$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft File: bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft (raw, json) Hash identifier: MMI5WFqFGxX7V/7n0JEY65YwpQupvJTPmL/rWj3uTb8= Subject key identifier: 85:6D:B0:8F:54:5B:9C:30:F4:7C:A2:B5:78:EA:D3:FA:9C:1E:06:8B Authority key identifier: FD:96:B5:EA:84:51:92:BF:CA:3C:23:83:53:F2:EE:C7:B6:89:DA:2D Certificate issuer: /CN=bf7e412f-ddf7-470c-acb4-1f6dd865230d Certificate serial: 010D0C9F4328584D4AAD1E753356909B0E560A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft Manifest number: 010D0C9F432858445F1E5ABAB51C32EDCCCD8FA2 Signing time: Thu 26 Mar 2026 02:00:09 +0000 Manifest this update: Thu 26 Mar 2026 02:00:09 +0000 Manifest next update: Sun 29 Mar 2026 02:00:00 +0000 Files and hashes: 1: bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl (hash: RCE4XAFxTeP9jTdiBLdhQC9OaZJPwcVjZdlv8p05pYE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ad:1e:75:33:56:90:9b:0e:56:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7e412f-ddf7-470c-acb4-1f6dd865230d Validity Not Before: Mar 26 02:00:09 2026 GMT Not After : Mar 29 02:00:00 2026 GMT Subject: CN=69f323e2-fb19-4a31-b83b-e5ab6e6c8aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:71:3e:d7:65:98:f0:c1:eb:f9:01:a2:02: 76:89:df:35:cc:ed:2d:e1:34:cb:67:7a:81:1a:a5: ea:df:ee:d9:c0:ae:91:8c:03:5b:74:df:e4:26:ae: 18:f6:ba:c7:30:57:13:4c:0d:6d:bd:e5:90:2d:4f: 26:f5:f4:68:8a:8f:50:24:30:01:e6:70:78:fb:f5: 42:d1:2c:40:21:25:88:16:11:46:52:cd:4a:77:49: c6:24:8c:08:92:61:19:9d:26:82:38:b0:5d:ed:86: 77:41:ba:43:3a:4e:a0:89:5e:c2:68:c7:6a:a1:59: 8a:91:2d:4a:85:b3:32:10:6e:65:77:47:67:17:74: 1b:54:4b:d8:cb:30:dc:b3:1d:d5:14:02:6b:78:77: cd:68:f6:e1:19:75:ff:6f:97:70:bd:da:ed:fb:3a: ce:b5:53:3d:03:b0:16:e3:1e:76:80:81:4d:fc:f8: 48:1a:18:6c:df:02:c0:3e:26:32:4c:0e:a7:c1:86: 7c:b2:8f:26:5d:ad:81:02:54:30:44:50:2b:9b:93: 7f:bc:38:70:e7:fa:66:fd:1a:2d:a7:22:e5:91:62: df:e8:cf:2d:fa:39:30:b6:55:4f:a9:79:46:b6:5b: 94:23:cf:b8:58:f3:2b:a5:26:9d:51:4e:0d:0f:35: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:B0:8F:54:5B:9C:30:F4:7C:A2:B5:78:EA:D3:FA:9C:1E:06:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl X509v3 Authority Key Identifier: keyid:FD:96:B5:EA:84:51:92:BF:CA:3C:23:83:53:F2:EE:C7:B6:89:DA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:68:bf:1d:42:4e:8b:8b:f4:a0:c9:40:88:c8:49:d5:df:00: 5d:c4:13:5b:8f:a5:92:29:b9:df:1c:3c:80:f7:e1:9d:01:74: 59:7c:23:c0:59:f6:96:c2:23:14:15:a9:49:03:94:00:2d:51: ba:b1:0f:d2:f2:a5:4f:f1:4c:89:ce:e2:19:59:f6:f7:39:8e: 00:d2:2e:06:3b:5a:ba:b7:d6:5b:ad:3f:60:ac:69:15:93:3d: 83:76:ed:39:43:31:75:c4:5a:0d:65:f5:ba:7d:79:b8:ee:47: de:15:b9:3c:20:e7:8f:53:20:12:b6:37:b6:4e:cd:5e:8f:a2: 0e:3a:41:1c:46:d5:21:49:5e:b8:f8:30:b2:bb:4b:1f:bb:91: aa:3b:29:99:ba:b8:19:9a:b7:22:07:fe:5f:b2:c9:cb:1d:0f: e6:ab:63:70:85:2e:4e:76:28:6e:52:d9:8a:ed:25:d6:ec:5b: 65:9a:08:4a:d1:8b:45:22:c6:4a:73:79:c9:45:b8:6f:04:94: fb:1d:49:58:35:16:2e:2a:67:0a:86:f7:60:dd:67:57:6b:22: 78:6d:48:98:13:eb:66:7e:a4:89:f4:79:08:bd:71:64:28:17: 34:7e:01:e1:ce:45:04:a7:8a:b4:52:66:00:34:52:79:12:da: b1:f9:fb:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KrR51M1aQmw5WCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZTQxMmYtZGRmNy00NzBjLWFjYjQtMWY2ZGQ4NjUy MzBkMB4XDTI2MDMyNjAyMDAwOVoXDTI2MDMyOTAyMDAwMFowLzEtMCsGA1UEAxMk NjlmMzIzZTItZmIxOS00YTMxLWI4M2ItZTVhYjZlNmM4YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFRxPtdlmPDB6/kBogJ2id81zO0t4TTLZ3qB GqXq3+7ZwK6RjANbdN/kJq4Y9rrHMFcTTA1tveWQLU8m9fRoio9QJDAB5nB4+/VC 0SxAISWIFhFGUs1Kd0nGJIwIkmEZnSaCOLBd7YZ3QbpDOk6giV7CaMdqoVmKkS1K hbMyEG5ld0dnF3QbVEvYyzDcsx3VFAJreHfNaPbhGXX/b5dwvdrt+zrOtVM9A7AW 4x52gIFN/PhIGhhs3wLAPiYyTA6nwYZ8so8mXa2BAlQwRFArm5N/vDhw5/pm/Rot pyLlkWLf6M8t+jkwtlVPqXlGtluUI8+4WPMrpSadUU4NDzWaBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIVtsI9UW5ww9HyitXjq0/qcHgaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZjdl NDEyZi1kZGY3LTQ3MGMtYWNiNC0xZjZkZDg2NTIzMGQvYmY3ZTQxMmYtZGRmNy00 NzBjLWFjYjQtMWY2ZGQ4NjUyMzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmY3ZTQxMmYtZGRmNy00NzBjLWFj YjQtMWY2ZGQ4NjUyMzBkL2JmN2U0MTJmLWRkZjctNDcwYy1hY2I0LTFmNmRkODY1 MjMwZC5jcmwwHwYDVR0jBBgwFoAU/Za16oRRkr/KPCODU/Lux7aJ2i0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZjdlNDEyZi1kZGY3LTQ3MGMtYWNiNC0xZjZk ZDg2NTIzMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRaL8dQk6Li/SgyUCIyEnV 3wBdxBNbj6WSKbnfHDyA9+GdAXRZfCPAWfaWwiMUFalJA5QALVG6sQ/S8qVP8UyJ zuIZWfb3OY4A0i4GO1q6t9ZbrT9grGkVkz2Ddu05QzF1xFoNZfW6fXm47kfeFbk8 IOePUyAStje2Ts1ej6IOOkEcRtUhSV64+DCyu0sfu5GqOymZurgZmrciB/5fssnL HQ/mq2NwhS5OdihuUtmK7SXW7FtlmghK0YtFIsZKc3nJRbhvBJT7HUlYNRYuKmcK hvdg3WdXayJ4bUiYE+tmfqSJ9HkIvXFkKBc0fgHhzkUEp4q0UmYANFJ5Etqx+ftV -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:21 2026 by rpki-client