$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft File: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft (raw, json) Hash identifier: omlnoyUYF7zL40D0l1X6UadmfLYpWmRi2bJyOuKtw1E= Subject key identifier: 46:03:F5:88:6B:BA:0D:36:9D:92:B8:DB:D1:B2:2A:9C:4E:E7:28:85 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584D4F54372EB4E207AF58D93280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft Manifest number: 010D0C9F4328584C112324F43AA2908752839A7B Signing time: Fri 27 Mar 2026 18:00:04 +0000 Manifest this update: Fri 27 Mar 2026 18:00:04 +0000 Manifest next update: Mon 30 Mar 2026 18:00:00 +0000 Files and hashes: 1: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (hash: zUw/Q3CdsEylsWHPWZq40XKZziJVt7paQ75tmgAp5ZU=) 2: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (hash: HYy+QA5l7+e9PAeCbSANCL1xqsM3T0PvtKt2oRLJxRE=) 3: 913f7d07-9252-322f-9150-9c9077e0c6e4.roa (hash: Spe0hU/ic+ViIju3YSFY3m5XhMdDo4c7U5CO67mtuW0=) 4: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl (hash: 8mlJOeVSkURTT9NwZWvjJkq8Rb6zFtGmr/jS77luzCY=) 5: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (hash: 2czMwTEaSo+wF+1QQNLZdQj7ZXWqNbaCCRSqzfCKQy4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:54:37:2e:b4:e2:07:af:58:d9:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Mar 27 18:00:04 2026 GMT Not After : Mar 30 18:00:00 2026 GMT Subject: CN=55cb2e7c-4360-4a9b-a77c-f5200e555028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:be:18:db:ae:04:84:44:1b:9f:72:76:b7: e8:1b:84:da:1d:c3:1d:ee:e3:e6:ff:3e:03:22:ba: cf:03:17:b7:fc:bf:b1:56:ad:f9:00:c9:a2:cf:3b: 45:58:f6:1f:81:c2:8a:19:a8:30:49:1c:b1:d1:ff: c2:28:49:ea:b9:bf:03:9a:8c:6a:eb:54:53:46:09: fe:44:9c:a0:7c:38:c4:a4:4a:f8:78:60:57:fb:d8: 9a:0f:87:08:ff:0f:1e:84:0f:b0:20:56:46:9c:75: 70:e9:a0:5b:58:e4:1d:6b:74:3d:88:e7:af:58:21: a2:69:a5:6f:3c:79:6a:3b:5d:fd:b8:05:fb:4d:20: c2:0f:f6:f7:c5:68:c3:c7:46:8b:07:f7:38:2c:38: 2f:f8:82:66:4f:1b:c0:c3:dc:98:da:48:22:1e:0a: 87:15:c0:cd:39:c8:a6:a5:38:09:f9:02:b4:50:b3: ec:ef:14:5d:17:a5:1c:49:c8:ee:e6:e5:59:5d:cc: 97:0b:69:43:b4:65:82:01:a6:11:60:43:6f:a2:4a: 3c:11:68:35:49:64:19:a2:9e:28:18:d0:93:1b:42: 60:5b:03:1a:cb:66:6f:ad:5b:9b:90:42:f2:3b:7f: 08:8a:9a:07:24:36:37:74:c1:d1:50:f2:b1:21:54: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:03:F5:88:6B:BA:0D:36:9D:92:B8:DB:D1:B2:2A:9C:4E:E7:28:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:6e:26:06:9b:ad:da:a7:b6:a2:2e:4b:7f:36:de:8c:3c: 9f:bb:10:ae:8e:e3:1e:da:ae:1e:d6:97:02:55:14:8f:75:e9: 81:68:03:c5:26:ea:01:1b:61:03:32:92:19:73:92:40:05:b3: 8d:41:b7:94:fc:2d:4c:2d:8d:a1:6e:e4:a7:8f:fb:02:52:3d: 7c:f9:3b:29:a1:40:cd:13:a1:cd:1f:d4:3b:f7:70:0a:bd:4f: 41:9a:77:6d:eb:85:b7:3d:da:66:77:1d:c2:96:05:41:66:97: 58:d8:fd:94:2e:28:71:d3:e3:09:76:5a:d5:d1:44:b4:0b:96: ed:71:3b:b4:00:97:f6:8d:0e:ca:8e:1f:a7:17:c4:c6:6b:48: e8:2d:b8:dd:ac:61:f8:e9:26:7d:20:8b:98:17:a4:e3:8e:be: ed:78:be:47:73:25:21:48:bb:18:5d:27:83:e7:50:2e:d5:46: d7:5c:3b:87:dc:0a:9a:6f:85:9c:98:50:a7:dd:a3:39:da:a9: bf:0f:64:a7:c8:c7:4e:b7:b9:e6:9a:40:7d:4a:4d:66:7f:03: a2:e1:6b:53:68:7a:81:4f:2f:52:b9:8a:03:4a:c6:2c:53:21: 9e:70:92:28:e8:cf:44:07:f3:46:9d:fe:00:4c:6a:2f:79:1f: 0c:1c:59:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PVDcutOIHr1jZMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDMyNzE4MDAwNFoXDTI2MDMzMDE4MDAwMFowLzEtMCsGA1UEAxMk NTVjYjJlN2MtNDM2MC00YTliLWE3N2MtZjUyMDBlNTU1MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/O+GNuuBIREG59ydrfoG4TaHcMd7uPm/z4D IrrPAxe3/L+xVq35AMmizztFWPYfgcKKGagwSRyx0f/CKEnqub8Dmoxq61RTRgn+ RJygfDjEpEr4eGBX+9iaD4cI/w8ehA+wIFZGnHVw6aBbWOQda3Q9iOevWCGiaaVv PHlqO139uAX7TSDCD/b3xWjDx0aLB/c4LDgv+IJmTxvAw9yY2kgiHgqHFcDNOcim pTgJ+QK0ULPs7xRdF6UcScju5uVZXcyXC2lDtGWCAaYRYENvoko8EWg1SWQZop4o GNCTG0JgWwMay2ZvrVubkELyO38IipoHJDY3dMHRUPKxIVSu1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEYD9Yhrug02nZK429GyKpxO5yiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvOTU0YzAxYmEtZDlhZC00 NGU4LWI0OGMtMWE0OGYyMGQ4YjdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAomW4mBput2qe2oi5Lfzbe jDyfuxCujuMe2q4e1pcCVRSPdemBaAPFJuoBG2EDMpIZc5JABbONQbeU/C1MLY2h buSnj/sCUj18+TspoUDNE6HNH9Q793AKvU9Bmndt64W3Pdpmdx3ClgVBZpdY2P2U Lihx0+MJdlrV0US0C5btcTu0AJf2jQ7Kjh+nF8TGa0joLbjdrGH46SZ9IIuYF6Tj jr7teL5HcyUhSLsYXSeD51Au1UbXXDuH3Aqab4WcmFCn3aM52qm/D2SnyMdOt7nm mkB9Sk1mfwOi4WtTaHqBTy9SuYoDSsYsUyGecJIo6M9EB/NGnf4ATGoveR8MHFm8 -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:43 2026 by rpki-client