$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.mft File: d72c0e49-8b50-4964-9116-2214693f2f34.mft (raw, json) Hash identifier: TwXTSzR+clEltlkushZgAChDso7ljRnTjR1aAvcLsC8= Subject key identifier: 20:DC:F0:34:78:75:D8:29:E2:D9:E7:42:B7:5E:2B:E5:E5:D4:9A:B8 Authority key identifier: E8:6B:71:64:5B:C2:6D:A9:D2:72:25:F7:D3:57:7A:C2:E9:A5:45:DC Certificate issuer: /CN=d72c0e49-8b50-4964-9116-2214693f2f34 Certificate serial: 010D0C9F4328584D07534EA1903735BDD007E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.mft Manifest number: 010D0C9F4328584073A82F4480AC2CB2A198B581 Signing time: Sun 01 Mar 2026 23:00:03 +0000 Manifest this update: Sun 01 Mar 2026 23:00:03 +0000 Manifest next update: Tue 03 Mar 2026 23:00:00 +0000 Files and hashes: 1: d72c0e49-8b50-4964-9116-2214693f2f34.crl (hash: qUQqrowy0JYKgV1GzgvfDdhVBuwzIWLhgJDX6HU9uPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:53:4e:a1:90:37:35:bd:d0:07:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d72c0e49-8b50-4964-9116-2214693f2f34 Validity Not Before: Mar 1 23:00:03 2026 GMT Not After : Mar 3 23:00:00 2026 GMT Subject: CN=bbe726cb-f73a-438a-b9c9-94b9f1241ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:40:92:b3:aa:fa:b5:62:45:25:f3:2c:08: 23:38:56:52:06:d4:e4:37:cf:b6:27:e4:f2:d3:ec: 59:72:a4:a5:dd:6b:18:84:6e:90:6d:b3:fc:40:f5: 5c:20:50:40:69:29:09:1e:bf:0b:a3:23:a0:04:39: 8e:99:ca:1d:1c:24:e1:d1:e2:28:06:db:b9:8c:7f: 9d:85:1e:a7:0e:f6:39:ec:e3:c1:50:82:88:f8:9e: 1c:50:67:d2:85:07:b7:51:88:ee:80:d7:97:11:03: c1:6b:a7:00:ac:67:be:a0:ff:b2:58:9e:2a:97:71: 7f:d6:84:4b:f3:0d:9f:3f:85:ac:bb:ec:9a:70:9c: ab:08:e8:d0:89:e3:4f:d2:fa:65:bc:b6:70:5e:25: fa:1d:e6:c6:95:e8:3f:70:da:e6:7e:2d:4c:11:b2: e0:50:ba:3a:9c:72:d2:f2:6d:dd:d4:9c:27:12:6b: 50:08:5a:0a:81:e7:2a:9f:5c:22:70:27:ff:08:97: e2:34:83:49:ae:e3:90:4f:b1:94:fe:7f:9c:0c:11: 16:f0:0a:af:ae:69:87:31:1a:ca:f3:59:8f:63:b3: 8f:a7:ac:93:28:d9:58:32:f7:01:be:85:22:ee:20: 48:8e:0b:ee:5d:44:b9:e8:a0:50:cd:27:b4:11:b5: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:F0:34:78:75:D8:29:E2:D9:E7:42:B7:5E:2B:E5:E5:D4:9A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.crl X509v3 Authority Key Identifier: keyid:E8:6B:71:64:5B:C2:6D:A9:D2:72:25:F7:D3:57:7A:C2:E9:A5:45:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3e:1d:9f:64:43:e1:9c:91:d9:cd:27:64:d1:f0:f3:78:ec: 60:de:f3:d2:f4:2b:ac:16:d3:fe:ce:d2:a8:bf:39:d4:32:05: 3c:af:4d:1a:b6:b0:0a:7b:51:04:5a:87:f1:5e:32:94:ed:69: ff:f5:e8:10:9d:fd:ed:22:18:69:eb:ac:a6:a4:c3:56:cf:fe: 31:fc:fd:62:1a:13:4e:74:67:49:dd:48:16:f4:3f:b6:ce:27: 0b:11:1e:98:b2:94:57:73:7e:ad:63:04:6c:e9:42:d8:71:7c: c1:08:3c:a1:d7:aa:2f:59:61:79:4b:2c:b8:ee:57:53:58:bb: d1:32:e9:0a:cc:cc:c4:56:16:34:7e:2e:05:3f:0d:69:32:2b: 99:f9:80:69:a1:83:fa:7c:2d:c8:cf:84:eb:83:15:6c:e9:29: a4:0e:61:14:1d:1d:e1:0b:65:8f:65:43:1c:37:b5:86:e5:9e: 37:c6:f2:5b:92:1e:35:41:d8:ef:6d:1d:9d:ae:db:da:7a:6b: 55:d8:f8:bc:f9:ac:a0:df:a5:cc:de:4d:22:3a:6a:ac:65:cb: dc:e2:e4:54:23:0d:14:9d:d3:f6:7a:7b:b5:86:ee:5d:ca:6e: 90:da:59:5b:44:10:4c:f7:af:3f:2e:38:65:59:90:af:9d:91: 31:52:06:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HU06hkDc1vdAH6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyYzBlNDktOGI1MC00OTY0LTkxMTYtMjIxNDY5M2Yy ZjM0MB4XDTI2MDMwMTIzMDAwM1oXDTI2MDMwMzIzMDAwMFowLzEtMCsGA1UEAxMk YmJlNzI2Y2ItZjczYS00MzhhLWI5YzktOTRiOWYxMjQxYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilhAkrOq+rViRSXzLAgjOFZSBtTkN8+2J+Ty 0+xZcqSl3WsYhG6QbbP8QPVcIFBAaSkJHr8LoyOgBDmOmcodHCTh0eIoBtu5jH+d hR6nDvY57OPBUIKI+J4cUGfShQe3UYjugNeXEQPBa6cArGe+oP+yWJ4ql3F/1oRL 8w2fP4Wsu+yacJyrCOjQieNP0vplvLZwXiX6HebGleg/cNrmfi1MEbLgULo6nHLS 8m3d1JwnEmtQCFoKgecqn1wicCf/CJfiNINJruOQT7GU/n+cDBEW8AqvrmmHMRrK 81mPY7OPp6yTKNlYMvcBvoUi7iBIjgvuXUS56KBQzSe0EbWItwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCDc8DR4ddgp4tnnQrdeK+Xl1Jq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzJj MGU0OS04YjUwLTQ5NjQtOTExNi0yMjE0NjkzZjJmMzQvZDcyYzBlNDktOGI1MC00 OTY0LTkxMTYtMjIxNDY5M2YyZjM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDcyYzBlNDktOGI1MC00OTY0LTkx MTYtMjIxNDY5M2YyZjM0L2Q3MmMwZTQ5LThiNTAtNDk2NC05MTE2LTIyMTQ2OTNm MmYzNC5jcmwwHwYDVR0jBBgwFoAU6GtxZFvCbanSciX301d6wumlRdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzJjMGU0OS04YjUwLTQ5NjQtOTExNi0yMjE0 NjkzZjJmMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoPh2fZEPhnJHZzSdk0fDz eOxg3vPS9CusFtP+ztKovznUMgU8r00atrAKe1EEWofxXjKU7Wn/9egQnf3tIhhp 66ympMNWz/4x/P1iGhNOdGdJ3UgW9D+2zicLER6YspRXc36tYwRs6ULYcXzBCDyh 16ovWWF5Syy47ldTWLvRMukKzMzEVhY0fi4FPw1pMiuZ+YBpoYP6fC3Iz4TrgxVs 6SmkDmEUHR3hC2WPZUMcN7WG5Z43xvJbkh41QdjvbR2drtvaemtV2Pi8+ayg36XM 3k0iOmqsZcvc4uRUIw0UndP2enu1hu5dym6Q2llbRBBM968/LjhlWZCvnZExUgYx -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:35 2026 by rpki-client