$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft File: a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft (raw, json) Hash identifier: 6yPsAMok3KLz/45OCFHRQrltVFCcvXw4VbKiuq3VjXc= Subject key identifier: 71:51:67:8F:94:A9:41:93:8C:3C:60:32:75:F2:40:C0:73:E9:3C:B3 Authority key identifier: 34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 Certificate issuer: /CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Certificate serial: 010D0C9F4328584D49DCA06E13266C7FA032BD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft Manifest number: 010D0C9F4328584B66F92A46BDA7C1973DEC996D Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl (hash: mlYMoiTfxTcePlLe8PRH3yJqcEb7P3b9obrRFQ5zDp8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:a0:6e:13:26:6c:7f:a0:32:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=43e3f042-b2e9-4a65-ae84-a9a45e2fd58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:f7:5e:fb:29:36:cd:15:91:40:f3:3b:c3: 10:93:73:0e:2f:a5:f1:87:b4:ce:78:ea:fa:4d:24: 19:99:69:83:bc:92:1d:f5:82:f5:ba:e5:d8:55:3b: 44:81:bf:be:a3:1b:99:b3:dd:62:72:ec:16:25:b1: e2:3c:6f:d3:2c:d9:2c:b2:8b:93:59:b0:0a:9f:da: cc:3a:2b:5b:12:d8:96:72:b0:fb:0f:8f:b6:3a:b3: 70:85:a0:4d:71:4a:16:b9:75:e5:07:1c:48:08:26: 20:a3:5e:ec:b3:d9:54:5a:ed:02:ce:e9:8e:2f:8b: 0d:7e:2c:93:bf:54:40:ba:f2:71:d8:77:93:8d:c0: d2:4d:44:24:82:5c:10:a4:81:48:cb:41:9c:46:8f: ed:82:9b:3f:02:1e:d2:68:e0:11:fe:c2:1e:2b:5e: 03:f1:9a:fb:4e:07:d4:bc:d4:47:e2:95:fe:7d:c0: bf:2a:77:3f:08:85:13:1d:83:81:6e:b9:99:6f:f0: 07:92:ee:5b:98:ae:9f:18:2c:95:bc:e3:50:5a:a9: ab:99:bb:8e:b2:e8:cc:f7:ef:69:4a:9b:02:a0:91: e7:ec:e6:90:4d:aa:7e:63:e4:2d:91:85:2b:9f:34: 55:27:57:16:f0:cc:23:2a:3d:d2:82:a6:35:33:f3: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:51:67:8F:94:A9:41:93:8C:3C:60:32:75:F2:40:C0:73:E9:3C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl X509v3 Authority Key Identifier: keyid:34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4c:e4:96:75:e4:71:28:2d:47:a7:e9:3d:e2:bb:71:dc:e8: e1:69:88:3c:e4:4d:a6:6a:f8:0f:18:10:da:2f:81:ba:de:bd: 58:08:00:cc:95:d6:86:4c:3b:1a:cf:75:03:e4:c8:9b:97:c8: 54:47:a2:e9:46:0e:3f:ad:ae:9c:70:1c:a8:d3:cf:0a:fb:f0: 67:16:f4:67:fc:66:8b:ab:ac:4c:01:09:a9:27:98:4c:9a:c7: 72:4e:14:f3:35:18:55:60:48:47:4f:31:00:68:30:84:27:04: 6f:69:3a:16:80:55:2e:a1:32:d0:0b:46:47:1e:a8:4d:6b:a6: ed:f0:91:bc:ec:fb:d7:08:db:a0:55:d7:17:7d:a2:03:a0:cf: b7:e4:41:78:f8:f6:4d:f0:4c:91:10:47:61:10:ff:00:08:91: f3:86:1f:d4:64:88:c9:5f:f9:63:2f:0c:40:ab:18:d5:f7:58: 5b:2c:cf:03:67:d0:ef:74:b9:f2:9c:1f:e5:10:07:ae:99:ae: 57:6d:e1:a5:41:c0:e3:d6:d3:4b:a3:a9:ba:9f:dc:3c:0a:e8: 2e:49:9a:ae:4f:6f:54:05:1d:77:4b:c5:b2:db:ef:9c:5e:4a: 74:d9:99:2b:4a:53:e8:98:7f:25:c0:fe:eb:de:d7:2f:d5:5a: ac:7b:ef:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3KBuEyZsf6AyvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5MGM4MGEtZDZmYi00YjMzLWE1NzQtZDVlYjFiNTEw ZDAwMB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk NDNlM2YwNDItYjJlOS00YTY1LWFlODQtYTlhNDVlMmZkNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlv3XvspNs0VkUDzO8MQk3MOL6Xxh7TOeOr6 TSQZmWmDvJId9YL1uuXYVTtEgb++oxuZs91icuwWJbHiPG/TLNkssouTWbAKn9rM OitbEtiWcrD7D4+2OrNwhaBNcUoWuXXlBxxICCYgo17ss9lUWu0CzumOL4sNfiyT v1RAuvJx2HeTjcDSTUQkglwQpIFIy0GcRo/tgps/Ah7SaOAR/sIeK14D8Zr7TgfU vNRH4pX+fcC/Knc/CIUTHYOBbrmZb/AHku5bmK6fGCyVvONQWqmrmbuOsujM9+9p SpsCoJHn7OaQTap+Y+QtkYUrnzRVJ1cW8MwjKj3SgqY1M/OUxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFRZ4+UqUGTjDxgMnXyQMBz6TyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkw YzgwYS1kNmZiLTRiMzMtYTU3NC1kNWViMWI1MTBkMDAvYTI5MGM4MGEtZDZmYi00 YjMzLWE1NzQtZDVlYjFiNTEwZDAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTI5MGM4MGEtZDZmYi00YjMzLWE1 NzQtZDVlYjFiNTEwZDAwL2EyOTBjODBhLWQ2ZmItNGIzMy1hNTc0LWQ1ZWIxYjUx MGQwMC5jcmwwHwYDVR0jBBgwFoAUNEHkXj/tPMdyUh4xK1CB5rC9Z1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkwYzgwYS1kNmZiLTRiMzMtYTU3NC1kNWVi MWI1MTBkMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRTOSWdeRxKC1Hp+k94rtx 3OjhaYg85E2mavgPGBDaL4G63r1YCADMldaGTDsaz3UD5Mibl8hUR6LpRg4/ra6c cByo088K+/BnFvRn/GaLq6xMAQmpJ5hMmsdyThTzNRhVYEhHTzEAaDCEJwRvaToW gFUuoTLQC0ZHHqhNa6bt8JG87PvXCNugVdcXfaIDoM+35EF4+PZN8EyREEdhEP8A CJHzhh/UZIjJX/ljLwxAqxjV91hbLM8DZ9DvdLnynB/lEAeuma5XbeGlQcDj1tNL o6m6n9w8CuguSZquT29UBR13S8Wy2++cXkp02ZkrSlPomH8lwP7r3tcv1Vqse+9e -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:31 2026 by rpki-client