$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft File: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft (raw, json) Hash identifier: JRbasRG81t77b3rmYGxzfudNTZhJg7CboY0qjwnMfQ0= Subject key identifier: 07:7F:9F:E8:A1:6D:E0:F8:01:57:D2:68:69:98:CB:0D:09:58:D0:80 Authority key identifier: 57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F Certificate issuer: /CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Certificate serial: 010D0C9F4328584D4FAD978A0B12CA5115A86660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft Manifest number: 010D0C9F4328584583AA4B32D28F2848E443194B Signing time: Fri 27 Mar 2026 21:00:09 +0000 Manifest this update: Fri 27 Mar 2026 21:00:09 +0000 Manifest next update: Sun 29 Mar 2026 21:00:00 +0000 Files and hashes: 1: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl (hash: AlJEij/TJY9AygiZ9iYZNK9O87/Y70I5XmUF/3yTmxs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:ad:97:8a:0b:12:ca:51:15:a8:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Validity Not Before: Mar 27 21:00:09 2026 GMT Not After : Mar 29 21:00:00 2026 GMT Subject: CN=f17628aa-7863-4fdc-bbbb-2d86bd22413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:70:ee:10:30:e6:c3:04:d1:73:db:ac:12: 4b:1d:a2:21:5a:4c:53:11:1e:56:ba:4b:8b:0f:f4: 69:92:20:0e:0b:fc:c1:13:95:2a:e9:71:80:0e:d9: 20:78:13:4b:4c:32:4b:ea:39:58:2d:b2:ac:ff:86: 04:92:a0:79:44:f5:c3:38:24:6d:e2:5e:f7:5a:06: 15:01:08:fb:9c:fd:1c:3e:39:a1:81:ef:32:5f:8b: 6d:03:2d:07:6c:75:ba:bf:68:f2:08:c6:d3:cc:fd: 57:31:ec:bf:8d:13:7a:ad:ac:61:c5:39:c3:25:b9: f1:aa:86:33:26:a5:54:5f:bc:f0:c3:25:0e:ab:85: d7:93:fa:29:cd:9d:6c:df:ac:69:87:eb:9c:b9:a2: fe:de:88:19:ab:26:f6:65:aa:cc:8e:49:a2:e3:6f: e6:4f:92:1c:03:49:97:9c:c6:bb:78:4b:78:04:0e: 61:e4:bd:5f:90:fa:b3:12:59:3a:22:d3:2e:d1:77: 9b:b2:ae:a4:fc:db:29:1c:97:85:68:f6:98:15:d1: e4:52:78:bd:59:d2:79:ce:e6:c6:c8:1c:eb:e7:06: 4c:73:04:57:74:12:fe:96:b0:ec:51:17:1a:f6:3a: 54:3b:cc:53:62:3c:52:6a:8d:35:2b:ca:3f:49:8f: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7F:9F:E8:A1:6D:E0:F8:01:57:D2:68:69:98:CB:0D:09:58:D0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl X509v3 Authority Key Identifier: keyid:57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5f:46:6a:82:8e:90:47:40:44:72:1e:34:48:de:df:e9:13: 41:ae:51:88:c1:94:6e:c7:22:2d:7d:92:c9:51:eb:c2:9b:e5: c9:51:66:d4:fa:9d:c0:eb:2e:7f:d0:3e:88:2f:3e:18:05:d5: 83:96:32:9d:f9:d4:6c:04:8b:ad:22:b0:d2:47:0d:f3:12:91: c5:5f:e0:83:b4:9b:1e:01:26:1d:31:5e:78:a9:45:23:cf:3a: 56:87:fc:b2:fb:be:6a:8f:cf:bd:b3:3f:af:fa:f9:e4:90:ed: f9:d2:05:26:90:e4:fc:1d:cd:d7:4a:38:70:7b:9c:81:fa:14: fe:41:0e:51:28:35:51:7a:c6:cd:32:11:52:52:89:98:4c:49: 9c:2e:c0:b2:fb:c8:c9:ea:71:9e:85:28:81:08:fa:e3:25:f7: a1:28:39:8e:47:60:10:63:3c:86:3f:6c:af:a3:ee:5f:38:c8: 40:2c:ec:2c:08:e3:d9:9e:c4:3b:9f:5d:d3:2a:d6:c9:c0:4d: 81:7c:9d:42:a9:60:c4:60:56:1c:be:bc:78:69:a0:b5:30:20: ae:ee:9e:68:39:79:6b:83:bc:2c:48:a6:98:6c:0f:41:bd:aa: 0a:0b:b1:03:dc:78:c1:fb:57:87:bf:fb:dc:66:cd:e3:8b:2b: 4f:4e:19:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PrZeKCxLKURWoZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UyMjlkOWEtZGZkNS00YTY5LWJlOTYtMmYyN2E2NjBk NGI1MB4XDTI2MDMyNzIxMDAwOVoXDTI2MDMyOTIxMDAwMFowLzEtMCsGA1UEAxMk ZjE3NjI4YWEtNzg2My00ZmRjLWJiYmItMmQ4NmJkMjI0MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT5w7hAw5sME0XPbrBJLHaIhWkxTER5WukuL D/RpkiAOC/zBE5Uq6XGADtkgeBNLTDJL6jlYLbKs/4YEkqB5RPXDOCRt4l73WgYV AQj7nP0cPjmhge8yX4ttAy0HbHW6v2jyCMbTzP1XMey/jRN6raxhxTnDJbnxqoYz JqVUX7zwwyUOq4XXk/opzZ1s36xph+ucuaL+3ogZqyb2ZarMjkmi42/mT5IcA0mX nMa7eEt4BA5h5L1fkPqzElk6ItMu0Xebsq6k/NspHJeFaPaYFdHkUni9WdJ5zubG yBzr5wZMcwRXdBL+lrDsURca9jpUO8xTYjxSao01K8o/SY8dYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAd/n+ihbeD4AVfSaGmYyw0JWNCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTIy OWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3YTY2MGQ0YjUvM2UyMjlkOWEtZGZkNS00 YTY5LWJlOTYtMmYyN2E2NjBkNGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UyMjlkOWEtZGZkNS00YTY5LWJl OTYtMmYyN2E2NjBkNGI1LzNlMjI5ZDlhLWRmZDUtNGE2OS1iZTk2LTJmMjdhNjYw ZDRiNS5jcmwwHwYDVR0jBBgwFoAUVy7TFLcgwz8+Gz+htv426X09sJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTIyOWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3 YTY2MGQ0YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGX0Zqgo6QR0BEch40SN7f 6RNBrlGIwZRuxyItfZLJUevCm+XJUWbU+p3A6y5/0D6ILz4YBdWDljKd+dRsBIut IrDSRw3zEpHFX+CDtJseASYdMV54qUUjzzpWh/yy+75qj8+9sz+v+vnkkO350gUm kOT8Hc3XSjhwe5yB+hT+QQ5RKDVResbNMhFSUomYTEmcLsCy+8jJ6nGehSiBCPrj JfehKDmOR2AQYzyGP2yvo+5fOMhALOwsCOPZnsQ7n13TKtbJwE2BfJ1CqWDEYFYc vrx4aaC1MCCu7p5oOXlrg7wsSKaYbA9BvaoKC7ED3HjB+1eHv/vcZs3jiytPThky -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:11 2026 by rpki-client