$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft File: a8f311de-c6af-4322-a952-b9c622f40e51.mft (raw, json) Hash identifier: AMg323+6FOV64jc1JD5fj9e3HnGa5Y2LL+Wzf1y6evU= Subject key identifier: 02:3A:C9:BC:18:60:F3:58:2C:9D:97:90:77:7D:6A:08:F5:63:91:35 Authority key identifier: 5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5 Certificate issuer: /CN=a8f311de-c6af-4322-a952-b9c622f40e51 Certificate serial: 010D0C9F4328584D0682E9678FA1EC28C0D37F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft Manifest number: 010D0C9F4328584073A81B468D491D97A5AB8881 Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Tue 03 Mar 2026 16:00:00 +0000 Files and hashes: 1: a8f311de-c6af-4322-a952-b9c622f40e51.crl (hash: Dab8pBmMamhNI2sSoRMieTNT8jFNP1vclYpX2Jnk7dg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:e9:67:8f:a1:ec:28:c0:d3:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f311de-c6af-4322-a952-b9c622f40e51 Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 3 16:00:00 2026 GMT Subject: CN=7f509d22-9d42-4f16-a525-b914d8d6fbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:15:76:2c:03:a0:a3:ba:67:0b:67:bd:54: 25:74:5f:19:b0:a2:f0:92:10:bb:ed:0a:b5:5e:a9: 98:ec:50:d7:43:16:46:77:ac:1c:cb:fb:f4:09:26: c5:44:50:36:42:69:3f:1b:5f:06:3c:fa:9c:8c:30: 9d:9e:69:53:ac:df:c1:33:7f:7d:89:7a:18:0a:0e: 80:11:47:90:39:4d:a2:26:f4:26:e6:6e:65:0d:a1: bc:37:ee:78:3c:e5:f7:b8:38:3b:5c:21:bc:59:4a: 1c:e5:a8:d1:0b:95:18:85:82:b7:f2:23:1d:00:d3: b9:7d:62:e9:c1:a3:6f:8c:99:83:05:54:fc:a4:8a: d6:2f:96:6e:96:02:ec:dc:f2:27:0d:e4:b9:d8:b7: a4:17:71:79:23:c9:9f:0e:93:e2:62:9f:06:83:21: 2e:b4:81:fa:33:9c:de:57:5b:ca:75:ce:37:40:8e: 92:c3:e5:d5:15:81:1c:24:61:9f:94:e6:bb:c8:31: 4f:75:fc:e8:7c:d8:12:ac:a7:34:82:e7:0f:50:4c: 4a:ab:18:cf:0d:91:3f:4c:db:db:cd:f1:d7:fc:c0: 77:4d:6f:a4:70:f2:59:22:43:74:f0:04:3c:0b:d1: 6e:64:ed:3e:41:a1:7f:8d:e0:03:8d:7f:c0:42:96: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:C9:BC:18:60:F3:58:2C:9D:97:90:77:7D:6A:08:F5:63:91:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.crl X509v3 Authority Key Identifier: keyid:5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8b:c3:26:30:b9:6f:db:3a:aa:43:9c:fc:4f:b3:95:ef:11: bd:8a:7d:3c:53:20:48:59:04:8c:fe:28:8d:43:86:f6:2a:81: f2:6c:3a:5d:21:6f:67:65:16:90:f4:d9:80:dc:a6:0a:97:12: 94:51:87:55:60:d9:7e:ff:54:e2:b8:d7:89:1f:6a:60:9c:b0: 4a:a8:e9:cf:5f:2f:9e:14:c5:ac:36:cd:8b:f2:89:89:73:13: 3e:e4:ab:da:44:b6:0b:c1:69:15:19:82:db:e9:d3:c6:ca:f2: 2a:c8:88:1a:af:43:46:4f:e7:86:ae:43:8d:68:8b:3c:e8:32: af:a0:5a:dd:69:b7:da:a3:23:4b:d4:19:83:9b:40:f2:2c:b7: 3a:8e:a0:e2:6e:b0:56:53:26:ec:1b:f1:14:e9:63:e3:c9:64: d4:10:f1:77:a5:5b:15:71:82:8f:d3:28:da:c0:20:e8:b6:df: 97:9c:6b:db:60:3a:9d:a9:ae:86:1c:6f:a2:61:c6:3b:50:f2: bb:bd:85:14:f0:39:50:14:0c:2c:c9:63:65:fd:d3:1f:98:63: 5c:86:73:79:ab:21:58:9b:3f:5f:74:8c:78:7f:29:5c:13:68: 43:80:9a:94:b6:e5:e5:a8:f8:a6:f2:5f:6c:fb:4a:42:38:d2: 3b:8d:9e:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Ggulnj6HsKMDTfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmMzExZGUtYzZhZi00MzIyLWE5NTItYjljNjIyZjQw ZTUxMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwMzE2MDAwMFowLzEtMCsGA1UEAxMk N2Y1MDlkMjItOWQ0Mi00ZjE2LWE1MjUtYjkxNGQ4ZDZmYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DcVdiwDoKO6ZwtnvVQldF8ZsKLwkhC77Qq1 XqmY7FDXQxZGd6wcy/v0CSbFRFA2Qmk/G18GPPqcjDCdnmlTrN/BM399iXoYCg6A EUeQOU2iJvQm5m5lDaG8N+54POX3uDg7XCG8WUoc5ajRC5UYhYK38iMdANO5fWLp waNvjJmDBVT8pIrWL5ZulgLs3PInDeS52LekF3F5I8mfDpPiYp8GgyEutIH6M5ze V1vKdc43QI6Sw+XVFYEcJGGflOa7yDFPdfzofNgSrKc0gucPUExKqxjPDZE/TNvb zfHX/MB3TW+kcPJZIkN08AQ8C9FuZO0+QaF/jeADjX/AQpZxZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAI6ybwYYPNYLJ2XkHd9agj1Y5E1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGYz MTFkZS1jNmFmLTQzMjItYTk1Mi1iOWM2MjJmNDBlNTEvYThmMzExZGUtYzZhZi00 MzIyLWE5NTItYjljNjIyZjQwZTUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYThmMzExZGUtYzZhZi00MzIyLWE5 NTItYjljNjIyZjQwZTUxL2E4ZjMxMWRlLWM2YWYtNDMyMi1hOTUyLWI5YzYyMmY0 MGU1MS5jcmwwHwYDVR0jBBgwFoAUWzOve+l/ri8VWJzXK67gX1dHCvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGYzMTFkZS1jNmFmLTQzMjItYTk1Mi1iOWM2 MjJmNDBlNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyi8MmMLlv2zqqQ5z8T7OV 7xG9in08UyBIWQSM/iiNQ4b2KoHybDpdIW9nZRaQ9NmA3KYKlxKUUYdVYNl+/1Ti uNeJH2pgnLBKqOnPXy+eFMWsNs2L8omJcxM+5KvaRLYLwWkVGYLb6dPGyvIqyIga r0NGT+eGrkONaIs86DKvoFrdabfaoyNL1BmDm0DyLLc6jqDibrBWUybsG/EU6WPj yWTUEPF3pVsVcYKP0yjawCDott+XnGvbYDqdqa6GHG+iYcY7UPK7vYUU8DlQFAws yWNl/dMfmGNchnN5qyFYmz9fdIx4fylcE2hDgJqUtuXlqPim8l9s+0pCONI7jZ7o -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:37 2026 by rpki-client