$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft File: 2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft (raw, json) Hash identifier: izl2nS7Uae3ulpPxq8re9yeozH6Ib9SviG8udnMloDc= Subject key identifier: 1A:A2:76:82:DE:ED:9B:F6:08:59:05:F1:83:D0:3D:E9:71:F9:C0:C9 Authority key identifier: 3D:F4:29:73:E8:33:31:4F:1B:DD:BF:04:91:2F:A4:35:96:E9:4E:9A Certificate issuer: /CN=2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d Certificate serial: 010D0C9F4328584D4F18A6B1BD795521AAC8D700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft Manifest number: 010D0C9F4328584758165EBA5A0C5E4DD759CDA3 Signing time: Fri 27 Mar 2026 16:00:03 +0000 Manifest this update: Fri 27 Mar 2026 16:00:03 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.crl (hash: hCEBgQTIEWrPRJBcTpK6Z4V1dEL1ZM8d3JoFa/P8kGE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:18:a6:b1:bd:79:55:21:aa:c8:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d Validity Not Before: Mar 27 16:00:03 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=af1a8119-7966-4457-968e-c0a13f57e8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:14:a8:7f:43:2a:84:89:f5:80:71:65:2a: b7:ea:25:cd:3f:c8:d8:f7:61:1b:e8:fa:57:fa:76: e1:c9:0f:83:ae:27:8b:fd:15:72:9c:cb:c1:d1:66: 27:2c:28:af:fd:cb:05:2e:7d:da:5a:bb:6a:f6:50: 82:3a:b5:09:11:19:25:16:3c:95:06:05:d8:c6:9a: 8d:cd:83:7e:ad:8d:26:65:d4:6b:43:8a:21:13:d3: c7:a4:22:8e:ca:07:5a:05:8b:fb:99:e3:9b:10:c2: 78:d2:ac:85:4c:03:f1:cc:98:3e:a5:16:25:2b:74: 4f:36:4e:b8:ba:af:b8:bf:6f:30:2f:c6:da:a0:af: 2c:0d:8b:25:eb:c7:b4:21:ce:83:35:f9:25:35:20: 86:d6:f0:3b:42:a3:c3:b1:c2:7d:02:35:60:43:a6: bd:40:0a:fb:6d:9b:77:ca:17:29:30:f3:41:60:e1: be:c7:38:f9:19:b7:c7:0d:02:d6:a4:59:a0:c7:d1: 65:b8:46:31:de:5d:be:78:74:78:81:e3:12:a2:68: ab:7e:55:98:6f:64:f6:f1:3d:03:84:a6:ae:e5:47: 2d:a0:ee:d9:35:b1:2e:8b:d4:bd:77:04:5a:fe:2d: 79:db:0b:db:85:f3:d7:9e:6f:0b:81:67:9b:54:71: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A2:76:82:DE:ED:9B:F6:08:59:05:F1:83:D0:3D:E9:71:F9:C0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.crl X509v3 Authority Key Identifier: keyid:3D:F4:29:73:E8:33:31:4F:1B:DD:BF:04:91:2F:A4:35:96:E9:4E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a1:2d:41:55:e6:59:8f:d3:cd:b3:1e:d7:27:0e:bb:74:3a: 1f:a1:6b:73:9b:a7:59:b9:9c:fa:77:42:6d:f4:e9:a3:8a:8b: af:24:d4:73:3c:4f:f3:da:4a:96:1d:50:41:ca:ae:b0:1e:ad: 40:80:36:4b:b5:c8:b0:a0:7a:3e:b7:c0:c5:e0:34:8e:f7:8e: 07:4d:91:49:81:7f:55:90:32:23:61:84:4f:6f:99:73:3e:18: 29:21:b5:35:17:4c:25:77:9c:70:d7:f5:78:e9:41:ed:9d:e2: a7:88:ae:dc:1c:21:e5:f9:06:11:6b:f3:85:5d:77:a7:10:fb: bd:01:55:93:d0:e7:3f:62:c1:18:60:11:54:1d:22:43:79:2e: 8c:46:fb:b9:7e:eb:1b:19:c1:fc:0a:38:24:31:1a:4e:c0:ac: 74:f7:fd:b8:d2:76:06:9e:7a:5f:15:db:ea:64:01:12:fe:13: a2:0f:73:ca:f2:15:78:94:7e:5b:e3:5f:0e:45:a7:cf:64:2d: ad:cf:12:51:f2:7e:cf:ba:1a:48:56:d8:91:f5:8f:10:d2:a3: 14:0c:61:6f:89:62:10:58:34:ea:70:d9:78:3f:13:83:2d:6c: 66:62:5c:ab:4e:7e:03:f5:14:9a:7f:ff:d2:96:c4:3a:56:f9: 19:30:4c:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PGKaxvXlVIarI1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUxYmFjNTAtMWQ4YS00MzNlLWJiZjUtZWUyYjBjNzE3 ZTVkMB4XDTI2MDMyNzE2MDAwM1oXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk YWYxYTgxMTktNzk2Ni00NDU3LTk2OGUtYzBhMTNmNTdlOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWIUqH9DKoSJ9YBxZSq36iXNP8jY92Eb6PpX +nbhyQ+DrieL/RVynMvB0WYnLCiv/csFLn3aWrtq9lCCOrUJERklFjyVBgXYxpqN zYN+rY0mZdRrQ4ohE9PHpCKOygdaBYv7meObEMJ40qyFTAPxzJg+pRYlK3RPNk64 uq+4v28wL8baoK8sDYsl68e0Ic6DNfklNSCG1vA7QqPDscJ9AjVgQ6a9QAr7bZt3 yhcpMPNBYOG+xzj5GbfHDQLWpFmgx9FluEYx3l2+eHR4geMSomirflWYb2T28T0D hKau5UctoO7ZNbEui9S9dwRa/i152wvbhfPXnm8LgWebVHEyaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBqidoLe7Zv2CFkF8YPQPelx+cDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTFi YWM1MC0xZDhhLTQzM2UtYmJmNS1lZTJiMGM3MTdlNWQvMmUxYmFjNTAtMWQ4YS00 MzNlLWJiZjUtZWUyYjBjNzE3ZTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmUxYmFjNTAtMWQ4YS00MzNlLWJi ZjUtZWUyYjBjNzE3ZTVkLzJlMWJhYzUwLTFkOGEtNDMzZS1iYmY1LWVlMmIwYzcx N2U1ZC5jcmwwHwYDVR0jBBgwFoAUPfQpc+gzMU8b3b8EkS+kNZbpTpowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTFiYWM1MC0xZDhhLTQzM2UtYmJmNS1lZTJi MGM3MTdlNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCoS1BVeZZj9PNsx7XJw67 dDofoWtzm6dZuZz6d0Jt9OmjiouvJNRzPE/z2kqWHVBByq6wHq1AgDZLtciwoHo+ t8DF4DSO944HTZFJgX9VkDIjYYRPb5lzPhgpIbU1F0wld5xw1/V46UHtneKniK7c HCHl+QYRa/OFXXenEPu9AVWT0Oc/YsEYYBFUHSJDeS6MRvu5fusbGcH8CjgkMRpO wKx09/240nYGnnpfFdvqZAES/hOiD3PK8hV4lH5b418ORafPZC2tzxJR8n7PuhpI VtiR9Y8Q0qMUDGFviWIQWDTqcNl4PxODLWxmYlyrTn4D9RSaf//SlsQ6VvkZMExI -----END CERTIFICATE-----Generated at Sat Mar 28 12:10:26 2026 by rpki-client