$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4/23d5ae9e-ca33-4d08-b410-bc750d3821a4.mft File: 23d5ae9e-ca33-4d08-b410-bc750d3821a4.mft (raw, json) Hash identifier: AOuZ3xNzBKhADMgbt59pE/z2WODj/KhZQ6/7qWYFLsk= Subject key identifier: 27:14:6A:74:C6:CA:FB:88:4E:D1:21:05:30:89:AD:C1:21:37:14:1D Authority key identifier: 93:AD:5D:57:97:FD:E9:87:3B:99:0D:92:DA:6A:00:15:A5:4C:34:DE Certificate issuer: /CN=23d5ae9e-ca33-4d08-b410-bc750d3821a4 Certificate serial: 010D0C9F4328584D4A183B89BA86BDF95B31BD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4/23d5ae9e-ca33-4d08-b410-bc750d3821a4.mft Manifest number: 010D0C9F432858439D7E0C0420688380B7BC29F7 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 23d5ae9e-ca33-4d08-b410-bc750d3821a4.crl (hash: CsM0+/XjTwt6St5BVmH0Pg6Wx+bjSIXbCrrrlCDos54=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4/23d5ae9e-ca33-4d08-b410-bc750d3821a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4/23d5ae9e-ca33-4d08-b410-bc750d3821a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3b:89:ba:86:bd:f9:5b:31:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d5ae9e-ca33-4d08-b410-bc750d3821a4 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=723f32ae-f02f-45f8-a578-cc6567bdfca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:b6:4d:ce:e4:0f:b6:00:1e:50:47:da:8b: 2f:65:64:2f:a8:86:3b:c1:1a:7f:b5:ea:98:f6:eb: 74:0f:d0:31:3b:61:da:88:2a:30:a0:b5:e8:ff:bc: 1d:92:b8:be:16:e3:f5:7a:c8:47:a1:b1:f6:c0:f9: 06:bd:83:63:1b:bc:76:71:39:a9:8a:ae:54:b2:a4: d6:a4:71:fe:0e:a4:d5:1d:1f:ca:3d:ec:65:8c:58: 27:ec:90:25:a8:6b:dc:0e:16:2d:0e:4e:28:74:a3: d2:bf:b0:f6:85:44:63:42:5d:53:91:92:ff:7f:e6: b1:5b:dd:38:49:b8:ee:6a:71:1a:af:9d:f7:95:60: 36:f6:1d:76:d1:8f:47:42:1d:8b:44:f5:8c:79:dc: cb:7b:20:fc:85:55:5c:d2:f9:b2:d8:ff:06:09:a0: 50:a0:9a:7b:32:4d:0b:59:7e:48:d6:04:9a:a6:c6: 0a:24:a8:39:53:55:5f:07:18:bb:e2:a0:69:27:94: 25:5c:6b:4c:7c:9a:a4:20:3c:eb:d0:d7:3c:34:41: 3e:b0:8a:80:17:c9:93:ca:75:d1:be:6e:60:76:f7: 95:f4:95:19:42:b0:70:65:1e:12:61:3e:ff:6e:6c: c6:a9:9c:a2:6d:b1:57:c6:61:6d:97:71:46:48:19: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:6A:74:C6:CA:FB:88:4E:D1:21:05:30:89:AD:C1:21:37:14:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4/23d5ae9e-ca33-4d08-b410-bc750d3821a4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4/23d5ae9e-ca33-4d08-b410-bc750d3821a4.crl X509v3 Authority Key Identifier: keyid:93:AD:5D:57:97:FD:E9:87:3B:99:0D:92:DA:6A:00:15:A5:4C:34:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23d5ae9e-ca33-4d08-b410-bc750d3821a4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cc:0d:f7:43:6c:af:56:c8:fd:6d:cb:d0:a4:5b:7c:04:e7: 3a:3b:49:19:e7:d7:e1:d2:1b:15:62:16:0d:b9:c4:93:b5:9b: 1d:fd:e4:9a:5f:ec:e2:ff:50:bb:34:a6:72:4b:ad:1e:1d:58: 0e:a4:1f:25:e3:58:17:bf:4c:7f:ae:05:4b:8e:c0:25:33:72: 43:d0:e0:45:3f:d0:87:0a:72:ac:c6:be:44:25:39:a5:c5:b6: 8e:55:2d:23:af:f7:e1:34:ae:c2:b2:2b:4f:01:c3:d0:72:c2: 34:2d:00:65:cf:64:76:9e:cf:36:ac:2d:71:1d:88:af:de:54: 06:71:1a:2c:bf:55:95:ae:e4:9f:25:63:d9:32:67:34:90:ed: 32:18:40:dd:24:dc:1e:31:1e:b5:8c:4a:6e:50:a0:24:a0:d8: 71:c6:f0:12:21:8a:47:bc:ba:96:b0:73:63:26:9b:28:24:bf: d3:6f:f2:d5:70:73:b2:bb:d1:19:77:d9:e8:23:66:19:19:e6: 08:8c:b3:d8:6e:80:5d:d3:7b:0d:a1:d0:17:00:c6:bb:34:52: 9e:c5:ae:df:c5:ca:66:01:45:67:81:9b:82:9d:9b:f3:82:9f: 50:c7:ef:62:a5:7a:72:67:c4:ba:d6:5d:61:38:d8:dd:a3:fd: 96:21:48:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDuJuoa9+VsxvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNWFlOWUtY2EzMy00ZDA4LWI0MTAtYmM3NTBkMzgy MWE0MB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk NzIzZjMyYWUtZjAyZi00NWY4LWE1NzgtY2M2NTY3YmRmY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVq2Tc7kD7YAHlBH2osvZWQvqIY7wRp/teqY 9ut0D9AxO2HaiCowoLXo/7wdkri+FuP1eshHobH2wPkGvYNjG7x2cTmpiq5UsqTW pHH+DqTVHR/KPexljFgn7JAlqGvcDhYtDk4odKPSv7D2hURjQl1TkZL/f+axW904 SbjuanEar533lWA29h120Y9HQh2LRPWMedzLeyD8hVVc0vmy2P8GCaBQoJp7Mk0L WX5I1gSapsYKJKg5U1VfBxi74qBpJ5QlXGtMfJqkIDzr0Nc8NEE+sIqAF8mTynXR vm5gdveV9JUZQrBwZR4SYT7/bmzGqZyibbFXxmFtl3FGSBliwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCcUanTGyvuITtEhBTCJrcEhNxQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Q1 YWU5ZS1jYTMzLTRkMDgtYjQxMC1iYzc1MGQzODIxYTQvMjNkNWFlOWUtY2EzMy00 ZDA4LWI0MTAtYmM3NTBkMzgyMWE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNkNWFlOWUtY2EzMy00ZDA4LWI0 MTAtYmM3NTBkMzgyMWE0LzIzZDVhZTllLWNhMzMtNGQwOC1iNDEwLWJjNzUwZDM4 MjFhNC5jcmwwHwYDVR0jBBgwFoAUk61dV5f96Yc7mQ2S2moAFaVMNN4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Q1YWU5ZS1jYTMzLTRkMDgtYjQxMC1iYzc1 MGQzODIxYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVzA33Q2yvVsj9bcvQpFt8 BOc6O0kZ59fh0hsVYhYNucSTtZsd/eSaX+zi/1C7NKZyS60eHVgOpB8l41gXv0x/ rgVLjsAlM3JD0OBFP9CHCnKsxr5EJTmlxbaOVS0jr/fhNK7CsitPAcPQcsI0LQBl z2R2ns82rC1xHYiv3lQGcRosv1WVruSfJWPZMmc0kO0yGEDdJNweMR61jEpuUKAk oNhxxvASIYpHvLqWsHNjJpsoJL/Tb/LVcHOyu9EZd9noI2YZGeYIjLPYboBd03sN odAXAMa7NFKexa7fxcpmAUVngZuCnZvzgp9Qx+9ipXpyZ8S61l1hONjdo/2WIUgd -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:53 2026 by rpki-client