$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft File: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft (raw, json) Hash identifier: DbSpMKY1zBaqO12/aiqD2picp6bw93hA74BOs3ckSds= Subject key identifier: D2:91:B4:0F:F4:98:9E:02:EC:CA:33:29:52:19:08:6A:41:B2:3C:BA Authority key identifier: 57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F Certificate issuer: /CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Certificate serial: 010D0C9F4328584DD01906C2D15BCF41C8C12920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft Manifest number: 010D0C9F4328584583AA4B32D28F2848E4431979 Signing time: Tue 12 May 2026 21:00:03 +0000 Manifest this update: Tue 12 May 2026 21:00:03 +0000 Manifest next update: Thu 14 May 2026 21:00:00 +0000 Files and hashes: 1: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl (hash: UEm2hmzMNs4hLrCYBtc/wHBEqX4DOU6m3BxDV+uxRo0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:19:06:c2:d1:5b:cf:41:c8:c1:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Validity Not Before: May 12 21:00:03 2026 GMT Not After : May 14 21:00:00 2026 GMT Subject: CN=8bf93ecb-72ea-4112-a9bd-d69d583fcbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:a8:63:64:56:42:28:dd:09:bf:c5:54:7e: 5f:01:41:36:e0:61:17:8a:b6:60:6f:83:f6:3a:7f: 51:66:19:af:0f:11:fe:38:d9:04:aa:64:97:3b:96: 33:16:80:3e:3c:dc:9b:a9:e2:be:44:33:e2:5d:28: 04:89:fb:9e:98:e1:79:07:83:82:8e:fb:6f:ab:75: 3f:a3:c3:3c:58:5e:b7:f9:a5:54:0c:b5:c2:de:0a: e2:04:02:03:f8:a1:41:78:95:a6:aa:59:6e:78:0f: db:35:58:c6:50:35:28:66:33:95:01:ea:5e:40:79: b4:07:ff:18:ad:73:82:77:25:be:07:80:c7:6a:92: 71:24:5c:4c:88:6d:0d:67:53:96:bb:e6:8b:31:c5: f0:18:ff:06:b8:9c:7c:d3:a4:d9:e1:43:13:c3:aa: 8d:3b:03:9e:f6:db:b6:33:af:32:34:08:79:56:ec: 9e:8d:b1:8b:3f:f8:a4:40:27:ea:ae:96:dc:31:ad: cd:58:e0:f1:b0:10:1d:0d:9e:96:6a:39:c6:41:3e: 07:8f:9a:6b:b4:ff:a5:a8:52:17:0b:02:bb:e1:4d: c6:0a:15:a8:00:92:6d:26:43:31:4d:f7:e1:ad:1e: 7c:96:25:d0:50:a0:07:89:7a:9c:87:d4:e5:39:f6: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:91:B4:0F:F4:98:9E:02:EC:CA:33:29:52:19:08:6A:41:B2:3C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl X509v3 Authority Key Identifier: keyid:57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c6:2b:ac:df:bd:30:d7:2a:c2:b2:41:19:54:cd:a9:a2:5c: b4:dc:fb:d8:28:3b:52:e3:29:6e:10:a0:77:6b:22:41:fa:ee: 3a:26:29:03:c5:ac:11:25:46:13:65:92:d9:8d:76:f0:cd:d2: ad:4c:0d:c0:4e:81:82:be:15:1c:62:bc:1e:99:14:72:de:a8: dd:1e:e2:c0:8e:59:37:2e:65:4a:f1:7e:54:48:a6:00:9f:7b: 1d:fd:9e:90:42:33:64:b3:04:ee:e8:d4:d4:38:09:a7:00:48: fe:d4:21:41:48:48:fb:6d:e2:be:93:35:75:21:89:c0:7b:fe: 72:4c:b1:3e:78:17:5f:36:df:9f:74:60:dd:74:96:21:b6:d2: 43:39:41:6d:28:e6:c5:6e:17:e2:09:d5:a3:ee:91:b7:0f:aa: 1e:8c:93:eb:1e:d4:7a:ef:ab:d7:3a:e3:40:a4:7d:54:18:cc: 9e:b5:90:3b:b5:af:05:c1:79:ba:6b:86:cc:c2:b2:7a:c7:8a: 34:ee:49:f6:8b:c7:58:82:1a:5a:70:75:6b:21:2f:ee:f1:a8: ac:6a:21:f2:40:13:eb:c0:69:a2:33:20:ad:3d:dd:13:59:ab: d3:a3:e3:ec:cf:ba:39:b5:01:77:60:ee:3b:7c:64:bf:64:42: 9a:6c:8d:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QGQbC0VvPQcjBKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UyMjlkOWEtZGZkNS00YTY5LWJlOTYtMmYyN2E2NjBk NGI1MB4XDTI2MDUxMjIxMDAwM1oXDTI2MDUxNDIxMDAwMFowLzEtMCsGA1UEAxMk OGJmOTNlY2ItNzJlYS00MTEyLWE5YmQtZDY5ZDU4M2ZjYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgGoY2RWQijdCb/FVH5fAUE24GEXirZgb4P2 On9RZhmvDxH+ONkEqmSXO5YzFoA+PNybqeK+RDPiXSgEifuemOF5B4OCjvtvq3U/ o8M8WF63+aVUDLXC3griBAID+KFBeJWmqllueA/bNVjGUDUoZjOVAepeQHm0B/8Y rXOCdyW+B4DHapJxJFxMiG0NZ1OWu+aLMcXwGP8GuJx806TZ4UMTw6qNOwOe9tu2 M68yNAh5VuyejbGLP/ikQCfqrpbcMa3NWODxsBAdDZ6WajnGQT4Hj5prtP+lqFIX CwK74U3GChWoAJJtJkMxTffhrR58liXQUKAHiXqch9TlOfYLIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNKRtA/0mJ4C7MozKVIZCGpBsjy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTIy OWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3YTY2MGQ0YjUvM2UyMjlkOWEtZGZkNS00 YTY5LWJlOTYtMmYyN2E2NjBkNGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UyMjlkOWEtZGZkNS00YTY5LWJl OTYtMmYyN2E2NjBkNGI1LzNlMjI5ZDlhLWRmZDUtNGE2OS1iZTk2LTJmMjdhNjYw ZDRiNS5jcmwwHwYDVR0jBBgwFoAUVy7TFLcgwz8+Gz+htv426X09sJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTIyOWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3 YTY2MGQ0YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClxius370w1yrCskEZVM2p oly03PvYKDtS4yluEKB3ayJB+u46JikDxawRJUYTZZLZjXbwzdKtTA3AToGCvhUc YrwemRRy3qjdHuLAjlk3LmVK8X5USKYAn3sd/Z6QQjNkswTu6NTUOAmnAEj+1CFB SEj7beK+kzV1IYnAe/5yTLE+eBdfNt+fdGDddJYhttJDOUFtKObFbhfiCdWj7pG3 D6oejJPrHtR676vXOuNApH1UGMyetZA7ta8FwXm6a4bMwrJ6x4o07kn2i8dYghpa cHVrIS/u8aisaiHyQBPrwGmiMyCtPd0TWavTo+Psz7o5tQF3YO47fGS/ZEKabI2p -----END CERTIFICATE-----Generated at Wed May 13 04:43:55 2026 by rpki-client