$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft File: 1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft (raw, json) Hash identifier: /L8bi1OwG9spuFUUQlz8aAlU07fRi+O+R+4Q00aBSnA= Subject key identifier: C0:35:C3:E2:91:17:F3:0C:79:50:CB:27:88:3F:77:D9:BC:F6:75:38 Authority key identifier: 4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C Certificate issuer: /CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0 Certificate serial: 010D0C9F4328584D498349049A06C4705F18F700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft Manifest number: 010D0C9F4328584C0E0EF761F7AD29F002665AF4 Signing time: Wed 25 Mar 2026 16:00:03 +0000 Manifest this update: Wed 25 Mar 2026 16:00:03 +0000 Manifest next update: Fri 27 Mar 2026 16:00:00 +0000 Files and hashes: 1: 1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl (hash: ktkcf2LKMnxJDCIctA87osxOuOixiyqA8r8Ga7CPWnQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:83:49:04:9a:06:c4:70:5f:18:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0 Validity Not Before: Mar 25 16:00:03 2026 GMT Not After : Mar 27 16:00:00 2026 GMT Subject: CN=ba07a793-8f0e-4360-b517-2f1eebda2ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:78:3b:d2:c5:0d:7b:88:d9:53:3d:d0:0d: da:c3:01:b6:7e:b9:45:85:c7:45:ce:e4:77:f1:cd: 62:5c:e6:fd:b3:9e:7e:82:24:bb:b3:32:32:ff:30: fb:ca:2f:ce:06:aa:e2:80:7f:5f:96:d4:82:01:17: 3d:5b:bf:03:ad:94:0d:24:fd:18:90:4d:f8:e1:4a: 7b:86:03:9b:a3:7c:41:c9:a4:36:16:72:03:e6:f8: 56:87:78:09:c5:a4:b6:33:63:d1:a3:67:fb:6a:a9: 85:7a:5f:32:54:7f:db:e4:c5:cb:05:b0:f1:73:16: 97:aa:3b:4d:80:26:f3:cc:26:ab:d9:86:5c:c7:39: f4:80:e5:9f:a1:f5:c7:d2:fc:52:e7:26:28:cd:01: 80:46:bd:28:a7:53:e5:65:25:08:62:1d:ce:7a:51: 9a:42:0e:aa:eb:27:95:5b:39:43:1b:02:61:54:b1: ed:97:49:f8:0c:3c:c2:f0:63:e6:b6:e9:51:3f:17: 8f:ad:9f:0d:2b:73:a2:99:c1:4d:f8:ca:2c:88:51: 1a:66:89:73:cd:92:d5:0b:ad:33:c6:9c:ed:01:e4: fc:07:00:ea:61:b0:cb:2f:7a:ca:63:02:80:3b:14: 7f:a5:2b:63:d9:ce:20:cb:f1:b0:82:ae:bd:73:31: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:C3:E2:91:17:F3:0C:79:50:CB:27:88:3F:77:D9:BC:F6:75:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl X509v3 Authority Key Identifier: keyid:4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:dc:6f:22:eb:6d:40:87:15:12:6a:30:14:0a:c3:ec:3b:73: 57:34:5f:59:a1:57:e8:17:da:7d:d2:2a:f7:e2:20:b9:02:bc: 4a:c9:4b:12:d0:1c:4c:9b:fb:9c:d0:44:af:4e:e9:d6:e1:18: a8:57:6b:7d:e1:cc:7e:18:5c:89:c0:0b:63:c6:f6:c5:83:4e: fb:d1:a7:6d:9f:1b:ac:cb:11:48:4c:7b:be:04:bd:32:29:11: b7:ee:4a:94:23:c3:b1:6d:52:43:1c:63:6b:c6:f6:d2:8c:1d: 2a:a5:b2:05:71:00:a5:33:35:b4:2a:54:11:80:19:b8:95:b6: b5:2c:7e:3d:14:43:5c:83:84:a1:83:92:5a:6f:6d:26:fa:2c: 6a:77:63:02:0d:b0:ac:14:71:00:89:ce:5d:f4:05:96:44:e8: c8:1b:d3:09:65:86:d1:fe:5c:18:46:cc:a7:05:00:6b:aa:a6: ba:20:c7:85:61:f8:01:65:ad:63:12:9e:1b:7d:6b:7e:da:2f: 15:59:b7:66:72:fd:85:16:56:84:ea:1a:28:e6:34:08:84:d2: 18:32:ff:c7:21:e3:c8:3b:79:8b:85:46:31:ab:f1:64:aa:dc: 67:67:3d:d4:65:ff:0e:93:0e:14:98:f1:89:04:dc:85:ce:97: 18:b2:db:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0kEmgbEcF8Y9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY5ZjVjYjUtYTdiYi00M2UwLTkwZDEtOTQ3N2Q3ZGUx YWIwMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyNzE2MDAwMFowLzEtMCsGA1UEAxMk YmEwN2E3OTMtOGYwZS00MzYwLWI1MTctMmYxZWViZGEyZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoN4O9LFDXuI2VM90A3awwG2frlFhcdFzuR3 8c1iXOb9s55+giS7szIy/zD7yi/OBqrigH9fltSCARc9W78DrZQNJP0YkE344Up7 hgObo3xByaQ2FnID5vhWh3gJxaS2M2PRo2f7aqmFel8yVH/b5MXLBbDxcxaXqjtN gCbzzCar2YZcxzn0gOWfofXH0vxS5yYozQGARr0op1PlZSUIYh3OelGaQg6q6yeV WzlDGwJhVLHtl0n4DDzC8GPmtulRPxePrZ8NK3OimcFN+MosiFEaZolzzZLVC60z xpztAeT8BwDqYbDLL3rKYwKAOxR/pStj2c4gy/Gwgq69czHaLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMA1w+KRF/MMeVDLJ4g/d9m89nU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjlm NWNiNS1hN2JiLTQzZTAtOTBkMS05NDc3ZDdkZTFhYjAvMWY5ZjVjYjUtYTdiYi00 M2UwLTkwZDEtOTQ3N2Q3ZGUxYWIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWY5ZjVjYjUtYTdiYi00M2UwLTkw ZDEtOTQ3N2Q3ZGUxYWIwLzFmOWY1Y2I1LWE3YmItNDNlMC05MGQxLTk0NzdkN2Rl MWFiMC5jcmwwHwYDVR0jBBgwFoAUTJt9xaVBRqXYw9/Nq2gQcD8+4JwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjlmNWNiNS1hN2JiLTQzZTAtOTBkMS05NDc3 ZDdkZTFhYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB83G8i621AhxUSajAUCsPs O3NXNF9ZoVfoF9p90ir34iC5ArxKyUsS0BxMm/uc0ESvTunW4RioV2t94cx+GFyJ wAtjxvbFg0770adtnxusyxFITHu+BL0yKRG37kqUI8OxbVJDHGNrxvbSjB0qpbIF cQClMzW0KlQRgBm4lba1LH49FENcg4Shg5Jab20m+ixqd2MCDbCsFHEAic5d9AWW ROjIG9MJZYbR/lwYRsynBQBrqqa6IMeFYfgBZa1jEp4bfWt+2i8VWbdmcv2FFlaE 6hoo5jQIhNIYMv/HIePIO3mLhUYxq/FkqtxnZz3UZf8Okw4UmPGJBNyFzpcYstsM -----END CERTIFICATE-----Generated at Thu Mar 26 06:56:58 2026 by rpki-client