$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft File: 2d400a27-be93-4337-a967-4cb74da5710d.mft (raw, json) Hash identifier: 8su0N6S7kHXUFgssZKcXuVqqKlOSCK9TYcmGb5AA9h4= Subject key identifier: 12:B9:0B:2D:3F:62:8D:01:71:AC:5C:8F:21:E7:57:FB:60:6E:89:00 Authority key identifier: BB:56:7A:4E:E9:F8:8B:3E:0C:D8:5B:5D:3C:B8:C7:70:17:54:F0:60 Certificate issuer: /CN=2d400a27-be93-4337-a967-4cb74da5710d Certificate serial: 010D0C9F4328584D49BED61EC7EB6DA34E4EA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft Manifest number: 010D0C9F4328584A6324F6A74940285E1DD3BD0A Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 2d400a27-be93-4337-a967-4cb74da5710d.crl (hash: y3R2O0LZI+pszatSad35KiqBpMY7yvUIhw9h+uS2mVs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:1e:c7:eb:6d:a3:4e:4e:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d400a27-be93-4337-a967-4cb74da5710d Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=cdb28a37-12e0-4544-85bd-9c0cb251f996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:35:c5:0b:b8:4b:dc:1f:c1:0d:6d:b0:bf: 66:ca:ef:ab:e1:aa:84:91:92:ae:8f:69:a6:bc:74: 18:27:e9:bc:2d:d3:52:d1:13:30:04:3e:56:39:d1: f0:07:b5:01:00:bf:49:1d:67:1e:e8:7e:b8:a1:d4: 66:bf:9b:62:06:0b:b8:fc:5e:61:b4:fe:62:cc:22: 4c:9f:dc:c2:a8:2d:9d:0e:01:30:d1:21:8c:1e:df: f3:73:06:54:6c:f7:ec:c1:88:25:c2:86:16:f4:af: 24:d8:0a:ea:ab:87:48:aa:ed:ca:f9:4a:e5:64:84: 05:4d:0f:88:f5:32:e5:bc:f1:25:1b:4d:6a:77:7f: 2a:46:be:62:56:3e:92:76:8e:8b:ef:04:be:ca:fd: 1f:d0:88:00:a7:b7:3b:1c:2f:d2:6e:38:44:7a:92: 16:2f:26:c5:8f:5c:93:12:a8:93:c0:39:d5:f1:75: d6:7d:0e:90:c9:66:58:46:79:ca:54:8d:ee:73:01: 5a:9a:1f:a9:18:10:49:08:f3:05:3b:94:2a:e9:eb: a8:79:3d:80:b0:0d:66:32:7d:2a:dd:b2:54:01:b9: 96:bf:2d:61:73:7c:af:43:3d:a6:fa:3c:e8:b6:32: 03:2d:50:4b:7d:40:e6:3a:1a:3e:dc:02:b2:91:43: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:0B:2D:3F:62:8D:01:71:AC:5C:8F:21:E7:57:FB:60:6E:89:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.crl X509v3 Authority Key Identifier: keyid:BB:56:7A:4E:E9:F8:8B:3E:0C:D8:5B:5D:3C:B8:C7:70:17:54:F0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2e:05:c3:bf:6b:45:d7:17:2b:3a:8d:01:0c:03:4c:79:dc: 05:b2:6a:dc:b1:cf:da:35:73:bb:9a:5a:ad:e8:2f:9b:0c:df: 1f:89:88:f5:98:d0:1f:da:03:4d:30:8f:f3:c9:3d:cb:97:c2: 90:3d:ee:ef:13:15:95:83:ce:f9:80:41:7a:7f:88:e8:a7:6a: 73:45:62:10:07:62:79:37:4c:14:40:a0:85:75:65:e6:da:a4: 29:0b:53:f2:35:97:39:55:a9:c8:de:c6:f3:77:26:e6:91:3b: e8:c4:6f:d6:e1:50:68:95:98:3f:95:1c:21:27:32:7d:47:ba: 22:f3:4d:71:20:f5:c8:f0:b3:1f:08:03:c6:96:7e:03:f8:b3: 11:44:d4:fc:6d:5a:a0:de:94:69:d8:6c:ff:63:ae:4f:6a:10: 20:e8:ed:41:eb:9f:59:f7:0b:c9:ae:fe:9f:1b:01:7a:9f:45: 4d:d0:07:77:13:fa:ad:5d:0b:b9:90:a0:b6:39:c4:24:7c:23: 36:1d:c5:93:a2:40:05:b4:db:d3:4c:7c:48:f8:23:4e:4b:65: 81:d7:c0:38:44:74:7e:c8:e3:77:0f:9b:50:4c:1c:10:9b:88: 05:9e:f2:d2:65:4a:b9:0d:b2:62:48:4b:c2:4b:8e:6a:18:16: 72:a9:1e:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtYex+tto05OqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0MDBhMjctYmU5My00MzM3LWE5NjctNGNiNzRkYTU3 MTBkMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk Y2RiMjhhMzctMTJlMC00NTQ0LTg1YmQtOWMwY2IyNTFmOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZM1xQu4S9wfwQ1tsL9myu+r4aqEkZKuj2mm vHQYJ+m8LdNS0RMwBD5WOdHwB7UBAL9JHWce6H64odRmv5tiBgu4/F5htP5izCJM n9zCqC2dDgEw0SGMHt/zcwZUbPfswYglwoYW9K8k2Arqq4dIqu3K+UrlZIQFTQ+I 9TLlvPElG01qd38qRr5iVj6Sdo6L7wS+yv0f0IgAp7c7HC/SbjhEepIWLybFj1yT EqiTwDnV8XXWfQ6QyWZYRnnKVI3ucwFamh+pGBBJCPMFO5Qq6euoeT2AsA1mMn0q 3bJUAbmWvy1hc3yvQz2m+jzotjIDLVBLfUDmOho+3AKykUPdeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBK5Cy0/Yo0BcaxcjyHnV/tgbokAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDQw MGEyNy1iZTkzLTQzMzctYTk2Ny00Y2I3NGRhNTcxMGQvMmQ0MDBhMjctYmU5My00 MzM3LWE5NjctNGNiNzRkYTU3MTBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQ0MDBhMjctYmU5My00MzM3LWE5 NjctNGNiNzRkYTU3MTBkLzJkNDAwYTI3LWJlOTMtNDMzNy1hOTY3LTRjYjc0ZGE1 NzEwZC5jcmwwHwYDVR0jBBgwFoAUu1Z6Tun4iz4M2FtdPLjHcBdU8GAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDQwMGEyNy1iZTkzLTQzMzctYTk2Ny00Y2I3 NGRhNTcxMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPLgXDv2tF1xcrOo0BDANM edwFsmrcsc/aNXO7mlqt6C+bDN8fiYj1mNAf2gNNMI/zyT3Ll8KQPe7vExWVg875 gEF6f4jop2pzRWIQB2J5N0wUQKCFdWXm2qQpC1PyNZc5VanI3sbzdybmkTvoxG/W 4VBolZg/lRwhJzJ9R7oi801xIPXI8LMfCAPGln4D+LMRRNT8bVqg3pRp2Gz/Y65P ahAg6O1B659Z9wvJrv6fGwF6n0VN0Ad3E/qtXQu5kKC2OcQkfCM2HcWTokAFtNvT THxI+CNOS2WB18A4RHR+yON3D5tQTBwQm4gFnvLSZUq5DbJiSEvCS45qGBZyqR5K -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:27 2026 by rpki-client