$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft File: 9539fe98-d93c-4eef-8521-e7da1838ec1e.mft (raw, json) Hash identifier: vA/ZJf1Wy7GIqEOwO6DD3OUKcIB+wHnYDO93xYwO8/s= Subject key identifier: 38:9C:63:66:97:79:1D:3E:A9:B5:93:20:02:26:37:AE:26:30:55:A4 Authority key identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 Certificate issuer: /CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Certificate serial: 010D0C9F4328584D0629926A724182E1A361C640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft Manifest number: 010D0C9F4328584BBCBED6EC344BF691BCD3F1F8 Signing time: Sun 01 Mar 2026 13:00:08 +0000 Manifest this update: Sun 01 Mar 2026 13:00:08 +0000 Manifest next update: Wed 04 Mar 2026 13:00:00 +0000 Files and hashes: 1: 909c57ca-1673-3501-8057-61ea309b4109.roa (hash: VsfMIz2WhrgthoL5phwTMTNhXIji5XDxOruDOBZi/8U=) 2: 9539fe98-d93c-4eef-8521-e7da1838ec1e.crl (hash: w9IafnfBb1K1gp7hF3YwY4GmiDqBc9Zw4AUv+NCwHSw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:29:92:6a:72:41:82:e1:a3:61:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Validity Not Before: Mar 1 13:00:08 2026 GMT Not After : Mar 4 13:00:00 2026 GMT Subject: CN=c1bae5f5-94ff-43a9-b186-7a618ff0f04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:60:41:58:2c:38:29:2c:68:ea:d2:b4:1a:bf: 15:b0:00:cd:40:d5:ae:47:c6:da:b6:d5:aa:eb:63: 3d:65:33:5b:e1:79:8e:59:02:4c:e3:de:62:78:93: 97:c5:be:fe:5d:81:ae:6d:c3:86:7d:0a:99:98:4a: a4:12:f6:79:a9:c4:ad:b9:ef:46:a5:77:d4:df:4c: 43:08:1b:01:e7:5b:9e:58:33:9c:6f:11:41:12:07: da:87:53:cf:b3:af:b4:fc:9c:c9:b8:b5:c5:b4:30: 0c:dc:8a:6e:fd:68:58:42:87:46:bc:94:16:36:ed: 76:95:85:e0:91:ab:04:1d:27:ae:55:06:78:6e:2b: ff:c2:63:46:a5:e6:53:ad:1b:16:69:4d:5f:c0:e1: ba:b1:fa:da:d6:ed:75:b6:d1:17:64:22:8f:83:6f: b0:97:cf:5a:28:e2:0a:44:fa:28:45:c2:e1:c3:b8: 99:02:7f:f3:e8:8f:70:89:24:55:88:0d:fe:73:93: 7e:39:fc:b0:25:44:fc:5e:ad:8a:85:5e:30:01:8d: f6:d2:be:fb:25:fa:0d:be:7d:45:3a:07:ab:a1:e9: 51:45:9b:16:e4:f9:8b:d5:b5:e9:6e:4f:94:61:aa: 37:89:a8:8e:c7:59:6d:ac:95:07:a7:91:8a:b7:e4: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9C:63:66:97:79:1D:3E:A9:B5:93:20:02:26:37:AE:26:30:55:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl X509v3 Authority Key Identifier: keyid:30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c8:96:00:01:18:95:a8:cd:5a:30:b3:5b:90:fa:8f:4f:17: 5b:cf:d2:47:67:7a:b2:c0:59:8c:0b:07:19:e5:c6:90:8f:bb: 0d:f5:53:af:cf:b3:d7:86:13:2e:91:c5:05:49:ec:b9:10:d6: e1:b4:23:6a:a0:79:13:56:c4:c2:1d:95:dc:b8:86:80:93:c1: d7:c7:0c:aa:20:26:6e:b5:4f:20:9c:2c:90:8f:6f:d9:37:17: b0:36:a7:5b:a3:2d:fa:26:70:86:6e:36:a7:c5:11:dd:06:9c: ac:81:e9:52:1e:54:20:9a:59:68:bf:50:08:b0:f8:e8:5f:78: 4a:24:e5:81:98:9e:b9:54:45:f9:b6:65:8e:a6:16:e4:b9:6d: ba:b0:08:e5:ea:4e:7d:ed:03:f4:09:94:ba:3c:cd:fe:52:28: 0e:a0:3c:98:d1:49:75:57:69:8f:26:f3:42:ab:4e:f7:3f:bb: 60:ac:a5:f8:c8:79:70:73:52:46:12:7d:97:84:fb:4e:90:f7: 37:0b:4d:29:1c:10:74:9a:70:68:9b:8a:a3:71:0d:46:fd:94: d4:59:25:15:93:d3:c1:f4:f8:24:df:12:29:8d:19:95:bc:a6: 91:e8:04:f6:ac:f4:fc:f1:8b:a7:9d:cf:47:59:6a:e3:0a:e3: 99:cd:dd:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GKZJqckGC4aNhxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzOWZlOTgtZDkzYy00ZWVmLTg1MjEtZTdkYTE4Mzhl YzFlMB4XDTI2MDMwMTEzMDAwOFoXDTI2MDMwNDEzMDAwMFowLzEtMCsGA1UEAxMk YzFiYWU1ZjUtOTRmZi00M2E5LWIxODYtN2E2MThmZjBmMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGBBWCw4KSxo6tK0Gr8VsADNQNWuR8battWq 62M9ZTNb4XmOWQJM495ieJOXxb7+XYGubcOGfQqZmEqkEvZ5qcStue9GpXfU30xD CBsB51ueWDOcbxFBEgfah1PPs6+0/JzJuLXFtDAM3Ipu/WhYQodGvJQWNu12lYXg kasEHSeuVQZ4biv/wmNGpeZTrRsWaU1fwOG6sfra1u11ttEXZCKPg2+wl89aKOIK RPooRcLhw7iZAn/z6I9wiSRViA3+c5N+OfywJUT8Xq2KhV4wAY320r77JfoNvn1F OgeroelRRZsW5PmL1bXpbk+UYao3iaiOx1ltrJUHp5GKt+TkCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDicY2aXeR0+qbWTIAImN64mMFWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5 ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2RhMTgzOGVjMWUvOTUzOWZlOTgtZDkzYy00 ZWVmLTg1MjEtZTdkYTE4MzhlYzFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTUzOWZlOTgtZDkzYy00ZWVmLTg1 MjEtZTdkYTE4MzhlYzFlLzk1MzlmZTk4LWQ5M2MtNGVlZi04NTIxLWU3ZGExODM4 ZWMxZS5jcmwwHwYDVR0jBBgwFoAUMGDzfdaadF9yt5aHI6F6XbwgAxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2Rh MTgzOGVjMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMyJYAARiVqM1aMLNbkPqP Txdbz9JHZ3qywFmMCwcZ5caQj7sN9VOvz7PXhhMukcUFSey5ENbhtCNqoHkTVsTC HZXcuIaAk8HXxwyqICZutU8gnCyQj2/ZNxewNqdboy36JnCGbjanxRHdBpysgelS HlQgmllov1AIsPjoX3hKJOWBmJ65VEX5tmWOphbkuW26sAjl6k597QP0CZS6PM3+ UigOoDyY0Ul1V2mPJvNCq073P7tgrKX4yHlwc1JGEn2XhPtOkPc3C00pHBB0mnBo m4qjcQ1G/ZTUWSUVk9PB9Pgk3xIpjRmVvKaR6AT2rPT88Yunnc9HWWrjCuOZzd0/ -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:45 2026 by rpki-client