$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft File: ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft (raw, json) Hash identifier: q1/njzZsqf65cvFYytf4QfZXV0/7Wh6Xx0gkbLGDzgE= Subject key identifier: 8F:66:6F:8D:FF:A0:A3:E1:92:FE:21:6E:BA:E7:85:D1:03:B5:42:DA Authority key identifier: 5D:35:FC:BE:AB:4A:70:FB:30:7A:B9:BC:69:B3:6E:D7:F1:0B:EA:25 Certificate issuer: /CN=ec87d7e1-2860-4694-838a-88ce3a47f3ab Certificate serial: 010D0C9F4328584D49BED6FEA39715F984033330 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft Manifest number: 010D0C9F432858496251F48B744D9CED291654E6 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: ec87d7e1-2860-4694-838a-88ce3a47f3ab.crl (hash: B9l4TW3pnUr/LSpKPZbjB3zlHNTFGBwNEsv70kqziXY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:fe:a3:97:15:f9:84:03:33:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec87d7e1-2860-4694-838a-88ce3a47f3ab Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=efeec3a4-9be7-4eaa-bb05-a91d4b58f6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:5c:75:d0:c2:a9:b7:6c:b3:b0:73:32:b6: 07:62:02:24:4f:2c:33:3c:d0:f7:df:df:7b:b6:28: c0:6d:f1:e7:8c:d1:99:6c:e8:64:1d:43:87:78:45: 72:f1:40:ce:6b:c8:18:a6:8d:79:a1:e2:37:1d:52: cc:c8:b4:43:99:2b:35:d7:88:c4:18:65:a3:74:56: a2:c5:35:7f:a8:16:0f:9f:0d:4c:33:b1:37:f5:a6: ef:75:80:64:85:3b:88:6e:af:25:67:ea:21:44:75: 3e:8d:38:64:f1:4a:a5:74:cc:45:db:06:a5:0f:36: 16:30:57:0d:bf:49:fc:81:6a:6b:ef:6c:63:b1:42: d3:34:fe:39:05:b1:36:e1:e6:b4:a9:40:f7:e8:69: a7:b4:a0:b3:0e:64:f3:ef:c9:c1:d2:6a:64:a3:d2: 1b:bd:7c:7c:44:1d:88:6b:5b:4c:4f:ec:0e:c6:48: b9:a3:2e:9c:f9:2b:6f:77:5a:1a:c1:ad:cd:45:b1: b4:65:e1:af:25:db:48:db:6e:ec:e4:e5:56:c9:b0: b4:06:2a:47:94:2a:8d:45:ab:cd:12:51:f3:b5:da: 1f:6b:4e:e0:0b:b5:e0:35:5e:5f:7e:27:14:28:5c: 6f:f3:9d:20:6f:d9:65:1f:22:9d:4c:9a:28:6d:00: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:6F:8D:FF:A0:A3:E1:92:FE:21:6E:BA:E7:85:D1:03:B5:42:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.crl X509v3 Authority Key Identifier: keyid:5D:35:FC:BE:AB:4A:70:FB:30:7A:B9:BC:69:B3:6E:D7:F1:0B:EA:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a1:25:10:d7:d4:07:72:4c:04:0b:8b:48:24:09:56:e7:bd: b6:a5:3d:65:af:37:16:a0:2a:78:42:05:3f:73:fa:e0:da:e6: 0d:38:ad:ba:a5:6c:7f:55:ad:83:d1:4e:46:c8:8d:ec:47:3e: bd:0c:6b:be:27:da:e6:55:1b:34:02:1d:b5:f8:26:1c:d3:15: 15:80:08:6f:fc:05:1f:2f:95:6c:91:4f:04:ce:7f:88:73:a0: c8:d3:fb:e3:19:d8:c3:90:78:a7:58:37:8e:5a:df:e2:80:f9: 1d:cf:5b:8c:f1:38:11:49:cf:34:70:53:d1:91:63:1f:06:f8: ce:3e:0a:6c:0f:61:ec:83:7d:f4:28:3f:f4:fa:d4:07:02:0e: 7a:a6:ff:3c:b1:ba:6b:f0:81:a4:a3:f2:7a:f7:92:df:a3:a1: 7f:ae:b6:bb:00:e7:a1:e8:28:fc:09:12:88:f5:2b:68:80:1c: c6:22:d7:29:a1:8d:61:07:f3:e9:33:f3:9a:a9:94:e7:c4:41: c4:7c:b7:9b:18:36:4a:f6:d4:ec:07:e3:d6:08:92:47:a7:a7: c6:a6:76:ac:ab:a4:88:d1:2e:79:87:89:63:60:02:c2:26:0c: e7:44:fd:9c:35:f3:8b:da:9e:4f:34:25:31:09:7d:cf:b5:18: 88:bf:05:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jvtb+o5cV+YQDMzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM4N2Q3ZTEtMjg2MC00Njk0LTgzOGEtODhjZTNhNDdm M2FiMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk ZWZlZWMzYTQtOWJlNy00ZWFhLWJiMDUtYTkxZDRiNThmNmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+dcddDCqbdss7BzMrYHYgIkTywzPND33997 tijAbfHnjNGZbOhkHUOHeEVy8UDOa8gYpo15oeI3HVLMyLRDmSs114jEGGWjdFai xTV/qBYPnw1MM7E39abvdYBkhTuIbq8lZ+ohRHU+jThk8UqldMxF2walDzYWMFcN v0n8gWpr72xjsULTNP45BbE24ea0qUD36GmntKCzDmTz78nB0mpko9IbvXx8RB2I a1tMT+wOxki5oy6c+Stvd1oawa3NRbG0ZeGvJdtI227s5OVWybC0BipHlCqNRavN ElHztdofa07gC7XgNV5fficUKFxv850gb9llHyKdTJoobQC7cwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI9mb43/oKPhkv4hbrrnhdEDtULaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYzg3 ZDdlMS0yODYwLTQ2OTQtODM4YS04OGNlM2E0N2YzYWIvZWM4N2Q3ZTEtMjg2MC00 Njk0LTgzOGEtODhjZTNhNDdmM2FiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWM4N2Q3ZTEtMjg2MC00Njk0LTgz OGEtODhjZTNhNDdmM2FiL2VjODdkN2UxLTI4NjAtNDY5NC04MzhhLTg4Y2UzYTQ3 ZjNhYi5jcmwwHwYDVR0jBBgwFoAUXTX8vqtKcPswerm8abNu1/EL6iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYzg3ZDdlMS0yODYwLTQ2OTQtODM4YS04OGNl M2E0N2YzYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtoSUQ19QHckwEC4tIJAlW 5722pT1lrzcWoCp4QgU/c/rg2uYNOK26pWx/Va2D0U5GyI3sRz69DGu+J9rmVRs0 Ah21+CYc0xUVgAhv/AUfL5VskU8Ezn+Ic6DI0/vjGdjDkHinWDeOWt/igPkdz1uM 8TgRSc80cFPRkWMfBvjOPgpsD2Hsg330KD/0+tQHAg56pv88sbpr8IGko/J695Lf o6F/rra7AOeh6Cj8CRKI9StogBzGItcpoY1hB/PpM/OaqZTnxEHEfLebGDZK9tTs B+PWCJJHp6fGpnasq6SI0S55h4ljYALCJgznRP2cNfOL2p5PNCUxCX3PtRiIvwVD -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:53 2026 by rpki-client