$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft File: 71effefa-6381-4c3d-8487-95f07e37a7cf.mft (raw, json) Hash identifier: 8RKSxzEoTzU0FRn1d4CSTBMB1j/Mif+Qn96GOoU83Uk= Subject key identifier: 59:C0:9F:BD:6B:AD:B5:83:53:41:02:10:C7:F3:97:6D:61:D4:9E:CE Authority key identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Certificate issuer: /CN=71effefa-6381-4c3d-8487-95f07e37a7cf Certificate serial: 010D0C9F4328584D48950C8F5446D5E62753BA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft Manifest number: 010D0C9F4328584073A84657CD0005EEFC67F39A Signing time: Wed 25 Mar 2026 08:00:04 +0000 Manifest this update: Wed 25 Mar 2026 08:00:04 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: 71effefa-6381-4c3d-8487-95f07e37a7cf.crl (hash: 3V/HkhPD78Ktl7HI2WjBRUXs2uUmVgiwEkZ5n73bRVw=) 2: d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer (hash: MFx/Zq+SYIVCL/sxvVRDYD1z03EMN0j5Nry9JFEDSkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:95:0c:8f:54:46:d5:e6:27:53:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71effefa-6381-4c3d-8487-95f07e37a7cf Validity Not Before: Mar 25 08:00:04 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=ab11227d-3368-4801-9fd8-e3aa2781199a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:d1:34:04:61:83:e1:11:d1:6d:6e:3b:fd: 5c:c5:fe:eb:b0:b0:52:b5:72:46:fb:ce:5e:53:56: 2e:cb:06:cb:c4:af:59:ef:d4:55:09:7d:fe:e6:43: 5d:01:91:da:69:2e:81:7b:c7:dd:25:c9:d8:2a:29: 7e:29:14:43:fa:15:d2:f3:84:8f:7f:29:30:c7:d1: 0f:9d:20:28:30:a9:13:4f:0b:d5:67:17:80:41:15: 58:70:4e:d6:16:d0:e8:f9:62:c1:82:a3:6a:b6:8f: e2:b1:99:f5:af:f2:5d:63:8a:0a:67:8b:aa:48:a2: 11:7c:a8:29:75:7e:10:ed:64:f2:8e:f7:c9:fe:e6: b3:b0:ea:b4:f1:39:1e:c0:c5:40:dc:00:6e:f4:e4: 00:0c:ed:57:71:39:3c:f4:3a:c0:7c:76:c9:cd:83: 40:a0:34:ef:c7:d1:55:1f:28:d9:14:53:05:92:79: 78:aa:e5:a4:e5:fe:f6:a0:f3:35:1b:87:f3:02:d3: 93:2f:1b:2f:66:a1:e8:21:ef:8b:d3:1f:f0:b5:f1: a9:a9:eb:d8:2f:5a:ba:3c:d3:69:8b:2b:d8:45:89: b3:c3:52:07:73:e5:df:29:cc:44:10:3c:a2:58:82: d5:45:ad:67:5e:6a:fa:a9:e0:a0:a6:eb:85:a7:b3: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C0:9F:BD:6B:AD:B5:83:53:41:02:10:C7:F3:97:6D:61:D4:9E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl X509v3 Authority Key Identifier: keyid:CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f1:79:a9:ce:e1:99:cc:0f:84:73:f8:25:14:a3:24:1e:85: 11:ba:a2:6a:40:2e:be:e8:73:3a:9e:9a:cd:56:f0:81:86:03: 03:53:29:f3:4d:8d:51:00:95:f4:f5:56:71:47:5d:b3:1e:1c: 5a:67:f4:9a:d0:85:69:b9:32:1f:5d:f8:ff:6c:5a:6a:60:10: cb:f9:18:48:3a:b2:b1:07:e3:b6:37:6d:6b:0a:b0:80:7b:56: 21:63:52:8c:9e:3c:79:71:51:ea:32:5c:99:11:8e:a6:6f:e3: f9:2f:32:fb:b2:bd:f3:15:dc:67:1b:81:43:b6:3f:03:36:a3: b8:1c:63:3c:80:85:7a:be:14:dc:4f:ae:55:d4:43:3f:0e:a8: 5c:7d:ef:f9:93:92:d4:cd:a7:b4:cc:e3:0a:d0:fc:65:5d:9a: 3b:36:6b:75:05:ce:67:a9:da:87:48:4e:cb:d3:5f:73:1e:4a: f0:58:af:1f:2b:82:b9:45:6b:90:70:1c:f6:78:d4:a1:70:bd: 7f:dd:00:b9:c6:7e:44:00:40:2e:bc:79:71:f5:af:03:37:11: 0f:8d:70:66:2c:fc:a1:43:32:4b:f7:4a:ed:da:52:e2:15:53: 79:aa:b0:71:31:57:80:3d:76:97:80:69:13:25:5e:58:f3:46: 8c:22:cd:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IlQyPVEbV5idTuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlZmZlZmEtNjM4MS00YzNkLTg0ODctOTVmMDdlMzdh N2NmMB4XDTI2MDMyNTA4MDAwNFoXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk YWIxMTIyN2QtMzM2OC00ODAxLTlmZDgtZTNhYTI3ODExOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQnRNARhg+ER0W1uO/1cxf7rsLBStXJG+85e U1YuywbLxK9Z79RVCX3+5kNdAZHaaS6Be8fdJcnYKil+KRRD+hXS84SPfykwx9EP nSAoMKkTTwvVZxeAQRVYcE7WFtDo+WLBgqNqto/isZn1r/JdY4oKZ4uqSKIRfKgp dX4Q7WTyjvfJ/uazsOq08TkewMVA3ABu9OQADO1XcTk89DrAfHbJzYNAoDTvx9FV HyjZFFMFknl4quWk5f72oPM1G4fzAtOTLxsvZqHoIe+L0x/wtfGpqevYL1q6PNNp iyvYRYmzw1IHc+XfKcxEEDyiWILVRa1nXmr6qeCgpuuFp7Mw1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFnAn71rrbWDU0ECEMfzl21h1J7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MWVm ZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2UzN2E3Y2YvNzFlZmZlZmEtNjM4MS00 YzNkLTg0ODctOTVmMDdlMzdhN2NmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzFlZmZlZmEtNjM4MS00YzNkLTg0 ODctOTVmMDdlMzdhN2NmLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi5jcmwwHwYDVR0jBBgwFoAUzqZHU53go10NUniHlU3Mg/czf9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYw N2UzN2E3Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB98XmpzuGZzA+Ec/glFKMk HoURuqJqQC6+6HM6nprNVvCBhgMDUynzTY1RAJX09VZxR12zHhxaZ/Sa0IVpuTIf Xfj/bFpqYBDL+RhIOrKxB+O2N21rCrCAe1YhY1KMnjx5cVHqMlyZEY6mb+P5LzL7 sr3zFdxnG4FDtj8DNqO4HGM8gIV6vhTcT65V1EM/Dqhcfe/5k5LUzae0zOMK0Pxl XZo7Nmt1Bc5nqdqHSE7L019zHkrwWK8fK4K5RWuQcBz2eNShcL1/3QC5xn5EAEAu vHlx9a8DNxEPjXBmLPyhQzJL90rt2lLiFVN5qrBxMVeAPXaXgGkTJV5Y80aMIs3R -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:34 2026 by rpki-client