$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft File: a316d791-42be-46db-a9be-4bfacf99332c.mft (raw, json) Hash identifier: N7yceE8DvMC0EWRG/3Y42Gt+GGNCJ7EI/RbKMsPzxhk= Subject key identifier: 7B:97:13:C6:B0:A3:EC:E5:B3:C8:AF:E3:A6:D4:4B:CC:53:10:9D:E2 Authority key identifier: 4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 Certificate issuer: /CN=a316d791-42be-46db-a9be-4bfacf99332c Certificate serial: 010D0C9F4328584D49BED61473B6543B462622C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft Manifest number: 010D0C9F43285845833E1B28A28271A6029CFF49 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Fri 27 Mar 2026 18:00:00 +0000 Files and hashes: 1: a316d791-42be-46db-a9be-4bfacf99332c.crl (hash: h0f5/s1MrX3hYtgqJmZ2PKTO2aI1REkuj8aWbEfF24s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:14:73:b6:54:3b:46:26:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316d791-42be-46db-a9be-4bfacf99332c Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 27 18:00:00 2026 GMT Subject: CN=f4b288c8-c803-4a48-bcb5-d7959e637e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:2a:8e:03:24:29:b7:f9:0d:e7:e4:47:7c: d4:c9:a8:e1:a4:4d:55:6c:92:de:16:e6:dc:50:58: 90:11:2b:1b:dd:bf:d3:60:11:ed:90:25:82:f9:32: f1:40:b0:b8:32:73:40:a3:f3:49:f0:1f:e1:f7:81: 02:74:14:d3:70:f5:1d:73:7c:23:9d:86:2c:51:a0: 96:2a:49:88:6e:92:d0:3d:8a:6f:99:16:4c:52:4c: 27:f8:91:1f:fc:82:42:f1:a4:be:9e:2e:e8:19:d8: 20:19:7c:2d:92:c5:3b:7c:84:63:2d:0b:09:3c:ed: 03:aa:1c:c1:00:f8:84:db:bd:4b:8a:d4:b5:8d:b3: d6:da:6e:bd:78:85:77:d9:12:dd:d4:73:c7:ad:ba: f7:ac:88:96:28:ed:2d:1e:85:27:90:dc:60:96:56: 43:61:05:17:2a:59:78:61:cc:06:46:be:9a:a6:10: 40:ab:8f:c4:5f:9e:94:6a:e8:af:31:8e:6d:85:16: bb:0f:5b:b7:73:73:4d:28:93:b5:49:76:42:bb:4a: c7:88:74:96:2f:54:f2:17:49:3c:d4:c5:7a:c5:e4: f3:96:16:9e:89:5b:18:17:fe:8d:7f:82:bb:4a:52: d6:02:63:02:30:de:12:ba:b3:a7:23:06:53:08:0e: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:97:13:C6:B0:A3:EC:E5:B3:C8:AF:E3:A6:D4:4B:CC:53:10:9D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl X509v3 Authority Key Identifier: keyid:4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:77:14:20:b9:13:31:ae:da:63:aa:15:0d:48:1b:f5:f0:df: e9:43:6b:0a:6b:52:42:21:d7:43:c4:fe:da:b2:68:e4:97:b6: 44:37:0d:4d:8e:69:bb:4a:5e:c6:de:c5:f6:2f:9c:88:f3:a5: 6f:21:09:ba:d8:53:52:66:37:f1:72:6c:fc:9b:df:f6:e9:cf: 0a:f7:48:38:f7:c8:97:7c:24:4d:e0:37:77:d9:11:96:93:18: d6:40:70:13:85:f3:fc:0a:cc:ba:1a:ea:ae:68:8d:82:bf:63: aa:bb:df:ac:90:b7:e2:9d:ec:da:c5:90:53:f6:43:76:da:6b: 42:da:74:f0:92:68:9b:5b:65:65:fc:a2:16:53:69:ab:74:83: 8c:df:63:be:97:8a:8b:56:30:99:e9:cd:da:d1:da:24:7a:12: 8c:47:8a:7d:13:2b:04:51:ff:2f:11:7b:cc:eb:d6:2a:9b:2a: 27:c6:af:15:b2:a4:2e:15:66:f2:d2:bd:cd:05:f4:4b:37:b4: 1c:8c:d9:44:a6:25:7d:c6:9c:b5:70:2c:aa:b2:da:7b:6a:5d: 0a:bb:0d:5d:81:a4:b8:36:48:b0:ed:dc:6e:7b:96:d5:e4:4c: 2c:dc:d2:a4:50:48:2f:87:df:68:d6:bd:62:86:f8:92:92:e4: 0e:79:ff:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtYUc7ZUO0YmIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMxNmQ3OTEtNDJiZS00NmRiLWE5YmUtNGJmYWNmOTkz MzJjMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyNzE4MDAwMFowLzEtMCsGA1UEAxMk ZjRiMjg4YzgtYzgwMy00YTQ4LWJjYjUtZDc5NTllNjM3ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkcqjgMkKbf5DefkR3zUyajhpE1VbJLeFubc UFiQESsb3b/TYBHtkCWC+TLxQLC4MnNAo/NJ8B/h94ECdBTTcPUdc3wjnYYsUaCW KkmIbpLQPYpvmRZMUkwn+JEf/IJC8aS+ni7oGdggGXwtksU7fIRjLQsJPO0DqhzB APiE271LitS1jbPW2m69eIV32RLd1HPHrbr3rIiWKO0tHoUnkNxgllZDYQUXKll4 YcwGRr6aphBAq4/EX56UauivMY5thRa7D1u3c3NNKJO1SXZCu0rHiHSWL1TyF0k8 1MV6xeTzlhaeiVsYF/6Nf4K7SlLWAmMCMN4SurOnIwZTCA4zsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHuXE8awo+zls8iv46bUS8xTEJ3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMzE2 ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZhY2Y5OTMzMmMvYTMxNmQ3OTEtNDJiZS00 NmRiLWE5YmUtNGJmYWNmOTkzMzJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTMxNmQ3OTEtNDJiZS00NmRiLWE5 YmUtNGJmYWNmOTkzMzJjL2EzMTZkNzkxLTQyYmUtNDZkYi1hOWJlLTRiZmFjZjk5 MzMyYy5jcmwwHwYDVR0jBBgwFoAUTs6igdyVoR04bSB+yWF1lcqU8pgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMzE2ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZh Y2Y5OTMzMmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXdxQguRMxrtpjqhUNSBv1 8N/pQ2sKa1JCIddDxP7asmjkl7ZENw1Njmm7Sl7G3sX2L5yI86VvIQm62FNSZjfx cmz8m9/26c8K90g498iXfCRN4Dd32RGWkxjWQHAThfP8Csy6GuquaI2Cv2Oqu9+s kLfinezaxZBT9kN22mtC2nTwkmibW2Vl/KIWU2mrdIOM32O+l4qLVjCZ6c3a0dok ehKMR4p9EysEUf8vEXvM69Yqmyonxq8VsqQuFWby0r3NBfRLN7QcjNlEpiV9xpy1 cCyqstp7al0Kuw1dgaS4Nkiw7dxue5bV5Ews3NKkUEgvh99o1r1ihviSkuQOef+/ -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:16 2026 by rpki-client