$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft File: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft (raw, json) Hash identifier: 7+bxy8BC9JQCeqIRFDNVdglxb8PX9vGKSW3GLW1XUzE= Subject key identifier: 7D:D6:E5:96:81:8D:B8:6B:89:15:E3:D0:D2:25:19:7D:23:BF:9D:7D Authority key identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Certificate issuer: /CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Certificate serial: 010D0C9F4328584D498347E9A1A9316B05EB2300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft Manifest number: 010D0C9F4328584073A81AEA59FA9E40F91E9E2F Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl (hash: QkbeWqh8xK2+nlk7yyYqlG20WbqM4rcT7RikcqpxsiM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:47:e9:a1:a9:31:6b:05:eb:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=ff488de3-35e7-4605-8613-a4d9c45a81b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:73:ed:c3:54:d1:77:35:27:f4:f8:ca:ef: 33:75:e2:76:d7:44:f5:a7:76:2e:61:e3:b4:3b:c9: 2f:45:4d:ae:9e:57:92:d7:1b:20:0a:55:82:07:e2: 5b:c1:91:4c:80:54:37:5d:32:72:0e:23:f2:2f:ce: e4:38:98:f4:38:04:1e:82:33:3a:9e:5d:f6:59:fb: 8c:75:6f:11:9c:6f:41:8a:e6:3b:67:bf:3a:c9:0a: a0:ab:1e:ff:7d:96:2f:cd:f2:82:a8:1c:d2:23:e2: ad:40:5c:2a:9c:3c:0f:cc:b1:17:8c:16:4e:17:65: 92:ec:87:3f:ae:0f:1c:4f:19:a9:da:e6:6a:57:46: 58:8c:b6:e9:00:a1:4f:ec:70:be:c6:1a:85:fa:1c: e5:d3:5f:eb:08:56:15:3e:4a:c9:94:0d:94:e4:fd: 00:9e:d5:65:9c:a6:9c:06:80:c2:3c:6b:a2:3f:2c: e4:b1:d5:95:8e:9e:34:9f:ff:0b:b1:17:b8:df:ba: a8:51:5a:55:d2:67:f6:75:e1:8c:d0:9a:a1:44:b0: 9c:cd:a8:ee:b4:60:87:2d:59:5f:3d:1f:0e:a5:47: 05:5a:1f:4d:4c:dd:0f:8a:6c:71:b8:5a:3c:07:21: 4c:01:5d:40:8e:e3:9f:93:e9:06:1d:df:78:fd:27: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:E5:96:81:8D:B8:6B:89:15:E3:D0:D2:25:19:7D:23:BF:9D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl X509v3 Authority Key Identifier: keyid:4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:43:7a:4a:1f:05:a8:39:30:b7:55:76:3b:80:68:c9:24:9f: 9c:5a:ad:d2:98:8f:a9:ae:cf:fc:f9:f3:91:05:c1:8c:13:15: 0a:b7:74:15:8e:51:d9:5b:34:3a:f8:58:fd:61:55:c1:99:cc: ee:ad:2c:f5:8f:a4:f8:63:55:2a:b6:d4:1a:24:9a:12:cd:1c: 41:29:be:4c:b9:cc:c0:1d:4c:c5:94:0c:1a:e3:c2:5a:5e:1d: 81:8b:77:31:51:e1:3a:99:cf:56:a0:a8:41:fe:62:cd:1d:74: 76:42:c9:4f:eb:68:34:83:85:3d:02:e7:2f:32:46:cc:66:a4: 4a:88:41:6a:12:f9:7f:bc:ae:c1:08:7f:0e:91:0f:2b:4d:ac: 5b:8c:d2:2b:7b:af:49:4f:e9:78:f3:24:7b:aa:58:19:fb:d6: dc:d9:ba:44:c3:15:37:71:37:85:78:20:c1:35:aa:d0:ee:cd: 66:9a:2f:97:c7:3a:bd:34:af:27:64:01:e1:ce:62:e3:57:ef: b7:74:85:fa:87:d3:a2:83:1b:e6:83:6c:6d:48:0d:35:58:07: 0a:43:fa:0f:76:17:9f:55:a6:eb:03:64:b1:f6:e5:13:84:95: 4c:da:7f:6c:38:3b:80:09:28:b9:75:1a:e8:05:e8:40:bf:ee: 2c:c7:15:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0fpoakxawXrIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVjYzg5ZDYtNzA5ZS00MzJiLTlhNmUtMjhhN2UzZmU0 YzJiMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk ZmY0ODhkZTMtMzVlNy00NjA1LTg2MTMtYTRkOWM0NWE4MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVJz7cNU0Xc1J/T4yu8zdeJ210T1p3YuYeO0 O8kvRU2unleS1xsgClWCB+JbwZFMgFQ3XTJyDiPyL87kOJj0OAQegjM6nl32WfuM dW8RnG9BiuY7Z786yQqgqx7/fZYvzfKCqBzSI+KtQFwqnDwPzLEXjBZOF2WS7Ic/ rg8cTxmp2uZqV0ZYjLbpAKFP7HC+xhqF+hzl01/rCFYVPkrJlA2U5P0AntVlnKac BoDCPGuiPyzksdWVjp40n/8LsRe437qoUVpV0mf2deGM0JqhRLCczajutGCHLVlf PR8OpUcFWh9NTN0PimxxuFo8ByFMAV1AjuOfk+kGHd94/Sc+wQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH3W5ZaBjbhriRXj0NIlGX0jv519MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNj ODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNmZTRjMmIvYTVjYzg5ZDYtNzA5ZS00 MzJiLTlhNmUtMjhhN2UzZmU0YzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVjYzg5ZDYtNzA5ZS00MzJiLTlh NmUtMjhhN2UzZmU0YzJiL2E1Y2M4OWQ2LTcwOWUtNDMyYi05YTZlLTI4YTdlM2Zl NGMyYi5jcmwwHwYDVR0jBBgwFoAUSxjjDquN2CmZTm2IMA/HVfYu+zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3 ZTNmZTRjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYQ3pKHwWoOTC3VXY7gGjJ JJ+cWq3SmI+prs/8+fORBcGMExUKt3QVjlHZWzQ6+Fj9YVXBmczurSz1j6T4Y1Uq ttQaJJoSzRxBKb5MuczAHUzFlAwa48JaXh2Bi3cxUeE6mc9WoKhB/mLNHXR2QslP 62g0g4U9AucvMkbMZqRKiEFqEvl/vK7BCH8OkQ8rTaxbjNIre69JT+l48yR7qlgZ +9bc2bpEwxU3cTeFeCDBNarQ7s1mmi+Xxzq9NK8nZAHhzmLjV++3dIX6h9Oigxvm g2xtSA01WAcKQ/oPdhefVabrA2Sx9uUThJVM2n9sODuACSi5dRroBehAv+4sxxXw -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:30 2026 by rpki-client