$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db/df810306-32c8-4f37-92d2-610950afa6db.mft File: df810306-32c8-4f37-92d2-610950afa6db.mft (raw, json) Hash identifier: BpPk2cZYnRKCCMuqe4Afa+Mn7lugxWrrLuN/nGVShHo= Subject key identifier: CF:C6:73:EB:5F:DF:D8:37:9E:E9:27:EA:43:86:28:FA:B0:0B:A1:68 Authority key identifier: 42:BD:7E:AA:B4:A1:C5:B5:1F:BE:AF:B3:05:88:B8:C0:22:B5:98:1B Certificate issuer: /CN=df810306-32c8-4f37-92d2-610950afa6db Certificate serial: 010D0C9F4328584D49658165C11768EA34722A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db/df810306-32c8-4f37-92d2-610950afa6db.mft Manifest number: 010D0C9F4328584A363179217B30C418B2649F5A Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: df810306-32c8-4f37-92d2-610950afa6db.crl (hash: jT4Be6ek0kFPrr0bE3YXrJ2l3sqbh0sJHiZOus7jzhA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db/df810306-32c8-4f37-92d2-610950afa6db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db/df810306-32c8-4f37-92d2-610950afa6db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:81:65:c1:17:68:ea:34:72:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df810306-32c8-4f37-92d2-610950afa6db Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=ec1d845c-7490-4b34-9b66-ba221b37dc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:2c:91:ae:10:b6:4a:c3:cf:11:ee:50:93: 07:f7:f4:c5:a1:7b:07:fd:27:e7:55:8c:60:90:54: 8e:3d:58:37:8e:e3:a0:3f:3a:2d:e9:b9:15:2a:ea: 36:30:cf:3c:ea:4a:7d:ac:07:32:8d:1d:5c:e0:09: 2f:b8:d0:fc:55:d7:16:5d:4d:76:8a:0e:0f:67:22: e3:58:05:ef:9c:8c:2c:39:77:3d:fc:09:20:ef:22: 53:ad:0b:02:ec:b5:00:1c:fd:8f:34:aa:7c:54:10: d9:b4:05:fb:61:38:11:29:8e:7e:92:78:b9:5c:f0: 92:43:6f:94:28:8e:28:06:41:da:09:7a:2d:08:a9: 3a:7d:e0:94:9e:b3:0b:06:36:95:84:32:d4:b4:18: 70:eb:72:e0:9a:f9:41:96:69:f3:31:7b:53:b5:f4: c6:ad:60:4f:42:45:38:8c:b1:7d:2d:58:2c:0e:df: 1d:04:54:68:9c:d8:fa:da:32:b9:c8:45:e7:17:da: b4:22:a2:2e:15:4a:63:f0:85:f0:b2:44:65:ee:95: bf:7f:eb:de:c8:57:01:71:99:2f:4c:f0:83:c5:d0: 30:b2:9c:70:83:e5:45:e4:1d:ca:97:ab:20:2d:bd: df:28:d0:e6:63:eb:b5:70:38:8b:c1:99:dc:5e:23: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C6:73:EB:5F:DF:D8:37:9E:E9:27:EA:43:86:28:FA:B0:0B:A1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db/df810306-32c8-4f37-92d2-610950afa6db.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db/df810306-32c8-4f37-92d2-610950afa6db.crl X509v3 Authority Key Identifier: keyid:42:BD:7E:AA:B4:A1:C5:B5:1F:BE:AF:B3:05:88:B8:C0:22:B5:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/df810306-32c8-4f37-92d2-610950afa6db.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e9:37:7f:d1:86:16:b2:29:b9:d2:76:3e:7d:81:f6:80:30: fa:50:50:ba:af:7e:c1:49:e5:37:98:30:d8:1f:aa:56:4b:c2: 1b:82:71:89:cb:e6:dc:a7:9b:6e:02:67:c1:89:de:d4:7f:3f: 04:ed:4a:54:33:cb:0c:9a:0f:50:5c:d1:c2:18:24:e4:60:be: f9:39:96:38:e4:2c:a9:59:6f:22:02:2d:d4:6e:5f:85:9d:06: 80:4b:a6:5d:9b:4e:13:12:38:91:f5:b1:23:47:30:40:ad:2c: 59:b4:88:80:bf:3e:9b:ce:b1:32:15:c9:ff:24:c7:10:34:67: 61:b8:80:69:3a:04:d5:53:67:29:26:a9:8a:76:8c:bf:d0:47: 24:00:60:5a:1b:36:61:bb:b7:93:0a:3b:42:1c:07:3e:5e:41: 2a:54:38:c9:db:fc:0e:0c:3b:f5:21:03:eb:8e:6d:55:b2:04: 48:ac:0d:6c:c4:48:92:83:e0:fe:af:a5:0d:47:65:3b:da:55: d5:c5:a5:11:e3:8f:cb:df:dd:c8:61:16:04:67:1a:0b:81:cd: 83:23:79:a3:40:fb:13:3e:b6:88:0f:2e:35:1e:47:68:61:98: bf:a8:5f:1a:47:3f:dc:61:06:00:82:de:68:3c:26:02:55:7c: cb:83:ff:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYFlwRdo6jRyKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY4MTAzMDYtMzJjOC00ZjM3LTkyZDItNjEwOTUwYWZh NmRiMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk ZWMxZDg0NWMtNzQ5MC00YjM0LTliNjYtYmEyMjFiMzdkYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdQska4QtkrDzxHuUJMH9/TFoXsH/SfnVYxg kFSOPVg3juOgPzot6bkVKuo2MM886kp9rAcyjR1c4AkvuND8VdcWXU12ig4PZyLj WAXvnIwsOXc9/Akg7yJTrQsC7LUAHP2PNKp8VBDZtAX7YTgRKY5+kni5XPCSQ2+U KI4oBkHaCXotCKk6feCUnrMLBjaVhDLUtBhw63LgmvlBlmnzMXtTtfTGrWBPQkU4 jLF9LVgsDt8dBFRonNj62jK5yEXnF9q0IqIuFUpj8IXwskRl7pW/f+veyFcBcZkv TPCDxdAwspxwg+VF5B3Kl6sgLb3fKNDmY+u1cDiLwZncXiNBxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM/Gc+tf39g3nukn6kOGKPqwC6FoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZjgx MDMwNi0zMmM4LTRmMzctOTJkMi02MTA5NTBhZmE2ZGIvZGY4MTAzMDYtMzJjOC00 ZjM3LTkyZDItNjEwOTUwYWZhNmRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGY4MTAzMDYtMzJjOC00ZjM3LTky ZDItNjEwOTUwYWZhNmRiL2RmODEwMzA2LTMyYzgtNGYzNy05MmQyLTYxMDk1MGFm YTZkYi5jcmwwHwYDVR0jBBgwFoAUQr1+qrShxbUfvq+zBYi4wCK1mBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZjgxMDMwNi0zMmM4LTRmMzctOTJkMi02MTA5 NTBhZmE2ZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp6Td/0YYWsim50nY+fYH2 gDD6UFC6r37BSeU3mDDYH6pWS8IbgnGJy+bcp5tuAmfBid7Ufz8E7UpUM8sMmg9Q XNHCGCTkYL75OZY45CypWW8iAi3Ubl+FnQaAS6Zdm04TEjiR9bEjRzBArSxZtIiA vz6bzrEyFcn/JMcQNGdhuIBpOgTVU2cpJqmKdoy/0EckAGBaGzZhu7eTCjtCHAc+ XkEqVDjJ2/wODDv1IQPrjm1VsgRIrA1sxEiSg+D+r6UNR2U72lXVxaUR44/L393I YRYEZxoLgc2DI3mjQPsTPraIDy41HkdoYZi/qF8aRz/cYQYAgt5oPCYCVXzLg/9M -----END CERTIFICATE-----Generated at Thu Mar 26 03:52:48 2026 by rpki-client