$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft File: 9ac7679f-d727-44b3-9b13-6e689c3eff61.mft (raw, json) Hash identifier: yT3A5eqqCKfO9TpeWlZ61FR7+rrmJIyIwh9S/+q8Pyk= Subject key identifier: D3:85:95:3B:E4:90:13:37:E4:82:0F:6C:53:08:F4:21:4E:AE:8F:97 Authority key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 Certificate issuer: /CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Certificate serial: 010D0C9F4328584D41057380D8A3A1C70DC75820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft Manifest number: 010D0C9F43285841184A9BCD2AF966735976EF38 Signing time: Sun 22 Mar 2026 15:00:04 +0000 Manifest this update: Sun 22 Mar 2026 15:00:04 +0000 Manifest next update: Tue 24 Mar 2026 15:00:00 +0000 Files and hashes: 1: 999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa (hash: C16qT7XpHBU9otk06aUfzn3fYsQ5g2tpU4h2J/HqjzI=) 2: 9ac7679f-d727-44b3-9b13-6e689c3eff61.crl (hash: U02oPOdmBkuWxwaxHciCjeBSFUaLPEXwDzebKCZlqww=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:41:05:73:80:d8:a3:a1:c7:0d:c7:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Validity Not Before: Mar 22 15:00:04 2026 GMT Not After : Mar 24 15:00:00 2026 GMT Subject: CN=87d1bd7f-a1a8-48e4-a375-fb604c324565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:71:33:ed:d1:a2:19:e5:45:eb:40:84:86: 59:d1:fc:78:18:8e:2e:11:62:3b:9d:e5:05:98:1c: d3:64:88:70:5e:b8:56:d2:6b:85:a3:67:14:70:72: cd:a8:3d:5f:9e:ca:fb:44:75:c3:ba:78:49:15:27: e7:e3:f9:9e:2a:e0:d8:ac:02:08:c0:7c:00:43:da: fd:fb:91:9f:2d:40:70:5e:c0:42:03:94:02:ac:16: 3e:49:db:74:69:a0:5a:24:ae:32:44:a3:ba:02:0f: 53:d6:5f:f9:78:9d:6f:89:c8:e3:28:18:45:55:90: 82:36:9d:9b:98:d8:9e:3d:4f:14:6b:7f:ae:25:5f: 70:ff:f9:8d:97:9e:55:da:62:aa:de:e1:11:45:07: 38:4f:b4:2e:4a:9e:c2:dc:35:d3:eb:c2:5c:5f:25: e1:fd:99:96:0c:22:31:bd:c7:02:81:55:60:8d:d8: 65:77:91:2e:d6:c4:2c:fd:3b:e9:4c:74:e6:73:d1: 27:a8:c1:5d:f9:99:7a:ef:67:50:5b:ba:38:97:15: ef:6b:70:f4:94:e3:89:a3:d7:28:f6:7d:46:e3:95: 9f:43:f3:20:e8:19:63:2c:45:20:57:61:1d:7a:22: 1a:55:f9:c1:7b:79:85:7e:85:68:30:2a:fa:89:0f: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:85:95:3B:E4:90:13:37:E4:82:0F:6C:53:08:F4:21:4E:AE:8F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl X509v3 Authority Key Identifier: keyid:DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:62:19:c3:76:00:41:f1:d2:37:c7:f4:88:a7:d4:69:98:2f: fe:49:96:25:7d:2e:b4:00:b4:61:6c:a0:8a:d9:ba:64:59:86: 1b:c1:90:d9:3e:19:6f:a8:99:76:b5:dc:77:e5:39:a0:23:70: cb:35:f3:9a:d9:f8:06:67:60:7f:a1:36:02:46:f1:5f:4b:04: cc:ea:86:cb:9e:67:0f:41:d6:ad:e3:b5:1b:53:d3:5c:53:bf: fd:02:19:68:14:3d:03:10:cf:f2:d8:ed:6e:42:c5:4d:3a:aa: 41:a4:73:20:e5:c1:46:57:ed:27:41:9d:ba:71:be:be:8f:de: a0:5e:f9:59:a7:be:b3:89:5b:c8:f8:26:cc:d6:d9:4d:6a:8f: 0c:20:07:d4:a9:bd:7b:b7:9b:17:e8:41:2b:c6:66:e7:80:ec: 40:7d:10:67:df:ec:2e:e6:c8:f4:45:5f:e1:f5:35:ec:85:2b: 66:d3:1f:f6:94:48:ed:68:9c:c6:ef:07:11:e5:c6:44:a1:f2: 75:67:46:46:20:98:58:6e:a2:e6:dd:f8:98:09:01:78:6e:38: af:e8:16:2e:2c:fd:9f:8d:ed:68:f2:13:d4:cd:a7:f1:7f:53: 5c:c2:a8:ac:18:48:32:5c:96:93:66:b7:37:c9:d5:9c:0c:63: db:66:4e:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1BBXOA2KOhxw3HWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2Vm ZjYxMB4XDTI2MDMyMjE1MDAwNFoXDTI2MDMyNDE1MDAwMFowLzEtMCsGA1UEAxMk ODdkMWJkN2YtYTFhOC00OGU0LWEzNzUtZmI2MDRjMzI0NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizBxM+3RohnlRetAhIZZ0fx4GI4uEWI7neUF mBzTZIhwXrhW0muFo2cUcHLNqD1fnsr7RHXDunhJFSfn4/meKuDYrAIIwHwAQ9r9 +5GfLUBwXsBCA5QCrBY+Sdt0aaBaJK4yRKO6Ag9T1l/5eJ1vicjjKBhFVZCCNp2b mNiePU8Ua3+uJV9w//mNl55V2mKq3uERRQc4T7QuSp7C3DXT68JcXyXh/ZmWDCIx vccCgVVgjdhld5Eu1sQs/TvpTHTmc9EnqMFd+Zl672dQW7o4lxXva3D0lOOJo9co 9n1G45WfQ/Mg6BljLEUgV2EdeiIaVfnBe3mFfoVoMCr6iQ+MYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNOFlTvkkBM35IIPbFMI9CFOro+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YWM3 Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvOWFjNzY3OWYtZDcyNy00 NGIzLTliMTMtNmU2ODljM2VmZjYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWFjNzY3OWYtZDcyNy00NGIzLTli MTMtNmU2ODljM2VmZjYxLzlhYzc2NzlmLWQ3MjctNDRiMy05YjEzLTZlNjg5YzNl ZmY2MS5jcmwwHwYDVR0jBBgwFoAU3A46C13lZNtnXGsSagLFu2PXQWAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4 OWMzZWZmNjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEYhnDdgBB8dI3x/SIp9Rp mC/+SZYlfS60ALRhbKCK2bpkWYYbwZDZPhlvqJl2tdx35TmgI3DLNfOa2fgGZ2B/ oTYCRvFfSwTM6obLnmcPQdat47UbU9NcU7/9AhloFD0DEM/y2O1uQsVNOqpBpHMg 5cFGV+0nQZ26cb6+j96gXvlZp76ziVvI+CbM1tlNao8MIAfUqb17t5sX6EErxmbn gOxAfRBn3+wu5sj0RV/h9TXshStm0x/2lEjtaJzG7wcR5cZEofJ1Z0ZGIJhYbqLm 3fiYCQF4bjiv6BYuLP2fje1o8hPUzafxf1NcwqisGEgyXJaTZrc3ydWcDGPbZk5K -----END CERTIFICATE-----Generated at Mon Mar 23 08:38:58 2026 by rpki-client