$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft File: 43ff624d-a377-4e6b-aaf2-c18a45007d56.mft (raw, json) Hash identifier: TWsPxQ/gIANUssuDF2yHqN2NtthcOCyaZnhcsYWQMV4= Subject key identifier: 3F:81:03:03:64:95:1B:80:62:1C:FF:C1:7F:6A:B3:FD:59:27:95:0C Authority key identifier: CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA Certificate issuer: /CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Certificate serial: 010D0C9F4328584D49DCA01EF8BF2905304E5C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft Manifest number: 010D0C9F4328584073A8246CF81CC82C18638499 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 43ff624d-a377-4e6b-aaf2-c18a45007d56.crl (hash: 4km2eDFrhsU9ewnpV9OBk4nbPIGabx18/wo3AvihOXk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:a0:1e:f8:bf:29:05:30:4e:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=02deecf8-6a66-44ee-85d2-0c9ad7ac9a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:0e:b8:cc:a9:54:7d:8f:29:76:bf:c4:8a: 73:85:69:0a:dc:8b:c6:8f:24:6b:0a:fd:f4:c6:69: 41:31:23:4f:28:7b:b9:19:5d:a2:aa:e6:8b:af:45: 10:d4:1d:6b:3f:36:e6:f8:e4:33:1c:38:b2:20:54: e0:aa:c0:41:5c:b7:9f:bb:8b:13:44:83:36:7e:00: 10:26:25:da:44:79:0f:c8:96:e0:7e:94:99:8c:f6: 5b:b2:5c:c6:6b:8b:3c:f9:5e:40:75:d3:20:05:b6: f2:26:7c:e9:0e:a3:68:33:cc:7e:54:bd:1b:38:f7: 34:d5:ef:ca:78:58:59:7f:06:3b:83:c5:c1:18:10: 7a:b2:80:be:4f:a3:c8:8d:e4:c5:a0:88:1c:98:bf: f8:98:a6:6b:0f:45:40:f0:e5:e0:6c:23:54:b1:98: 92:6d:07:d1:75:3f:77:8c:db:34:93:f0:ec:98:27: 86:a9:41:66:01:5d:86:c5:2b:ae:2f:d7:ee:da:78: 12:eb:a5:7e:b7:9e:07:40:c8:f9:88:96:34:01:19: 3f:48:41:78:b9:a9:64:9f:9a:95:77:95:94:da:bf: 6a:91:9e:2d:c9:bf:a6:d7:67:a1:7a:34:42:bc:78: c4:c1:77:91:3c:4e:51:9a:c2:5e:30:3c:c4:9f:d2: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:81:03:03:64:95:1B:80:62:1C:FF:C1:7F:6A:B3:FD:59:27:95:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl X509v3 Authority Key Identifier: keyid:CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:36:31:95:7d:6c:32:c0:68:51:7f:2b:a0:cf:f8:7a:e9:09: 34:c4:15:bd:2c:88:b8:e0:e4:3a:f5:78:1c:81:aa:b8:ae:be: 7b:6c:6d:ea:ca:fc:4f:80:14:41:71:e2:8d:c1:c6:c8:a6:b4: 3f:a4:57:b3:7d:f8:80:9e:d1:96:24:f3:57:e3:6a:4b:7d:6c: 6b:77:40:96:be:b5:c3:bb:45:b3:84:b1:66:5b:80:67:40:1d: 4e:e0:be:7f:10:fb:e1:90:55:a5:a1:80:f9:a7:dd:a7:f9:45: 85:8c:5d:ba:7c:a0:42:ad:d2:fb:7a:21:78:a6:97:a7:e3:95: 0d:62:b2:d8:41:ea:a6:db:c0:de:8d:bc:3b:c8:21:91:85:16: 0d:21:b8:17:1e:af:67:67:12:5d:e2:65:36:fb:f6:e0:cd:ae: 60:79:17:1f:3c:e0:e7:42:b1:1d:a1:46:f4:27:d7:d7:7c:b7: f5:99:a5:a5:03:a9:4e:c9:40:50:f1:b5:3d:5a:ee:45:4e:42: 8e:6f:85:41:ab:2f:bd:cb:b2:fc:10:b0:09:14:e2:7a:26:2c: 4b:4a:c0:09:c9:16:3c:95:84:ef:a1:7d:7d:bf:c7:72:71:d2: c0:49:a5:72:d9:04:0f:76:5d:60:1b:d8:9d:4d:a4:22:fd:f7: 57:a0:28:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3KAe+L8pBTBOXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNmZjYyNGQtYTM3Ny00ZTZiLWFhZjItYzE4YTQ1MDA3 ZDU2MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk MDJkZWVjZjgtNmE2Ni00NGVlLTg1ZDItMGM5YWQ3YWM5YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTQOuMypVH2PKXa/xIpzhWkK3IvGjyRrCv30 xmlBMSNPKHu5GV2iquaLr0UQ1B1rPzbm+OQzHDiyIFTgqsBBXLefu4sTRIM2fgAQ JiXaRHkPyJbgfpSZjPZbslzGa4s8+V5AddMgBbbyJnzpDqNoM8x+VL0bOPc01e/K eFhZfwY7g8XBGBB6soC+T6PIjeTFoIgcmL/4mKZrD0VA8OXgbCNUsZiSbQfRdT93 jNs0k/DsmCeGqUFmAV2GxSuuL9fu2ngS66V+t54HQMj5iJY0ARk/SEF4ualkn5qV d5WU2r9qkZ4tyb+m12ehejRCvHjEwXeRPE5RmsJeMDzEn9LknwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+BAwNklRuAYhz/wX9qs/1ZJ5UMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Zm NjI0ZC1hMzc3LTRlNmItYWFmMi1jMThhNDUwMDdkNTYvNDNmZjYyNGQtYTM3Ny00 ZTZiLWFhZjItYzE4YTQ1MDA3ZDU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNmZjYyNGQtYTM3Ny00ZTZiLWFh ZjItYzE4YTQ1MDA3ZDU2LzQzZmY2MjRkLWEzNzctNGU2Yi1hYWYyLWMxOGE0NTAw N2Q1Ni5jcmwwHwYDVR0jBBgwFoAUy9/nTsrm49/O4zOsUeAFoqdBheowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2ZmNjI0ZC1hMzc3LTRlNmItYWFmMi1jMThh NDUwMDdkNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDENjGVfWwywGhRfyugz/h6 6Qk0xBW9LIi44OQ69Xgcgaq4rr57bG3qyvxPgBRBceKNwcbIprQ/pFezffiAntGW JPNX42pLfWxrd0CWvrXDu0WzhLFmW4BnQB1O4L5/EPvhkFWloYD5p92n+UWFjF26 fKBCrdL7eiF4ppen45UNYrLYQeqm28Dejbw7yCGRhRYNIbgXHq9nZxJd4mU2+/bg za5geRcfPODnQrEdoUb0J9fXfLf1maWlA6lOyUBQ8bU9Wu5FTkKOb4VBqy+9y7L8 ELAJFOJ6JixLSsAJyRY8lYTvoX19v8dycdLASaVy2QQPdl1gG9idTaQi/fdXoCiy -----END CERTIFICATE-----Generated at Thu Mar 26 03:33:20 2026 by rpki-client