$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft File: bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft (raw, json) Hash identifier: xiy5aPqgEGs77pMuCoHYkjM5QOpWAwLIUeeT1aBP/SY= Subject key identifier: 1A:95:11:E5:B9:44:54:0B:DD:D6:52:96:BE:6A:84:1C:84:E3:F8:DD Authority key identifier: 8C:2E:F3:E6:21:56:CF:6F:67:AD:52:7B:02:B9:9B:3D:12:5B:DA:39 Certificate issuer: /CN=bb3284d3-a17b-4378-aea1-31a6dc7f667a Certificate serial: 010D0C9F4328584D4C30307DA72E3E2C0BBE3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft Manifest number: 010D0C9F432858496795E3313ACFC671FE1F0FE5 Signing time: Thu 26 Mar 2026 15:00:03 +0000 Manifest this update: Thu 26 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: bb3284d3-a17b-4378-aea1-31a6dc7f667a.crl (hash: lXO42k1J0sT4fF+6r2VNhwHvLUmKBcqKT6c9zrP43+c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:30:30:7d:a7:2e:3e:2c:0b:be:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3284d3-a17b-4378-aea1-31a6dc7f667a Validity Not Before: Mar 26 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=b67c70b3-9de6-4622-9bd5-1af469af569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:85:dd:62:51:93:d8:bb:78:cc:26:dc:c6: 79:a7:f8:24:88:49:31:42:47:cb:63:47:94:1e:58: a2:1a:6c:88:24:a2:f5:99:0a:18:8d:5e:8c:e1:19: 7f:7d:71:22:9a:dd:71:6a:03:f1:cc:7a:ad:3d:ac: 21:f4:0f:19:96:6e:81:1d:30:ed:3b:92:84:b9:75: b2:03:ee:62:f5:ba:eb:52:dd:ca:42:55:ff:cb:bb: d6:30:95:02:76:60:56:d0:64:a8:25:b5:7d:b9:32: f4:2f:63:ff:7d:65:24:dd:a0:94:d4:a0:e6:61:58: 45:3f:04:34:e4:3f:17:2d:7a:96:91:1f:6f:2e:60: 81:6f:74:35:09:59:b6:b9:05:fd:9d:0b:f9:23:da: 01:36:27:85:13:63:1b:34:7d:a6:ff:08:37:9f:50: 29:b8:ed:0e:0a:63:95:e4:03:5e:79:25:d7:28:81: 66:3d:b6:12:7c:a7:e2:95:2e:17:1e:85:94:11:e1: 8e:e1:dc:28:91:98:88:17:5e:16:d1:21:35:c6:76: 36:16:d5:d7:9b:6d:6c:f6:4e:c5:75:37:26:7b:4a: 61:88:62:76:08:45:08:cc:6e:c8:f3:b8:f6:24:fa: 5e:61:2f:77:e9:8c:b2:07:dd:f7:d6:bd:69:70:62: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:11:E5:B9:44:54:0B:DD:D6:52:96:BE:6A:84:1C:84:E3:F8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.crl X509v3 Authority Key Identifier: keyid:8C:2E:F3:E6:21:56:CF:6F:67:AD:52:7B:02:B9:9B:3D:12:5B:DA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ee:54:83:c3:6e:4d:0b:2f:e9:d9:14:02:f0:c0:fc:88:3b: c3:c2:81:a7:41:90:96:1d:f9:b9:4f:67:6c:d0:fb:24:3b:f9: 4d:f4:39:73:96:f8:94:21:b5:a7:35:6d:6b:75:bf:57:8b:44: 5d:d1:a0:5e:34:7b:cd:cb:32:2c:ee:a7:62:f6:7a:61:f5:d6: 55:63:12:e6:0b:54:0b:b4:eb:21:ad:3b:b9:5b:0f:c3:8a:93: 6c:c7:f4:91:34:5e:bd:6a:74:87:f7:1f:84:cc:26:24:49:b2: b2:fc:64:c6:cf:1c:71:68:81:b4:cb:01:0b:ac:2b:3b:1d:37: 79:cb:ee:81:01:e1:80:80:48:f9:a5:7a:cd:41:9f:cf:60:de: 34:0b:83:f3:0a:ae:4e:c9:0e:7d:f7:ce:b0:f0:1d:bc:e9:eb: 50:2a:b6:68:17:a1:9a:58:3c:18:ea:9f:d0:bc:22:c7:3e:3f: a2:5f:d5:b6:5b:59:f5:4d:11:0f:fc:65:d9:89:51:f1:4d:1b: d3:96:2b:0e:02:6a:59:7d:0e:b1:c2:ae:89:1e:2b:b2:40:8a: 10:dd:75:6b:f9:6e:3c:8c:4b:f6:04:ec:c2:e5:c2:bb:e9:d4: dc:18:59:4f:48:e7:b9:da:f2:31:e7:4a:11:f6:05:71:17:ab: b0:b2:b2:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MMDB9py4+LAu+PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzMjg0ZDMtYTE3Yi00Mzc4LWFlYTEtMzFhNmRjN2Y2 NjdhMB4XDTI2MDMyNjE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk YjY3YzcwYjMtOWRlNi00NjIyLTliZDUtMWFmNDY5YWY1NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ2F3WJRk9i7eMwm3MZ5p/gkiEkxQkfLY0eU HliiGmyIJKL1mQoYjV6M4Rl/fXEimt1xagPxzHqtPawh9A8Zlm6BHTDtO5KEuXWy A+5i9brrUt3KQlX/y7vWMJUCdmBW0GSoJbV9uTL0L2P/fWUk3aCU1KDmYVhFPwQ0 5D8XLXqWkR9vLmCBb3Q1CVm2uQX9nQv5I9oBNieFE2MbNH2m/wg3n1ApuO0OCmOV 5ANeeSXXKIFmPbYSfKfilS4XHoWUEeGO4dwokZiIF14W0SE1xnY2FtXXm21s9k7F dTcme0phiGJ2CEUIzG7I87j2JPpeYS936YyyB9331r1pcGLNXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBqVEeW5RFQL3dZSlr5qhByE4/jdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYjMy ODRkMy1hMTdiLTQzNzgtYWVhMS0zMWE2ZGM3ZjY2N2EvYmIzMjg0ZDMtYTE3Yi00 Mzc4LWFlYTEtMzFhNmRjN2Y2NjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmIzMjg0ZDMtYTE3Yi00Mzc4LWFl YTEtMzFhNmRjN2Y2NjdhL2JiMzI4NGQzLWExN2ItNDM3OC1hZWExLTMxYTZkYzdm NjY3YS5jcmwwHwYDVR0jBBgwFoAUjC7z5iFWz29nrVJ7ArmbPRJb2jkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYjMyODRkMy1hMTdiLTQzNzgtYWVhMS0zMWE2 ZGM3ZjY2N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDG7lSDw25NCy/p2RQC8MD8 iDvDwoGnQZCWHfm5T2ds0PskO/lN9DlzlviUIbWnNW1rdb9Xi0Rd0aBeNHvNyzIs 7qdi9nph9dZVYxLmC1QLtOshrTu5Ww/DipNsx/SRNF69anSH9x+EzCYkSbKy/GTG zxxxaIG0ywELrCs7HTd5y+6BAeGAgEj5pXrNQZ/PYN40C4PzCq5OyQ59986w8B28 6etQKrZoF6GaWDwY6p/QvCLHPj+iX9W2W1n1TREP/GXZiVHxTRvTlisOAmpZfQ6x wq6JHiuyQIoQ3XVr+W48jEv2BOzC5cK76dTcGFlPSOe52vIx50oR9gVxF6uwsrIz -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:04 2026 by rpki-client