$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: sp32LPhzmE+yqLrhlyvNFwuglhg7lfL/BOf8yVSBbjU= Subject key identifier: F0:A5:DC:E7:02:9F:A1:E9:D7:A9:3D:FE:97:EF:7C:4F:0E:9D:87:58 Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584D4F18A4A01C68868196852D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E2A9 Signing time: Fri 27 Mar 2026 16:00:03 +0000 Manifest this update: Fri 27 Mar 2026 16:00:03 +0000 Manifest next update: Mon 30 Mar 2026 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: rckpogdcHgAiDpEh6LeV2GqjWhfb9QxQihrsGrH4ayI=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: SbgR7L43EJmzNrUFRTuj4rOcMTezkNzi5gark5ufHLU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:18:a4:a0:1c:68:86:81:96:85:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Mar 27 16:00:03 2026 GMT Not After : Mar 30 16:00:00 2026 GMT Subject: CN=74b714de-9a8b-4cb4-9681-066b4c57a748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:92:dc:ce:4f:5b:30:d9:1a:52:71:a0:4b: bf:95:31:2f:f3:0a:b0:8a:ba:0d:e3:82:52:ba:3e: 3e:52:85:10:53:af:79:b5:77:97:79:bd:44:98:a7: 16:81:3b:07:9a:fc:44:d6:ca:4a:37:99:56:0b:88: d3:1b:86:84:77:f9:48:cb:35:53:3b:86:96:3e:a7: 7a:82:58:61:09:00:49:0a:5d:2b:a0:47:17:8d:d9: 76:87:54:99:22:8c:0c:75:07:17:6d:29:25:70:2c: 20:56:a1:30:23:4d:16:08:0f:ff:52:50:63:15:0d: 38:5e:78:39:e5:2a:ee:12:69:04:05:45:5a:fa:cf: d0:6f:d1:14:b0:5d:84:46:14:4f:4e:70:42:ad:c2: 15:56:48:66:04:4b:2e:94:65:d9:78:04:9b:a5:f4: a8:9d:fb:e7:d2:4c:3f:d2:e1:6a:21:ba:1a:48:d1: 7a:95:33:42:a9:9a:09:a8:eb:ec:0e:87:6d:03:85: ca:cd:73:88:00:ef:05:32:9b:4b:17:c5:85:24:c2: 0f:bf:58:00:84:50:3c:24:32:e1:c9:77:75:89:e3: d3:b1:4f:74:b4:5c:c3:52:4b:fc:1b:23:77:d5:76: b6:3f:96:0e:27:de:e1:74:b8:86:78:c8:9a:c8:d8: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A5:DC:E7:02:9F:A1:E9:D7:A9:3D:FE:97:EF:7C:4F:0E:9D:87:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:16:af:05:6c:54:25:5b:8d:19:0d:30:2a:9a:60:6a:7c:aa: e4:77:49:2b:a4:9e:f1:e7:8d:6d:69:2a:b5:0b:01:ee:bb:6d: 70:36:79:30:14:f2:02:1e:9b:a8:da:c1:1e:f4:4c:e3:bd:ea: 36:fd:19:ec:77:e4:0e:9b:7d:e2:4f:b3:07:68:88:45:dc:52: f2:80:43:b0:3e:97:9e:16:6c:0a:2a:5c:db:81:80:e9:f1:8f: c4:53:17:aa:35:8a:8e:c7:9b:e9:b0:ff:ac:55:25:b5:58:24: 85:02:f7:98:95:c5:0e:7d:e8:59:db:99:fa:ae:2b:57:37:06: dc:e7:d3:1e:29:09:9d:f8:64:fa:78:ec:cb:80:df:2c:9f:41: 93:a8:f3:c9:37:70:c4:ee:86:ef:15:86:a7:dd:77:9a:e3:57: 16:af:14:f0:59:b6:6f:4f:8e:59:78:29:7f:82:6e:45:ec:89: 09:a7:a7:a8:0f:80:5b:71:fb:29:94:fe:75:e6:c1:63:7a:51: 58:76:ff:0d:a4:9f:9d:84:5e:63:2c:04:44:a1:cc:fd:17:c4: 9c:7b:e9:48:09:cf:8f:1c:76:8a:bc:ce:38:5d:5a:46:48:d2: f5:99:d4:19:af:b9:5f:31:b7:45:93:05:9b:2e:ff:c0:f6:51: 89:9f:e8:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PGKSgHGiGgZaFLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI2MDMyNzE2MDAwM1oXDTI2MDMzMDE2MDAwMFowLzEtMCsGA1UEAxMk NzRiNzE0ZGUtOWE4Yi00Y2I0LTk2ODEtMDY2YjRjNTdhNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfiS3M5PWzDZGlJxoEu/lTEv8wqwiroN44JS uj4+UoUQU695tXeXeb1EmKcWgTsHmvxE1spKN5lWC4jTG4aEd/lIyzVTO4aWPqd6 glhhCQBJCl0roEcXjdl2h1SZIowMdQcXbSklcCwgVqEwI00WCA//UlBjFQ04Xng5 5SruEmkEBUVa+s/Qb9EUsF2ERhRPTnBCrcIVVkhmBEsulGXZeASbpfSonfvn0kw/ 0uFqIboaSNF6lTNCqZoJqOvsDodtA4XKzXOIAO8FMptLF8WFJMIPv1gAhFA8JDLh yXd1iePTsU90tFzDUkv8GyN31Xa2P5YOJ97hdLiGeMiayNhpxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPCl3OcCn6Hp16k9/pfvfE8OnYdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8Fq8FbFQlW40ZDTAqmmBq fKrkd0krpJ7x541taSq1CwHuu21wNnkwFPICHpuo2sEe9Ezjveo2/Rnsd+QOm33i T7MHaIhF3FLygEOwPpeeFmwKKlzbgYDp8Y/EUxeqNYqOx5vpsP+sVSW1WCSFAveY lcUOfehZ25n6ritXNwbc59MeKQmd+GT6eOzLgN8sn0GTqPPJN3DE7obvFYan3Xea 41cWrxTwWbZvT45ZeCl/gm5F7IkJp6eoD4BbcfsplP515sFjelFYdv8NpJ+dhF5j LAREocz9F8Sce+lICc+PHHaKvM44XVpGSNL1mdQZr7lfMbdFkwWbLv/A9lGJn+jd -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:22 2026 by rpki-client