$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft File: 9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft (raw, json) Hash identifier: RSaiARgl1qLCHiikJWJwQdpw8YRDg4886akZ82MWrOo= Subject key identifier: 01:D6:DE:E1:AB:AB:98:A9:27:CF:66:FF:DA:44:28:61:8A:D0:B8:57 Authority key identifier: C9:65:92:2C:3A:B0:AD:1F:B3:FE:08:61:5C:BF:BA:2B:23:DB:10:5E Certificate issuer: /CN=9d948f00-81b9-4e48-b4ec-8b2a1272c17b Certificate serial: 010D0C9F4328584D3E588ACCD82F3277CDC0EA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft Manifest number: 010D0C9F43285840DD8387F0A9133D461B7D93EC Signing time: Sat 21 Mar 2026 16:00:03 +0000 Manifest this update: Sat 21 Mar 2026 16:00:03 +0000 Manifest next update: Mon 23 Mar 2026 16:00:00 +0000 Files and hashes: 1: 9d948f00-81b9-4e48-b4ec-8b2a1272c17b.crl (hash: GY0qSzTaliXMjfL8oPdqxOyZde6FYPaAh5RtGbANUBk=) 2: dee2880f-49c5-3f2a-8c41-4384493eed4f.roa (hash: VN4Lg0HEDHCxYvOwn+dKYTpstgJqc1eGS7m3uEz1YFk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:58:8a:cc:d8:2f:32:77:cd:c0:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d948f00-81b9-4e48-b4ec-8b2a1272c17b Validity Not Before: Mar 21 16:00:03 2026 GMT Not After : Mar 23 16:00:00 2026 GMT Subject: CN=420ae702-d7ad-4f2e-88f0-79645792c1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:9a:a4:9a:df:57:28:10:7f:44:71:d6:71: 96:f9:18:02:7b:77:0a:98:4a:b8:a4:f5:1a:1b:47: 55:92:47:f9:e9:01:6b:2b:e7:de:18:6a:0c:12:1d: 42:f3:16:a4:9b:17:b4:3f:12:46:20:fb:94:66:4a: ed:d4:ad:e0:6a:75:c8:8f:60:4f:02:b6:32:e5:e0: bf:a0:a1:ab:4d:b5:58:68:4c:f6:4f:b6:54:e7:19: fd:0a:9d:e6:b0:57:5d:b6:42:46:93:6c:eb:b6:2b: d3:42:8f:f9:17:2d:3a:ec:0f:6a:a8:13:b7:4f:65: bf:46:5a:4a:73:31:61:ef:49:a7:36:04:b2:8d:84: b1:e8:bf:d8:65:fe:01:9e:8a:36:10:89:3a:04:fe: 42:83:b9:42:e9:6b:72:05:6f:89:ba:c9:a7:45:a9: 02:0a:d9:df:83:a9:0e:16:f7:55:1a:60:14:d0:c5: 35:de:1d:fd:35:23:2a:0b:11:7d:fa:26:8d:24:d7: 42:84:06:45:2f:3a:f9:ea:63:20:98:4c:13:21:1d: 9c:e3:62:9e:b2:e9:26:e6:a4:c5:83:35:f9:18:50: 5e:39:ea:dd:f6:df:1b:2b:0e:37:23:2d:30:d5:44: c5:3c:7c:bc:67:45:b3:a5:8f:ab:47:d9:c3:c5:71: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D6:DE:E1:AB:AB:98:A9:27:CF:66:FF:DA:44:28:61:8A:D0:B8:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.crl X509v3 Authority Key Identifier: keyid:C9:65:92:2C:3A:B0:AD:1F:B3:FE:08:61:5C:BF:BA:2B:23:DB:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6a:6d:02:34:f5:ac:33:4e:0c:f8:19:de:6f:63:08:d9:a4: 5d:0b:77:71:9f:91:f7:a3:21:51:4b:87:69:24:4a:32:d5:ab: 5b:7e:16:d7:05:78:13:4c:cd:3b:d2:79:6c:b0:dc:a9:8f:8f: bb:08:86:e6:b3:78:66:4f:f3:3e:1d:cf:0e:f3:5b:62:2f:15: bb:64:76:42:7d:e8:b3:ff:ef:2b:c1:b4:17:ab:d9:f9:a3:0a: de:7e:80:c4:3c:24:81:8e:bf:75:89:2d:59:0d:9a:19:c4:18: 56:70:b2:c0:24:1c:db:e8:b7:fa:86:8d:e1:99:b5:00:03:48: 84:05:98:31:72:bb:7b:7e:f7:54:ef:3a:b1:4b:1d:e7:d0:c6: af:42:7a:08:67:54:1c:c2:e1:a4:8d:61:ff:b1:cd:bd:e4:66: fa:5d:09:3a:b0:e5:d3:fc:45:cb:da:f4:03:3b:2b:62:9c:88: c3:04:ba:2d:a3:fd:51:a3:19:79:a3:35:7c:1a:40:33:43:20: dc:03:6e:54:fd:0a:0e:13:d9:55:e7:07:2c:b0:7b:a9:66:31: 53:57:d8:a3:9e:9a:07:b4:a6:71:c1:bb:a2:af:de:3c:27:d9: 9f:22:f4:d5:94:45:8c:75:b8:2b:ca:32:c4:40:fd:53:d4:fd: b3:b7:db:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+WIrM2C8yd83A6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ5NDhmMDAtODFiOS00ZTQ4LWI0ZWMtOGIyYTEyNzJj MTdiMB4XDTI2MDMyMTE2MDAwM1oXDTI2MDMyMzE2MDAwMFowLzEtMCsGA1UEAxMk NDIwYWU3MDItZDdhZC00ZjJlLTg4ZjAtNzk2NDU3OTJjMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbyapJrfVygQf0Rx1nGW+RgCe3cKmEq4pPUa G0dVkkf56QFrK+feGGoMEh1C8xakmxe0PxJGIPuUZkrt1K3ganXIj2BPArYy5eC/ oKGrTbVYaEz2T7ZU5xn9Cp3msFddtkJGk2zrtivTQo/5Fy067A9qqBO3T2W/RlpK czFh70mnNgSyjYSx6L/YZf4Bnoo2EIk6BP5Cg7lC6WtyBW+JusmnRakCCtnfg6kO FvdVGmAU0MU13h39NSMqCxF9+iaNJNdChAZFLzr56mMgmEwTIR2c42Kesukm5qTF gzX5GFBeOerd9t8bKw43Iy0w1UTFPHy8Z0WzpY+rR9nDxXGOFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAHW3uGrq5ipJ89m/9pEKGGK0LhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZDk0 OGYwMC04MWI5LTRlNDgtYjRlYy04YjJhMTI3MmMxN2IvOWQ5NDhmMDAtODFiOS00 ZTQ4LWI0ZWMtOGIyYTEyNzJjMTdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWQ5NDhmMDAtODFiOS00ZTQ4LWI0 ZWMtOGIyYTEyNzJjMTdiLzlkOTQ4ZjAwLTgxYjktNGU0OC1iNGVjLThiMmExMjcy YzE3Yi5jcmwwHwYDVR0jBBgwFoAUyWWSLDqwrR+z/ghhXL+6KyPbEF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZDk0OGYwMC04MWI5LTRlNDgtYjRlYy04YjJh MTI3MmMxN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuam0CNPWsM04M+Bneb2MI 2aRdC3dxn5H3oyFRS4dpJEoy1atbfhbXBXgTTM070nlssNypj4+7CIbms3hmT/M+ Hc8O81tiLxW7ZHZCfeiz/+8rwbQXq9n5owrefoDEPCSBjr91iS1ZDZoZxBhWcLLA JBzb6Lf6ho3hmbUAA0iEBZgxcrt7fvdU7zqxSx3n0MavQnoIZ1QcwuGkjWH/sc29 5Gb6XQk6sOXT/EXL2vQDOytinIjDBLoto/1Roxl5ozV8GkAzQyDcA25U/QoOE9lV 5wcssHupZjFTV9ijnpoHtKZxwbuir948J9mfIvTVlEWMdbgryjLEQP1T1P2zt9tI -----END CERTIFICATE-----Generated at Sun Mar 22 08:30:34 2026 by rpki-client