$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.mft File: 3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.mft (raw, json) Hash identifier: S9zKDgbRapzN95G6abDtcZKi1VSvMN1L9Gw/4mRhh6s= Subject key identifier: 54:DF:64:CF:7B:FB:BF:32:5A:DB:38:95:FE:93:0E:F6:26:39:CA:71 Authority key identifier: 7B:CC:9D:C8:10:64:19:83:D9:C1:4D:6B:A4:7F:90:65:9D:9E:94:E8 Certificate issuer: /CN=3c015e76-9546-45c1-afd3-4e1f8ef0dd5c Certificate serial: 010D0C9F4328584D4A35F38384CE6D699BA04810 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.mft Manifest number: 010D0C9F43285849DAE45470088737CC3545576B Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.crl (hash: Qwtg6d6BRO/vVOCcnrB3YuiXbUE+OO67kL++ShotFyc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f3:83:84:ce:6d:69:9b:a0:48:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c015e76-9546-45c1-afd3-4e1f8ef0dd5c Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=d28a8689-5187-44c6-9d1e-04cdc5cc662d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:f6:13:49:3b:7c:38:f7:9f:40:fd:77:df: af:82:08:89:90:40:e0:c5:27:33:b5:aa:12:a8:f3: a1:ac:e5:be:7d:be:7d:c0:4e:91:91:e4:9e:f4:b4: e8:6a:1d:fc:7f:e3:5b:37:58:76:18:59:53:bc:66: b6:25:14:ee:cc:4a:56:49:d9:d8:5e:67:6d:d5:79: a0:06:d4:55:d3:7c:4b:9e:22:a4:ab:e0:90:0d:d1: 70:2e:b9:aa:e6:67:78:35:b9:88:e5:94:71:81:c2: bb:9a:5c:d0:8e:5d:a5:79:fd:15:6d:17:b8:52:b7: 50:ae:02:a4:c2:1f:e3:2f:7a:2d:d8:54:36:a3:ed: b1:e1:3c:0d:cd:f7:f3:c8:73:46:62:ba:0f:59:4b: 3e:96:9a:03:fd:2a:0c:05:9c:60:d7:7a:a7:66:14: af:7c:84:c8:a5:f0:4d:52:40:47:e5:1a:0c:81:5e: 88:1a:51:0c:ee:9c:be:24:eb:3a:6d:b5:72:25:d8: be:f9:8a:35:5b:c6:f2:4d:d6:63:70:c4:d0:21:97: 5a:7b:25:a5:7a:27:00:eb:9b:a7:5f:b4:b7:01:13: 12:7d:13:fc:ae:ec:bf:10:71:fe:a6:de:f1:99:e9: ed:09:b9:15:db:55:8b:ae:83:34:4e:34:bf:2f:88: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:64:CF:7B:FB:BF:32:5A:DB:38:95:FE:93:0E:F6:26:39:CA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.crl X509v3 Authority Key Identifier: keyid:7B:CC:9D:C8:10:64:19:83:D9:C1:4D:6B:A4:7F:90:65:9D:9E:94:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c015e76-9546-45c1-afd3-4e1f8ef0dd5c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e5:19:20:f3:6b:1e:4a:2a:79:6f:49:61:83:5e:e0:a7:f8: ea:ca:a5:43:44:e1:e3:e5:b1:39:17:b0:99:13:62:b3:89:65: 6e:b1:a8:8c:bf:15:01:d8:37:7f:63:79:22:29:08:c7:ac:de: 11:c8:c6:83:0a:81:1d:0c:53:0c:80:6d:e6:02:c7:02:86:41: ab:0c:c4:9a:fb:5a:bb:82:89:72:24:1e:bb:3a:8d:d0:0c:42: 74:2b:fc:88:58:dc:00:30:e9:30:e7:f0:99:d8:f1:4d:8c:d8: 69:6d:6b:e0:6c:30:8c:1c:90:e0:55:a5:cd:e1:c2:8a:31:50: 4e:19:89:61:a9:72:e3:58:c9:de:66:e9:c5:8d:49:de:1a:cf: 89:2d:39:5f:a8:13:da:5a:97:4a:9b:b4:a9:5c:40:f9:1e:79: 41:72:c4:a8:b0:82:9e:62:bc:93:6f:5b:fd:f9:33:13:82:5b: 17:bb:95:db:1d:24:eb:40:76:77:87:7d:91:4b:ef:6d:cd:d0: fd:d2:87:1e:8c:64:04:d3:db:39:b5:e1:91:90:a8:13:13:59: 4c:c9:53:8c:31:73:d1:9f:cc:87:50:19:62:2a:86:19:45:40: 4d:28:34:7a:5a:e5:11:63:df:f9:0f:7a:87:f7:65:89:41:8c: ee:9c:26:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfODhM5taZugSBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MwMTVlNzYtOTU0Ni00NWMxLWFmZDMtNGUxZjhlZjBk ZDVjMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk ZDI4YTg2ODktNTE4Ny00NGM2LTlkMWUtMDRjZGM1Y2M2NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGj2E0k7fDj3n0D9d9+vggiJkEDgxScztaoS qPOhrOW+fb59wE6RkeSe9LToah38f+NbN1h2GFlTvGa2JRTuzEpWSdnYXmdt1Xmg BtRV03xLniKkq+CQDdFwLrmq5md4NbmI5ZRxgcK7mlzQjl2lef0VbRe4UrdQrgKk wh/jL3ot2FQ2o+2x4TwNzffzyHNGYroPWUs+lpoD/SoMBZxg13qnZhSvfITIpfBN UkBH5RoMgV6IGlEM7py+JOs6bbVyJdi++Yo1W8byTdZjcMTQIZdaeyWleicA65un X7S3ARMSfRP8ruy/EHH+pt7xmentCbkV21WLroM0TjS/L4g76wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFTfZM97+78yWts4lf6TDvYmOcpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzAx NWU3Ni05NTQ2LTQ1YzEtYWZkMy00ZTFmOGVmMGRkNWMvM2MwMTVlNzYtOTU0Ni00 NWMxLWFmZDMtNGUxZjhlZjBkZDVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2MwMTVlNzYtOTU0Ni00NWMxLWFm ZDMtNGUxZjhlZjBkZDVjLzNjMDE1ZTc2LTk1NDYtNDVjMS1hZmQzLTRlMWY4ZWYw ZGQ1Yy5jcmwwHwYDVR0jBBgwFoAUe8ydyBBkGYPZwU1rpH+QZZ2elOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzAxNWU3Ni05NTQ2LTQ1YzEtYWZkMy00ZTFm OGVmMGRkNWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBA5Rkg82seSip5b0lhg17g p/jqyqVDROHj5bE5F7CZE2KziWVusaiMvxUB2Dd/Y3kiKQjHrN4RyMaDCoEdDFMM gG3mAscChkGrDMSa+1q7golyJB67Oo3QDEJ0K/yIWNwAMOkw5/CZ2PFNjNhpbWvg bDCMHJDgVaXN4cKKMVBOGYlhqXLjWMneZunFjUneGs+JLTlfqBPaWpdKm7SpXED5 HnlBcsSosIKeYryTb1v9+TMTglsXu5XbHSTrQHZ3h32RS+9tzdD90ocejGQE09s5 teGRkKgTE1lMyVOMMXPRn8yHUBliKoYZRUBNKDR6WuURY9/5D3qH92WJQYzunCa7 -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:37 2026 by rpki-client