$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft File: 8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft (raw, json) Hash identifier: L9KAhzNVXq4LQ0bys1b20oU8z8IFlnPC9IMQYwQAjNc= Subject key identifier: 20:FA:9A:43:26:4A:51:28:EC:D4:86:EA:B5:11:95:7F:6A:38:FA:FF Authority key identifier: 87:BD:E0:D7:D0:41:35:9E:AF:04:BF:F6:59:35:4A:29:0E:A5:FB:28 Certificate issuer: /CN=8696c5f3-5de6-49a7-9f0a-e398033b6edf Certificate serial: 010D0C9F4328584D483BC3885481F252B1544240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft Manifest number: 010D0C9F4328584073A83F34E4ED172CC7840299 Signing time: Wed 25 Mar 2026 05:00:09 +0000 Manifest this update: Wed 25 Mar 2026 05:00:09 +0000 Manifest next update: Sat 28 Mar 2026 05:00:00 +0000 Files and hashes: 1: 8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl (hash: vas8Gu8R2MmcgB/vRNLJIIQk7ITpUaZFFbTHyo8qRg0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:3b:c3:88:54:81:f2:52:b1:54:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8696c5f3-5de6-49a7-9f0a-e398033b6edf Validity Not Before: Mar 25 05:00:09 2026 GMT Not After : Mar 28 05:00:00 2026 GMT Subject: CN=a9a0d45d-e447-4410-b1ee-3645a83d80e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:17:10:1d:c8:23:8a:75:4e:93:01:86:67: 7b:ac:e9:bf:4c:e7:e7:6e:31:1e:fb:f5:b9:5f:bb: 48:be:39:b6:97:ce:f5:59:a4:6a:da:1f:63:92:f6: 63:70:49:1e:05:49:19:c2:0f:12:2f:2c:7b:f9:24: 14:56:81:63:0e:24:e2:39:a5:b4:28:1f:81:ab:65: 87:5e:6c:35:a7:82:fb:33:33:79:d4:b2:c8:9b:23: 1e:ad:24:b7:ef:39:a8:44:08:fd:e6:1a:fa:91:b3: 36:16:3f:75:30:fb:ab:c5:34:04:cf:cd:e6:db:22: fd:97:58:49:be:3e:4d:f8:c6:ca:ca:4e:26:cf:43: 62:fc:6f:0d:b9:c1:fc:45:64:ac:60:1e:bb:74:6c: 1a:56:51:ac:b3:8a:16:74:75:fa:ac:dd:cd:d6:cc: 38:9e:9c:33:8f:a3:66:5f:70:0a:06:3e:37:1d:a9: 27:9e:72:b2:d7:38:68:5f:cb:6c:1a:40:8d:e6:a3: 59:92:40:79:3f:4f:61:ac:ed:4a:12:88:7b:3f:11: bb:85:8b:66:32:23:05:8b:f6:da:dc:49:43:61:45: 5a:98:30:78:43:2c:ec:97:0f:1e:49:e9:20:a4:16: b5:1a:49:8a:3e:fe:63:cf:0c:09:dc:3b:c3:89:0e: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:9A:43:26:4A:51:28:EC:D4:86:EA:B5:11:95:7F:6A:38:FA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl X509v3 Authority Key Identifier: keyid:87:BD:E0:D7:D0:41:35:9E:AF:04:BF:F6:59:35:4A:29:0E:A5:FB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b3:ba:4f:09:5d:8e:9b:28:83:28:32:da:b7:13:05:52:33: b8:1c:b2:87:8b:cc:26:d9:22:04:51:f5:63:bb:01:3b:2f:f2: 77:75:bf:41:8b:0f:97:f9:f6:7d:47:7e:0f:8e:12:f0:dc:d6: e1:37:73:fb:7f:89:c8:9e:ed:be:9a:32:ce:dc:be:d2:e7:54: 3d:fc:38:d0:fd:5f:3a:d7:8c:d9:fd:7c:aa:4b:a0:df:df:0c: 39:83:81:e8:ee:eb:df:4a:31:c3:70:0d:2a:09:15:18:d2:ea: f5:b6:09:52:88:ae:89:a7:fe:d1:3d:ed:38:12:90:54:96:f5: bf:35:c9:fd:5a:f3:c6:18:b6:ff:41:8e:02:1d:8b:ff:70:32: 5b:2d:e5:a8:cc:a9:7e:8f:d8:53:33:f8:6c:b1:6f:44:47:64: e2:f0:e5:c5:86:c4:2b:af:5b:df:fe:aa:f9:3d:19:e7:08:50: 55:85:22:2e:fa:35:16:c6:1e:9b:d6:4b:df:74:6f:ac:f7:85: d8:75:75:64:89:36:73:13:45:03:c8:18:41:2c:9e:43:3a:d8: 82:74:76:d8:43:f7:7a:cc:79:91:24:33:21:e6:02:d6:31:e3: fe:0e:1c:fa:b0:0c:6b:9c:92:a8:b9:16:00:28:ed:d2:f9:4d: 21:63:54:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IO8OIVIHyUrFUQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5NmM1ZjMtNWRlNi00OWE3LTlmMGEtZTM5ODAzM2I2 ZWRmMB4XDTI2MDMyNTA1MDAwOVoXDTI2MDMyODA1MDAwMFowLzEtMCsGA1UEAxMk YTlhMGQ0NWQtZTQ0Ny00NDEwLWIxZWUtMzY0NWE4M2Q4MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUsXEB3II4p1TpMBhmd7rOm/TOfnbjEe+/W5 X7tIvjm2l871WaRq2h9jkvZjcEkeBUkZwg8SLyx7+SQUVoFjDiTiOaW0KB+Bq2WH Xmw1p4L7MzN51LLImyMerSS37zmoRAj95hr6kbM2Fj91MPurxTQEz83m2yL9l1hJ vj5N+MbKyk4mz0Ni/G8NucH8RWSsYB67dGwaVlGss4oWdHX6rN3N1sw4npwzj6Nm X3AKBj43HaknnnKy1zhoX8tsGkCN5qNZkkB5P09hrO1KEoh7PxG7hYtmMiMFi/ba 3ElDYUVamDB4Qyzslw8eSekgpBa1GkmKPv5jzwwJ3DvDiQ5bSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCD6mkMmSlEo7NSG6rURlX9qOPr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84Njk2 YzVmMy01ZGU2LTQ5YTctOWYwYS1lMzk4MDMzYjZlZGYvODY5NmM1ZjMtNWRlNi00 OWE3LTlmMGEtZTM5ODAzM2I2ZWRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODY5NmM1ZjMtNWRlNi00OWE3LTlm MGEtZTM5ODAzM2I2ZWRmLzg2OTZjNWYzLTVkZTYtNDlhNy05ZjBhLWUzOTgwMzNi NmVkZi5jcmwwHwYDVR0jBBgwFoAUh73g19BBNZ6vBL/2WTVKKQ6l+ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84Njk2YzVmMy01ZGU2LTQ5YTctOWYwYS1lMzk4 MDMzYjZlZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIs7pPCV2OmyiDKDLatxMF UjO4HLKHi8wm2SIEUfVjuwE7L/J3db9Biw+X+fZ9R34PjhLw3NbhN3P7f4nInu2+ mjLO3L7S51Q9/DjQ/V8614zZ/XyqS6Df3ww5g4Ho7uvfSjHDcA0qCRUY0ur1tglS iK6Jp/7RPe04EpBUlvW/Ncn9WvPGGLb/QY4CHYv/cDJbLeWozKl+j9hTM/hssW9E R2Ti8OXFhsQrr1vf/qr5PRnnCFBVhSIu+jUWxh6b1kvfdG+s94XYdXVkiTZzE0UD yBhBLJ5DOtiCdHbYQ/d6zHmRJDMh5gLWMeP+Dhz6sAxrnJKouRYAKO3S+U0hY1S6 -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:14 2026 by rpki-client