$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft File: 971a94fb-9c36-412b-ae91-2ddb520de93f.mft (raw, json) Hash identifier: TG+0P7eAZSPc12jCbe/UjZJtl9bDhwF54J0NOB2+1Hg= Subject key identifier: B7:2A:49:A8:20:08:AA:3B:30:70:2C:E5:98:CB:64:4E:43:A9:7F:DA Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED Certificate issuer: /CN=971a94fb-9c36-412b-ae91-2ddb520de93f Certificate serial: 010D0C9F4328584D4929F046A67DB5E459A49A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft Manifest number: 010D0C9F43285843B073F057FFA88B763CEA0D43 Signing time: Wed 25 Mar 2026 13:00:04 +0000 Manifest this update: Wed 25 Mar 2026 13:00:04 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (hash: EFKeg7yZkMEYiztUUnSxmoYjpkt+ZncDnikjj7iBJx0=) 2: 971a94fb-9c36-412b-ae91-2ddb520de93f.crl (hash: TZqnfhhUfLT24vcO6nJqn6PgU5StWVzec6AHU0pkOVA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:29:f0:46:a6:7d:b5:e4:59:a4:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f Validity Not Before: Mar 25 13:00:04 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=956b4941-bd5e-497d-9c63-c4d0d4a3374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:57:d2:a7:f1:5f:67:95:57:5a:e6:dc:a3: 44:0f:c6:0f:b7:4d:73:49:8b:61:62:ab:b5:f0:ef: 9b:82:9b:a1:67:72:34:9a:46:2d:c4:d4:5e:95:b1: 73:19:e2:11:df:06:ff:16:3c:d0:2f:08:a3:61:ab: 53:bb:06:98:f9:5c:40:19:d1:72:62:0a:a5:7a:f0: 19:ce:64:3d:84:b8:4a:28:b4:86:47:62:db:74:9f: c1:6e:99:de:4a:5c:2c:ca:ed:12:8d:ba:6c:ae:ed: 72:05:3a:23:9e:b6:55:85:ba:8b:69:b4:bb:dd:82: 36:a8:33:60:04:85:7e:02:9a:1d:c6:ab:76:79:03: a7:06:7e:2a:8b:9c:4a:1c:81:06:1a:58:df:29:98: 91:45:eb:38:5a:c4:bf:d4:36:44:b9:3e:ee:ca:24: 6e:fc:6a:1c:6a:ac:d4:f8:20:6b:ce:b3:3f:36:33: 02:4a:f6:65:77:67:40:e8:96:49:db:2d:68:0a:5a: 31:70:ec:7e:d8:49:76:1f:16:0a:b0:a3:ab:05:65: 73:b5:6c:04:3a:e6:ff:97:98:7f:77:22:85:a9:86: b4:75:17:cf:bb:be:c9:33:f4:91:3d:85:f7:07:4b: 58:2b:ab:7a:0d:34:39:02:3f:4f:52:32:ba:9a:8d: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2A:49:A8:20:08:AA:3B:30:70:2C:E5:98:CB:64:4E:43:A9:7F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl X509v3 Authority Key Identifier: keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:43:d3:68:d0:a6:58:e8:b2:1f:a7:d4:5a:64:75:f2:64:79: 3b:c9:ea:d9:f6:69:4d:24:3c:1d:1d:45:bf:f9:42:04:f7:6c: b0:8c:0b:53:7b:8a:d1:cf:c4:d1:3c:4d:63:34:65:f7:f3:c9: 51:af:56:32:68:14:c9:0a:99:f7:06:4b:08:d1:9d:de:8b:b9: 3f:9b:36:7b:bc:c4:68:9c:b1:c5:49:27:40:17:04:df:65:e3: 17:db:17:86:66:84:53:b0:81:b8:da:6a:e6:2a:24:83:06:2f: ba:82:e7:1b:41:ba:d2:86:27:7b:7a:17:4b:08:ec:20:a3:32: 4f:17:a4:62:15:fd:dd:0d:7f:93:27:bf:60:3f:f6:89:3b:30: 37:00:e6:10:df:de:68:af:2d:d9:fe:c7:b2:e4:9d:68:59:df: e0:49:29:66:02:9d:fd:62:98:d9:7d:62:dc:51:c9:60:8e:53: 5f:4c:ff:fb:6c:74:c7:93:02:4b:70:91:0b:0e:2d:c3:10:f2: 72:ff:70:06:29:df:eb:a8:b2:a9:c0:c8:71:b3:53:2b:21:31: ba:93:51:8c:72:f9:c8:ee:00:8d:1b:55:3b:d8:a5:df:09:de: 66:10:34:81:e5:b6:63:8d:19:27:8c:24:3b:02:86:ec:f3:8c: 61:45:c8:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKfBGpn215FmkmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcxYTk0ZmItOWMzNi00MTJiLWFlOTEtMmRkYjUyMGRl OTNmMB4XDTI2MDMyNTEzMDAwNFoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk OTU2YjQ5NDEtYmQ1ZS00OTdkLTljNjMtYzRkMGQ0YTMzNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuxX0qfxX2eVV1rm3KNED8YPt01zSYthYqu1 8O+bgpuhZ3I0mkYtxNRelbFzGeIR3wb/FjzQLwijYatTuwaY+VxAGdFyYgqlevAZ zmQ9hLhKKLSGR2LbdJ/BbpneSlwsyu0Sjbpsru1yBTojnrZVhbqLabS73YI2qDNg BIV+Apodxqt2eQOnBn4qi5xKHIEGGljfKZiRRes4WsS/1DZEuT7uyiRu/GocaqzU +CBrzrM/NjMCSvZld2dA6JZJ2y1oCloxcOx+2El2HxYKsKOrBWVztWwEOub/l5h/ dyKFqYa0dRfPu77JM/SRPYX3B0tYK6t6DTQ5Aj9PUjK6mo04aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLcqSaggCKo7MHAs5ZjLZE5DqX/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFh OTRmYi05YzM2LTQxMmItYWU5MS0yZGRiNTIwZGU5M2YvOTcxYTk0ZmItOWMzNi00 MTJiLWFlOTEtMmRkYjUyMGRlOTNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTcxYTk0ZmItOWMzNi00MTJiLWFl OTEtMmRkYjUyMGRlOTNmLzk3MWE5NGZiLTljMzYtNDEyYi1hZTkxLTJkZGI1MjBk ZTkzZi5jcmwwHwYDVR0jBBgwFoAU4CfMngkGAQ+CIBDuSnNsROuGpe0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFhOTRmYi05YzM2LTQxMmItYWU5MS0yZGRi NTIwZGU5M2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtQ9No0KZY6LIfp9RaZHXy ZHk7yerZ9mlNJDwdHUW/+UIE92ywjAtTe4rRz8TRPE1jNGX388lRr1YyaBTJCpn3 BksI0Z3ei7k/mzZ7vMRonLHFSSdAFwTfZeMX2xeGZoRTsIG42mrmKiSDBi+6gucb QbrShid7ehdLCOwgozJPF6RiFf3dDX+TJ79gP/aJOzA3AOYQ395ory3Z/sey5J1o Wd/gSSlmAp39YpjZfWLcUclgjlNfTP/7bHTHkwJLcJELDi3DEPJy/3AGKd/rqLKp wMhxs1MrITG6k1GMcvnI7gCNG1U72KXfCd5mEDSB5bZjjRknjCQ7Aobs84xhRcjx -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:55 2026 by rpki-client