$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft File: 9539fe98-d93c-4eef-8521-e7da1838ec1e.mft (raw, json) Hash identifier: uDvgxL8691AGem2nNZi3yV2jg7wDLNhBECzO0YEbgD0= Subject key identifier: C1:F2:CB:8E:74:09:96:7A:81:FF:62:90:23:72:41:3A:55:19:60:AE Authority key identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 Certificate issuer: /CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Certificate serial: 010D0C9F4328584D4BF4AD82B1B62FE57A559900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft Manifest number: 010D0C9F4328584BBCBED6EC344BF691BCD3F211 Signing time: Thu 26 Mar 2026 13:00:09 +0000 Manifest this update: Thu 26 Mar 2026 13:00:09 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 909c57ca-1673-3501-8057-61ea309b4109.roa (hash: VsfMIz2WhrgthoL5phwTMTNhXIji5XDxOruDOBZi/8U=) 2: 9539fe98-d93c-4eef-8521-e7da1838ec1e.crl (hash: h70fjCnFI4jRUbvj6fbgv/z/XJ/MIrtJViAGkRgkPdw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:ad:82:b1:b6:2f:e5:7a:55:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Validity Not Before: Mar 26 13:00:09 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=c1ab2d29-fd0b-4271-9cb7-634644cd04d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:25:31:da:9c:9b:f1:83:c6:19:30:81:62: 9e:09:e2:c9:2d:9e:30:f5:5d:64:ac:ca:da:3b:7e: e2:3b:46:a5:b7:3a:4e:cf:fe:7f:3e:08:c9:08:2f: dc:22:a9:e8:59:36:9c:cc:7f:6d:f2:07:3a:b6:ed: b2:60:f6:52:3b:93:b3:1c:dc:55:06:e6:cc:70:50: 0e:d5:18:ae:08:59:69:75:fb:80:7a:ee:49:f8:bf: 1f:2b:a2:9f:80:39:90:91:ef:8f:75:0f:09:06:d2: 10:10:47:2e:15:d3:aa:40:d9:f6:21:ae:f8:d5:f6: 22:e4:38:e1:59:ae:38:bd:3b:cf:3a:5a:08:17:07: fb:2a:98:fe:2c:7d:37:15:1b:ba:e6:ce:4d:ba:0a: cd:cc:b8:6e:00:e8:b3:73:6e:ea:0a:d3:8d:32:60: a7:bc:77:25:81:f2:0c:c4:57:05:09:74:33:51:2c: 15:54:a4:2e:ba:18:2f:e9:02:39:06:01:51:41:55: 00:86:19:3d:8a:ff:df:50:c7:3d:1e:18:90:6c:4a: f8:2b:f9:f3:a8:0d:82:89:1a:a4:b8:e8:42:d4:7e: 13:c0:a6:ab:b6:ab:ab:17:ad:b1:34:ba:bf:21:d2: cd:e5:ce:18:9a:7c:5a:20:ad:c9:9f:b6:c2:70:f9: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:CB:8E:74:09:96:7A:81:FF:62:90:23:72:41:3A:55:19:60:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl X509v3 Authority Key Identifier: keyid:30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0e:4f:7e:72:dc:91:1e:36:b2:fb:f1:7a:70:74:92:2b:43: 05:18:26:24:71:ee:91:95:0e:f4:33:4d:80:3b:ca:82:23:e2: a7:71:75:d8:60:a0:b4:d0:63:cd:64:82:0e:40:10:8c:e3:21: 31:45:41:63:d0:85:64:b0:d7:22:14:ed:cc:b7:22:b5:59:fa: 73:b0:c1:d1:fc:4d:83:b8:80:17:7d:c4:83:fa:77:c7:d3:c0: da:3a:78:c5:01:2c:d5:e1:b8:34:60:7a:a7:2b:84:c4:00:7e: fa:e2:f2:fd:f9:7c:fb:56:23:ec:c0:6f:f1:1a:8b:1d:ff:86: 85:50:e9:b1:b2:d2:5a:f0:dd:43:d2:c3:16:0e:0d:15:33:5c: f1:33:4d:28:10:47:77:0c:8a:b8:43:e8:ac:96:fa:cf:87:a5: 38:5d:6b:c1:20:dc:18:d6:5a:64:c2:49:6b:51:d7:0f:75:b4: 79:33:be:6b:e2:6b:f2:2f:6b:2e:8f:f4:12:83:32:24:d8:8a: ef:55:11:d7:0c:ea:4e:98:23:c1:b8:f2:6b:46:6e:1b:da:63: e9:9b:03:a4:33:77:1f:5e:ef:86:40:c8:19:ee:24:2b:fc:0b: 4c:2d:71:c7:ab:40:bf:8f:86:f9:30:69:31:b5:0f:12:bc:ac: 56:4a:7e:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L9K2CsbYv5XpVmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzOWZlOTgtZDkzYy00ZWVmLTg1MjEtZTdkYTE4Mzhl YzFlMB4XDTI2MDMyNjEzMDAwOVoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk YzFhYjJkMjktZmQwYi00MjcxLTljYjctNjM0NjQ0Y2QwNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygklMdqcm/GDxhkwgWKeCeLJLZ4w9V1krMra O37iO0altzpOz/5/PgjJCC/cIqnoWTaczH9t8gc6tu2yYPZSO5OzHNxVBubMcFAO 1RiuCFlpdfuAeu5J+L8fK6KfgDmQke+PdQ8JBtIQEEcuFdOqQNn2Ia741fYi5Djh Wa44vTvPOloIFwf7Kpj+LH03FRu65s5NugrNzLhuAOizc27qCtONMmCnvHclgfIM xFcFCXQzUSwVVKQuuhgv6QI5BgFRQVUAhhk9iv/fUMc9HhiQbEr4K/nzqA2CiRqk uOhC1H4TwKartqurF62xNLq/IdLN5c4YmnxaIK3Jn7bCcPmd+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMHyy450CZZ6gf9ikCNyQTpVGWCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5 ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2RhMTgzOGVjMWUvOTUzOWZlOTgtZDkzYy00 ZWVmLTg1MjEtZTdkYTE4MzhlYzFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTUzOWZlOTgtZDkzYy00ZWVmLTg1 MjEtZTdkYTE4MzhlYzFlLzk1MzlmZTk4LWQ5M2MtNGVlZi04NTIxLWU3ZGExODM4 ZWMxZS5jcmwwHwYDVR0jBBgwFoAUMGDzfdaadF9yt5aHI6F6XbwgAxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2Rh MTgzOGVjMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0Dk9+ctyRHjay+/F6cHSS K0MFGCYkce6RlQ70M02AO8qCI+KncXXYYKC00GPNZIIOQBCM4yExRUFj0IVksNci FO3MtyK1WfpzsMHR/E2DuIAXfcSD+nfH08DaOnjFASzV4bg0YHqnK4TEAH764vL9 +Xz7ViPswG/xGosd/4aFUOmxstJa8N1D0sMWDg0VM1zxM00oEEd3DIq4Q+islvrP h6U4XWvBINwY1lpkwklrUdcPdbR5M75r4mvyL2suj/QSgzIk2IrvVRHXDOpOmCPB uPJrRm4b2mPpmwOkM3cfXu+GQMgZ7iQr/AtMLXHHq0C/j4b5MGkxtQ8SvKxWSn5d -----END CERTIFICATE-----Generated at Thu Mar 26 17:16:11 2026 by rpki-client