$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft File: 57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft (raw, json) Hash identifier: 1LRT3YmYana317u/zyWktNEcMDPsnA17vDsAu1nlfBo= Subject key identifier: 32:DD:29:5F:A3:E5:08:42:ED:75:7D:5F:17:C5:63:6B:83:D6:F3:72 Authority key identifier: 2B:79:33:F6:6D:60:F2:96:CB:5D:AD:01:DF:46:AC:06:6F:64:AA:C0 Certificate issuer: /CN=57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8 Certificate serial: 010D0C9F4328584D49DC9E25BACC566BD07C4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft Manifest number: 010D0C9F4328584073A824281CD47AF813E3C999 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.crl (hash: 7VpHzdCpBSduvAp7vrClpzqFOQUDq4cRf6fLnzuq40E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9e:25:ba:cc:56:6b:d0:7c:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=3c031fb6-f142-41e8-9877-140cd57f3c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:a5:65:77:2e:51:d2:f5:6c:cd:c5:cc:d1: f5:13:56:9b:02:61:ef:98:90:3e:a4:e5:d2:37:f0: 9b:f4:d1:68:e5:db:35:ef:9f:5e:c4:e5:12:48:af: 88:51:2a:30:7f:9b:83:99:29:d1:5c:c0:65:87:91: 26:fe:73:9b:fa:53:0a:05:3c:ba:72:48:22:b3:a3: 2e:cf:e5:bd:d4:bb:7a:0e:7c:e7:2b:95:32:c7:a2: 2f:f1:51:9d:69:bf:25:85:d1:38:88:0c:5a:06:51: 71:37:16:da:cd:db:f3:41:cc:64:aa:78:eb:1c:e9: 2e:e2:c5:7b:0b:15:63:3a:ee:8e:48:5f:2a:c9:0a: 73:42:c3:c2:78:64:05:76:bd:c7:f2:b1:d5:7a:c2: 9b:8d:a4:b6:2f:18:45:11:91:20:a1:7b:b5:4e:da: 8f:b5:ce:ba:f5:d1:6a:e2:e9:91:96:09:ef:00:52: b3:70:c9:33:db:af:88:d9:85:c4:bb:82:81:64:14: 93:76:99:9a:fc:bb:ae:39:da:a4:3d:37:25:2e:0d: 71:cb:36:40:2f:68:fd:7b:54:1c:89:b1:42:50:fe: d0:0e:99:ef:0f:70:20:94:4b:0e:62:a1:a1:56:59: bf:fc:03:24:47:a4:9d:78:8d:f0:a7:86:a9:e0:7e: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DD:29:5F:A3:E5:08:42:ED:75:7D:5F:17:C5:63:6B:83:D6:F3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.crl X509v3 Authority Key Identifier: keyid:2B:79:33:F6:6D:60:F2:96:CB:5D:AD:01:DF:46:AC:06:6F:64:AA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ed:8e:63:54:f1:93:72:9b:14:27:e5:12:93:7c:68:89:d1: 53:42:4c:53:d4:65:5f:27:d2:78:68:48:81:93:83:ca:56:4e: a5:68:36:40:fb:cf:0d:a5:b4:75:f1:a7:93:ed:cd:cc:69:94: a3:90:a4:b9:a2:cc:b0:7e:53:c3:d5:2d:2b:81:a1:5f:f7:0d: d8:c7:64:44:f4:59:56:3f:13:55:ea:ff:14:6c:76:f9:48:08: 01:cd:8f:d6:89:ed:8b:46:0b:b6:8b:e9:db:2a:e1:ab:8d:04: 86:b3:bd:b7:90:2d:8c:35:58:15:53:c1:48:44:2e:fb:46:b0: 25:d7:1c:ae:8f:89:e6:bf:62:70:c3:09:ef:90:1c:0d:24:67: 7f:34:3a:1c:6e:56:12:37:a3:c0:81:68:e6:24:a5:bf:1e:df: 34:86:88:94:b7:f2:6f:04:bc:1b:d6:e3:3f:4e:a1:70:76:56: fc:7c:1b:b8:85:e0:40:4f:d5:a2:cf:5c:03:da:71:34:e4:c9: a6:84:d9:3e:1d:82:0b:51:c1:76:19:1c:e1:25:37:84:da:0c: e2:9f:ee:5a:14:15:ca:1e:37:d8:25:77:3d:86:6f:d2:13:3c: 42:88:fd:d9:11:ff:40:39:20:d9:e0:ef:db:aa:e8:63:69:de: 0d:d6:82:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J4lusxWa9B8TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdhMWYyY2QtMGMyMi00ZWU0LTg1MzMtZDBlNGJkMzRl ZmI4MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk M2MwMzFmYjYtZjE0Mi00MWU4LTk4NzctMTQwY2Q1N2YzYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif+lZXcuUdL1bM3FzNH1E1abAmHvmJA+pOXS N/Cb9NFo5ds1759exOUSSK+IUSowf5uDmSnRXMBlh5Em/nOb+lMKBTy6ckgis6Mu z+W91Lt6DnznK5Uyx6Iv8VGdab8lhdE4iAxaBlFxNxbazdvzQcxkqnjrHOku4sV7 CxVjOu6OSF8qyQpzQsPCeGQFdr3H8rHVesKbjaS2LxhFEZEgoXu1TtqPtc669dFq 4umRlgnvAFKzcMkz26+I2YXEu4KBZBSTdpma/LuuOdqkPTclLg1xyzZAL2j9e1Qc ibFCUP7QDpnvD3AglEsOYqGhVlm//AMkR6SdeI3wp4ap4H4GDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDLdKV+j5QhC7XV9XxfFY2uD1vNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Ex ZjJjZC0wYzIyLTRlZTQtODUzMy1kMGU0YmQzNGVmYjgvNTdhMWYyY2QtMGMyMi00 ZWU0LTg1MzMtZDBlNGJkMzRlZmI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdhMWYyY2QtMGMyMi00ZWU0LTg1 MzMtZDBlNGJkMzRlZmI4LzU3YTFmMmNkLTBjMjItNGVlNC04NTMzLWQwZTRiZDM0 ZWZiOC5jcmwwHwYDVR0jBBgwFoAUK3kz9m1g8pbLXa0B30asBm9kqsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2ExZjJjZC0wYzIyLTRlZTQtODUzMy1kMGU0 YmQzNGVmYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK7Y5jVPGTcpsUJ+USk3xo idFTQkxT1GVfJ9J4aEiBk4PKVk6laDZA+88NpbR18aeT7c3MaZSjkKS5osywflPD 1S0rgaFf9w3Yx2RE9FlWPxNV6v8UbHb5SAgBzY/Wie2LRgu2i+nbKuGrjQSGs723 kC2MNVgVU8FIRC77RrAl1xyuj4nmv2JwwwnvkBwNJGd/NDocblYSN6PAgWjmJKW/ Ht80hoiUt/JvBLwb1uM/TqFwdlb8fBu4heBAT9Wiz1wD2nE05MmmhNk+HYILUcF2 GRzhJTeE2gzin+5aFBXKHjfYJXc9hm/SEzxCiP3ZEf9AOSDZ4O/bquhjad4N1oIO -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:45 2026 by rpki-client