$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: vvr94rxi6NktmgXQEqwZLT0djMwbCjr7bZSJFPwl0sQ= Subject key identifier: 88:8A:F2:A3:AC:E9:7E:5B:2E:B0:85:7E:44:4D:1C:CA:44:29:CB:29 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584D48EE6396310DC87CA9D42880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D7103B4 Signing time: Wed 25 Mar 2026 11:00:04 +0000 Manifest this update: Wed 25 Mar 2026 11:00:04 +0000 Manifest next update: Sat 28 Mar 2026 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: yaZrPMyD7PTRK8ADfSJYL1s6CGUqzsBh9un/hMXUFzA=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: zq4LdalzxFwTwxl944OaLMr+kcRLN64Rrev+RqplqTM=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: rVpUzxZ6YJpk7hDiSLU5DKROSuKqlEjKWxgSWlx6Zsc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:ee:63:96:31:0d:c8:7c:a9:d4:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Mar 25 11:00:04 2026 GMT Not After : Mar 28 11:00:00 2026 GMT Subject: CN=b50c1587-9d3e-431c-990f-d51c31da1ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:39:e6:98:c6:0f:34:fb:89:09:f6:a6:19: 06:5d:0c:3a:e7:86:d3:61:61:81:4e:1d:d1:67:34: f3:62:5f:95:8e:64:6b:dc:db:ed:76:19:36:3e:79: 27:c5:50:c5:4f:9f:98:3c:c7:4b:ed:4e:84:83:d0: bc:64:84:6c:0d:fc:0e:5c:ec:f7:f2:74:9e:5e:ad: b9:8e:d2:4f:67:c2:80:27:6e:6f:cc:0f:ad:ca:8a: 48:c8:b1:6a:e2:fb:f3:56:04:5e:c0:16:f5:1d:fe: 72:fe:94:ef:d3:6a:31:0e:e1:4a:1b:a5:9d:1b:18: 95:88:49:9a:a6:71:e2:51:09:e9:34:7d:9e:57:ed: 75:39:78:9e:0d:db:c1:47:6c:b7:3e:5d:5e:e2:db: 31:c6:33:20:b7:e1:07:2f:cc:31:dc:ba:ef:72:a2: 91:40:ef:30:53:6f:9e:9d:59:2a:03:bc:4e:71:fe: f1:d4:c0:64:65:ec:90:c8:e4:0e:49:92:4d:49:32: f7:30:7f:44:72:c0:32:9e:7c:4e:89:58:55:9e:e4: db:59:b7:79:87:39:4a:00:3b:a9:77:9a:2d:b4:bc: 6c:9d:92:d3:66:cd:ff:d1:30:fd:c4:70:9c:c2:6b: ea:9a:00:3d:47:9b:f8:b5:c9:0c:42:88:5f:97:6d: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:F2:A3:AC:E9:7E:5B:2E:B0:85:7E:44:4D:1C:CA:44:29:CB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f2:7c:34:d9:bc:a1:aa:88:2a:bd:d6:4a:85:0f:a8:e9:55: 3e:fc:c1:15:74:87:6a:25:de:3e:dd:d5:b2:5f:05:57:1f:30: 3e:ec:71:c9:e6:df:5b:f7:ea:45:49:21:af:7f:41:b9:8e:c9: e0:ba:4f:39:68:b8:ee:e3:d3:79:59:40:d8:fb:34:01:f4:16: 32:5b:92:06:e7:ad:4f:c3:6c:39:8f:b9:6d:3c:15:ae:be:4d: d7:3d:13:80:18:4e:6e:e4:3f:76:77:dd:92:bb:38:93:5e:64: 40:03:c4:4f:ed:10:52:43:66:9f:18:ca:17:dd:32:a8:15:01: 29:8a:34:d3:10:fc:cc:fa:68:1b:a8:0a:5e:9b:af:3d:5f:6a: 52:91:f2:1e:44:44:b8:d1:91:35:0f:d8:90:3d:cb:57:eb:65: 36:fd:0e:20:6e:57:f7:a3:3d:89:18:46:dc:f3:93:14:96:fc: 43:2a:7e:a0:a9:0f:4b:fe:61:46:b5:77:04:47:a6:5f:03:3d: 2e:dc:6c:af:f9:75:4e:c9:77:17:a7:f8:55:8a:68:59:f0:97: 6c:a8:ed:f2:f5:c0:d5:55:6b:7d:1c:fa:6d:78:11:ef:67:c2: ad:94:9b:52:5c:20:5a:72:5e:ca:c9:87:d7:df:2b:58:20:8f: 5c:1e:6b:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I7mOWMQ3IfKnUKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI2MDMyNTExMDAwNFoXDTI2MDMyODExMDAwMFowLzEtMCsGA1UEAxMk YjUwYzE1ODctOWQzZS00MzFjLTk5MGYtZDUxYzMxZGExY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH455pjGDzT7iQn2phkGXQw654bTYWGBTh3R ZzTzYl+VjmRr3Nvtdhk2PnknxVDFT5+YPMdL7U6Eg9C8ZIRsDfwOXOz38nSeXq25 jtJPZ8KAJ25vzA+tyopIyLFq4vvzVgRewBb1Hf5y/pTv02oxDuFKG6WdGxiViEma pnHiUQnpNH2eV+11OXieDdvBR2y3Pl1e4tsxxjMgt+EHL8wx3LrvcqKRQO8wU2+e nVkqA7xOcf7x1MBkZeyQyOQOSZJNSTL3MH9EcsAynnxOiVhVnuTbWbd5hzlKADup d5ottLxsnZLTZs3/0TD9xHCcwmvqmgA9R5v4tckMQohfl22BNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIiK8qOs6X5bLrCFfkRNHMpEKcspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCw8nw02byhqogqvdZKhQ+o 6VU+/MEVdIdqJd4+3dWyXwVXHzA+7HHJ5t9b9+pFSSGvf0G5jsnguk85aLju49N5 WUDY+zQB9BYyW5IG561Pw2w5j7ltPBWuvk3XPROAGE5u5D92d92SuziTXmRAA8RP 7RBSQ2afGMoX3TKoFQEpijTTEPzM+mgbqApem689X2pSkfIeRES40ZE1D9iQPctX 62U2/Q4gblf3oz2JGEbc85MUlvxDKn6gqQ9L/mFGtXcER6ZfAz0u3Gyv+XVOyXcX p/hVimhZ8JdsqO3y9cDVVWt9HPpteBHvZ8KtlJtSXCBacl7KyYfX3ytYII9cHmu7 -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:50 2026 by rpki-client