$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f/9ab5a61d-ad0a-44c8-beff-72003516e50f.mft File: 9ab5a61d-ad0a-44c8-beff-72003516e50f.mft (raw, json) Hash identifier: D74zSIAcPT/yKN4HDuWaVbVAaRpJintceMZfyIc2qs0= Subject key identifier: 3E:89:6A:A2:C1:D9:59:17:AF:D5:C3:37:43:E4:91:A5:55:15:6C:07 Authority key identifier: B1:70:65:75:51:08:36:DD:9D:FE:FD:F8:2C:6F:78:FD:11:05:AE:08 Certificate issuer: /CN=9ab5a61d-ad0a-44c8-beff-72003516e50f Certificate serial: 010D0C9F4328584D49BED4A71393C57BF47F7020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f/9ab5a61d-ad0a-44c8-beff-72003516e50f.mft Manifest number: 010D0C9F432858487AAF044F44C6AEE52002EDB9 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Fri 27 Mar 2026 18:00:00 +0000 Files and hashes: 1: 9ab5a61d-ad0a-44c8-beff-72003516e50f.crl (hash: ausDUqVpdjxBFPWGlnUnADkgyitdMELokRFWpq7U2Mo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f/9ab5a61d-ad0a-44c8-beff-72003516e50f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f/9ab5a61d-ad0a-44c8-beff-72003516e50f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d4:a7:13:93:c5:7b:f4:7f:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab5a61d-ad0a-44c8-beff-72003516e50f Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 27 18:00:00 2026 GMT Subject: CN=99c367da-5c0b-4cb6-9ec0-f445c800cb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:17:16:48:3a:92:fc:e0:90:90:49:9d:83: 10:f0:41:d1:0e:e6:74:0c:49:86:df:a1:9d:05:55: 48:ae:15:42:2c:6b:58:e9:63:f5:12:42:6a:9f:8d: f0:b9:ed:58:3a:17:87:9d:16:dd:40:e1:6e:73:aa: d6:56:de:f9:58:5a:7c:0b:fd:90:a2:6b:f6:c3:6e: ea:9d:0b:91:27:fb:6c:cf:a4:9e:40:99:4b:19:07: 16:77:3a:a4:20:7c:d7:c3:62:a6:5e:66:a0:00:8e: 89:b4:15:66:e6:d3:e8:63:b4:6a:36:a2:41:08:9b: 1c:65:dc:31:f5:7b:f4:d8:3c:4a:11:12:43:5d:1e: fe:92:c6:e7:a8:e4:f9:41:10:ae:32:2e:33:6a:68: 38:d0:e6:7f:d4:04:03:24:48:5d:be:b8:a3:61:8c: 89:0c:59:aa:b5:c6:42:d1:f1:14:87:41:a7:a7:86: a0:8d:f7:9c:d7:31:c1:7a:94:43:46:2f:a7:14:b8: bf:92:d1:46:51:a0:68:82:97:25:af:6c:9a:92:e0: 39:17:58:a6:b3:cd:54:2f:73:fa:13:14:67:71:ee: 9e:b3:c2:6b:22:ba:12:3e:33:2a:5e:24:92:a8:fe: 4b:fa:3c:92:55:f5:39:a6:ee:06:68:99:83:3b:b1: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:89:6A:A2:C1:D9:59:17:AF:D5:C3:37:43:E4:91:A5:55:15:6C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f/9ab5a61d-ad0a-44c8-beff-72003516e50f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f/9ab5a61d-ad0a-44c8-beff-72003516e50f.crl X509v3 Authority Key Identifier: keyid:B1:70:65:75:51:08:36:DD:9D:FE:FD:F8:2C:6F:78:FD:11:05:AE:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ab5a61d-ad0a-44c8-beff-72003516e50f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:25:94:e6:cb:f0:f2:4d:d5:da:4b:97:b5:c3:73:1b:af:5a: bb:fa:fc:c2:b8:59:3c:35:10:9f:cf:1e:67:14:8e:5e:b2:79: 03:bf:f6:ed:1e:f9:01:36:7c:27:c0:18:2e:6c:ef:9b:8e:e6: 7d:07:7e:1e:50:f6:f4:d6:96:38:1e:14:11:b2:0f:f2:6a:5f: e6:b1:fb:1a:fb:d7:75:18:85:55:9b:a2:9b:f2:07:ca:03:65: 7c:3f:f4:cd:3d:44:88:10:2f:51:e9:7e:f7:c2:86:6f:9b:1f: 5d:b6:56:7f:4e:06:b4:11:6f:15:87:67:8c:3c:a5:42:42:46: ce:de:49:b6:50:39:3e:21:0f:05:5b:86:18:81:bb:ac:b0:39: bc:02:11:d9:80:f8:06:43:c0:66:4c:68:cd:5e:f1:b8:07:b5: ec:96:6d:d3:e8:05:09:18:76:e1:b3:3f:86:07:70:ce:ee:39: a8:36:8e:dc:6d:c3:ea:6a:7b:40:b9:a6:94:bb:aa:88:35:e0: c5:9d:9f:5c:9b:08:35:54:ed:1e:c8:3e:e2:db:52:3d:d2:d3: c2:75:25:74:ce:9a:aa:90:3c:27:72:f2:8e:3a:22:e9:5a:38: 92:27:84:9e:e1:58:25:6b:85:c3:f5:dd:d5:02:79:ca:69:99: 5d:d6:de:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtSnE5PFe/R/cCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFiNWE2MWQtYWQwYS00NGM4LWJlZmYtNzIwMDM1MTZl NTBmMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyNzE4MDAwMFowLzEtMCsGA1UEAxMk OTljMzY3ZGEtNWMwYi00Y2I2LTllYzAtZjQ0NWM4MDBjYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9QXFkg6kvzgkJBJnYMQ8EHRDuZ0DEmG36Gd BVVIrhVCLGtY6WP1EkJqn43wue1YOheHnRbdQOFuc6rWVt75WFp8C/2Qomv2w27q nQuRJ/tsz6SeQJlLGQcWdzqkIHzXw2KmXmagAI6JtBVm5tPoY7RqNqJBCJscZdwx 9Xv02DxKERJDXR7+ksbnqOT5QRCuMi4zamg40OZ/1AQDJEhdvrijYYyJDFmqtcZC 0fEUh0Gnp4agjfec1zHBepRDRi+nFLi/ktFGUaBogpclr2yakuA5F1ims81UL3P6 ExRnce6es8JrIroSPjMqXiSSqP5L+jySVfU5pu4GaJmDO7EsSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD6JaqLB2VkXr9XDN0PkkaVVFWwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YWI1 YTYxZC1hZDBhLTQ0YzgtYmVmZi03MjAwMzUxNmU1MGYvOWFiNWE2MWQtYWQwYS00 NGM4LWJlZmYtNzIwMDM1MTZlNTBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWFiNWE2MWQtYWQwYS00NGM4LWJl ZmYtNzIwMDM1MTZlNTBmLzlhYjVhNjFkLWFkMGEtNDRjOC1iZWZmLTcyMDAzNTE2 ZTUwZi5jcmwwHwYDVR0jBBgwFoAUsXBldVEINt2d/v34LG94/REFrggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YWI1YTYxZC1hZDBhLTQ0YzgtYmVmZi03MjAw MzUxNmU1MGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSJZTmy/DyTdXaS5e1w3Mb r1q7+vzCuFk8NRCfzx5nFI5esnkDv/btHvkBNnwnwBgubO+bjuZ9B34eUPb01pY4 HhQRsg/yal/msfsa+9d1GIVVm6Kb8gfKA2V8P/TNPUSIEC9R6X73woZvmx9dtlZ/ Tga0EW8Vh2eMPKVCQkbO3km2UDk+IQ8FW4YYgbussDm8AhHZgPgGQ8BmTGjNXvG4 B7Xslm3T6AUJGHbhsz+GB3DO7jmoNo7cbcPqantAuaaUu6qINeDFnZ9cmwg1VO0e yD7i21I90tPCdSV0zpqqkDwncvKOOiLpWjiSJ4Se4Vgla4XD9d3VAnnKaZld1t7/ -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:43 2026 by rpki-client