$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: qnLf/6+TTU4G06hht7LnIZ8kvzM3BxUTv0CC0T3WP8I= Subject key identifier: 7D:4E:90:76:90:45:7E:C6:19:8B:70:47:A4:55:03:97:D9:E3:91:1A Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584D48598BD4A10F39EA61B1DFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88D98 Signing time: Wed 25 Mar 2026 06:00:09 +0000 Manifest this update: Wed 25 Mar 2026 06:00:09 +0000 Manifest next update: Sat 28 Mar 2026 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: vrk5BPK5Kzo161O6H6Pub71KqyTA5Siixl4GyNwqs3E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:59:8b:d4:a1:0f:39:ea:61:b1:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Mar 25 06:00:09 2026 GMT Not After : Mar 28 06:00:00 2026 GMT Subject: CN=9c50ae98-29df-4c83-9161-e1c5ca3cc37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:a4:fb:d7:aa:d4:f9:8d:18:40:a4:c1:e6: 6d:77:c6:1d:02:52:72:fa:30:bd:ae:74:ff:5e:3c: 56:d0:59:e4:85:89:b5:ab:c5:48:54:87:02:d7:bd: 23:8f:3e:05:0b:77:d0:27:22:24:53:b6:9a:34:a0: 78:de:4d:4d:72:30:a4:31:71:82:69:ef:67:4f:c6: 22:9e:f2:5a:39:af:65:04:ee:60:21:4f:ac:73:03: d5:d8:29:89:e8:7d:83:4a:26:f5:eb:5e:79:6f:69: 60:eb:40:22:0b:b6:c7:8a:00:ab:1a:3a:84:d9:80: ab:01:7b:af:b7:2b:3a:49:d2:2f:c3:08:bd:c7:a1: d5:54:ea:20:e9:b9:f3:b1:1f:db:05:0c:45:4e:41: de:59:d7:08:88:29:fc:37:35:35:c4:01:ac:6b:15: 97:b9:90:14:37:d9:f9:5f:56:c7:01:ec:35:c7:45: ba:54:47:bd:dc:90:8e:aa:75:90:cd:4f:db:20:7a: 3f:d7:b3:89:e8:b3:18:93:21:66:41:c5:f6:9c:7d: 95:45:0e:2c:fc:aa:2d:dc:4a:62:9b:d6:cb:10:46: 80:30:a8:cc:3a:7e:8e:69:78:d1:db:ca:20:57:f9: 4a:7b:69:44:5b:93:62:9f:f8:3a:2e:5d:d5:9c:f9: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:90:76:90:45:7E:C6:19:8B:70:47:A4:55:03:97:D9:E3:91:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b7:b3:63:89:31:14:43:99:c6:06:cc:91:b5:2c:7a:14:eb: 16:c8:d1:42:57:87:95:7f:57:3a:7d:4e:60:ee:a1:bf:7c:c7: ff:35:de:b3:cd:83:1b:91:95:61:15:79:28:19:8c:8e:2b:9e: e5:66:2d:0e:16:d5:de:bc:5e:59:4c:e0:41:58:aa:98:16:ed: 80:f7:84:21:a2:18:81:66:b6:f5:63:6c:00:0a:3f:c0:1e:af: 83:81:23:04:bc:e1:fd:6a:3c:76:23:9b:7f:55:cb:f1:8f:9a: 1b:1f:8e:4c:35:42:20:09:38:6c:2d:d1:57:12:4f:d9:6f:da: 69:8d:c8:44:d0:37:dd:ee:59:33:c2:d7:67:9b:60:32:41:6d: e2:be:e1:b7:24:0c:ae:1f:dc:78:75:d0:3b:0a:9d:95:cb:95: e8:69:79:bc:85:0f:47:86:f7:ca:73:5b:60:b9:8a:b4:38:05: af:fc:ce:f1:2f:c0:de:46:8f:9a:69:48:e8:e4:eb:a7:6f:6a: 21:cd:38:a5:0b:c2:19:85:c0:5f:6c:42:7a:17:20:9a:0f:a4: 49:d0:a4:ae:3d:e6:2e:10:0b:21:df:ab:2b:8b:98:d5:a4:6d: 0f:9c:a6:bd:c2:49:c6:da:21:1e:c8:99:28:2f:48:2f:05:57: 44:2c:c8:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IWYvUoQ856mGx38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI2MDMyNTA2MDAwOVoXDTI2MDMyODA2MDAwMFowLzEtMCsGA1UEAxMk OWM1MGFlOTgtMjlkZi00YzgzLTkxNjEtZTFjNWNhM2NjMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlek+9eq1PmNGECkweZtd8YdAlJy+jC9rnT/ XjxW0FnkhYm1q8VIVIcC170jjz4FC3fQJyIkU7aaNKB43k1NcjCkMXGCae9nT8Yi nvJaOa9lBO5gIU+scwPV2CmJ6H2DSib16155b2lg60AiC7bHigCrGjqE2YCrAXuv tys6SdIvwwi9x6HVVOog6bnzsR/bBQxFTkHeWdcIiCn8NzU1xAGsaxWXuZAUN9n5 X1bHAew1x0W6VEe93JCOqnWQzU/bIHo/17OJ6LMYkyFmQcX2nH2VRQ4s/Kot3Epi m9bLEEaAMKjMOn6OaXjR28ogV/lKe2lEW5Nin/g6Ll3VnPkxIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH1OkHaQRX7GGYtwR6RVA5fZ45EaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCt7NjiTEUQ5nGBsyRtSx6 FOsWyNFCV4eVf1c6fU5g7qG/fMf/Nd6zzYMbkZVhFXkoGYyOK57lZi0OFtXevF5Z TOBBWKqYFu2A94QhohiBZrb1Y2wACj/AHq+DgSMEvOH9ajx2I5t/Vcvxj5obH45M NUIgCThsLdFXEk/Zb9ppjchE0Dfd7lkzwtdnm2AyQW3ivuG3JAyuH9x4ddA7Cp2V y5XoaXm8hQ9HhvfKc1tguYq0OAWv/M7xL8DeRo+aaUjo5Ounb2ohzTilC8IZhcBf bEJ6FyCaD6RJ0KSuPeYuEAsh36sri5jVpG0PnKa9wknG2iEeyJkoL0gvBVdELMhF -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:24 2026 by rpki-client