$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft File: a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft (raw, json) Hash identifier: F/Bj1at81YnLlopgz7849ng0TeKe//JeJfwXVUc5Zz4= Subject key identifier: 75:61:6B:3F:AC:A9:17:69:0E:11:3C:BF:5C:1E:B3:20:91:50:7F:02 Authority key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Certificate issuer: /CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Certificate serial: 010D0C9F4328584D4C89959A7F660DD44BFE2238 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft Manifest number: 010D0C9F4328584ACA762691C4D9087D8F0FF42D Signing time: Thu 26 Mar 2026 18:00:09 +0000 Manifest this update: Thu 26 Mar 2026 18:00:09 +0000 Manifest next update: Sun 29 Mar 2026 18:00:00 +0000 Files and hashes: 1: a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl (hash: fO+VRyK1RzvRcGDqLHEI0b9DQT7K+xOIzNAZaXiefVA=) 2: bc7894b0-13bb-3996-a597-d19d7ca6829d.roa (hash: cHRud7V54I1abPR8GxPXzW8CNSo0D26jUIVA8YPdhes=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:89:95:9a:7f:66:0d:d4:4b:fe:22:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Validity Not Before: Mar 26 18:00:09 2026 GMT Not After : Mar 29 18:00:00 2026 GMT Subject: CN=5bb77a5f-0d90-4313-97d7-e5b534951696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:a2:6e:ba:93:a5:82:0f:29:a3:33:53:fc: 30:7b:e6:ce:24:9e:f5:60:f8:1a:14:36:e3:f1:ea: 10:4a:b5:39:73:fe:1c:f1:5b:be:78:3e:03:f0:36: 31:fa:10:b6:2c:17:b8:20:44:1e:eb:05:57:13:b3: c9:c1:eb:d1:4b:57:1b:33:33:e3:35:98:87:6b:a4: db:8c:15:c9:07:3a:1b:ab:73:b7:d2:af:65:36:88: db:5b:7e:db:87:99:b0:a1:72:60:bd:59:aa:94:91: ea:07:11:14:74:f8:f8:69:20:63:c5:28:12:a8:3d: 09:fc:4f:85:2c:01:7c:51:77:ee:51:55:af:42:34: 7d:b7:12:be:95:d3:86:68:eb:3a:21:bd:b5:1b:37: 43:26:ce:c7:65:29:75:b2:16:34:e6:e9:ac:29:bd: 4e:47:55:37:dd:ec:52:4e:89:0e:39:5f:31:d1:0a: c0:4c:83:93:94:db:55:32:d8:88:c6:10:e9:ce:87: 1f:df:45:0d:fe:1d:de:b3:4b:60:35:72:8d:b7:71: 22:8e:08:b3:79:fd:22:7d:21:2a:f2:2b:f5:e7:35: b3:01:8b:c9:e0:5f:ef:a0:ae:9e:09:ae:fe:6e:0d: 02:3b:57:a9:40:cd:1f:71:73:cb:02:d3:95:d6:21: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:6B:3F:AC:A9:17:69:0E:11:3C:BF:5C:1E:B3:20:91:50:7F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl X509v3 Authority Key Identifier: keyid:1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b0:c0:71:2e:fc:d7:fa:36:55:5c:f2:3f:70:90:55:03:87: 28:00:47:aa:82:8c:ec:58:53:ea:a0:57:32:1c:9e:48:4e:3b: 2b:95:79:2d:c3:d4:81:af:71:b0:6d:dc:af:b6:52:68:fd:99: bc:54:df:35:f5:d9:d1:0d:2a:78:b8:0a:4a:69:c0:eb:12:56: b9:fd:97:4d:8f:b8:f9:79:b6:6d:0d:3d:90:07:ec:6d:20:16: 19:dd:f2:05:3c:a1:4d:46:73:70:33:64:76:56:0b:c5:cf:3a: 31:30:33:51:c5:2f:d9:bb:f4:40:29:52:2c:5b:5c:25:f5:75: 2b:1b:92:4d:22:da:36:6b:2f:8e:90:22:da:4e:26:65:dd:bd: de:0b:31:81:c1:c5:9b:9a:9b:d6:38:e5:7a:55:a3:e0:95:f9: 49:0b:73:2b:0d:d2:85:a5:7f:95:db:a3:0d:b0:7a:93:81:e5: 06:4c:e6:2c:6a:c2:cc:0d:9f:e3:5c:67:d8:cd:7e:12:2e:c1: ed:ff:90:f6:d6:b2:7e:01:a5:6d:d2:bc:b4:71:93:4f:a7:06: c5:14:01:2f:e9:d6:84:be:ae:85:dc:ee:cd:e6:07:a7:d0:a7: da:61:ce:ca:24:7d:ac:7e:ac:f7:3c:3e:87:5c:bc:45:c3:ef: 0b:4b:78:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MiZWaf2YN1Ev+IjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkN2Y5MDItY2MwMC00MTc1LTk1MWEtZmUzYTUwYzBj ZWFiMB4XDTI2MDMyNjE4MDAwOVoXDTI2MDMyOTE4MDAwMFowLzEtMCsGA1UEAxMk NWJiNzdhNWYtMGQ5MC00MzEzLTk3ZDctZTViNTM0OTUxNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu+ibrqTpYIPKaMzU/wwe+bOJJ71YPgaFDbj 8eoQSrU5c/4c8Vu+eD4D8DYx+hC2LBe4IEQe6wVXE7PJwevRS1cbMzPjNZiHa6Tb jBXJBzobq3O30q9lNojbW37bh5mwoXJgvVmqlJHqBxEUdPj4aSBjxSgSqD0J/E+F LAF8UXfuUVWvQjR9txK+ldOGaOs6Ib21GzdDJs7HZSl1shY05umsKb1OR1U33exS TokOOV8x0QrATIOTlNtVMtiIxhDpzocf30UN/h3es0tgNXKNt3Eijgizef0ifSEq 8iv15zWzAYvJ4F/voK6eCa7+bg0CO1epQM0fcXPLAtOV1iE7iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHVhaz+sqRdpDhE8v1wesyCRUH8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hOWQ3 ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBjMGNlYWIvYTlkN2Y5MDItY2MwMC00 MTc1LTk1MWEtZmUzYTUwYzBjZWFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTlkN2Y5MDItY2MwMC00MTc1LTk1 MWEtZmUzYTUwYzBjZWFiL2E5ZDdmOTAyLWNjMDAtNDE3NS05NTFhLWZlM2E1MGMw Y2VhYi5jcmwwHwYDVR0jBBgwFoAUHXOhNSIE0a4VmTfIxQDKeZGsO10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hOWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNh NTBjMGNlYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXsMBxLvzX+jZVXPI/cJBV A4coAEeqgozsWFPqoFcyHJ5ITjsrlXktw9SBr3GwbdyvtlJo/Zm8VN819dnRDSp4 uApKacDrEla5/ZdNj7j5ebZtDT2QB+xtIBYZ3fIFPKFNRnNwM2R2VgvFzzoxMDNR xS/Zu/RAKVIsW1wl9XUrG5JNIto2ay+OkCLaTiZl3b3eCzGBwcWbmpvWOOV6VaPg lflJC3MrDdKFpX+V26MNsHqTgeUGTOYsasLMDZ/jXGfYzX4SLsHt/5D21rJ+AaVt 0ry0cZNPpwbFFAEv6daEvq6F3O7N5gen0KfaYc7KJH2sfqz3PD6HXLxFw+8LS3g/ -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:17 2026 by rpki-client