$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft File: 4cd7357f-5806-4e1e-a57e-078529f02d78.mft (raw, json) Hash identifier: /cKOTmlehOpYV7IlwQeSCI44e5GMzHFjlVvVVWdo+aM= Subject key identifier: 8D:6C:5E:3B:32:1A:5B:CF:B9:BC:8F:9C:AA:32:98:D7:FA:6C:9A:2D Authority key identifier: A4:42:AD:8B:45:0F:79:F1:D9:BE:1D:09:A8:2A:68:F6:AE:56:4C:E7 Certificate issuer: /CN=4cd7357f-5806-4e1e-a57e-078529f02d78 Certificate serial: 010D0C9F4328584D49FA72D217FB41FDA4522C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft Manifest number: 010D0C9F432858441E3AE8CA65AC133310FBAF79 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 4cd7357f-5806-4e1e-a57e-078529f02d78.crl (hash: /rRJLU9PG0dgc1isYh322MgYs8D//pb8j8kBpYTICoc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:72:d2:17:fb:41:fd:a4:52:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd7357f-5806-4e1e-a57e-078529f02d78 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=5ae0f812-a918-47a7-956d-f13fe3ba707e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:3c:2d:42:a7:46:bf:e9:c9:f7:09:e2:c0: e4:1b:9a:d5:5d:b1:71:a8:f9:04:6a:8c:1f:c5:7c: ce:26:89:96:9c:8b:e1:63:02:03:00:12:01:94:be: d5:4b:33:b6:23:95:50:d5:85:0e:51:6b:81:1e:9a: 13:9b:4f:2b:8e:e4:b8:cb:b3:d8:d2:53:f9:bc:06: 97:ff:98:c6:c4:59:6a:6a:25:43:20:09:bc:3d:a1: 3a:7a:44:d9:f6:da:3b:03:12:44:45:47:a5:7d:0a: 55:8d:15:c4:68:25:2d:ec:8d:9f:3e:67:1d:22:b3: 39:ec:4e:04:4a:86:48:7a:46:e8:5b:44:a4:f4:9d: 0a:b9:b7:8e:04:5b:4b:9a:c0:f1:92:81:74:d6:ca: 24:d3:bb:b5:2b:70:46:43:20:b1:9e:84:46:87:b5: 39:63:79:31:34:34:86:96:d4:2f:fd:c3:ff:b3:8f: 30:90:57:b8:da:c7:14:09:63:22:79:b4:b1:5e:fb: ce:1a:3a:b4:2c:1d:75:19:92:66:b7:95:df:af:0a: f1:b5:8c:d9:3b:b9:9d:4c:06:b2:2c:0b:e4:77:97: 4d:c9:96:27:22:bd:96:4d:d4:c7:5e:0c:01:e4:a8: 82:81:36:92:e3:06:01:45:c5:91:90:4f:4e:4a:2e: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:5E:3B:32:1A:5B:CF:B9:BC:8F:9C:AA:32:98:D7:FA:6C:9A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.crl X509v3 Authority Key Identifier: keyid:A4:42:AD:8B:45:0F:79:F1:D9:BE:1D:09:A8:2A:68:F6:AE:56:4C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a1:fa:d4:5d:07:99:c4:9a:e1:76:c8:0f:f9:8a:04:b6:e9: 07:54:97:04:fb:21:bf:35:af:b5:b0:b4:e0:69:c1:41:0d:b3: 9a:08:6e:0b:60:fb:43:3a:3c:ec:c9:32:ce:a3:84:1b:85:27: 24:e0:80:01:91:35:3d:d0:e6:0d:0c:d4:8a:2c:0f:56:f9:11: 6f:a9:9d:f5:c6:c1:d3:9f:43:ee:29:c5:d6:09:f2:a7:0f:a0: d3:6a:12:09:81:21:9d:07:57:83:33:29:1d:98:b6:f9:0e:36: 7d:e2:20:45:90:39:2a:70:51:f1:8e:9a:17:f0:94:11:4f:6e: 62:03:01:6a:3e:29:f3:1a:7f:12:10:4e:2b:70:e3:08:32:8b: c8:7a:e1:1d:a2:18:90:e4:66:1e:12:78:8a:81:39:a4:e5:09: e7:05:db:cc:ae:38:b3:f5:eb:3f:7f:97:79:27:9a:0c:23:50: a6:b0:96:b2:09:96:60:1b:af:56:e1:0e:f3:51:25:03:28:c2: 69:1c:5e:60:be:b0:a9:f1:6b:d4:aa:67:e6:80:f2:2e:00:20: 93:e0:7d:8f:bb:64:37:f9:fd:6d:50:c4:e9:c6:0a:c7:29:80: 1a:12:68:77:e5:de:93:80:ef:1e:07:e2:25:27:49:c3:f2:f6: 73:27:76:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nLSF/tB/aRSLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNkNzM1N2YtNTgwNi00ZTFlLWE1N2UtMDc4NTI5ZjAy ZDc4MB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NWFlMGY4MTItYTkxOC00N2E3LTk1NmQtZjEzZmUzYmE3MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9k8LUKnRr/pyfcJ4sDkG5rVXbFxqPkEaowf xXzOJomWnIvhYwIDABIBlL7VSzO2I5VQ1YUOUWuBHpoTm08rjuS4y7PY0lP5vAaX /5jGxFlqaiVDIAm8PaE6ekTZ9to7AxJERUelfQpVjRXEaCUt7I2fPmcdIrM57E4E SoZIekboW0Sk9J0KubeOBFtLmsDxkoF01sok07u1K3BGQyCxnoRGh7U5Y3kxNDSG ltQv/cP/s48wkFe42scUCWMiebSxXvvOGjq0LB11GZJmt5XfrwrxtYzZO7mdTAay LAvkd5dNyZYnIr2WTdTHXgwB5KiCgTaS4wYBRcWRkE9OSi65RQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI1sXjsyGlvPubyPnKoymNf6bJotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Y2Q3 MzU3Zi01ODA2LTRlMWUtYTU3ZS0wNzg1MjlmMDJkNzgvNGNkNzM1N2YtNTgwNi00 ZTFlLWE1N2UtMDc4NTI5ZjAyZDc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGNkNzM1N2YtNTgwNi00ZTFlLWE1 N2UtMDc4NTI5ZjAyZDc4LzRjZDczNTdmLTU4MDYtNGUxZS1hNTdlLTA3ODUyOWYw MmQ3OC5jcmwwHwYDVR0jBBgwFoAUpEKti0UPefHZvh0JqCpo9q5WTOcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80Y2Q3MzU3Zi01ODA2LTRlMWUtYTU3ZS0wNzg1 MjlmMDJkNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdofrUXQeZxJrhdsgP+YoE tukHVJcE+yG/Na+1sLTgacFBDbOaCG4LYPtDOjzsyTLOo4QbhSck4IABkTU90OYN DNSKLA9W+RFvqZ31xsHTn0PuKcXWCfKnD6DTahIJgSGdB1eDMykdmLb5DjZ94iBF kDkqcFHxjpoX8JQRT25iAwFqPinzGn8SEE4rcOMIMovIeuEdohiQ5GYeEniKgTmk 5QnnBdvMrjiz9es/f5d5J5oMI1CmsJayCZZgG69W4Q7zUSUDKMJpHF5gvrCp8WvU qmfmgPIuACCT4H2Pu2Q3+f1tUMTpxgrHKYAaEmh35d6TgO8eB+IlJ0nD8vZzJ3bq -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:52 2026 by rpki-client