$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft File: e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft (raw, json) Hash identifier: kyh2FXCl/9111OZ8yWrRATBj+rWzA0gpk8YfNEhsDv4= Subject key identifier: 57:ED:1C:B8:BE:F6:62:4A:B1:0D:CE:5E:7C:7A:26:CD:58:52:06:8B Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Certificate serial: 010D0C9F4328584D4929F26DF7EECFC4D3181C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft Manifest number: 010D0C9F4328584073A855E0A9B391A20808E5A0 Signing time: Wed 25 Mar 2026 13:00:04 +0000 Manifest this update: Wed 25 Mar 2026 13:00:04 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl (hash: IxV8URA3pq2MR4ByKkfKOxGEq6YW+7wSNU5Giei80lE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:29:f2:6d:f7:ee:cf:c4:d3:18:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Validity Not Before: Mar 25 13:00:04 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=616885f4-0824-49ee-a876-175954ba6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0f:4d:44:db:ff:3c:d3:97:07:0d:af:af:4a: ef:d4:45:c0:e9:1b:e5:35:4f:6d:6a:e5:b1:00:28: 21:4c:cf:bc:4c:5a:2a:cf:76:76:06:5c:f7:1e:ba: a5:77:2d:b7:a8:75:21:48:49:2a:2a:43:58:80:62: 61:01:e2:39:e3:2a:72:4a:c6:da:20:cf:b3:b1:8f: f7:f2:23:f9:de:85:f7:ec:11:5d:23:42:14:32:55: 02:e2:1a:19:31:11:14:af:8c:e7:ba:89:fa:19:26: 8b:cb:ec:2d:ca:79:ce:20:8c:0f:7b:0b:59:ce:6a: f7:01:d4:1b:f5:80:5b:12:dd:7b:f0:30:7b:20:29: aa:51:e3:60:c4:4e:0a:5c:31:e2:03:9b:ff:40:4f: 20:c6:58:12:53:23:52:44:fd:85:9e:19:ce:72:4c: f8:f1:bf:ba:fa:1f:4f:af:7a:87:30:dd:dd:0b:28: 5a:86:f0:b4:75:f8:c1:d3:a0:b5:71:3c:82:54:b8: 4b:ce:53:88:fc:61:2a:5f:da:51:c2:fe:07:97:c0: 6b:1b:e6:d6:5b:73:44:9a:41:8f:9e:45:20:6c:09: 76:f2:0d:44:bc:89:84:40:11:12:5b:1f:bd:99:c0: b7:ea:69:ba:bf:c0:b8:ad:cd:a0:fd:2b:31:03:9d: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:ED:1C:B8:BE:F6:62:4A:B1:0D:CE:5E:7C:7A:26:CD:58:52:06:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl X509v3 Authority Key Identifier: keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cd:82:4c:c0:49:c7:4b:8b:9b:52:4c:bb:f6:ce:da:ff:69: 56:b0:e3:cb:2b:34:01:bb:cb:b5:84:1e:84:b4:2b:af:f7:9c: 4b:93:7c:68:8d:39:c3:8f:3c:4d:2c:06:23:38:2f:12:ca:62: ac:c9:b9:53:eb:ed:e1:50:fb:88:36:a4:61:18:97:33:9b:56: 9e:8c:c1:8c:26:b4:b4:94:59:4f:f3:d3:23:1a:8a:7b:19:1c: 73:8d:ec:72:03:6d:7a:9b:50:ca:cd:02:8e:96:a7:43:d7:c7: 88:14:32:a4:79:27:88:5e:6e:6c:ad:fb:27:73:e7:ec:f9:9c: c1:7b:35:4f:aa:21:04:62:f9:84:a8:b5:8a:d0:21:1c:aa:9a: 0e:ee:27:e5:0c:f1:e4:d6:72:ef:31:b2:40:3f:86:00:bc:1d: a3:d1:78:d6:74:f9:ba:10:9e:ac:91:8d:44:cc:64:a8:70:25: 6c:0a:1d:b6:68:8c:a4:b5:f9:19:42:7f:40:7c:c4:e0:6d:4c: 5c:73:37:bf:ba:ba:31:f9:45:ab:d1:05:fe:46:6d:35:73:1e: 94:56:da:e0:a4:2e:39:a6:a5:b9:e4:83:c6:b5:42:3c:f0:13: 6d:d6:c6:a7:93:7f:3b:73:31:45:ff:6f:f2:9e:9f:00:0d:3d: 4f:e3:ca:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JKfJt9+7PxNMYHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjMjllMzgtYThkZi00MTVjLWEyOGItYTE0NjVmOWE0 ZDAxMB4XDTI2MDMyNTEzMDAwNFoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk NjE2ODg1ZjQtMDgyNC00OWVlLWE4NzYtMTc1OTU0YmE2YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A9NRNv/PNOXBw2vr0rv1EXA6RvlNU9tauWx ACghTM+8TFoqz3Z2Blz3Hrqldy23qHUhSEkqKkNYgGJhAeI54ypySsbaIM+zsY/3 8iP53oX37BFdI0IUMlUC4hoZMREUr4znuon6GSaLy+wtynnOIIwPewtZzmr3AdQb 9YBbEt178DB7ICmqUeNgxE4KXDHiA5v/QE8gxlgSUyNSRP2FnhnOckz48b+6+h9P r3qHMN3dCyhahvC0dfjB06C1cTyCVLhLzlOI/GEqX9pRwv4Hl8BrG+bWW3NEmkGP nkUgbAl28g1EvImEQBESWx+9mcC36mm6v8C4rc2g/SsxA51QMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFftHLi+9mJKsQ3OXnx6Js1YUgaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMy OWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5YTRkMDEvZThjMjllMzgtYThkZi00 MTVjLWEyOGItYTE0NjVmOWE0ZDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZThjMjllMzgtYThkZi00MTVjLWEy OGItYTE0NjVmOWE0ZDAxL2U4YzI5ZTM4LWE4ZGYtNDE1Yy1hMjhiLWExNDY1Zjlh NGQwMS5jcmwwHwYDVR0jBBgwFoAUeAe6NOGFy8MpALrpYvOu5kGzMgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2 NWY5YTRkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKzYJMwEnHS4ubUky79s7a /2lWsOPLKzQBu8u1hB6EtCuv95xLk3xojTnDjzxNLAYjOC8SymKsyblT6+3hUPuI NqRhGJczm1aejMGMJrS0lFlP89MjGop7GRxzjexyA216m1DKzQKOlqdD18eIFDKk eSeIXm5srfsnc+fs+ZzBezVPqiEEYvmEqLWK0CEcqpoO7iflDPHk1nLvMbJAP4YA vB2j0XjWdPm6EJ6skY1EzGSocCVsCh22aIyktfkZQn9AfMTgbUxccze/urox+UWr 0QX+Rm01cx6UVtrgpC45pqW55IPGtUI88BNt1sank387czFF/2/ynp8ADT1P48od -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:26 2026 by rpki-client