$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft File: cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft (raw, json) Hash identifier: /VGcs0TbSs+75XCB5+z/FeJoGpH6fXdySJjZhyyUvFg= Subject key identifier: F4:AD:21:BC:8C:B9:DF:47:37:AD:52:CF:5B:74:A8:E0:14:CB:D5:EA Authority key identifier: 9F:D1:BA:46:A5:F1:06:75:8C:3C:EE:05:44:BD:33:B6:62:E6:8F:F9 Certificate issuer: /CN=cf174adc-ec77-409b-8966-d3eb3d0bcc8e Certificate serial: 010D0C9F4328584D49BED74C34D82668136A4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft Manifest number: 010D0C9F43285849CC6EE742E319D0EA20F704C0 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: cf174adc-ec77-409b-8966-d3eb3d0bcc8e.crl (hash: vq6Jpq6zcge0/zUixGtoZwRLyyxXaT/PMYRdwqaQ2Fs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d7:4c:34:d8:26:68:13:6a:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf174adc-ec77-409b-8966-d3eb3d0bcc8e Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=16be9f0d-01b1-4f8b-b0b6-88d4eaa7143b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:68:c9:9a:8d:cb:aa:79:f3:21:86:b9:e4: 59:21:41:08:99:7c:3a:f7:ed:5f:66:8b:39:62:2b: 61:5a:b4:ba:fa:b3:d3:c8:d9:ff:f7:5a:d8:7e:5c: 7f:89:ec:4f:81:92:e5:fb:e4:e6:50:0c:da:a6:0e: 76:d0:cf:f9:d3:61:5d:bf:a2:d7:30:67:fd:a8:0e: cc:d8:5f:af:3d:c6:a0:55:53:36:7b:cf:aa:5b:c8: 8f:dc:b8:fe:34:a6:66:04:26:a5:52:ea:59:c3:42: 43:42:74:d4:69:72:36:e4:8d:a0:88:a2:5b:d2:00: d0:4f:ea:8d:df:ce:8d:a0:f1:58:c3:27:e8:f2:a0: bd:5a:11:10:d0:a7:ea:13:5f:5f:82:6a:5a:29:2d: 30:28:d6:f9:b5:86:e2:0c:ec:5c:3d:a3:9e:fb:df: a6:ac:9d:47:60:25:94:87:09:f7:97:4e:b1:75:7e: 00:82:bd:65:20:70:c4:6c:c1:20:0a:c5:ca:d8:ec: 2b:93:18:d8:48:27:92:47:6e:b5:d4:d7:c0:5a:60: b6:d0:df:39:ce:26:7b:d2:45:d5:f8:e5:fb:a8:18: 1c:cb:f7:f1:43:4f:1e:22:8f:d9:e5:11:0a:1f:bf: e9:34:8d:cf:cf:ac:b0:ac:c0:ea:f0:ba:7f:8d:14: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AD:21:BC:8C:B9:DF:47:37:AD:52:CF:5B:74:A8:E0:14:CB:D5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.crl X509v3 Authority Key Identifier: keyid:9F:D1:BA:46:A5:F1:06:75:8C:3C:EE:05:44:BD:33:B6:62:E6:8F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ee:cd:47:1b:c1:62:7a:5a:ba:ab:d4:f5:02:8e:55:45:5d: 1b:02:89:c7:eb:ab:a0:c7:cc:08:64:55:5e:98:77:01:85:cd: 7c:1f:8e:9a:9b:22:fe:38:64:9a:25:57:03:cf:7c:91:e4:df: 4e:f6:2a:83:15:b7:84:be:06:2f:70:9e:5a:1a:f6:99:93:75: 85:26:21:04:10:3d:aa:45:42:e0:09:16:86:42:c0:b6:18:bd: 03:32:c3:1a:2d:d8:43:eb:d6:73:4a:2c:77:d9:11:cf:f4:04: 67:0b:f7:ca:62:f4:63:bc:7b:ed:33:f1:b9:79:48:d6:d1:24: 53:1e:9f:7e:8a:f3:6d:c3:83:eb:d1:b6:4a:3b:5f:46:f6:6a: 9e:b8:0f:93:e0:26:94:90:72:fc:17:10:a6:73:89:31:03:7b: 26:c6:a3:5c:b5:5a:63:ad:a1:4a:46:e7:ab:7b:1c:b7:20:8e: b9:f0:43:24:d4:89:44:a3:ba:d8:76:f4:c0:0d:c3:ce:18:ca: 5b:67:92:e5:67:4a:d1:54:c6:80:f5:f1:ac:8b:46:a5:89:58: 8c:2f:81:94:e6:3d:80:6e:12:07:6f:c9:b7:34:15:b5:fc:18: 50:21:63:fa:1c:92:b6:f5:7d:68:3c:6b:f0:84:ae:22:71:e8: 05:54:ba:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtdMNNgmaBNqQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YxNzRhZGMtZWM3Ny00MDliLTg5NjYtZDNlYjNkMGJj YzhlMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk MTZiZTlmMGQtMDFiMS00ZjhiLWIwYjYtODhkNGVhYTcxNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ExoyZqNy6p58yGGueRZIUEImXw69+1fZos5 YithWrS6+rPTyNn/91rYflx/iexPgZLl++TmUAzapg520M/502Fdv6LXMGf9qA7M 2F+vPcagVVM2e8+qW8iP3Lj+NKZmBCalUupZw0JDQnTUaXI25I2giKJb0gDQT+qN 386NoPFYwyfo8qC9WhEQ0KfqE19fgmpaKS0wKNb5tYbiDOxcPaOe+9+mrJ1HYCWU hwn3l06xdX4Agr1lIHDEbMEgCsXK2OwrkxjYSCeSR2611NfAWmC20N85ziZ70kXV +OX7qBgcy/fxQ08eIo/Z5REKH7/pNI3Pz6ywrMDq8Lp/jRTswwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPStIbyMud9HN61Sz1t0qOAUy9XqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZjE3 NGFkYy1lYzc3LTQwOWItODk2Ni1kM2ViM2QwYmNjOGUvY2YxNzRhZGMtZWM3Ny00 MDliLTg5NjYtZDNlYjNkMGJjYzhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2YxNzRhZGMtZWM3Ny00MDliLTg5 NjYtZDNlYjNkMGJjYzhlL2NmMTc0YWRjLWVjNzctNDA5Yi04OTY2LWQzZWIzZDBi Y2M4ZS5jcmwwHwYDVR0jBBgwFoAUn9G6RqXxBnWMPO4FRL0ztmLmj/kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZjE3NGFkYy1lYzc3LTQwOWItODk2Ni1kM2Vi M2QwYmNjOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAc7s1HG8Fielq6q9T1Ao5V RV0bAonH66ugx8wIZFVemHcBhc18H46amyL+OGSaJVcDz3yR5N9O9iqDFbeEvgYv cJ5aGvaZk3WFJiEEED2qRULgCRaGQsC2GL0DMsMaLdhD69ZzSix32RHP9ARnC/fK YvRjvHvtM/G5eUjW0SRTHp9+ivNtw4Pr0bZKO19G9mqeuA+T4CaUkHL8FxCmc4kx A3smxqNctVpjraFKRuerexy3II658EMk1IlEo7rYdvTADcPOGMpbZ5LlZ0rRVMaA 9fGsi0aliViML4GU5j2AbhIHb8m3NBW1/BhQIWP6HJK29X1oPGvwhK4icegFVLok -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:57 2026 by rpki-client