$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft File: 978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft (raw, json) Hash identifier: GTQyEY8iQKX66o5X0oYGBA015hjxcLwSksn0OxwU12Q= Subject key identifier: 82:59:57:C7:D6:CF:AB:43:E0:96:A5:47:F0:2B:C4:07:77:30:FF:E7 Authority key identifier: 4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3 Certificate issuer: /CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9 Certificate serial: 010D0C9F4328584D4E66076E12CD5941310D6EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft Manifest number: 010D0C9F4328584073A84D869EBC5D1C57BBEDB6 Signing time: Fri 27 Mar 2026 10:00:09 +0000 Manifest this update: Fri 27 Mar 2026 10:00:09 +0000 Manifest next update: Mon 30 Mar 2026 10:00:00 +0000 Files and hashes: 1: 978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl (hash: 2ne2O6aivVEVzeyGYXVTYhgTKrtkQyyXrWhzUA8MvMg=) 2: ce2757a3-5b67-326d-b200-12e94dccea02.roa (hash: /+8ZiyFm11eDwIDBWzVObX1qRYWRYNwL7ktNqn7Azdc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:66:07:6e:12:cd:59:41:31:0d:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9 Validity Not Before: Mar 27 10:00:09 2026 GMT Not After : Mar 30 10:00:00 2026 GMT Subject: CN=208e36a4-d7b0-4ef5-a745-c0354d2259bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:3a:31:89:72:f1:28:0b:39:16:b0:12:4c: bd:5b:62:16:ff:be:da:ca:4d:8d:e7:0c:8a:ba:83: 99:95:6a:64:3b:7e:1b:ce:eb:15:c0:91:ca:ad:00: 74:a5:8f:a8:1a:0b:16:fb:57:ba:ef:be:14:cc:2d: 9b:2c:3d:ef:2c:96:45:6c:b3:51:cd:60:02:c4:3f: ab:d5:72:50:f8:1e:73:d3:48:3e:1d:1d:89:8a:3e: df:a9:44:f6:3d:ba:0f:23:c3:45:12:10:07:b5:19: 18:9e:eb:b2:bc:78:8e:35:e8:06:c6:f4:a5:0e:ba: 8c:b9:83:00:81:85:70:87:42:66:3d:69:6e:4c:84: 65:1d:72:dd:5a:a6:f2:61:96:09:f2:de:91:ef:25: 9c:02:a8:85:ed:1d:76:c0:75:e1:ce:78:ae:f8:cf: d5:15:b0:64:6b:ce:40:2d:9d:f9:7f:54:5a:60:c6: b6:d5:c8:de:99:b9:41:59:ec:a2:2d:d5:78:3d:b0: 2e:63:e9:e3:5f:b0:3d:ec:32:33:b9:56:14:2c:90: 7a:a2:e7:fb:74:d3:b6:f6:13:fc:4e:27:b9:16:8e: f1:3b:75:9a:b1:67:03:cb:c4:19:c6:ea:8a:e7:89: e7:51:80:7c:b6:29:76:b6:42:f9:e7:bb:eb:cb:62: 8a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:59:57:C7:D6:CF:AB:43:E0:96:A5:47:F0:2B:C4:07:77:30:FF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl X509v3 Authority Key Identifier: keyid:4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bd:d0:ce:83:6e:c6:6f:42:42:96:47:eb:6d:f1:ef:3a:8f: 1b:b6:4e:59:d4:72:bc:28:cf:57:c7:e3:f8:d3:13:5e:f5:fb: 42:2a:93:66:97:ca:5b:39:0b:af:32:f6:88:64:0b:f9:b3:b8: 40:47:5e:09:c6:0a:38:2c:67:1c:91:4d:6a:2c:20:cf:aa:52: d5:a4:3b:14:f3:e1:65:1f:7a:c4:cc:7d:2f:36:9e:84:ea:13: 2e:ae:42:d2:ea:99:e5:cf:79:fd:d3:9a:0c:05:21:a5:94:0d: 3b:05:f8:8e:44:f5:5d:d9:90:4b:2a:01:01:f0:61:e7:63:df: 4e:4a:c1:7d:16:35:8a:49:8a:cd:31:d0:35:22:ad:de:9e:e7: de:bc:f4:c3:ba:8c:52:a7:fc:36:c6:0f:12:1f:e3:19:ab:2e: 9c:2b:0a:5b:de:61:99:f2:ec:35:bd:d5:31:82:80:e3:47:26: db:ea:52:f6:6c:36:cb:b0:63:24:ab:28:7c:2d:94:8e:01:92: ac:a1:e2:57:22:92:c3:43:11:5b:4c:f7:a4:b0:a7:82:b4:03: 4b:ec:f0:09:3e:dd:d7:ae:b8:76:82:f4:59:fc:e7:f1:2c:92: be:a0:00:cd:7b:02:5b:33:b5:97:95:a3:11:39:13:6c:1e:7b: ee:55:b7:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1OZgduEs1ZQTENbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc4ZGZkNTItZTRlMS00Y2FhLWJkYWUtMjFmMWNjZDlh NGI5MB4XDTI2MDMyNzEwMDAwOVoXDTI2MDMzMDEwMDAwMFowLzEtMCsGA1UEAxMk MjA4ZTM2YTQtZDdiMC00ZWY1LWE3NDUtYzAzNTRkMjI1OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZE6MYly8SgLORawEky9W2IW/77ayk2N5wyK uoOZlWpkO34bzusVwJHKrQB0pY+oGgsW+1e6774UzC2bLD3vLJZFbLNRzWACxD+r 1XJQ+B5z00g+HR2Jij7fqUT2PboPI8NFEhAHtRkYnuuyvHiONegGxvSlDrqMuYMA gYVwh0JmPWluTIRlHXLdWqbyYZYJ8t6R7yWcAqiF7R12wHXhzniu+M/VFbBka85A LZ35f1RaYMa21cjemblBWeyiLdV4PbAuY+njX7A97DIzuVYULJB6ouf7dNO29hP8 Tie5Fo7xO3WasWcDy8QZxuqK54nnUYB8til2tkL557vry2KKGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIJZV8fWz6tD4JalR/ArxAd3MP/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Nzhk ZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYxY2NkOWE0YjkvOTc4ZGZkNTItZTRlMS00 Y2FhLWJkYWUtMjFmMWNjZDlhNGI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTc4ZGZkNTItZTRlMS00Y2FhLWJk YWUtMjFmMWNjZDlhNGI5Lzk3OGRmZDUyLWU0ZTEtNGNhYS1iZGFlLTIxZjFjY2Q5 YTRiOS5jcmwwHwYDVR0jBBgwFoAUTSfvM00HapFdx1Z50Du3orVAVuMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NzhkZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYx Y2NkOWE0YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxvdDOg27Gb0JClkfrbfHv Oo8btk5Z1HK8KM9Xx+P40xNe9ftCKpNml8pbOQuvMvaIZAv5s7hAR14Jxgo4LGcc kU1qLCDPqlLVpDsU8+FlH3rEzH0vNp6E6hMurkLS6pnlz3n905oMBSGllA07BfiO RPVd2ZBLKgEB8GHnY99OSsF9FjWKSYrNMdA1Iq3enufevPTDuoxSp/w2xg8SH+MZ qy6cKwpb3mGZ8uw1vdUxgoDjRybb6lL2bDbLsGMkqyh8LZSOAZKsoeJXIpLDQxFb TPeksKeCtANL7PAJPt3Xrrh2gvRZ/OfxLJK+oADNewJbM7WXlaMRORNsHnvuVbcP -----END CERTIFICATE-----Generated at Sat Mar 28 10:24:12 2026 by rpki-client