$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft File: 2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft (raw, json) Hash identifier: bg6i/NYq4d/iyX5WaC07oIHhvLyXQIrf4L8X/aBQaag= Subject key identifier: D2:07:C0:82:C1:0E:00:E5:65:8A:BD:9F:B8:90:79:21:B3:89:3B:B0 Authority key identifier: 98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE Certificate issuer: /CN=2f3df651-bde8-4b01-b3c2-405a8caac7dd Certificate serial: 010D0C9F4328584D4B242CABA4350D2F40182C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft Manifest number: 010D0C9F4328584822A6A8B59F473DCA95AF2359 Signing time: Thu 26 Mar 2026 06:00:04 +0000 Manifest this update: Thu 26 Mar 2026 06:00:04 +0000 Manifest next update: Sat 28 Mar 2026 06:00:00 +0000 Files and hashes: 1: 2f3df651-bde8-4b01-b3c2-405a8caac7dd.crl (hash: NMnNsMsR4waok8E/CCHJ3IFUojbXJWwBxZ6fLNV68Ow=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:24:2c:ab:a4:35:0d:2f:40:18:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3df651-bde8-4b01-b3c2-405a8caac7dd Validity Not Before: Mar 26 06:00:04 2026 GMT Not After : Mar 28 06:00:00 2026 GMT Subject: CN=2d2bfe8c-c1de-404a-8ce3-1629108dde63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:da:67:7b:a5:13:b1:a1:61:89:fc:f5:28: 01:1f:50:a7:31:de:1f:61:42:0b:a1:d6:c8:f4:e5: d6:fd:68:45:a3:24:f6:2f:b8:e6:69:5e:33:52:91: 3b:54:18:a2:47:3f:48:c6:7a:d4:94:bd:35:5b:85: d4:6e:c3:8a:90:56:eb:ee:51:61:e5:89:24:0c:0c: 7b:57:5a:84:ae:19:aa:de:8f:1d:e0:d1:5a:d6:36: 84:eb:3b:ea:f7:ae:43:cc:2d:ae:c4:ac:12:c4:7e: e2:ff:8c:fd:06:f9:0b:8e:1e:17:94:b7:be:81:cb: 14:19:11:86:47:c4:4d:92:5a:4f:88:7b:27:f3:a3: 34:68:55:40:6b:55:2b:31:ae:73:96:5c:28:f3:23: 4e:a3:58:88:ef:d3:db:6c:0c:1a:44:74:aa:b4:3e: b0:b0:cd:e4:8a:9b:e1:57:a7:d9:9b:1e:a3:a8:75: 9f:69:30:86:77:15:8a:85:28:8f:33:b1:45:1d:21: 85:38:03:3b:03:cc:6d:40:88:ad:47:81:e8:a8:d7: 72:a9:4c:48:da:c0:f3:26:8b:b2:91:9d:eb:7b:2e: 2f:93:ee:3d:6a:2b:7d:ed:51:73:c8:d7:b8:1b:09: 4e:5b:01:2f:7e:c4:92:b9:4b:57:cb:be:b6:c8:36: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:07:C0:82:C1:0E:00:E5:65:8A:BD:9F:B8:90:79:21:B3:89:3B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.crl X509v3 Authority Key Identifier: keyid:98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ce:2d:fa:4d:fe:26:e2:dd:33:e7:aa:b6:a7:ee:d3:18:be: 87:30:40:fb:02:22:32:e3:76:32:e3:bc:ea:a1:af:55:0e:e3: 83:53:fe:f9:e5:69:bd:ef:8f:dc:8c:99:44:b0:d7:f8:f1:cc: 87:17:0d:2a:34:60:76:5d:35:a4:75:f5:ae:99:10:f0:eb:32: f6:62:bd:58:b7:62:a7:73:36:1a:c7:9a:c2:41:89:59:d3:1f: 7d:92:e1:e9:f6:ed:6f:93:1f:14:9e:a5:9f:6b:e0:6e:1f:9c: 9b:10:78:cd:28:28:41:45:2a:c4:09:2f:3c:41:10:02:7c:ac: cf:26:f0:39:95:dd:ad:50:4a:53:0e:3d:c4:fd:f8:37:4e:d5: 88:69:6a:bd:22:05:bc:39:4e:2b:3c:83:47:0d:ff:78:c4:5a: 50:a1:e7:a1:35:f9:b9:46:6d:1c:e2:f0:af:c9:b2:fd:4f:44: 51:66:2b:bb:4b:97:8f:eb:8e:98:66:e1:36:75:e8:94:cd:ea: 27:9f:04:32:11:f5:3d:ec:d6:42:e3:6a:dd:64:a2:be:57:9f: d3:f4:fe:36:77:f5:85:d8:66:f9:5b:f6:65:45:5f:bd:56:6f: 4f:7a:0a:a0:55:04:24:00:19:75:57:07:bf:07:57:be:75:97: e8:3a:d3:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LJCyrpDUNL0AYLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYzZGY2NTEtYmRlOC00YjAxLWIzYzItNDA1YThjYWFj N2RkMB4XDTI2MDMyNjA2MDAwNFoXDTI2MDMyODA2MDAwMFowLzEtMCsGA1UEAxMk MmQyYmZlOGMtYzFkZS00MDRhLThjZTMtMTYyOTEwOGRkZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLvaZ3ulE7GhYYn89SgBH1CnMd4fYUILodbI 9OXW/WhFoyT2L7jmaV4zUpE7VBiiRz9IxnrUlL01W4XUbsOKkFbr7lFh5YkkDAx7 V1qErhmq3o8d4NFa1jaE6zvq965DzC2uxKwSxH7i/4z9BvkLjh4XlLe+gcsUGRGG R8RNklpPiHsn86M0aFVAa1UrMa5zllwo8yNOo1iI79PbbAwaRHSqtD6wsM3kipvh V6fZmx6jqHWfaTCGdxWKhSiPM7FFHSGFOAM7A8xtQIitR4HoqNdyqUxI2sDzJouy kZ3rey4vk+49ait97VFzyNe4GwlOWwEvfsSSuUtXy762yDZLiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIHwILBDgDlZYq9n7iQeSGziTuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZjNk ZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVhOGNhYWM3ZGQvMmYzZGY2NTEtYmRlOC00 YjAxLWIzYzItNDA1YThjYWFjN2RkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmYzZGY2NTEtYmRlOC00YjAxLWIz YzItNDA1YThjYWFjN2RkLzJmM2RmNjUxLWJkZTgtNGIwMS1iM2MyLTQwNWE4Y2Fh YzdkZC5jcmwwHwYDVR0jBBgwFoAUmHghhu2dNQXKj3k6rBMxuohieM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZjNkZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVh OGNhYWM3ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9zi36Tf4m4t0z56q2p+7T GL6HMED7AiIy43Yy47zqoa9VDuODU/755Wm974/cjJlEsNf48cyHFw0qNGB2XTWk dfWumRDw6zL2Yr1Yt2KnczYax5rCQYlZ0x99kuHp9u1vkx8UnqWfa+BuH5ybEHjN KChBRSrECS88QRACfKzPJvA5ld2tUEpTDj3E/fg3TtWIaWq9IgW8OU4rPINHDf94 xFpQoeehNfm5Rm0c4vCvybL9T0RRZiu7S5eP646YZuE2deiUzeonnwQyEfU97NZC 42rdZKK+V5/T9P42d/WF2Gb5W/ZlRV+9Vm9PegqgVQQkABl1Vwe/B1e+dZfoOtNQ -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:47 2026 by rpki-client