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=) 5: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: b53KJ4mPRGlp5hjV6kJnmlei8YlN0VPYMb7Nq51kzEI=) 6: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:50:56:f9:94:5c:e3:c1:a5:3a:f7:f1:a2:fb:c3:25:7f:97:0c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Validity Not Before: Mar 28 07:12:19 2026 GMT Not After : Mar 29 10:43:19 2026 GMT Subject: CN=ED9790EE1174D474BB2D44B93AD9FAF50D4EE876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:79:88:80:23:37:d6:83:1f:25:ef:e8:c0:f3: d6:e3:3a:1a:75:e2:36:cf:7f:cf:3d:a6:d3:c0:d2: 38:b8:5d:42:cb:e1:c6:03:d0:8f:f3:ca:3e:6a:01: f6:1e:53:80:0b:79:6b:be:c1:88:ff:99:fb:b3:ba: a1:28:f0:10:d9:fe:5e:44:d4:8e:af:55:e9:cd:25: 08:6e:90:6d:41:cf:3d:cf:10:98:cb:37:7f:1c:e8: 61:e7:f7:27:57:bd:bb:5d:89:05:4d:51:c0:97:02: a2:8c:5b:70:0b:5c:9e:d0:d2:ec:f0:77:d3:51:9e: f7:f8:e2:16:a3:40:42:bf:01:dd:41:c9:2c:2c:3f: 3c:3a:d7:f7:e3:2a:da:31:6c:e8:c2:b5:ba:7f:01: a6:23:cc:ad:6d:f7:07:a4:41:44:2c:eb:de:f3:53: 6a:fa:28:1e:1a:6a:68:b2:46:3f:2b:32:ba:67:33: 10:15:09:76:ec:bb:dc:be:17:8b:22:07:95:15:f1: 5b:13:11:12:91:cf:d6:05:64:aa:7f:29:2f:9d:c3: 28:09:22:11:51:8a:61:cb:d8:97:a1:39:30:20:1b: 70:7f:df:b8:04:61:3b:08:3e:dd:7b:e9:65:35:66: c5:52:25:a1:be:15:18:ba:b1:b1:55:76:d7:ed:f7: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:97:90:EE:11:74:D4:74:BB:2D:44:B9:3A:D9:FA:F5:0D:4E:E8:76 X509v3 Authority Key Identifier: keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:37:a6:a0:4a:98:a7:70:65:23:26:73:4e:fd:36:4d:84:80: 0c:13:f6:db:85:5e:7a:45:5a:1b:6e:38:a3:75:3a:dd:60:b6: a8:0f:10:8d:89:a0:60:d3:f7:fc:30:c6:42:34:cd:07:44:87: 92:74:dd:8c:9e:68:ca:ee:61:78:74:1e:b6:e6:98:31:e8:9f: 16:3e:54:b8:af:cb:36:1d:de:32:6d:6d:9b:3a:0e:6d:7e:5c: 66:fd:28:44:c4:6b:55:7d:3b:8c:7f:a7:cb:80:de:4c:0a:fe: ee:90:8c:ae:af:fe:fd:b9:d3:12:4b:d1:ab:d0:1c:62:bf:97: ed:c0:e5:3f:c4:30:03:51:f8:3f:b3:91:64:e5:9c:66:ce:ab: 51:9f:63:8b:44:9e:14:37:15:9a:7b:f5:4c:bf:05:d9:2c:96: 9b:5b:69:e5:4d:2c:df:5e:07:0c:15:18:97:76:0e:46:9a:70: 75:b7:80:46:f4:19:22:61:34:a4:a8:93:78:aa:9e:5a:63:9d: f0:e9:bb:d7:be:65:d9:1c:81:74:b7:d9:62:80:4e:9a:71:7e: cb:ce:52:40:2d:3f:3d:36:e3:48:48:3b:05:21:9c:ce:6e:cf: 08:a3:70:f2:3a:b9:c6:2d:c9:4a:47:aa:0e:f5:91:6f:60:df: 02:24:e7:7e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUfVBW+ZRc48GlOvfxovvDJX+XDBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI2MDMyODA3MTIxOVoX DTI2MDMyOTEwNDMxOVowMzExMC8GA1UEAxMoRUQ5NzkwRUUxMTc0RDQ3NEJCMkQ0 NEI5M0FEOUZBRjUwRDRFRTg3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJ5iIAjN9aDHyXv6MDz1uM6GnXiNs9/zz2m08DSOLhdQsvhxgPQj/PKPmoB 9h5TgAt5a77BiP+Z+7O6oSjwENn+XkTUjq9V6c0lCG6QbUHPPc8QmMs3fxzoYef3 J1e9u12JBU1RwJcCooxbcAtcntDS7PB301Ge9/jiFqNAQr8B3UHJLCw/PDrX9+Mq 2jFs6MK1un8BpiPMrW33B6RBRCzr3vNTavooHhpqaLJGPysyumczEBUJduy73L4X iyIHlRXxWxMREpHP1gVkqn8pL53DKAkiEVGKYcvYl6E5MCAbcH/fuARhOwg+3Xvp ZTVmxVIlob4VGLqxsVV21+33iaECAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTtl5Du EXTUdLstRLk62fr1DU7odjAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5 tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk LzgvOUNEQTcxMTE2RTIyODEyQURGNjBCNzUwMEY5MkQ3RTRDQkIyQjlCNC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABk3pqBKmKdwZSMmc079Nk2EgAwT9tuFXnpFWhtuOKN1Ot1gtqgPEI2J oGDT9/wwxkI0zQdEh5J03YyeaMruYXh0HrbmmDHonxY+VLivyzYd3jJtbZs6Dm1+ XGb9KETEa1V9O4x/p8uA3kwK/u6QjK6v/v250xJL0avQHGK/l+3A5T/EMANR+D+z kWTlnGbOq1GfY4tEnhQ3FZp79Uy/BdkslptbaeVNLN9eBwwVGJd2DkaacHW3gEb0 GSJhNKSok3iqnlpjnfDpu9e+ZdkcgXS32WKATppxfsvOUkAtPz0240hIOwUhnM5u zwijcPI6ucYtyUpHqg71kW9g3wIk534= -----END CERTIFICATE-----Generated at Sat Mar 28 10:44:58 2026 by rpki-client