$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft File: d5eec909-6f75-45a2-a388-8fd21596aab7.mft (raw, json) Hash identifier: +tf6dB9mYtImQHzveAIYRkxKAv6jpBCSOhwovDz7maM= Subject key identifier: DD:4E:34:EA:0A:64:17:B1:92:04:84:2B:F5:A7:29:91:59:57:B7:9B Authority key identifier: BA:C2:C8:54:2D:60:B9:7E:32:E9:99:55:4F:0D:12:8D:2A:C3:87:87 Certificate issuer: /CN=d5eec909-6f75-45a2-a388-8fd21596aab7 Certificate serial: 010D0C9F4328584D4EFAED049E5FD1E075678080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft Manifest number: 010D0C9F432858492CCED797722199E4E8BE7C5B Signing time: Fri 27 Mar 2026 15:00:09 +0000 Manifest this update: Fri 27 Mar 2026 15:00:09 +0000 Manifest next update: Sun 29 Mar 2026 15:00:00 +0000 Files and hashes: 1: d5eec909-6f75-45a2-a388-8fd21596aab7.crl (hash: fTyPFe7YJbaaDkS4ccWpMdS6snuVdPTQE7GbC7vkcY4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:fa:ed:04:9e:5f:d1:e0:75:67:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5eec909-6f75-45a2-a388-8fd21596aab7 Validity Not Before: Mar 27 15:00:09 2026 GMT Not After : Mar 29 15:00:00 2026 GMT Subject: CN=b380c14f-2079-452a-9fff-1a795e3b29cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:d2:ea:2a:f1:9e:1e:dc:9c:f1:91:16:60: 74:1c:ec:de:b5:38:b5:0a:6d:56:5b:47:8c:c2:ed: 41:db:c8:b0:92:7d:b5:fa:0b:b7:b4:ca:1c:3c:c0: 4f:fe:e7:c7:7f:43:e3:d5:e5:7b:17:65:8f:9f:a2: 46:e7:3d:46:12:65:f1:72:4c:42:fe:78:75:86:f1: 8d:98:cd:19:89:06:ac:94:89:4f:fc:df:dc:61:f9: 98:12:76:41:d1:b5:2d:b9:75:75:bb:9f:a9:88:da: ad:8a:5d:3a:4d:01:8c:ef:7c:f6:70:cf:99:2a:90: 88:eb:35:ab:aa:18:81:0f:15:a1:ee:b7:a3:c0:2f: a3:5a:d8:e7:3a:8f:4a:8b:8f:69:5c:98:33:03:b9: 99:64:ad:14:48:b7:7a:6e:95:93:da:e4:b5:6d:2c: 44:2a:1d:ad:a7:4a:4e:0e:92:3c:be:3b:91:ca:d9: 8a:b6:8c:18:19:51:ea:a6:61:27:e6:e3:db:11:b6: 4e:f6:cf:fc:eb:a0:20:af:38:ad:f0:b2:aa:a0:4b: ea:17:c2:16:7b:26:56:cf:98:4e:c9:99:4f:ee:2c: d1:1b:43:69:c9:07:5a:1d:31:f5:95:d7:d8:93:17: 66:6b:e8:43:0b:8b:f7:da:f4:b9:92:e3:b2:13:85: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4E:34:EA:0A:64:17:B1:92:04:84:2B:F5:A7:29:91:59:57:B7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.crl X509v3 Authority Key Identifier: keyid:BA:C2:C8:54:2D:60:B9:7E:32:E9:99:55:4F:0D:12:8D:2A:C3:87:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:86:88:e4:32:b1:82:3f:13:07:c4:30:38:5b:79:da:86:16: 48:a0:6e:e5:cb:7d:f3:db:75:a0:9f:b3:68:64:f1:94:d0:6d: 37:f1:29:74:66:aa:2b:f4:4c:1b:1d:97:4c:e9:fc:63:14:8a: 0b:82:9b:0a:45:fe:a6:78:12:ea:d8:87:18:ac:44:ff:71:d2: c8:d0:29:2a:48:f6:46:2f:a6:2c:8b:aa:f5:5d:45:11:f2:23: 95:7b:3f:46:b2:4f:62:c1:05:75:e2:77:73:23:d4:73:22:43: f0:07:cd:49:5b:df:17:d2:09:cd:7e:c8:b7:77:e1:2a:1a:75: 84:da:39:7b:f6:97:93:64:2d:00:20:fb:8a:17:9d:96:bd:7b: ee:29:37:4c:6f:3d:25:c3:e5:f2:21:82:fe:aa:c8:a9:fd:19: e2:55:99:f8:2a:51:94:be:c4:c0:e4:ed:5c:d6:19:9e:57:37: ec:bc:52:7f:1e:49:fe:a7:45:8a:83:ff:52:9d:a8:c0:4a:57: ea:34:80:c2:b7:b0:24:ca:63:62:f9:a9:d5:94:97:8e:34:f7: 3f:05:b5:bf:2c:5a:69:61:96:85:46:ee:3b:58:cc:3a:b6:b7: af:ee:7a:05:88:2f:c7:0e:be:76:8e:f6:b8:03:75:f2:48:af: a8:c2:ef:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1O+u0Enl/R4HVngIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlZWM5MDktNmY3NS00NWEyLWEzODgtOGZkMjE1OTZh YWI3MB4XDTI2MDMyNzE1MDAwOVoXDTI2MDMyOTE1MDAwMFowLzEtMCsGA1UEAxMk YjM4MGMxNGYtMjA3OS00NTJhLTlmZmYtMWE3OTVlM2IyOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk3S6irxnh7cnPGRFmB0HOzetTi1Cm1WW0eM wu1B28iwkn21+gu3tMocPMBP/ufHf0Pj1eV7F2WPn6JG5z1GEmXxckxC/nh1hvGN mM0ZiQaslIlP/N/cYfmYEnZB0bUtuXV1u5+piNqtil06TQGM73z2cM+ZKpCI6zWr qhiBDxWh7rejwC+jWtjnOo9Ki49pXJgzA7mZZK0USLd6bpWT2uS1bSxEKh2tp0pO DpI8vjuRytmKtowYGVHqpmEn5uPbEbZO9s/866Agrzit8LKqoEvqF8IWeyZWz5hO yZlP7izRG0NpyQdaHTH1ldfYkxdma+hDC4v32vS5kuOyE4XwNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN1ONOoKZBexkgSEK/WnKZFZV7ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNWVl YzkwOS02Zjc1LTQ1YTItYTM4OC04ZmQyMTU5NmFhYjcvZDVlZWM5MDktNmY3NS00 NWEyLWEzODgtOGZkMjE1OTZhYWI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDVlZWM5MDktNmY3NS00NWEyLWEz ODgtOGZkMjE1OTZhYWI3L2Q1ZWVjOTA5LTZmNzUtNDVhMi1hMzg4LThmZDIxNTk2 YWFiNy5jcmwwHwYDVR0jBBgwFoAUusLIVC1guX4y6ZlVTw0SjSrDh4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNWVlYzkwOS02Zjc1LTQ1YTItYTM4OC04ZmQy MTU5NmFhYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJhojkMrGCPxMHxDA4W3na hhZIoG7ly33z23Wgn7NoZPGU0G038Sl0Zqor9EwbHZdM6fxjFIoLgpsKRf6meBLq 2IcYrET/cdLI0CkqSPZGL6Ysi6r1XUUR8iOVez9Gsk9iwQV14ndzI9RzIkPwB81J W98X0gnNfsi3d+EqGnWE2jl79peTZC0AIPuKF52WvXvuKTdMbz0lw+XyIYL+qsip /RniVZn4KlGUvsTA5O1c1hmeVzfsvFJ/Hkn+p0WKg/9SnajASlfqNIDCt7AkymNi +anVlJeONPc/BbW/LFppYZaFRu47WMw6trev7noFiC/HDr52jva4A3XySK+owu/a -----END CERTIFICATE-----Generated at Sat Mar 28 10:47:14 2026 by rpki-client