$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft File: db841f95-5e7a-4808-a239-7276e9c28008.mft (raw, json) Hash identifier: Zz8nKaVYEBKGPybHzLztKwWG/mTQ8MM8xxz1onPuhrc= Subject key identifier: 2E:20:5A:0D:4D:F8:7F:6B:82:41:34:C2:34:D4:08:0B:DB:DC:6E:90 Authority key identifier: 13:DD:03:58:0D:4E:8F:56:B7:F9:6A:BE:1B:2F:F5:D0:66:C4:A4:22 Certificate issuer: /CN=db841f95-5e7a-4808-a239-7276e9c28008 Certificate serial: 010D0C9F4328584D49657ED90D65AD00FC68A140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft Manifest number: 010D0C9F4328584187FDE9D61003BEF9F450F342 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: db841f95-5e7a-4808-a239-7276e9c28008.crl (hash: H5O79BSyYXtYu80iF5boh6YVpZ8MJv+XzIBYaHpN+js=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7e:d9:0d:65:ad:00:fc:68:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db841f95-5e7a-4808-a239-7276e9c28008 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=bf681d47-cbd5-4133-b20e-4db0da777c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:fc:32:97:d2:04:38:ff:df:5e:0e:f6:85: c3:eb:e4:e0:07:c5:f6:c0:77:28:07:19:d9:9f:f3: 46:ca:67:9b:16:e0:2f:1a:2c:f4:86:2a:a5:32:23: 50:8b:fe:8b:cb:a0:5f:6a:31:cd:66:26:1d:08:32: f6:c3:26:a2:23:16:f8:49:c8:14:31:1a:9f:a6:2d: 58:9c:be:5e:fc:23:24:3a:5f:6e:b7:35:dc:40:53: fa:ed:6c:2d:6b:ec:16:5c:0d:8e:e1:b9:4b:8c:cf: 27:45:00:8e:4d:63:51:24:f8:d6:c9:af:9f:ce:37: 8f:bc:87:4f:3d:94:47:11:ee:38:68:15:a1:eb:37: d0:9f:33:a2:17:a9:c8:74:d7:8b:fc:3f:59:58:82: 2d:c6:c8:d7:ea:67:13:ae:42:e1:49:54:3b:55:c1: d9:a1:ad:97:82:09:24:8a:d2:d6:97:46:30:5a:d0: 40:9d:1d:f9:e2:38:7f:2e:d2:90:ff:76:57:bb:d1: 05:ef:5c:6e:6c:2d:e2:21:3b:77:72:55:ed:8e:53: 95:16:75:cd:10:39:c7:a5:c4:89:e7:aa:02:69:d2: ba:bb:4c:fa:40:b9:ea:89:11:0c:94:1a:b5:46:9f: a4:0e:c6:7c:79:89:b9:48:08:4a:e5:bb:cf:e2:79: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:20:5A:0D:4D:F8:7F:6B:82:41:34:C2:34:D4:08:0B:DB:DC:6E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.crl X509v3 Authority Key Identifier: keyid:13:DD:03:58:0D:4E:8F:56:B7:F9:6A:BE:1B:2F:F5:D0:66:C4:A4:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0f:c8:5a:81:4c:93:f4:1e:aa:6a:f4:70:07:b0:37:1d:c5: f6:03:fe:a4:bc:64:1d:a4:cd:25:c4:9d:31:f3:14:51:1b:35: 70:0e:24:02:45:ef:c5:2b:92:4c:25:8a:85:48:e4:f6:4f:54: ae:c3:4a:b6:9f:fc:f9:51:c1:fe:78:99:53:8e:95:02:be:84: 84:bd:1e:7f:1e:a3:bc:70:be:a3:f4:f5:4e:f3:74:ef:3a:57: 0d:a5:e3:10:28:68:39:f5:d7:85:c7:c0:4b:a0:b0:3a:f6:5f: 85:00:0c:1d:6b:52:0a:1b:ca:a4:16:ec:5f:27:e2:18:19:ab: 1e:24:59:8a:68:29:30:79:89:2d:80:04:bf:bd:6e:ed:ff:ec: 6e:82:4a:f9:01:92:e3:20:71:3e:f5:70:f6:4f:a3:1b:03:3c: 02:9a:66:27:73:66:47:cd:62:ef:fb:13:82:2f:6e:4e:52:ad: 8d:0d:3f:3e:d7:26:bc:60:21:84:61:fd:5b:cb:ef:35:85:b1: 4d:62:9c:b2:2c:1d:31:bf:63:d7:ec:4d:18:e1:5b:5a:5b:48: e8:da:a0:80:92:40:6d:ce:3e:60:95:d0:29:44:df:c3:50:67: 83:0b:c9:67:f8:a1:4f:8d:bf:c2:75:e6:52:23:b7:75:2d:f4: dd:02:24:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX7ZDWWtAPxooUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NDFmOTUtNWU3YS00ODA4LWEyMzktNzI3NmU5YzI4 MDA4MB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk YmY2ODFkNDctY2JkNS00MTMzLWIyMGUtNGRiMGRhNzc3YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/8MpfSBDj/314O9oXD6+TgB8X2wHcoBxnZ n/NGymebFuAvGiz0hiqlMiNQi/6Ly6BfajHNZiYdCDL2wyaiIxb4ScgUMRqfpi1Y nL5e/CMkOl9utzXcQFP67Wwta+wWXA2O4blLjM8nRQCOTWNRJPjWya+fzjePvIdP PZRHEe44aBWh6zfQnzOiF6nIdNeL/D9ZWIItxsjX6mcTrkLhSVQ7VcHZoa2Xggkk itLWl0YwWtBAnR354jh/LtKQ/3ZXu9EF71xubC3iITt3clXtjlOVFnXNEDnHpcSJ 56oCadK6u0z6QLnqiREMlBq1Rp+kDsZ8eYm5SAhK5bvP4nnH/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC4gWg1N+H9rgkE0wjTUCAvb3G6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYjg0 MWY5NS01ZTdhLTQ4MDgtYTIzOS03Mjc2ZTljMjgwMDgvZGI4NDFmOTUtNWU3YS00 ODA4LWEyMzktNzI3NmU5YzI4MDA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGI4NDFmOTUtNWU3YS00ODA4LWEy MzktNzI3NmU5YzI4MDA4L2RiODQxZjk1LTVlN2EtNDgwOC1hMjM5LTcyNzZlOWMy ODAwOC5jcmwwHwYDVR0jBBgwFoAUE90DWA1Oj1a3+Wq+Gy/10GbEpCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYjg0MWY5NS01ZTdhLTQ4MDgtYTIzOS03Mjc2 ZTljMjgwMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALD8hagUyT9B6qavRwB7A3 HcX2A/6kvGQdpM0lxJ0x8xRRGzVwDiQCRe/FK5JMJYqFSOT2T1Suw0q2n/z5UcH+ eJlTjpUCvoSEvR5/HqO8cL6j9PVO83TvOlcNpeMQKGg59deFx8BLoLA69l+FAAwd a1IKG8qkFuxfJ+IYGaseJFmKaCkweYktgAS/vW7t/+xugkr5AZLjIHE+9XD2T6Mb AzwCmmYnc2ZHzWLv+xOCL25OUq2NDT8+1ya8YCGEYf1by+81hbFNYpyyLB0xv2PX 7E0Y4VtaW0jo2qCAkkBtzj5gldApRN/DUGeDC8ln+KFPjb/CdeZSI7d1LfTdAiT0 -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:17 2026 by rpki-client