$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.mft File: 7c9f65fd-503f-45fa-a23e-edbcaa8b4014.mft (raw, json) Hash identifier: 3oHM2ImWVOTaLxdMwEOVDXpWqNCwk6K/4yXaeSSufA8= Subject key identifier: E1:3F:BF:7D:77:E9:02:F2:45:D5:6A:73:2D:0D:04:F2:6D:C5:93:1E Authority key identifier: 45:C4:0C:6A:00:E2:5B:6C:44:19:01:95:AD:D1:C6:3A:9D:4B:7A:86 Certificate issuer: /CN=7c9f65fd-503f-45fa-a23e-edbcaa8b4014 Certificate serial: 010D0C9F4328584D4F72095D0951291082268580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.mft Manifest number: 010D0C9F4328584A8A622A19B8A0A7AA0F3AE8BE Signing time: Fri 27 Mar 2026 19:00:09 +0000 Manifest this update: Fri 27 Mar 2026 19:00:09 +0000 Manifest next update: Mon 30 Mar 2026 19:00:00 +0000 Files and hashes: 1: 7c9f65fd-503f-45fa-a23e-edbcaa8b4014.crl (hash: +X7wxge9HnNulCxAbg7D+S2uSAJQeh2A2AG6DYeg4Ho=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:72:09:5d:09:51:29:10:82:26:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c9f65fd-503f-45fa-a23e-edbcaa8b4014 Validity Not Before: Mar 27 19:00:09 2026 GMT Not After : Mar 30 19:00:00 2026 GMT Subject: CN=3dc45a14-ae54-43fe-b695-49897134dc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b2:41:b7:1b:00:db:83:5d:a4:ba:76:1d:43: 86:52:06:ae:48:e4:cb:64:df:78:56:b6:e8:64:a2: c5:72:6b:c6:b4:e5:f8:57:45:b1:6d:fc:4e:35:80: 7c:fd:69:2d:1e:26:e0:b5:5a:ac:7b:9a:dd:44:48: ba:cd:10:14:88:5c:c5:9c:79:dc:94:e3:c5:3e:95: 79:39:c5:9e:eb:28:87:5b:cf:37:00:f5:79:52:c1: 96:50:08:91:10:be:0f:64:f0:62:5b:46:c4:98:4b: 05:47:39:80:7f:8c:2a:2a:97:80:a1:b9:f2:98:a5: c3:99:7f:5e:30:ed:01:c9:c4:6d:9f:b3:42:ad:89: 82:ea:21:65:18:e2:26:1b:d7:dc:c9:1b:9c:ca:cb: 03:45:08:a5:7e:e6:3e:bd:78:b3:c7:2a:94:f3:35: 5d:61:5c:78:bf:de:2e:6e:6a:50:1b:a1:fb:ce:5f: 4d:35:ec:02:4b:9e:01:39:8e:28:b0:ab:2e:50:b8: 29:df:76:fb:f4:55:cb:e8:43:cf:26:24:77:af:0c: ec:74:ef:61:60:2e:a2:c6:67:d5:c6:f1:f9:9c:03: 8f:0e:59:65:fc:61:67:14:14:ea:d8:30:77:e9:87: 9c:19:75:e8:4a:77:87:ae:83:28:06:3e:6f:dc:d8: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:BF:7D:77:E9:02:F2:45:D5:6A:73:2D:0D:04:F2:6D:C5:93:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.crl X509v3 Authority Key Identifier: keyid:45:C4:0C:6A:00:E2:5B:6C:44:19:01:95:AD:D1:C6:3A:9D:4B:7A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7c9f65fd-503f-45fa-a23e-edbcaa8b4014.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:97:da:5e:c0:b2:e6:eb:05:13:b2:ed:0e:d9:d4:e8:fb:0d: 29:82:18:c5:63:99:d5:fc:9b:f0:00:27:e9:9d:f5:05:7b:6a: 58:2a:60:00:33:cd:fd:d8:cd:db:5d:35:80:b2:95:c4:89:15: 16:4a:44:39:8f:d2:bc:02:79:96:74:ad:c6:cc:03:35:bc:46: 65:0b:6e:6b:52:23:86:ea:1c:d3:9a:f8:53:fb:1b:d7:49:d2: 80:4f:46:aa:2a:f0:9a:6d:a2:ed:cc:78:bb:4a:08:08:3f:f0: 3c:93:40:8d:e4:06:90:25:be:c0:f1:3c:fb:15:3f:03:39:c1: d7:d9:ad:4a:05:4a:3f:62:4d:01:36:75:2e:00:b4:57:1a:07: e6:f5:89:a9:d6:27:9c:fb:b3:e2:88:f6:61:be:4b:f7:7c:73: 00:46:4c:21:d4:66:ab:38:1c:66:c3:d0:87:c2:ed:db:fa:63: 27:5f:cd:7c:8a:76:67:45:96:ee:d9:30:fc:21:c4:57:37:93: 32:89:35:ef:06:28:b1:e4:a9:8a:d7:c1:a6:0f:f3:e6:dc:aa: 53:9f:74:08:db:5b:c2:84:cd:17:9a:64:6f:86:28:58:81:82: 98:7b:d3:5b:cd:ff:79:2f:59:e6:95:57:24:ac:fd:c2:f9:f1: 3f:19:ff:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PcgldCVEpEIImhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M5ZjY1ZmQtNTAzZi00NWZhLWEyM2UtZWRiY2FhOGI0 MDE0MB4XDTI2MDMyNzE5MDAwOVoXDTI2MDMzMDE5MDAwMFowLzEtMCsGA1UEAxMk M2RjNDVhMTQtYWU1NC00M2ZlLWI2OTUtNDk4OTcxMzRkYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7JBtxsA24NdpLp2HUOGUgauSOTLZN94Vrbo ZKLFcmvGtOX4V0WxbfxONYB8/WktHibgtVqse5rdREi6zRAUiFzFnHnclOPFPpV5 OcWe6yiHW883APV5UsGWUAiREL4PZPBiW0bEmEsFRzmAf4wqKpeAobnymKXDmX9e MO0BycRtn7NCrYmC6iFlGOImG9fcyRucyssDRQilfuY+vXizxyqU8zVdYVx4v94u bmpQG6H7zl9NNewCS54BOY4osKsuULgp33b79FXL6EPPJiR3rwzsdO9hYC6ixmfV xvH5nAOPDlll/GFnFBTq2DB36YecGXXoSneHroMoBj5v3NheJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOE/v3136QLyRdVqcy0NBPJtxZMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83Yzlm NjVmZC01MDNmLTQ1ZmEtYTIzZS1lZGJjYWE4YjQwMTQvN2M5ZjY1ZmQtNTAzZi00 NWZhLWEyM2UtZWRiY2FhOGI0MDE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2M5ZjY1ZmQtNTAzZi00NWZhLWEy M2UtZWRiY2FhOGI0MDE0LzdjOWY2NWZkLTUwM2YtNDVmYS1hMjNlLWVkYmNhYThi NDAxNC5jcmwwHwYDVR0jBBgwFoAURcQMagDiW2xEGQGVrdHGOp1LeoYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YzlmNjVmZC01MDNmLTQ1ZmEtYTIzZS1lZGJj YWE4YjQwMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApl9pewLLm6wUTsu0O2dTo +w0pghjFY5nV/JvwACfpnfUFe2pYKmAAM8392M3bXTWAspXEiRUWSkQ5j9K8AnmW dK3GzAM1vEZlC25rUiOG6hzTmvhT+xvXSdKAT0aqKvCabaLtzHi7SggIP/A8k0CN 5AaQJb7A8Tz7FT8DOcHX2a1KBUo/Yk0BNnUuALRXGgfm9Ymp1iec+7PiiPZhvkv3 fHMARkwh1GarOBxmw9CHwu3b+mMnX818inZnRZbu2TD8IcRXN5MyiTXvBiix5KmK 18GmD/Pm3KpTn3QI21vChM0XmmRvhihYgYKYe9Nbzf95L1nmlVckrP3C+fE/Gf9d -----END CERTIFICATE-----Generated at Sat Mar 28 12:12:46 2026 by rpki-client