$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft File: da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft (raw, json) Hash identifier: Gpa44vt6ycNqdLZvs4fYcsk9QJUVvrPP0/BqXp+VRpg= Subject key identifier: 91:E7:B6:57:5B:31:17:E1:AC:7F:8E:C3:FE:B0:A4:05:E6:97:8A:39 Authority key identifier: 00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC Certificate issuer: /CN=da5097c7-8b09-41b1-89c6-66fd84a2c3f5 Certificate serial: 010D0C9F4328584D48EE62F278301F6CF1166380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft Manifest number: 010D0C9F43285848C53917FE1122106FF0A3831E Signing time: Wed 25 Mar 2026 11:00:04 +0000 Manifest this update: Wed 25 Mar 2026 11:00:04 +0000 Manifest next update: Sat 28 Mar 2026 11:00:00 +0000 Files and hashes: 1: da5097c7-8b09-41b1-89c6-66fd84a2c3f5.crl (hash: 0f8JYHZZjedMb+TYwrLtSlMNmVc/DpQuEVvjJExACOg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:ee:62:f2:78:30:1f:6c:f1:16:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5097c7-8b09-41b1-89c6-66fd84a2c3f5 Validity Not Before: Mar 25 11:00:04 2026 GMT Not After : Mar 28 11:00:00 2026 GMT Subject: CN=ca37d233-17d9-4a2a-ba85-f4552637f23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:b3:68:30:58:d2:9c:f2:fa:24:75:9d:3d: 8f:4f:a7:de:08:ec:4d:d5:04:5e:57:10:11:62:e8: e0:27:24:22:55:26:0c:dd:08:c6:91:37:5f:42:6a: 57:43:ff:10:0f:36:a4:bd:e4:9f:c8:b7:ae:ee:d1: c8:30:90:a6:6b:4f:e6:4f:5e:ed:5b:b4:49:11:cf: 9d:bc:ca:08:46:bb:b0:3d:ca:9d:4c:86:41:08:d2: c6:9d:17:67:ba:31:61:17:aa:9c:e7:c6:5b:e4:9b: f7:dd:c4:d7:02:e1:46:1a:b5:f7:26:bc:06:ac:50: 13:87:ea:fd:90:f4:42:43:6d:fb:11:84:fb:4c:44: 31:1b:5b:17:f9:44:75:e5:a2:9e:03:1a:de:63:ba: b8:5d:37:13:cb:db:de:31:56:32:8b:b8:71:63:fa: 7f:a8:df:27:25:b1:8d:2c:c0:52:83:54:80:b8:85: 2a:b6:6e:49:c0:5b:54:0c:67:9a:00:6e:db:91:69: 75:93:46:c5:cd:ee:69:ae:db:7b:ea:52:ca:d0:74: 63:c4:8e:65:5a:b3:ab:1b:13:b8:88:f6:6c:a0:76: a9:12:6f:cb:5e:f6:3b:e3:a9:6b:3b:f9:e7:26:98: 80:14:a1:ee:dc:0e:82:b5:15:d2:71:ac:2a:95:0b: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E7:B6:57:5B:31:17:E1:AC:7F:8E:C3:FE:B0:A4:05:E6:97:8A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.crl X509v3 Authority Key Identifier: keyid:00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c1:ba:dd:86:2e:23:cd:b6:fe:12:5e:f8:e2:d7:20:9e:6f: 8e:74:30:4c:ba:a1:08:45:62:8c:49:a0:03:fc:2d:43:43:c7: ce:ab:e4:db:1d:69:2d:6a:fb:9d:51:38:9d:b4:80:34:51:41: 3f:66:dd:6d:41:4d:e3:94:d8:5e:11:49:98:d2:2c:8c:d6:a9: 69:4e:a6:da:57:0e:62:c1:a6:c8:97:20:35:75:86:22:7e:eb: 6c:8b:9a:94:69:13:10:1c:4f:df:5b:1a:6c:42:e7:4a:de:1e: bb:af:ed:be:69:dd:9d:f8:80:10:79:fd:0b:ce:68:75:54:c9: b9:81:49:2f:2d:6f:34:00:38:eb:88:72:82:96:f1:19:a4:91: d4:cf:ac:7e:f0:ed:65:66:ba:9e:72:98:fc:0e:e4:ce:09:23: ce:6d:e3:74:23:a1:54:74:b1:66:43:b2:d2:fb:b8:10:1f:0d: 6b:d8:cc:ab:11:43:a4:d8:87:13:68:b8:19:14:74:a1:1c:bb: ea:0c:2f:1c:98:4d:a3:b8:68:73:3c:df:08:49:70:d6:af:45: 16:0d:2d:76:63:c8:23:fe:f8:3f:94:d8:f7:78:12:5d:73:16: 20:5b:f6:36:46:2a:5e:57:89:56:b0:8a:83:ea:fc:5a:46:1a: 14:59:c7:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1I7mLyeDAfbPEWY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE1MDk3YzctOGIwOS00MWIxLTg5YzYtNjZmZDg0YTJj M2Y1MB4XDTI2MDMyNTExMDAwNFoXDTI2MDMyODExMDAwMFowLzEtMCsGA1UEAxMk Y2EzN2QyMzMtMTdkOS00YTJhLWJhODUtZjQ1NTI2MzdmMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvizaDBY0pzy+iR1nT2PT6feCOxN1QReVxAR YujgJyQiVSYM3QjGkTdfQmpXQ/8QDzakveSfyLeu7tHIMJCma0/mT17tW7RJEc+d vMoIRruwPcqdTIZBCNLGnRdnujFhF6qc58Zb5Jv33cTXAuFGGrX3JrwGrFATh+r9 kPRCQ237EYT7TEQxG1sX+UR15aKeAxreY7q4XTcTy9veMVYyi7hxY/p/qN8nJbGN LMBSg1SAuIUqtm5JwFtUDGeaAG7bkWl1k0bFze5prtt76lLK0HRjxI5lWrOrGxO4 iPZsoHapEm/LXvY746lrO/nnJpiAFKHu3A6CtRXScawqlQuufQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJHntldbMRfhrH+Ow/6wpAXml4o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTUw OTdjNy04YjA5LTQxYjEtODljNi02NmZkODRhMmMzZjUvZGE1MDk3YzctOGIwOS00 MWIxLTg5YzYtNjZmZDg0YTJjM2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1MDk3YzctOGIwOS00MWIxLTg5 YzYtNjZmZDg0YTJjM2Y1L2RhNTA5N2M3LThiMDktNDFiMS04OWM2LTY2ZmQ4NGEy YzNmNS5jcmwwHwYDVR0jBBgwFoAUAMxSYW0wOfvSQS9/ZNV+f4yfFtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTUwOTdjNy04YjA5LTQxYjEtODljNi02NmZk ODRhMmMzZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdwbrdhi4jzbb+El744tcg nm+OdDBMuqEIRWKMSaAD/C1DQ8fOq+TbHWktavudUTidtIA0UUE/Zt1tQU3jlNhe EUmY0iyM1qlpTqbaVw5iwabIlyA1dYYifutsi5qUaRMQHE/fWxpsQudK3h67r+2+ ad2d+IAQef0Lzmh1VMm5gUkvLW80ADjriHKClvEZpJHUz6x+8O1lZrqecpj8DuTO CSPObeN0I6FUdLFmQ7LS+7gQHw1r2MyrEUOk2IcTaLgZFHShHLvqDC8cmE2juGhz PN8ISXDWr0UWDS12Y8gj/vg/lNj3eBJdcxYgW/Y2RipeV4lWsIqD6vxaRhoUWcdv -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:40 2026 by rpki-client