$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.mft File: a32f288b-650d-44c2-aec9-5ae902ab4995.mft (raw, json) Hash identifier: 9W3+0eiVFL3/33HTTZk+ynA3wKEGmPqr7LFSi228tqM= Subject key identifier: A1:32:57:F9:49:35:C4:67:95:4F:D3:39:E5:65:99:15:D0:0D:F0:FD Authority key identifier: 78:80:BE:2F:8A:DD:10:45:0D:CC:78:DB:03:17:78:2E:C1:E6:0F:32 Certificate issuer: /CN=a32f288b-650d-44c2-aec9-5ae902ab4995 Certificate serial: 010D0C9F4328584D4A183B68A96B114F89FD69C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.mft Manifest number: 010D0C9F43285842E2D17F25C9E52D2D6E6C503A Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: a32f288b-650d-44c2-aec9-5ae902ab4995.crl (hash: WjgK7BjlCK0/dpEy/yUBBR+Mz8LFXgSSvw/UlhceUD8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3b:68:a9:6b:11:4f:89:fd:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32f288b-650d-44c2-aec9-5ae902ab4995 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=053355e4-540a-4589-bf41-d1f816203630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:25:fa:34:66:04:e7:53:1f:b4:8c:b3:ec: 83:05:cf:02:49:04:29:08:c6:17:79:ba:79:f5:41: 3a:c5:27:8f:9f:e7:23:f3:54:b8:16:fe:ae:6b:b0: fa:b3:3f:1b:75:74:0e:5d:16:a6:ca:d5:2f:24:9c: f4:36:27:2d:f7:19:0e:a6:26:5e:87:96:57:c2:9a: 32:66:cc:0b:f3:91:3d:f5:10:c7:72:0e:60:9e:ab: 06:17:e1:3d:24:eb:9b:0b:12:a5:e7:bc:e1:15:71: ed:f0:7e:a3:89:dc:7e:ae:86:35:a6:a5:d1:e6:82: 58:d9:2a:4d:d6:45:12:3e:00:ef:a2:00:34:04:5c: e4:ef:b4:ef:2a:9a:35:59:96:3d:2f:8a:ea:ad:dc: 24:b9:f2:88:6a:b6:20:11:90:cc:ac:f6:e2:f1:f0: 45:89:f2:25:59:eb:cf:12:60:8e:52:71:68:98:59: 47:7b:58:07:09:e2:f4:91:d8:75:d1:02:f8:b4:1e: 5a:05:57:20:28:bc:5c:cd:15:6e:f2:0f:81:05:71: 61:11:28:55:95:0d:a9:8f:56:eb:df:a9:a2:a1:23: 8f:bf:96:28:79:93:13:47:5e:97:0b:bb:1d:d9:2a: 76:5b:ef:43:55:82:fc:c9:61:06:c8:39:73:72:cb: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:57:F9:49:35:C4:67:95:4F:D3:39:E5:65:99:15:D0:0D:F0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.crl X509v3 Authority Key Identifier: keyid:78:80:BE:2F:8A:DD:10:45:0D:CC:78:DB:03:17:78:2E:C1:E6:0F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:52:f4:c2:44:d6:e1:58:a6:c1:51:ba:22:2c:2f:f8:3a:ca: e7:33:66:91:22:3b:2e:de:78:10:9c:c2:41:a4:8c:fd:bd:59: 27:5f:70:a8:1e:64:50:6b:9b:cd:0b:38:ef:4a:12:7f:ea:bd: 25:5f:1e:cf:5c:7f:3d:20:ef:b6:ef:58:c9:94:da:4e:90:e9: 1f:fe:84:10:af:96:bd:03:ed:43:52:d7:31:e6:78:57:91:a2: 10:47:fd:29:8a:57:df:7e:23:6a:d8:87:b0:de:47:4c:74:26: 26:90:1f:77:28:4f:48:26:f4:13:04:e6:c8:bd:11:6d:23:37: ff:8b:46:f8:36:00:4e:8b:53:18:d7:f4:1d:6e:ce:b3:b3:e1: a8:3a:69:a3:d2:b5:cb:34:e8:0f:33:34:ec:7f:bb:78:d2:6b: 53:a5:9c:fa:40:fd:04:98:3b:5f:83:93:b4:4f:d4:69:d2:03: 98:db:2a:03:13:58:9e:69:fb:54:5d:0d:aa:e2:bd:39:9c:6c: 42:2c:46:04:06:dc:78:d6:32:9f:25:66:0c:5f:8e:10:97:5c: 50:ff:27:22:ec:18:83:12:4b:55:7f:f9:0d:69:d3:69:83:aa: e4:94:8c:6d:fc:6c:a4:d1:0e:f6:89:dd:26:c4:b7:59:df:ab: e0:76:9d:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDtoqWsRT4n9acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyZjI4OGItNjUwZC00NGMyLWFlYzktNWFlOTAyYWI0 OTk1MB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk MDUzMzU1ZTQtNTQwYS00NTg5LWJmNDEtZDFmODE2MjAzNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/El+jRmBOdTH7SMs+yDBc8CSQQpCMYXebp5 9UE6xSePn+cj81S4Fv6ua7D6sz8bdXQOXRamytUvJJz0Nict9xkOpiZeh5ZXwpoy ZswL85E99RDHcg5gnqsGF+E9JOubCxKl57zhFXHt8H6jidx+roY1pqXR5oJY2SpN 1kUSPgDvogA0BFzk77TvKpo1WZY9L4rqrdwkufKIarYgEZDMrPbi8fBFifIlWevP EmCOUnFomFlHe1gHCeL0kdh10QL4tB5aBVcgKLxczRVu8g+BBXFhEShVlQ2pj1br 36mioSOPv5YoeZMTR16XC7sd2Sp2W+9DVYL8yWEGyDlzcstlyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKEyV/lJNcRnlU/TOeVlmRXQDfD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJm Mjg4Yi02NTBkLTQ0YzItYWVjOS01YWU5MDJhYjQ5OTUvYTMyZjI4OGItNjUwZC00 NGMyLWFlYzktNWFlOTAyYWI0OTk1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyZjI4OGItNjUwZC00NGMyLWFl YzktNWFlOTAyYWI0OTk1L2EzMmYyODhiLTY1MGQtNDRjMi1hZWM5LTVhZTkwMmFi NDk5NS5jcmwwHwYDVR0jBBgwFoAUeIC+L4rdEEUNzHjbAxd4LsHmDzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJmMjg4Yi02NTBkLTQ0YzItYWVjOS01YWU5 MDJhYjQ5OTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPUvTCRNbhWKbBUboiLC/4 OsrnM2aRIjsu3ngQnMJBpIz9vVknX3CoHmRQa5vNCzjvShJ/6r0lXx7PXH89IO+2 71jJlNpOkOkf/oQQr5a9A+1DUtcx5nhXkaIQR/0pilfffiNq2Iew3kdMdCYmkB93 KE9IJvQTBObIvRFtIzf/i0b4NgBOi1MY1/Qdbs6zs+GoOmmj0rXLNOgPMzTsf7t4 0mtTpZz6QP0EmDtfg5O0T9Rp0gOY2yoDE1ieaftUXQ2q4r05nGxCLEYEBtx41jKf JWYMX44Ql1xQ/yci7BiDEktVf/kNadNpg6rklIxt/Gyk0Q72id0mxLdZ36vgdp2E -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:56 2026 by rpki-client