$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft File: 9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft (raw, json) Hash identifier: zpgNZS5bi9FF0cUAniZewtKWORCmIWTxiyvwT/oF8sI= Subject key identifier: 57:9D:4B:40:4B:BA:FA:57:D1:1A:B7:81:4E:6E:CA:04:DF:A3:53:A1 Authority key identifier: 68:46:EA:C5:70:46:48:76:16:27:CB:64:E0:05:C1:61:2D:1B:1E:2A Certificate issuer: /CN=9893f4f1-990f-4cc4-b5e1-b29cfb61eab9 Certificate serial: 010D0C9F4328584D490C292A77BD46615B521E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft Manifest number: 010D0C9F4328584073A8514C133EAFC7FA36D998 Signing time: Wed 25 Mar 2026 12:00:04 +0000 Manifest this update: Wed 25 Mar 2026 12:00:04 +0000 Manifest next update: Sat 28 Mar 2026 12:00:00 +0000 Files and hashes: 1: 9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.crl (hash: CUMLFUiE4JOtKWLKnvZF6F67o/CAr/ynR2ya0hW26b4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0c:29:2a:77:bd:46:61:5b:52:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9893f4f1-990f-4cc4-b5e1-b29cfb61eab9 Validity Not Before: Mar 25 12:00:04 2026 GMT Not After : Mar 28 12:00:00 2026 GMT Subject: CN=0bc1d013-32a6-4dc8-a9a7-22c836ed41d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:70:d2:92:c4:7a:5a:23:9b:8a:3b:65:3d:f4: bc:e0:e0:70:2c:11:5a:10:1d:d7:fb:68:8c:36:ed: 42:af:fe:ed:45:26:23:a4:22:78:49:76:f0:ef:40: 15:3a:c2:6d:00:0d:6c:cb:29:4f:10:3e:98:29:98: 6e:94:7d:4d:cc:89:6c:d8:15:39:1e:1e:74:08:23: 14:7f:7b:3a:16:57:90:d5:07:16:97:dd:a9:66:3d: 52:88:c3:8d:48:a9:32:11:71:6c:f6:6c:1c:46:08: 81:a2:63:6b:2c:53:d5:b8:bb:98:38:22:5c:21:77: 2a:71:0d:bf:42:ba:77:2d:84:f9:f4:22:d1:56:69: 2d:41:fa:c6:02:ba:2a:7e:35:db:f8:d8:a4:1f:d4: 4f:b4:93:77:7c:4c:47:9f:46:63:52:f1:34:f6:7a: 0a:1f:56:78:e9:b7:e8:57:59:86:a0:ab:bd:14:10: 79:10:33:33:21:82:b9:cb:31:c6:a0:08:5e:98:ed: 95:86:47:21:e3:78:36:6e:11:0f:01:b8:e8:9e:23: 2d:fb:ef:3a:e5:0e:eb:a3:ed:8d:09:f6:0e:30:24: 1a:a9:b0:8e:e9:2b:80:bc:30:9e:66:ac:af:31:29: e1:8b:ba:fb:15:19:71:80:2c:a0:8d:f7:aa:ce:d5: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9D:4B:40:4B:BA:FA:57:D1:1A:B7:81:4E:6E:CA:04:DF:A3:53:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.crl X509v3 Authority Key Identifier: keyid:68:46:EA:C5:70:46:48:76:16:27:CB:64:E0:05:C1:61:2D:1B:1E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9893f4f1-990f-4cc4-b5e1-b29cfb61eab9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2d:8f:58:01:14:d9:24:95:b5:c5:79:83:97:7d:9e:be:d3: fe:07:80:7b:18:61:a2:58:7d:4c:e0:61:6e:ff:b2:b9:c5:98: db:63:0d:5a:8f:c9:0d:59:19:f9:38:e1:94:7b:6f:09:67:3e: 82:73:cc:e7:7a:dc:31:ca:34:c9:9a:23:5d:0c:7c:81:ab:68: 24:67:d2:6f:8c:ca:56:51:b2:9a:49:c5:93:33:8e:fb:f4:89: ee:c4:66:84:4f:92:21:8a:0e:b1:0a:a3:d0:ff:4b:69:6c:21: d4:ab:e1:2c:06:f3:58:13:8b:42:1a:fe:8f:b1:40:a4:31:28: 28:03:d3:ae:a3:dd:bb:7e:ca:0b:44:7d:43:88:16:a2:c9:92: f9:88:3c:0e:ed:62:42:d0:ec:56:62:18:d3:d9:62:59:dd:75: 43:22:0f:0e:55:27:4b:a4:59:0e:0a:34:4e:17:65:57:47:7b: f3:4b:50:f4:dd:af:a8:2e:cd:38:74:be:1d:a4:1c:97:5b:e8: 08:62:b4:1d:49:f0:97:a1:61:05:cd:e7:de:39:fb:3f:ea:27: ec:cc:85:23:71:da:05:c0:2d:36:08:a6:2a:13:8b:cf:5b:c5: 39:20:43:5c:27:6f:9f:c2:ce:91:fe:3a:1d:ea:ec:4d:aa:36: d2:ec:f4:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JDCkqd71GYVtSHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5M2Y0ZjEtOTkwZi00Y2M0LWI1ZTEtYjI5Y2ZiNjFl YWI5MB4XDTI2MDMyNTEyMDAwNFoXDTI2MDMyODEyMDAwMFowLzEtMCsGA1UEAxMk MGJjMWQwMTMtMzJhNi00ZGM4LWE5YTctMjJjODM2ZWQ0MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3DSksR6WiObijtlPfS84OBwLBFaEB3X+2iM Nu1Cr/7tRSYjpCJ4SXbw70AVOsJtAA1syylPED6YKZhulH1NzIls2BU5Hh50CCMU f3s6FleQ1QcWl92pZj1SiMONSKkyEXFs9mwcRgiBomNrLFPVuLuYOCJcIXcqcQ2/ Qrp3LYT59CLRVmktQfrGAroqfjXb+NikH9RPtJN3fExHn0ZjUvE09noKH1Z46bfo V1mGoKu9FBB5EDMzIYK5yzHGoAhemO2Vhkch43g2bhEPAbjoniMt++865Q7ro+2N CfYOMCQaqbCO6SuAvDCeZqyvMSnhi7r7FRlxgCygjfeqztWeHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFedS0BLuvpX0Rq3gU5uygTfo1OhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ODkz ZjRmMS05OTBmLTRjYzQtYjVlMS1iMjljZmI2MWVhYjkvOTg5M2Y0ZjEtOTkwZi00 Y2M0LWI1ZTEtYjI5Y2ZiNjFlYWI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTg5M2Y0ZjEtOTkwZi00Y2M0LWI1 ZTEtYjI5Y2ZiNjFlYWI5Lzk4OTNmNGYxLTk5MGYtNGNjNC1iNWUxLWIyOWNmYjYx ZWFiOS5jcmwwHwYDVR0jBBgwFoAUaEbqxXBGSHYWJ8tk4AXBYS0bHiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ODkzZjRmMS05OTBmLTRjYzQtYjVlMS1iMjlj ZmI2MWVhYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKLY9YARTZJJW1xXmDl32e vtP+B4B7GGGiWH1M4GFu/7K5xZjbYw1aj8kNWRn5OOGUe28JZz6Cc8znetwxyjTJ miNdDHyBq2gkZ9JvjMpWUbKaScWTM4779InuxGaET5Ihig6xCqPQ/0tpbCHUq+Es BvNYE4tCGv6PsUCkMSgoA9Ouo927fsoLRH1DiBaiyZL5iDwO7WJC0OxWYhjT2WJZ 3XVDIg8OVSdLpFkOCjROF2VXR3vzS1D03a+oLs04dL4dpByXW+gIYrQdSfCXoWEF zefeOfs/6ifszIUjcdoFwC02CKYqE4vPW8U5IENcJ2+fws6R/jod6uxNqjbS7PST -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:57 2026 by rpki-client