$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft File: 58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft (raw, json) Hash identifier: C/AaQDl7WzbD2r8Ph18A4WSOG6xWTmAegCeGzHeRuyM= Subject key identifier: 67:68:93:2F:85:82:03:8C:CD:BC:37:87:78:54:57:13:5E:4A:94:B6 Authority key identifier: 8E:67:88:1A:A7:8A:2D:78:D6:FB:1C:E6:CA:46:8C:F4:9D:4E:6F:81 Certificate issuer: /CN=58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a Certificate serial: 010D0C9F4328584D4A718F285069AB927491B9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft Manifest number: 010D0C9F4328584A611CBF55C781E4A784897E0B Signing time: Thu 26 Mar 2026 00:00:09 +0000 Manifest this update: Thu 26 Mar 2026 00:00:09 +0000 Manifest next update: Sat 28 Mar 2026 00:00:00 +0000 Files and hashes: 1: 58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.crl (hash: Ew2faZNAZVNx1AQW7RVQBsUfP2GMqjgeEHOnMpu/4EE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:71:8f:28:50:69:ab:92:74:91:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a Validity Not Before: Mar 26 00:00:09 2026 GMT Not After : Mar 28 00:00:00 2026 GMT Subject: CN=42cca41c-3139-4850-9901-2701f476e68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:cd:77:ef:43:40:fd:b7:3f:6b:2c:49:fd: 63:4e:b3:50:52:27:7a:d0:e4:43:76:17:4a:8c:04: 6e:5e:f3:6e:95:aa:4f:63:4f:87:7e:47:d4:5c:f2: 90:aa:2e:fc:8c:57:cb:55:4d:8e:08:83:d1:41:87: 92:9f:a4:df:b4:bc:e1:1b:43:61:fe:49:be:3c:c8: e2:05:5d:c4:bd:ad:6f:6e:d4:8e:84:18:64:12:1a: 6b:68:d5:94:85:94:1f:c4:b6:07:1a:ac:9f:b3:b2: 36:6c:b2:08:3c:4f:13:d4:df:27:47:5e:c1:a3:12: 52:57:03:5c:b8:4b:fb:3d:d9:2f:45:e1:03:b4:a8: a8:7d:bc:5b:1e:34:ab:2b:d7:4e:2c:3c:86:af:dd: e9:a0:7e:ad:3f:f5:61:77:b7:28:1a:52:c7:be:d9: 02:e6:23:a1:dd:c1:5f:5b:a8:90:20:d5:af:6c:ff: 03:e9:5c:79:91:2f:15:2d:4a:0b:04:ba:ea:2f:80: bc:47:80:e4:77:c1:c7:04:d8:b9:b0:49:92:90:c0: 94:b8:32:3b:07:15:aa:0e:b7:f1:72:17:0f:88:53: 0c:71:84:f5:ed:6b:4c:bc:ef:1a:69:1d:58:ad:04: 75:56:b7:4f:2d:19:b8:e2:9d:28:91:3e:44:d9:09: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:68:93:2F:85:82:03:8C:CD:BC:37:87:78:54:57:13:5E:4A:94:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.crl X509v3 Authority Key Identifier: keyid:8E:67:88:1A:A7:8A:2D:78:D6:FB:1C:E6:CA:46:8C:F4:9D:4E:6F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58d9e425-e76a-40ae-8e00-3ea2bb2e7e2a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8e:6e:6d:de:7e:a3:9c:98:33:3a:74:43:30:75:18:ae:df: 4e:cf:95:3f:71:69:b9:02:4d:04:6b:eb:03:56:30:d9:da:5d: 34:28:ff:49:3d:ab:c0:9e:7d:74:8a:5a:49:a9:3f:60:ea:1d: d5:96:9f:a3:79:e0:ce:14:a3:6e:e6:af:ed:8d:13:43:ea:aa: 7a:07:90:ba:6f:41:49:f3:93:82:49:5e:bd:f0:59:d3:dd:a2: 98:96:09:94:83:dd:87:08:3d:91:d3:27:83:91:68:09:01:1f: 99:b3:60:6d:75:13:74:e2:a6:dc:7b:c6:73:a2:de:64:e0:1d: 88:34:81:54:9d:fd:1a:92:30:3f:36:cf:b6:8c:8a:0b:39:02: 70:b4:74:36:c0:2a:06:de:af:7e:56:d1:7e:10:a5:96:80:c5: b1:75:62:e4:a9:6c:d3:f3:9f:97:43:22:33:50:87:76:77:6d: f7:5b:2a:46:c7:06:82:86:96:dc:64:29:14:f0:74:c6:8e:f9: 49:17:93:a4:57:15:17:7e:20:1c:3f:51:6e:e2:87:95:3e:d9: e8:b2:dc:56:0b:29:e0:07:2e:86:c6:5b:70:c3:fa:3e:7f:b0: c7:75:e3:f8:0d:65:c3:70:ab:67:5e:f6:0a:d1:06:5a:0d:34: 80:08:a7:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KcY8oUGmrknSRucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkOWU0MjUtZTc2YS00MGFlLThlMDAtM2VhMmJiMmU3 ZTJhMB4XDTI2MDMyNjAwMDAwOVoXDTI2MDMyODAwMDAwMFowLzEtMCsGA1UEAxMk NDJjY2E0MWMtMzEzOS00ODUwLTk5MDEtMjcwMWY0NzZlNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7Nd+9DQP23P2ssSf1jTrNQUid60ORDdhdK jARuXvNulapPY0+HfkfUXPKQqi78jFfLVU2OCIPRQYeSn6TftLzhG0Nh/km+PMji BV3Eva1vbtSOhBhkEhpraNWUhZQfxLYHGqyfs7I2bLIIPE8T1N8nR17BoxJSVwNc uEv7PdkvReEDtKiofbxbHjSrK9dOLDyGr93poH6tP/Vhd7coGlLHvtkC5iOh3cFf W6iQINWvbP8D6Vx5kS8VLUoLBLrqL4C8R4Dkd8HHBNi5sEmSkMCUuDI7BxWqDrfx chcPiFMMcYT17WtMvO8aaR1YrQR1VrdPLRm44p0okT5E2Qnn/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGdoky+FggOMzbw3h3hUVxNeSpS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81OGQ5 ZTQyNS1lNzZhLTQwYWUtOGUwMC0zZWEyYmIyZTdlMmEvNThkOWU0MjUtZTc2YS00 MGFlLThlMDAtM2VhMmJiMmU3ZTJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNThkOWU0MjUtZTc2YS00MGFlLThl MDAtM2VhMmJiMmU3ZTJhLzU4ZDllNDI1LWU3NmEtNDBhZS04ZTAwLTNlYTJiYjJl N2UyYS5jcmwwHwYDVR0jBBgwFoAUjmeIGqeKLXjW+xzmykaM9J1Ob4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81OGQ5ZTQyNS1lNzZhLTQwYWUtOGUwMC0zZWEy YmIyZTdlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxjm5t3n6jnJgzOnRDMHUY rt9Oz5U/cWm5Ak0Ea+sDVjDZ2l00KP9JPavAnn10ilpJqT9g6h3Vlp+jeeDOFKNu 5q/tjRND6qp6B5C6b0FJ85OCSV698FnT3aKYlgmUg92HCD2R0yeDkWgJAR+Zs2Bt dRN04qbce8Zzot5k4B2INIFUnf0akjA/Ns+2jIoLOQJwtHQ2wCoG3q9+VtF+EKWW gMWxdWLkqWzT85+XQyIzUId2d233WypGxwaChpbcZCkU8HTGjvlJF5OkVxUXfiAc P1Fu4oeVPtnostxWCyngBy6Gxltww/o+f7DHdeP4DWXDcKtnXvYK0QZaDTSACKfJ -----END CERTIFICATE-----Generated at Thu Mar 26 15:57:39 2026 by rpki-client