$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft File: 108d0589-c0d8-4414-978d-7eeb5898f3f8.mft (raw, json) Hash identifier: /kdmHU+dSNMbfroSID9KyBuCgyCHyikbeDxUUtgv/Uc= Subject key identifier: 81:8A:36:22:72:49:5C:AD:BC:2D:04:9C:CC:16:75:76:47:74:F4:2E Authority key identifier: 11:EC:89:8D:97:2B:C0:8A:8A:47:66:3D:5A:32:43:1B:03:37:BC:AD Certificate issuer: /CN=108d0589-c0d8-4414-978d-7eeb5898f3f8 Certificate serial: 010D0C9F4328584D4A35F298CFEAF7021CCDE440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft Manifest number: 010D0C9F4328584BE4F543F4926062C0F1382AC0 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Sat 28 Mar 2026 22:00:00 +0000 Files and hashes: 1: 108d0589-c0d8-4414-978d-7eeb5898f3f8.crl (hash: j82h6Myqwll3B/OYmATGdRr1ArR2pnnVRcOir2rdxZ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f2:98:cf:ea:f7:02:1c:cd:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108d0589-c0d8-4414-978d-7eeb5898f3f8 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 28 22:00:00 2026 GMT Subject: CN=bf96e697-8911-4e98-b505-9844fa4100b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:2f:d1:11:0a:85:50:0a:06:2c:69:ff:18: b2:ef:d5:46:7e:96:da:1d:b0:d4:b2:53:17:f2:23: 3e:fb:b5:65:2c:43:3a:72:c8:dc:3c:7b:25:4d:dc: 03:b9:2c:58:e7:b3:80:b7:eb:ea:3d:42:9e:46:6e: f6:b2:a5:56:ca:cc:3e:db:51:e5:1c:01:b6:88:14: 00:67:85:6b:13:a8:cc:7f:1e:83:b2:e4:4c:74:42: b9:1e:fa:dd:d5:e2:bf:a2:08:04:40:03:3c:b1:62: 42:fa:9a:ac:f2:23:6e:f8:30:22:43:25:ac:24:d8: 07:99:4f:d1:cd:b3:7d:7c:29:f3:f9:c7:f7:c2:aa: 5d:92:2b:c3:f6:aa:2a:59:be:07:e8:c1:a2:69:7d: 64:7f:96:7f:4f:6a:0c:78:69:99:56:d6:8e:5b:65: f8:a9:c4:7d:fe:2c:bc:b1:37:c2:c1:cf:9f:3f:b9: 38:02:f4:7f:24:b7:4d:f6:cc:74:96:eb:a3:28:9a: 5a:e9:39:9c:6f:18:b6:68:1b:5e:be:98:42:09:f6: 62:fc:7c:53:ba:79:14:20:bb:26:7e:d9:0a:a8:14: fc:44:75:17:72:23:51:ed:80:dd:d0:a3:41:20:af: de:6e:71:ab:d2:98:93:15:21:08:33:f5:3f:f0:7d: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:36:22:72:49:5C:AD:BC:2D:04:9C:CC:16:75:76:47:74:F4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.crl X509v3 Authority Key Identifier: keyid:11:EC:89:8D:97:2B:C0:8A:8A:47:66:3D:5A:32:43:1B:03:37:BC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:fe:ca:ef:b4:74:a2:5a:13:ce:aa:ca:25:a6:e4:9d:4c:5c: 74:2d:fd:fa:aa:59:c1:d6:e7:93:54:c5:ca:d9:71:5f:e4:99: 91:96:2d:5f:7f:0f:4a:d3:8a:d6:03:89:56:41:31:7d:93:82: 9f:6a:fd:7a:cc:ec:be:f8:dd:91:ae:87:4d:df:0b:ec:0c:68: fb:14:a9:f0:d1:01:49:13:e5:be:10:1c:c1:57:28:8a:68:7d: bb:e0:09:d1:49:0a:58:c2:26:fd:20:54:7c:11:a9:74:10:62: 9d:45:2c:5c:af:b3:cd:72:fe:14:94:bb:f8:24:fe:18:ca:5c: fb:6f:df:1d:0e:25:a5:58:bc:27:f9:30:e4:15:b2:6e:81:52: 3c:11:34:4e:fc:9b:26:0a:73:c8:a2:c9:e4:d2:7e:ae:81:4f: 1e:9a:bd:6c:4d:9e:0c:ca:c3:10:96:17:ad:0e:55:6a:c1:57: 88:42:e7:35:d2:96:5a:52:1f:05:f5:c9:e3:72:8b:09:99:61: b9:ec:82:1c:58:db:74:0b:39:04:f2:44:5e:ce:0f:d6:a3:ee: 51:59:f1:39:b7:27:5a:05:e0:54:57:ea:e6:da:07:e4:07:32: 87:b1:5e:85:23:22:1a:d2:e9:a8:fe:0b:1f:2d:71:55:d4:e4: 67:ad:bd:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfKYz+r3AhzN5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA4ZDA1ODktYzBkOC00NDE0LTk3OGQtN2VlYjU4OThm M2Y4MB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyODIyMDAwMFowLzEtMCsGA1UEAxMk YmY5NmU2OTctODkxMS00ZTk4LWI1MDUtOTg0NGZhNDEwMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWAv0REKhVAKBixp/xiy79VGfpbaHbDUslMX 8iM++7VlLEM6csjcPHslTdwDuSxY57OAt+vqPUKeRm72sqVWysw+21HlHAG2iBQA Z4VrE6jMfx6DsuRMdEK5Hvrd1eK/oggEQAM8sWJC+pqs8iNu+DAiQyWsJNgHmU/R zbN9fCnz+cf3wqpdkivD9qoqWb4H6MGiaX1kf5Z/T2oMeGmZVtaOW2X4qcR9/iy8 sTfCwc+fP7k4AvR/JLdN9sx0luujKJpa6Tmcbxi2aBtevphCCfZi/HxTunkUILsm ftkKqBT8RHUXciNR7YDd0KNBIK/ebnGr0piTFSEIM/U/8H2grQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIGKNiJySVytvC0EnMwWdXZHdPQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMDhk MDU4OS1jMGQ4LTQ0MTQtOTc4ZC03ZWViNTg5OGYzZjgvMTA4ZDA1ODktYzBkOC00 NDE0LTk3OGQtN2VlYjU4OThmM2Y4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTA4ZDA1ODktYzBkOC00NDE0LTk3 OGQtN2VlYjU4OThmM2Y4LzEwOGQwNTg5LWMwZDgtNDQxNC05NzhkLTdlZWI1ODk4 ZjNmOC5jcmwwHwYDVR0jBBgwFoAUEeyJjZcrwIqKR2Y9WjJDGwM3vK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMDhkMDU4OS1jMGQ4LTQ0MTQtOTc4ZC03ZWVi NTg5OGYzZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC6/srvtHSiWhPOqsolpuSd TFx0Lf36qlnB1ueTVMXK2XFf5JmRli1ffw9K04rWA4lWQTF9k4Kfav16zOy++N2R rodN3wvsDGj7FKnw0QFJE+W+EBzBVyiKaH274AnRSQpYwib9IFR8Eal0EGKdRSxc r7PNcv4UlLv4JP4Yylz7b98dDiWlWLwn+TDkFbJugVI8ETRO/JsmCnPIosnk0n6u gU8emr1sTZ4MysMQlhetDlVqwVeIQuc10pZaUh8F9cnjcosJmWG57IIcWNt0CzkE 8kRezg/Wo+5RWfE5tydaBeBUV+rm2gfkBzKHsV6FIyIa0umo/gsfLXFV1ORnrb2R -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:27 2026 by rpki-client