$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: yarytmocZR+0cIeIy8wbHLaUhe0dn/zvmnwiTBEQLdc= Subject key identifier: FA:EF:25:F6:CA:A5:9C:AE:81:A7:B4:05:3B:AC:F6:A0:56:47:62:8D Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584D4A35F590D32156E38080E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FAC89 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Sat 28 Mar 2026 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: jw6CjliwvcCIrz4WahT30BzMQcxCOF8yoBpGfGzS65w=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WANSZim+EpRyVYMOFDXcDLCeV9llZK9KSpKxplaDkE4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f5:90:d3:21:56:e3:80:80:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 28 22:00:00 2026 GMT Subject: CN=f1c2f573-444b-4574-a885-6429969774c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:ef:06:a4:35:7d:79:6f:ae:5b:a8:ba:d6: 70:42:4a:5e:72:d8:4d:aa:1b:14:d3:3f:6f:f6:b8: f4:90:6f:18:1a:e6:45:16:b9:cc:4e:6c:82:f4:07: 63:4e:a1:e0:6a:fa:ab:69:e6:57:03:4d:76:6d:1d: 0c:94:8d:c6:55:29:65:b3:e2:b0:99:6e:96:e5:18: 31:cf:e8:c0:16:27:b4:9e:54:79:e9:b8:ed:2c:2c: 72:a3:d1:6e:50:31:a2:20:29:5e:05:71:86:6a:d0: d6:e6:f3:af:50:c7:d7:57:70:49:2b:ab:ca:09:1c: ec:ce:29:4a:9f:76:b5:e5:bd:61:e0:52:a1:ea:05: b3:7c:5a:8a:1f:e5:82:81:01:38:63:d9:ab:ac:44: 24:f2:4a:f5:fd:02:92:ad:e5:c0:0c:6a:b8:12:24: ec:70:ce:a3:b2:f9:98:45:93:4a:27:6a:71:7b:a1: 5f:81:2c:8b:9e:f2:b5:13:86:7a:d5:0b:a7:70:d4: 11:80:47:75:bd:22:a9:fb:82:4b:10:ed:b0:f2:c1: f3:9d:0f:0b:22:04:43:c7:c6:75:51:13:08:d3:10: a6:00:13:f0:8a:01:99:7e:93:91:18:80:58:7b:56: 3a:d3:38:b5:5a:b5:18:86:cb:42:91:cb:3c:27:9c: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EF:25:F6:CA:A5:9C:AE:81:A7:B4:05:3B:AC:F6:A0:56:47:62:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:eb:53:24:33:f0:46:41:2e:d3:c7:22:70:b9:1d:76:05:d9: bd:ce:a4:fb:b5:15:9b:0e:89:a0:06:34:7c:e2:d7:3d:a3:cd: 18:6f:ca:ab:d2:5d:a7:8f:b9:6a:8a:48:8d:69:0d:63:50:ec: 3b:81:d8:73:6d:92:0a:13:2a:98:21:6c:4f:e0:de:0d:7d:b5: fa:92:a7:40:b2:89:18:01:ef:f1:0c:f0:a8:3d:8a:76:ba:f4: d5:01:21:6b:65:92:70:79:77:9e:ee:de:17:b7:1a:1e:f7:c9: b3:44:eb:01:27:aa:20:f9:6f:2e:91:b7:6b:16:c7:4e:c1:5f: cf:1b:50:33:79:ac:1f:b2:8c:eb:64:e4:da:cb:50:48:40:b7: 5f:48:82:a2:e6:73:f2:6b:00:9e:ba:ac:c7:ff:27:67:8f:54: 18:d0:82:70:50:70:c3:35:73:f2:6a:87:33:5f:7c:09:9d:e7: 6f:23:86:3c:b7:7d:a2:6f:8c:3a:35:5f:48:30:49:69:3a:bb: 0e:db:84:16:76:e4:80:5e:06:56:80:bf:e3:0b:1f:b2:a2:31: 3e:93:bf:5c:82:c4:38:68:42:f6:9f:64:b5:c9:27:29:d6:9e: 69:38:e2:b9:24:b1:9a:3f:b4:a5:34:15:08:46:26:bb:97:3a: 9d:ee:4d:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfWQ0yFW44CA5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyODIyMDAwMFowLzEtMCsGA1UEAxMk ZjFjMmY1NzMtNDQ0Yi00NTc0LWE4ODUtNjQyOTk2OTc3NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp17vBqQ1fXlvrluoutZwQkpecthNqhsU0z9v 9rj0kG8YGuZFFrnMTmyC9AdjTqHgavqraeZXA012bR0MlI3GVSlls+KwmW6W5Rgx z+jAFie0nlR56bjtLCxyo9FuUDGiICleBXGGatDW5vOvUMfXV3BJK6vKCRzszilK n3a15b1h4FKh6gWzfFqKH+WCgQE4Y9mrrEQk8kr1/QKSreXADGq4EiTscM6jsvmY RZNKJ2pxe6FfgSyLnvK1E4Z61QuncNQRgEd1vSKp+4JLEO2w8sHznQ8LIgRDx8Z1 URMI0xCmABPwigGZfpORGIBYe1Y60zi1WrUYhstCkcs8J5yOjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPrvJfbKpZyugae0BTus9qBWR2KNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK61MkM/BGQS7TxyJwuR12 Bdm9zqT7tRWbDomgBjR84tc9o80Yb8qr0l2nj7lqikiNaQ1jUOw7gdhzbZIKEyqY IWxP4N4NfbX6kqdAsokYAe/xDPCoPYp2uvTVASFrZZJweXee7t4Xtxoe98mzROsB J6og+W8ukbdrFsdOwV/PG1AzeawfsozrZOTay1BIQLdfSIKi5nPyawCeuqzH/ydn j1QY0IJwUHDDNXPyaoczX3wJnedvI4Y8t32ib4w6NV9IMElpOrsO24QWduSAXgZW gL/jCx+yojE+k79cgsQ4aEL2n2S1yScp1p5pOOK5JLGaP7SlNBUIRia7lzqd7k0+ -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:21 2026 by rpki-client