$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft File: 2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft (raw, json) Hash identifier: KvF2RXALbvpCyBqClhJikWqo/AvOK6ESDZFo1kK90BA= Subject key identifier: 38:31:4F:34:AC:D4:9A:38:BB:50:CD:C3:E9:25:B1:3B:B6:CB:02:06 Authority key identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Certificate issuer: /CN=2a645ece-ac51-4737-8d2b-c6ab6d2e79fa Certificate serial: 010D0C9F4328584D4A183CBEB6475972F6FA1620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft Manifest number: 010D0C9F4328584294AF474CA7CD49D30976C6D6 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.crl (hash: G9a+05pt8WXsC9bo6CtvWR0sBBHM6xp/xeoFMrKcFR4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3c:be:b6:47:59:72:f6:fa:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a645ece-ac51-4737-8d2b-c6ab6d2e79fa Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=d56df5a6-b442-409a-8d94-9119081e09dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:87:ae:59:9d:b1:20:6f:2c:41:e6:41:7b: e6:89:97:da:55:34:4e:11:4c:c3:ca:e7:bc:15:d3: f7:59:de:2f:6f:25:f6:21:ac:8b:0d:51:ad:93:59: 48:2c:f5:e6:f2:5c:f6:78:4a:88:91:3e:09:1c:6a: ef:a6:21:fc:28:17:cd:3c:22:c0:e0:0b:1a:8b:92: fe:aa:db:2d:f1:ce:80:af:dd:0d:4d:4b:35:5c:51: af:95:f9:3d:9a:fe:0c:c0:a7:b9:57:b2:0e:ef:a7: 84:76:86:08:9c:83:3b:68:75:31:83:cf:c6:96:78: 22:b4:49:fd:06:31:46:68:30:75:e5:32:7d:39:2a: 68:00:3c:32:de:88:04:ce:65:8d:85:7c:19:03:6b: f2:6c:7b:90:8c:aa:6b:ce:db:32:ab:dc:10:c3:93: 99:46:9f:95:a8:23:81:ea:61:0b:a4:14:e1:25:34: 64:dc:92:a4:40:5d:54:bc:9d:4a:96:ef:98:8e:64: 8d:4b:90:6a:d1:07:76:b3:55:1f:45:d4:ca:d3:d8: c4:54:2e:0f:79:13:1f:20:fc:52:e9:fe:23:1e:b9: 7c:ba:90:c1:b1:f1:f6:5b:79:01:fa:49:45:27:67: c2:70:69:bc:f2:a9:01:c6:30:a5:bb:a1:49:cd:7c: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:4F:34:AC:D4:9A:38:BB:50:CD:C3:E9:25:B1:3B:B6:CB:02:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.crl X509v3 Authority Key Identifier: keyid:C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a8:c9:9d:53:6d:d0:64:95:f5:ce:ee:c0:e9:4e:24:65:c0: 45:c7:e6:79:eb:85:0d:c3:71:7b:e8:1e:5d:12:31:32:f1:39: 84:4e:83:ac:96:86:11:94:27:d1:ad:ac:6e:50:e8:02:b2:09: 37:3e:a4:42:51:a4:bb:cc:63:37:35:48:d8:8c:79:1f:14:c3: 26:0a:d4:d5:4c:bc:f4:85:ec:de:08:05:9c:91:25:89:27:d8: f6:cd:da:f8:fc:f3:a4:00:4e:9a:ba:c2:2f:02:38:3e:1e:8a: 18:24:be:73:8f:ac:b6:ad:68:0f:69:ea:a9:d8:a5:dd:38:e4: 53:e4:47:c3:b2:97:fb:65:11:3c:b6:cc:b1:e5:0e:6d:95:0c: e9:16:0f:9c:d8:43:f4:52:1c:ed:b5:d2:92:39:5e:93:da:ee: b3:5e:ca:3c:ea:44:16:09:3c:96:96:2b:64:12:93:61:d4:51: 1a:ce:66:11:fa:26:1c:fa:a7:6b:b3:b9:97:42:f3:1a:90:fb: 62:80:12:1a:8b:9e:83:60:82:9b:73:e5:30:9c:48:f3:2f:b1: 05:f7:54:86:97:d8:e4:84:da:34:0e:7b:b2:45:14:06:9c:11: d5:3c:ea:8b:2e:9f:a3:84:46:8f:3c:0c:dc:0d:f0:d7:67:c8: ef:75:d9:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDy+tkdZcvb6FiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2NDVlY2UtYWM1MS00NzM3LThkMmItYzZhYjZkMmU3 OWZhMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk ZDU2ZGY1YTYtYjQ0Mi00MDlhLThkOTQtOTExOTA4MWUwOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzuHrlmdsSBvLEHmQXvmiZfaVTROEUzDyue8 FdP3Wd4vbyX2IayLDVGtk1lILPXm8lz2eEqIkT4JHGrvpiH8KBfNPCLA4Asai5L+ qtst8c6Ar90NTUs1XFGvlfk9mv4MwKe5V7IO76eEdoYInIM7aHUxg8/GlngitEn9 BjFGaDB15TJ9OSpoADwy3ogEzmWNhXwZA2vybHuQjKprztsyq9wQw5OZRp+VqCOB 6mELpBThJTRk3JKkQF1UvJ1Klu+YjmSNS5Bq0Qd2s1UfRdTK09jEVC4PeRMfIPxS 6f4jHrl8upDBsfH2W3kB+klFJ2fCcGm88qkBxjClu6FJzXza1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDgxTzSs1Jo4u1DNw+klsTu2ywIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTY0 NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQyZTc5ZmEvMmE2NDVlY2UtYWM1MS00 NzM3LThkMmItYzZhYjZkMmU3OWZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2NDVlY2UtYWM1MS00NzM3LThk MmItYzZhYjZkMmU3OWZhLzJhNjQ1ZWNlLWFjNTEtNDczNy04ZDJiLWM2YWI2ZDJl NzlmYS5jcmwwHwYDVR0jBBgwFoAUw3uI4f3oo27vxFWvjxYMpstRT5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFi NmQyZTc5ZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlqMmdU23QZJX1zu7A6U4k ZcBFx+Z564UNw3F76B5dEjEy8TmEToOsloYRlCfRraxuUOgCsgk3PqRCUaS7zGM3 NUjYjHkfFMMmCtTVTLz0hezeCAWckSWJJ9j2zdr4/POkAE6ausIvAjg+HooYJL5z j6y2rWgPaeqp2KXdOORT5EfDspf7ZRE8tsyx5Q5tlQzpFg+c2EP0UhzttdKSOV6T 2u6zXso86kQWCTyWlitkEpNh1FEazmYR+iYc+qdrs7mXQvMakPtigBIai56DYIKb c+UwnEjzL7EF91SGl9jkhNo0DnuyRRQGnBHVPOqLLp+jhEaPPAzcDfDXZ8jvddm2 -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:56 2026 by rpki-client