$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft File: 9cf68654-01a9-4653-b981-d0349f39e0a5.mft (raw, json) Hash identifier: 8LS6VAv94t/jMXqNEIX7l/eGXFWfvFArkIaq4JVlUq8= Subject key identifier: 13:F0:BF:63:C8:89:95:86:05:2B:87:25:4B:10:B6:EA:57:E3:69:66 Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 Certificate issuer: /CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Certificate serial: 010D0C9F4328584D4CE2DAC886DE0D7DD0B9BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft Manifest number: 010D0C9F432858478AE49FA842FFFA42915D48E3 Signing time: Thu 26 Mar 2026 21:00:04 +0000 Manifest this update: Thu 26 Mar 2026 21:00:04 +0000 Manifest next update: Sun 29 Mar 2026 21:00:00 +0000 Files and hashes: 1: 9cf68654-01a9-4653-b981-d0349f39e0a5.crl (hash: rUOfiPm0W9aElzO9kzHHNGWOFWNfmykAu6cc3nMZo50=) 2: a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa (hash: t3QM1QGpwqUmN1Ehgz1VFRGm5EZelS/LXCeqiQSFMS0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:e2:da:c8:86:de:0d:7d:d0:b9:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Validity Not Before: Mar 26 21:00:04 2026 GMT Not After : Mar 29 21:00:00 2026 GMT Subject: CN=4272a185-bc37-4998-9c74-13279329df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:d0:76:44:f9:93:45:90:b7:75:d2:5a:74: c2:f2:29:a7:15:8c:65:18:08:3a:a9:4b:4d:58:21: 83:8c:08:e4:da:a2:7d:86:d9:4e:87:d8:91:b6:62: 5a:ed:b3:94:76:7c:40:66:42:21:49:20:b3:92:6e: 13:2a:1b:13:dc:48:a6:1e:50:35:fd:7a:f1:ac:97: f5:bc:31:bd:69:be:cb:19:66:8f:fb:88:73:8c:e9: 6e:b2:37:dc:8d:e8:b4:34:ca:92:5b:c9:27:01:2a: aa:cc:04:65:c5:a0:8a:fc:b0:26:e5:98:57:0e:da: 8c:d0:46:a9:50:b6:26:19:4b:f8:93:ea:99:52:85: c5:fe:c0:fc:ca:d6:b7:05:5c:71:01:9a:7d:02:98: 51:86:e0:55:35:9e:93:b3:3a:c8:72:e9:7d:22:80: 11:52:f5:4b:15:51:b9:67:7b:44:18:6b:51:2f:f4: 70:2a:72:44:6d:de:39:66:bf:84:b9:a5:fc:68:34: ba:07:55:03:ab:73:d8:85:60:24:7a:16:59:94:d8: b6:0e:9f:72:64:0b:7b:56:d1:23:57:8d:c3:38:ce: a1:b4:59:89:3f:63:c1:3b:46:87:5f:48:f5:1c:51: 58:38:80:d8:ad:94:0a:07:4b:f9:50:79:cd:ce:57: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F0:BF:63:C8:89:95:86:05:2B:87:25:4B:10:B6:EA:57:E3:69:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl X509v3 Authority Key Identifier: keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:30:da:32:e9:98:8a:4d:d3:1e:b6:5f:8d:c6:7f:11:13:fc: ba:91:b1:4c:d4:bf:ba:2c:22:5a:ce:c8:6a:44:a4:42:11:44: 5e:a4:57:85:1c:3f:72:56:0e:a5:c0:d5:ef:f0:ce:bf:1e:38: a2:aa:c0:3b:5c:d0:da:e4:c0:d1:2e:c7:f3:4b:06:65:97:4e: c8:55:86:54:7b:68:4a:03:1b:23:5a:51:54:53:87:54:35:64: 4d:78:80:0d:31:f3:d3:f0:20:ce:1d:79:db:73:66:75:f2:60: d8:ef:2e:87:f5:07:c1:67:0e:e8:ac:ea:03:d1:1d:26:fe:fe: 6a:c0:d1:81:99:2c:ed:8f:6a:e0:6c:7b:68:8d:55:4f:db:1f: 32:52:bc:29:20:71:ed:68:44:9b:60:5c:e8:69:b9:85:cb:0d: a4:19:47:7b:e9:aa:37:0c:5f:84:d0:d6:c9:22:82:d2:16:8a: 00:27:b3:9d:5b:b5:88:b6:65:12:20:63:6b:13:31:b1:dc:2e: 76:d3:a4:d6:7c:ef:ad:9c:72:a7:a6:34:af:3f:df:8d:90:38: b8:29:44:7a:0f:e4:b5:42:92:78:6d:d8:fb:ec:ee:11:18:70: 69:52:85:8b:63:f4:e6:5f:14:8d:4a:f3:54:f1:1c:31:11:0c: ae:b8:58:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1M4trIht4NfdC5vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmNjg2NTQtMDFhOS00NjUzLWI5ODEtZDAzNDlmMzll MGE1MB4XDTI2MDMyNjIxMDAwNFoXDTI2MDMyOTIxMDAwMFowLzEtMCsGA1UEAxMk NDI3MmExODUtYmMzNy00OTk4LTljNzQtMTMyNzkzMjlkZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTLQdkT5k0WQt3XSWnTC8imnFYxlGAg6qUtN WCGDjAjk2qJ9htlOh9iRtmJa7bOUdnxAZkIhSSCzkm4TKhsT3EimHlA1/XrxrJf1 vDG9ab7LGWaP+4hzjOlusjfcjei0NMqSW8knASqqzARlxaCK/LAm5ZhXDtqM0Eap ULYmGUv4k+qZUoXF/sD8yta3BVxxAZp9AphRhuBVNZ6TszrIcul9IoARUvVLFVG5 Z3tEGGtRL/RwKnJEbd45Zr+EuaX8aDS6B1UDq3PYhWAkehZZlNi2Dp9yZAt7VtEj V43DOM6htFmJP2PBO0aHX0j1HFFYOIDYrZQKB0v5UHnNzlezQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBPwv2PIiZWGBSuHJUsQtupX42lmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2 ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0OWYzOWUwYTUvOWNmNjg2NTQtMDFhOS00 NjUzLWI5ODEtZDAzNDlmMzllMGE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWNmNjg2NTQtMDFhOS00NjUzLWI5 ODEtZDAzNDlmMzllMGE1LzljZjY4NjU0LTAxYTktNDY1My1iOTgxLWQwMzQ5ZjM5 ZTBhNS5jcmwwHwYDVR0jBBgwFoAUGCHq5dZWjPO7dqRLEibguOefkNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0 OWYzOWUwYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuMNoy6ZiKTdMetl+Nxn8R E/y6kbFM1L+6LCJazshqRKRCEURepFeFHD9yVg6lwNXv8M6/HjiiqsA7XNDa5MDR LsfzSwZll07IVYZUe2hKAxsjWlFUU4dUNWRNeIANMfPT8CDOHXnbc2Z18mDY7y6H 9QfBZw7orOoD0R0m/v5qwNGBmSztj2rgbHtojVVP2x8yUrwpIHHtaESbYFzoabmF yw2kGUd76ao3DF+E0NbJIoLSFooAJ7OdW7WItmUSIGNrEzGx3C5206TWfO+tnHKn pjSvP9+NkDi4KUR6D+S1QpJ4bdj77O4RGHBpUoWLY/TmXxSNSvNU8RwxEQyuuFhF -----END CERTIFICATE-----Generated at Thu Mar 26 23:53:06 2026 by rpki-client