$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft File: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft (raw, json) Hash identifier: yUSiGT7U7Crh6gn3BNbZ/MZ+dCIH1oaIuKELEoPfHzY= Subject key identifier: 7A:F1:67:C5:3C:86:1F:AF:9A:72:33:0A:07:7A:A7:C9:6C:6E:C7:DD Authority key identifier: CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 Certificate issuer: /CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Certificate serial: 010D0C9F4328584D4EBF5E5EAE5B5C8BC17B7300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft Manifest number: 010D0C9F4328584AF0F7D2772C59CBCE8447BAD9 Signing time: Fri 27 Mar 2026 13:00:09 +0000 Manifest this update: Fri 27 Mar 2026 13:00:09 +0000 Manifest next update: Sun 29 Mar 2026 13:00:00 +0000 Files and hashes: 1: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl (hash: p4pME03qDbdWAiB8yZvbS6Dyscx5goB8ZvijFPlMR0I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:5e:5e:ae:5b:5c:8b:c1:7b:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Validity Not Before: Mar 27 13:00:09 2026 GMT Not After : Mar 29 13:00:00 2026 GMT Subject: CN=b3aa36e4-c7eb-4ce5-83fc-4277da84b9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:86:61:52:44:f6:7f:4c:2a:c7:44:cc:84: 4c:3e:f3:96:c3:ba:e3:9c:0a:1a:8c:b4:04:cd:57: e8:d3:3a:da:9c:fd:30:8a:37:00:21:cf:b1:fc:57: 4e:a0:67:88:4f:23:30:1e:04:b0:4e:48:c4:18:27: 44:22:25:49:55:cc:e8:39:76:e8:d2:59:95:3d:f2: c2:a7:cf:3d:99:9e:f8:d6:d4:c5:cf:54:1d:e6:72: 57:cd:9d:f3:dc:b7:a8:67:39:f1:62:0f:05:86:91: f6:22:ad:18:c0:5a:5e:32:8b:0d:55:fd:ce:e3:e7: 68:78:e7:e7:9f:a9:33:8e:8c:db:e2:38:15:4f:d6: 34:46:fb:54:3e:91:20:f1:47:41:cd:f9:c1:9b:13: 6a:a2:8a:aa:3d:6e:60:9a:7a:0e:aa:10:01:ff:c3: ed:17:67:44:b5:4e:81:be:2c:07:97:c1:e2:22:c5: bf:ad:91:c3:8c:b8:e6:21:6e:38:11:a6:c2:4f:f9: f1:18:79:4a:59:51:21:9c:1f:85:46:55:73:39:2a: bf:7e:9d:90:2b:bf:8a:28:6f:4f:68:75:51:b0:75: 42:e8:9a:84:7a:74:45:37:a3:08:ed:79:fa:8b:18: df:cd:ab:af:02:fa:17:50:5d:26:8a:5d:84:69:3a: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F1:67:C5:3C:86:1F:AF:9A:72:33:0A:07:7A:A7:C9:6C:6E:C7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl X509v3 Authority Key Identifier: keyid:CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3a:73:69:52:84:2c:5d:db:68:94:1b:b1:ba:a8:30:ee:57: 59:8e:fa:ae:27:9f:cf:e4:fd:96:41:ce:1f:3c:61:72:74:01: 67:16:ac:bd:7d:ed:5e:4a:43:40:d7:4d:df:6f:0d:8c:35:13: 9f:68:c4:51:7c:65:e2:1f:04:2a:b9:19:a5:df:83:fe:a1:8a: 44:a4:27:78:aa:54:92:98:7a:61:7c:0f:a5:d5:3e:d2:ea:28: bf:94:e1:a7:75:04:71:24:2d:65:c3:f0:2c:f7:60:19:21:84: 86:20:f1:fb:db:15:75:0f:46:38:0e:5e:20:95:3a:86:d2:01: ac:ef:bf:ca:df:3a:30:a6:67:13:59:ee:e9:70:0b:0a:44:f3: b5:9e:a4:e1:bd:c4:2b:5d:99:84:37:f2:cc:ed:9b:42:9a:5b: d0:90:95:90:1c:83:4f:d5:3a:64:d8:d2:fb:50:6d:0b:fe:36: a6:a4:dd:38:12:c7:d9:dc:6d:5f:0d:5d:23:3d:77:14:a9:30: e9:3d:7d:53:9b:b3:c9:89:0d:d8:f6:ee:d6:7c:4a:8f:96:23: 66:a3:bc:59:af:c1:10:4c:19:dd:93:b8:64:02:12:e3:0a:5f: 32:a9:8a:5c:cd:7c:f2:d9:00:ba:6a:05:e2:28:b7:f9:a2:10: 69:da:95:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ov15erltci8F7cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZhNmI0NTYtM2NkNS00NTdlLTg2ZjEtNDI4MGVhNjFm NWIzMB4XDTI2MDMyNzEzMDAwOVoXDTI2MDMyOTEzMDAwMFowLzEtMCsGA1UEAxMk YjNhYTM2ZTQtYzdlYi00Y2U1LTgzZmMtNDI3N2RhODRiOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6eGYVJE9n9MKsdEzIRMPvOWw7rjnAoajLQE zVfo0zranP0wijcAIc+x/FdOoGeITyMwHgSwTkjEGCdEIiVJVczoOXbo0lmVPfLC p889mZ741tTFz1Qd5nJXzZ3z3LeoZznxYg8FhpH2Iq0YwFpeMosNVf3O4+doeOfn n6kzjozb4jgVT9Y0RvtUPpEg8UdBzfnBmxNqooqqPW5gmnoOqhAB/8PtF2dEtU6B viwHl8HiIsW/rZHDjLjmIW44EabCT/nxGHlKWVEhnB+FRlVzOSq/fp2QK7+KKG9P aHVRsHVC6JqEenRFN6MI7Xn6ixjfzauvAvoXUF0mil2EaTqHywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHrxZ8U8hh+vmnIzCgd6p8lsbsfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2 YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00MjgwZWE2MWY1YjMvNGZhNmI0NTYtM2NkNS00 NTdlLTg2ZjEtNDI4MGVhNjFmNWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGZhNmI0NTYtM2NkNS00NTdlLTg2 ZjEtNDI4MGVhNjFmNWIzLzRmYTZiNDU2LTNjZDUtNDU3ZS04NmYxLTQyODBlYTYx ZjViMy5jcmwwHwYDVR0jBBgwFoAUzBe4KnWaAWYfWRyVrB1P6+t1kIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00Mjgw ZWE2MWY1YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiOnNpUoQsXdtolBuxuqgw 7ldZjvquJ5/P5P2WQc4fPGFydAFnFqy9fe1eSkNA103fbw2MNROfaMRRfGXiHwQq uRml34P+oYpEpCd4qlSSmHphfA+l1T7S6ii/lOGndQRxJC1lw/As92AZIYSGIPH7 2xV1D0Y4Dl4glTqG0gGs77/K3zowpmcTWe7pcAsKRPO1nqThvcQrXZmEN/LM7ZtC mlvQkJWQHINP1Tpk2NL7UG0L/jampN04EsfZ3G1fDV0jPXcUqTDpPX1Tm7PJiQ3Y 9u7WfEqPliNmo7xZr8EQTBndk7hkAhLjCl8yqYpczXzy2QC6agXiKLf5ohBp2pXV -----END CERTIFICATE-----Generated at Sat Mar 28 12:15:57 2026 by rpki-client