$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.mft File: 3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.mft (raw, json) Hash identifier: kKb7MbbwIWIQljAutvzSNr8SFq4cAwtjajvsQl8UNe4= Subject key identifier: 98:C9:6A:24:89:07:68:A1:D9:E8:2D:AD:58:BF:81:CF:66:FD:50:60 Authority key identifier: 45:96:1A:EA:A5:A8:C7:60:FE:C1:33:41:5B:13:90:78:B2:93:4A:56 Certificate issuer: /CN=3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1 Certificate serial: 010D0C9F4328584D4F54335307AC500A0CCC4400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.mft Manifest number: 010D0C9F4328584073A8203DC60EAE99EF18CB9B Signing time: Fri 27 Mar 2026 18:00:04 +0000 Manifest this update: Fri 27 Mar 2026 18:00:04 +0000 Manifest next update: Sun 29 Mar 2026 18:00:00 +0000 Files and hashes: 1: 3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.crl (hash: z65272Xh1mjGSjZNjTzDpioPMbnZNfeErTJVM/eGIqE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:54:33:53:07:ac:50:0a:0c:cc:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1 Validity Not Before: Mar 27 18:00:04 2026 GMT Not After : Mar 29 18:00:00 2026 GMT Subject: CN=9680e19f-c3f8-4b98-8939-6d2d2a54e717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:22:2d:7c:ef:04:cf:cd:32:a5:f0:e0:a6: 9f:c1:93:af:9b:b0:c4:91:70:35:72:41:04:78:a1: 04:7a:ea:5f:84:1b:52:aa:61:65:a3:b7:36:c0:72: 5f:31:06:79:ab:b5:e5:96:bb:69:52:23:66:6a:ee: f3:a3:3e:75:0b:11:12:60:35:b9:b3:aa:9f:ce:7a: 5d:4f:d9:d3:b9:6a:01:73:02:97:8c:b1:42:46:44: 8f:30:08:64:7d:f7:db:eb:e5:bd:f6:dc:33:4b:4f: 41:b7:13:8c:79:22:f2:bf:a0:6f:04:ae:e2:35:61: d7:aa:cb:97:46:a5:32:b8:be:0b:5a:cb:9e:05:22: 97:56:3b:18:2b:5a:da:79:04:0c:42:0b:c4:ba:d4: cd:fb:34:e2:4a:d0:92:81:8d:28:f4:e2:74:82:f3: 08:7a:3d:cf:88:f2:c9:c6:73:29:2a:d0:4d:42:02: 84:a1:a8:c2:60:15:7f:a8:82:f5:38:3f:55:25:72: 5c:41:8e:0d:81:49:7b:ba:cc:19:4b:00:32:c3:dd: f5:6a:46:54:0f:f1:dd:c0:bd:7b:9f:81:1f:4a:5b: d0:81:60:5e:41:d6:23:47:5e:eb:10:8d:9b:47:c7: f5:6d:c1:c0:99:92:99:b0:52:67:24:f1:5d:c0:fa: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:6A:24:89:07:68:A1:D9:E8:2D:AD:58:BF:81:CF:66:FD:50:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.crl X509v3 Authority Key Identifier: keyid:45:96:1A:EA:A5:A8:C7:60:FE:C1:33:41:5B:13:90:78:B2:93:4A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3cc3649d-60ea-43a2-b1bf-2b0e1b4b15a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:30:5f:9e:5f:5f:fe:7a:5a:84:73:d1:16:11:9d:cd:92:73: 5f:70:00:cd:26:f1:60:c3:28:7d:5e:1d:91:6a:0b:3e:7d:6a: 12:59:ec:53:a6:2b:b6:f1:0a:e8:15:39:5a:a9:a5:a5:93:83: 11:5f:e7:2f:74:e0:4d:99:a9:08:57:c0:c3:ca:45:67:b2:68: 20:2e:84:cd:07:d5:0b:09:ed:4d:77:ab:48:a6:98:5c:e1:24: 49:74:32:14:1f:17:2d:47:0d:9b:c4:21:d4:d6:44:58:dc:9e: 94:d3:3c:e9:04:37:58:72:8a:66:9b:a6:90:da:a7:24:1d:b4: a9:d4:09:20:67:de:b7:54:5c:bb:57:65:04:56:d9:3b:2c:3b: 69:67:5a:49:ea:fa:bb:e2:cd:a3:2c:be:6c:35:cc:51:a9:7e: 35:e3:92:89:18:68:a6:00:5a:8e:ad:6f:d0:91:2b:10:db:d2: 45:b1:8e:8c:23:14:3a:f8:a4:72:2c:7d:af:b4:2d:c2:e0:d9: bd:bb:75:16:29:5a:cb:81:24:f8:86:2e:b1:58:ef:1c:30:61: 79:f8:3d:41:1c:e4:06:4e:51:6b:db:24:c7:3b:a9:66:df:e2: 16:04:4c:b8:64:d7:a2:d9:5a:d4:98:1e:97:74:3f:ea:9c:e8: 77:b9:df:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PVDNTB6xQCgzMRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjMzY0OWQtNjBlYS00M2EyLWIxYmYtMmIwZTFiNGIx NWExMB4XDTI2MDMyNzE4MDAwNFoXDTI2MDMyOTE4MDAwMFowLzEtMCsGA1UEAxMk OTY4MGUxOWYtYzNmOC00Yjk4LTg5MzktNmQyZDJhNTRlNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0YiLXzvBM/NMqXw4KafwZOvm7DEkXA1ckEE eKEEeupfhBtSqmFlo7c2wHJfMQZ5q7XllrtpUiNmau7zoz51CxESYDW5s6qfznpd T9nTuWoBcwKXjLFCRkSPMAhkfffb6+W99twzS09BtxOMeSLyv6BvBK7iNWHXqsuX RqUyuL4LWsueBSKXVjsYK1raeQQMQgvEutTN+zTiStCSgY0o9OJ0gvMIej3PiPLJ xnMpKtBNQgKEoajCYBV/qIL1OD9VJXJcQY4NgUl7uswZSwAyw931akZUD/HdwL17 n4EfSlvQgWBeQdYjR17rEI2bR8f1bcHAmZKZsFJnJPFdwPooNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJjJaiSJB2ih2egtrVi/gc9m/VBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Mz NjQ5ZC02MGVhLTQzYTItYjFiZi0yYjBlMWI0YjE1YTEvM2NjMzY0OWQtNjBlYS00 M2EyLWIxYmYtMmIwZTFiNGIxNWExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjMzY0OWQtNjBlYS00M2EyLWIx YmYtMmIwZTFiNGIxNWExLzNjYzM2NDlkLTYwZWEtNDNhMi1iMWJmLTJiMGUxYjRi MTVhMS5jcmwwHwYDVR0jBBgwFoAURZYa6qWox2D+wTNBWxOQeLKTSlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2MzNjQ5ZC02MGVhLTQzYTItYjFiZi0yYjBl MWI0YjE1YTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrMF+eX1/+elqEc9EWEZ3N knNfcADNJvFgwyh9Xh2Rags+fWoSWexTpiu28QroFTlaqaWlk4MRX+cvdOBNmakI V8DDykVnsmggLoTNB9ULCe1Nd6tIpphc4SRJdDIUHxctRw2bxCHU1kRY3J6U0zzp BDdYcopmm6aQ2qckHbSp1AkgZ963VFy7V2UEVtk7LDtpZ1pJ6vq74s2jLL5sNcxR qX4145KJGGimAFqOrW/QkSsQ29JFsY6MIxQ6+KRyLH2vtC3C4Nm9u3UWKVrLgST4 hi6xWO8cMGF5+D1BHOQGTlFr2yTHO6lm3+IWBEy4ZNei2VrUmB6XdD/qnOh3ud/Z -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:11 2026 by rpki-client