$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft File: 9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft (raw, json) Hash identifier: lBgjLRQxYHXzWlPiuIYoALnlPOpQ5wVsFbyEeEpXtgc= Subject key identifier: 70:B0:5C:2F:79:1D:C4:0F:67:1D:45:75:71:24:FA:EB:47:DF:77:C0 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584D49A111B6CFBBAF3692C2D6A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft Manifest number: 010D0C9F4328584B882DF05DC8EEDC8DF0D3AEAD Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 084245ae-f415-3936-a1fa-a35e6bfe0598.roa (hash: FOEKRibVeqhej23oJHeViMYYTLmfwxeRQtJuOveHuu4=) 2: 9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl (hash: oVJOxxYDPD8+I6wvO4hZjAMohWbTir1b2n1QbyFDUes=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:11:b6:cf:bb:af:36:92:c2:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=1473e1f6-4933-4637-b4d6-cb76b1311ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:1e:95:f5:77:7c:cf:c4:46:fd:50:2a:f8:17: 22:3b:19:88:5c:e5:eb:98:96:53:91:52:fb:e2:c6: fb:d6:83:f3:b0:d6:2f:a6:f3:be:03:dd:e7:35:48: 80:e0:e7:84:d7:f6:73:5a:b1:da:8b:37:95:6e:c1: 2c:55:1a:22:7a:97:4b:23:44:80:1e:3f:d2:07:b0: 00:8f:28:ff:e9:31:48:3b:3c:a6:89:88:bf:e8:5e: 34:33:9b:c0:3f:4a:b7:1e:bb:2f:0b:37:a9:5f:23: 66:99:d2:65:3d:4a:1f:a2:b6:ed:5b:64:a5:e2:60: 70:a9:93:fe:ec:37:98:17:7d:89:7f:e6:58:8d:a3: 0f:a1:32:67:69:40:5d:ce:5f:07:82:75:4b:92:23: 9f:6c:11:67:e1:d2:36:26:b2:28:d7:76:44:d2:4a: 7b:79:5e:75:61:33:0e:a2:e3:bb:40:4d:e9:64:19: 6b:95:32:18:f7:e7:b8:16:4a:e6:68:66:74:99:8d: c5:a7:24:cc:a4:48:a0:29:d3:54:f4:4c:a2:8c:3c: ad:c3:70:10:be:fb:0c:db:01:21:61:23:66:3a:7b: 42:92:36:d0:2b:b0:1b:ea:af:84:d5:ae:81:34:56: 22:ea:4a:e9:3b:fb:4d:36:3c:e8:37:52:19:fb:97: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:5C:2F:79:1D:C4:0F:67:1D:45:75:71:24:FA:EB:47:DF:77:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:4b:d2:9d:7c:a4:f2:96:24:ad:05:78:57:7f:21:18:82:46: 58:42:83:64:71:39:73:b8:3a:d3:0e:87:39:a2:4a:34:7f:d6: 2d:60:87:33:b7:66:f5:3a:d0:06:ad:49:56:d3:c6:e0:92:70: b1:d5:4d:25:77:d8:3a:03:3d:d6:7a:92:d2:dd:9a:d5:0c:02: 96:63:ba:7f:00:d0:0f:d5:21:c3:24:dc:f6:64:dd:8a:c7:3b: ad:47:45:83:bc:86:01:cc:36:6b:2d:fe:60:ac:09:10:67:0e: ce:ac:9b:59:fa:24:ef:05:cc:dd:e9:8e:53:e8:c1:07:63:37: 61:2e:e6:bc:d7:13:91:a7:d3:19:53:14:2a:70:96:1c:21:27: b6:5f:9f:79:88:3b:a9:6a:ef:05:6f:10:bd:d9:5f:cd:d2:33: 09:ba:11:60:6a:c5:4a:0a:bb:b5:97:bd:02:60:17:c1:25:03: e8:ee:ca:6d:39:67:94:b8:92:d6:ef:39:06:16:bd:8c:98:f9: c5:3b:aa:78:da:ba:ce:ec:4c:03:64:bc:d7:e5:93:f4:02:41: d3:f5:17:59:03:c0:73:b4:12:9b:19:d6:6b:26:47:1a:76:ea: f0:a3:f2:25:ed:be:23:3e:66:ff:3d:02:77:cd:3a:81:99:95: e7:95:ca:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoRG2z7uvNpLC1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk MTQ3M2UxZjYtNDkzMy00NjM3LWI0ZDYtY2I3NmIxMzExZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/B6V9Xd8z8RG/VAq+BciOxmIXOXrmJZTkVL7 4sb71oPzsNYvpvO+A93nNUiA4OeE1/ZzWrHaizeVbsEsVRoiepdLI0SAHj/SB7AA jyj/6TFIOzymiYi/6F40M5vAP0q3HrsvCzepXyNmmdJlPUoforbtW2Sl4mBwqZP+ 7DeYF32Jf+ZYjaMPoTJnaUBdzl8HgnVLkiOfbBFn4dI2JrIo13ZE0kp7eV51YTMO ouO7QE3pZBlrlTIY9+e4FkrmaGZ0mY3FpyTMpEigKdNU9EyijDytw3AQvvsM2wEh YSNmOntCkjbQK7Ab6q+E1a6BNFYi6krpO/tNNjzoN1IZ+5frXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHCwXC95HcQPZx1FdXEk+utH33fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvOTgyM2QxZjYtYjFmZC00 OGJkLTg5YzQtZGE0ZTVkOTNmMjA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeS9KdfKTyliStBXhXfyEY gkZYQoNkcTlzuDrTDoc5oko0f9YtYIczt2b1OtAGrUlW08bgknCx1U0ld9g6Az3W epLS3ZrVDAKWY7p/ANAP1SHDJNz2ZN2KxzutR0WDvIYBzDZrLf5grAkQZw7OrJtZ +iTvBczd6Y5T6MEHYzdhLua81xORp9MZUxQqcJYcISe2X595iDupau8FbxC92V/N 0jMJuhFgasVKCru1l70CYBfBJQPo7sptOWeUuJLW7zkGFr2MmPnFO6p42rrO7EwD ZLzX5ZP0AkHT9RdZA8BztBKbGdZrJkcadurwo/Il7b4jPmb/PQJ3zTqBmZXnlcpK -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:23 2026 by rpki-client