$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft File: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft (raw, json) Hash identifier: 2oktzn/sKPtOFnDC5Ljn2tjv00qrzsdVr+a8wyPkLuU= Subject key identifier: 8D:53:B1:A3:15:E5:C4:63:3A:C5:94:74:93:FD:14:A0:A7:04:28:56 Authority key identifier: 76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 Certificate issuer: /CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Certificate serial: 010D0C9F4328584D49FA7350E71BFD8CD676F360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft Manifest number: 010D0C9F432858479E50A350BF51B81F78124708 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Sat 28 Mar 2026 20:00:00 +0000 Files and hashes: 1: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl (hash: S9jE0UpeeRTasBkCDRR9Zye/N55R/nt2dYqG0JjFRK4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:73:50:e7:1b:fd:8c:d6:76:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 28 20:00:00 2026 GMT Subject: CN=718d6cb0-1ea3-4772-a93a-ab1ffa28176b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:ca:cb:da:68:55:52:2b:91:7b:3b:bd:44: 1f:9a:43:b1:86:df:e4:20:0b:71:9f:0f:c5:43:5e: 2b:f0:fa:23:b4:0c:12:fd:0b:a3:05:69:08:81:d0: f0:06:d5:ee:ea:73:31:a3:69:04:0e:ca:7a:a2:0c: c7:b9:2c:7c:5a:8b:ac:bf:b8:a1:ff:29:bd:66:aa: ad:40:71:03:87:bc:f6:83:1b:1d:f7:47:fe:16:67: 2f:fb:d0:cf:30:92:7f:26:83:05:81:90:39:f7:a1: 13:78:b5:e5:32:98:79:c9:d0:cf:1b:91:db:c7:da: af:fd:dc:a9:c6:e7:75:f8:15:90:92:89:5f:9e:0d: 6e:03:98:8d:d4:20:c3:ae:53:c8:88:e7:7e:7a:16: fd:93:66:70:2b:3d:4a:1a:55:61:8c:72:5b:f3:2e: cc:4a:b7:6d:77:71:6d:96:e6:87:70:d2:04:56:c1: b8:8d:58:ad:33:b7:04:ed:a8:b8:7d:49:09:3e:f0: e3:5e:db:7c:48:e7:a0:38:25:db:b1:3b:df:aa:82: cd:a7:33:5a:bb:9b:24:7d:c3:f6:9a:b9:12:0c:98: e7:ca:e5:da:60:32:a5:80:9b:e7:86:11:ca:5b:f2: a7:c2:74:0a:bd:0d:79:40:8d:74:fb:77:f2:6d:3c: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:B1:A3:15:E5:C4:63:3A:C5:94:74:93:FD:14:A0:A7:04:28:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl X509v3 Authority Key Identifier: keyid:76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:df:87:74:1e:ff:4e:44:d9:24:c9:fc:c4:bb:83:55:55:cb: df:15:b9:31:21:fd:b8:c3:7f:0c:a4:d3:f6:ca:a2:2d:26:40: 1a:2d:9b:5b:e1:d8:92:39:ce:66:e8:83:b2:8d:f2:46:ed:3d: cb:47:18:2f:08:44:40:a5:87:93:24:8f:b4:ae:5d:cb:f0:b1: b0:85:f2:cb:b0:63:14:b5:e9:19:f4:7c:54:c6:be:af:ac:9c: 3c:d8:07:9f:ad:5a:f5:2a:b9:1f:ff:e4:14:de:dd:87:81:50: c0:d4:f1:b5:1f:4c:9c:6d:7a:a9:87:96:86:24:1e:63:58:a1: 6c:11:8e:16:d7:c5:ec:de:55:24:d3:a6:2d:f9:55:85:26:76: 40:70:9f:67:56:3f:74:7b:9e:40:3e:19:f7:8e:08:e8:f9:e8: 5b:02:40:29:d2:76:bb:f0:3d:d3:94:91:14:78:c4:27:01:83: 6d:b7:c6:07:1a:d5:22:aa:92:c5:e1:a5:3d:d7:82:1b:e2:4f: 14:74:d7:22:b8:2f:aa:34:22:37:a8:79:05:62:7f:97:27:da: af:de:8e:be:9c:86:18:ee:43:10:c1:da:22:89:6c:63:73:d2: 70:3b:60:92:91:5f:57:d0:45:3a:ad:d4:c5:b8:54:e9:97:08: c5:46:ab:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nNQ5xv9jNZ282AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNmMWJjZWEtOWJhZi00ZWVlLTk5NzktMjRiYzFmYmRm ZTFlMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyODIwMDAwMFowLzEtMCsGA1UEAxMk NzE4ZDZjYjAtMWVhMy00NzcyLWE5M2EtYWIxZmZhMjgxNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+nKy9poVVIrkXs7vUQfmkOxht/kIAtxnw/F Q14r8PojtAwS/QujBWkIgdDwBtXu6nMxo2kEDsp6ogzHuSx8Wousv7ih/ym9Zqqt QHEDh7z2gxsd90f+Fmcv+9DPMJJ/JoMFgZA596ETeLXlMph5ydDPG5Hbx9qv/dyp xud1+BWQkolfng1uA5iN1CDDrlPIiOd+ehb9k2ZwKz1KGlVhjHJb8y7MSrdtd3Ft luaHcNIEVsG4jVitM7cE7ai4fUkJPvDjXtt8SOegOCXbsTvfqoLNpzNau5skfcP2 mrkSDJjnyuXaYDKlgJvnhhHKW/KnwnQKvQ15QI10+3fybTzW0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI1TsaMV5cRjOsWUdJP9FKCnBChWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lY2Yx YmNlYS05YmFmLTRlZWUtOTk3OS0yNGJjMWZiZGZlMWUvZWNmMWJjZWEtOWJhZi00 ZWVlLTk5NzktMjRiYzFmYmRmZTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWNmMWJjZWEtOWJhZi00ZWVlLTk5 NzktMjRiYzFmYmRmZTFlL2VjZjFiY2VhLTliYWYtNGVlZS05OTc5LTI0YmMxZmJk ZmUxZS5jcmwwHwYDVR0jBBgwFoAUdo/qz8CiKJOezYqKO+OaLQpINvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lY2YxYmNlYS05YmFmLTRlZWUtOTk3OS0yNGJj MWZiZGZlMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn34d0Hv9ORNkkyfzEu4NV VcvfFbkxIf24w38MpNP2yqItJkAaLZtb4diSOc5m6IOyjfJG7T3LRxgvCERApYeT JI+0rl3L8LGwhfLLsGMUtekZ9HxUxr6vrJw82AefrVr1Krkf/+QU3t2HgVDA1PG1 H0ycbXqph5aGJB5jWKFsEY4W18Xs3lUk06Yt+VWFJnZAcJ9nVj90e55APhn3jgjo +ehbAkAp0na78D3TlJEUeMQnAYNtt8YHGtUiqpLF4aU914Ib4k8UdNciuC+qNCI3 qHkFYn+XJ9qv3o6+nIYY7kMQwdoiiWxjc9JwO2CSkV9X0EU6rdTFuFTplwjFRqu1 -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:30 2026 by rpki-client