$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft File: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft (raw, json) Hash identifier: hb3Kki4HyE7PARKWMdmgX1Od2sy0ZgHSkK0V6rzT+wg= Subject key identifier: 5E:BA:77:66:46:57:3B:73:24:14:23:0E:A0:E0:48:A1:BE:41:79:0D Authority key identifier: 10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 Certificate issuer: /CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Certificate serial: 010D0C9F4328584D4B41F4FD691F4CDA5E1F8980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft Manifest number: 010D0C9F4328584073A8466E0185068C437FF0D9 Signing time: Thu 26 Mar 2026 07:00:04 +0000 Manifest this update: Thu 26 Mar 2026 07:00:04 +0000 Manifest next update: Sat 28 Mar 2026 07:00:00 +0000 Files and hashes: 1: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl (hash: FqxaWTguH8ND5Uqz7N/w9T55nVihVuhaMwT6Cz3ByYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:41:f4:fd:69:1f:4c:da:5e:1f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Validity Not Before: Mar 26 07:00:04 2026 GMT Not After : Mar 28 07:00:00 2026 GMT Subject: CN=2928c5ef-d1b9-4aca-8a1b-1df507333848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:09:80:b6:73:ac:a4:8c:51:a5:ae:8f:7c: c2:cf:90:6a:e2:fb:db:0e:6f:88:a2:08:a5:ba:8b: 03:da:6f:6d:04:43:26:69:b8:d7:c8:61:08:87:40: a4:46:2b:45:2c:a4:eb:78:ff:3e:a7:bf:3b:db:25: fe:16:e9:bf:5f:4e:45:31:e3:99:92:38:8c:dd:15: 4e:cb:68:d3:e0:eb:47:b9:2c:42:e3:87:da:0b:27: 20:6d:f9:e6:7e:ea:7e:f1:64:82:ce:59:6f:da:4e: 2a:09:38:30:b7:a9:52:05:15:d5:d3:22:0d:b0:00: 4b:c9:30:3d:dd:2a:8b:4a:2b:c3:c9:41:85:59:d6: fb:60:04:0f:87:87:32:c2:8e:69:1c:31:70:ab:17: 46:22:aa:c5:fc:77:0f:0d:1a:6c:6d:f9:ac:94:96: 0e:08:80:67:25:a0:d3:e1:34:9d:13:2f:a5:49:c4: 16:84:4c:88:e2:f3:56:df:24:2a:af:b5:20:9d:22: 44:8c:93:e2:04:8f:44:18:22:dc:b8:4e:36:89:c5: 14:fa:22:06:f1:8e:d1:1b:41:8f:b1:24:8b:2c:b8: f0:ce:12:9e:a7:7b:a0:fb:17:0c:23:d4:04:c9:be: c4:c6:cf:65:bb:40:c0:b7:e1:2c:3e:69:d5:3f:99: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BA:77:66:46:57:3B:73:24:14:23:0E:A0:E0:48:A1:BE:41:79:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl X509v3 Authority Key Identifier: keyid:10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b7:dd:2e:16:6f:03:36:d5:d8:b9:58:d2:08:1b:af:4a:2e: b2:cc:75:20:32:17:bb:5e:30:23:0d:f4:c0:b7:f9:a4:47:f8: 0c:4c:76:a6:97:d3:21:54:92:b8:d3:58:7e:b8:ea:1f:ad:47: d3:33:fd:a4:fa:3d:15:a3:24:4a:fa:41:1a:c9:33:f6:f5:0e: b6:5a:3a:d7:cb:7e:40:8f:a3:bb:21:59:b5:3c:ae:06:40:30: 77:0d:5b:cd:f3:de:6e:47:1e:45:54:c4:c6:e7:4f:6c:69:ef: 9a:6e:e8:64:02:d6:8e:ed:8e:1f:ff:41:47:7b:0b:96:2c:54: 5f:05:b8:3a:05:6c:d1:fb:91:ae:66:89:be:ba:e2:43:1c:4f: 40:32:f9:b7:4d:ea:ce:51:1e:23:6c:df:03:31:15:84:25:0a: af:c6:19:84:f4:f2:03:14:25:e9:bd:eb:99:38:e3:62:d0:49: ed:8f:a0:b7:42:6a:78:9d:c2:2b:4c:ff:e0:ab:e9:7d:fb:a6: 2f:8c:a2:b6:93:ea:8c:50:54:af:b0:d7:75:bf:f9:de:82:48: 35:d6:7a:10:44:5d:bb:14:fd:0a:f8:9b:56:8c:d4:a1:7e:5a: b5:61:0a:cc:58:96:d9:13:3c:78:97:ec:41:4b:a9:1e:e1:e2: be:5b:43:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LQfT9aR9M2l4fiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkMzk3M2QtMGQ0MC00ZmZlLWJhZWQtODFlYTdjN2Vh MGIwMB4XDTI2MDMyNjA3MDAwNFoXDTI2MDMyODA3MDAwMFowLzEtMCsGA1UEAxMk MjkyOGM1ZWYtZDFiOS00YWNhLThhMWItMWRmNTA3MzMzODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBcJgLZzrKSMUaWuj3zCz5Bq4vvbDm+Iogil uosD2m9tBEMmabjXyGEIh0CkRitFLKTreP8+p7872yX+Fum/X05FMeOZkjiM3RVO y2jT4OtHuSxC44faCycgbfnmfup+8WSCzllv2k4qCTgwt6lSBRXV0yINsABLyTA9 3SqLSivDyUGFWdb7YAQPh4cywo5pHDFwqxdGIqrF/HcPDRpsbfmslJYOCIBnJaDT 4TSdEy+lScQWhEyI4vNW3yQqr7UgnSJEjJPiBI9EGCLcuE42icUU+iIG8Y7RG0GP sSSLLLjwzhKep3ug+xcMI9QEyb7Exs9lu0DAt+EsPmnVP5nb9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF66d2ZGVztzJBQjDqDgSKG+QXkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Qz OTczZC0wZDQwLTRmZmUtYmFlZC04MWVhN2M3ZWEwYjAvMmNkMzk3M2QtMGQ0MC00 ZmZlLWJhZWQtODFlYTdjN2VhMGIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNkMzk3M2QtMGQ0MC00ZmZlLWJh ZWQtODFlYTdjN2VhMGIwLzJjZDM5NzNkLTBkNDAtNGZmZS1iYWVkLTgxZWE3Yzdl YTBiMC5jcmwwHwYDVR0jBBgwFoAUEMZmJZliYoIzz2VgAFz9kPIAZ6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2QzOTczZC0wZDQwLTRmZmUtYmFlZC04MWVh N2M3ZWEwYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIt90uFm8DNtXYuVjSCBuv Si6yzHUgMhe7XjAjDfTAt/mkR/gMTHaml9MhVJK401h+uOofrUfTM/2k+j0VoyRK +kEayTP29Q62WjrXy35Aj6O7IVm1PK4GQDB3DVvN895uRx5FVMTG509sae+abuhk AtaO7Y4f/0FHewuWLFRfBbg6BWzR+5GuZom+uuJDHE9AMvm3TerOUR4jbN8DMRWE JQqvxhmE9PIDFCXpveuZOONi0Entj6C3Qmp4ncIrTP/gq+l9+6YvjKK2k+qMUFSv sNd1v/negkg11noQRF27FP0K+JtWjNShflq1YQrMWJbZEzx4l+xBS6ke4eK+W0M2 -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:12 2026 by rpki-client