$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85/3eb5bb74-4a16-4fff-8fa3-705d67269f85.mft File: 3eb5bb74-4a16-4fff-8fa3-705d67269f85.mft (raw, json) Hash identifier: a6EQgZEauDw2iCfaJ8hyM85fCNKpRNfnEdOmNLjXY9k= Subject key identifier: BF:CF:C3:18:65:DD:62:19:E1:6D:F7:F9:4B:9B:1A:43:EC:65:AA:8F Authority key identifier: 81:70:EB:E5:01:2D:00:C9:0E:92:B1:A1:85:6A:22:D8:8D:A3:E4:C2 Certificate issuer: /CN=3eb5bb74-4a16-4fff-8fa3-705d67269f85 Certificate serial: 010D0C9F4328584D06475CB93458EDF9481D365C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85/3eb5bb74-4a16-4fff-8fa3-705d67269f85.mft Manifest number: 010D0C9F43285848935613359BE861BD1D7F2658 Signing time: Sun 01 Mar 2026 14:00:09 +0000 Manifest this update: Sun 01 Mar 2026 14:00:09 +0000 Manifest next update: Wed 04 Mar 2026 14:00:00 +0000 Files and hashes: 1: 3eb5bb74-4a16-4fff-8fa3-705d67269f85.crl (hash: Z2EaBoisFmRukOYMf36VRLrTXM3lyiJW7/Y5k5AsmBU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85/3eb5bb74-4a16-4fff-8fa3-705d67269f85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85/3eb5bb74-4a16-4fff-8fa3-705d67269f85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:5c:b9:34:58:ed:f9:48:1d:36:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb5bb74-4a16-4fff-8fa3-705d67269f85 Validity Not Before: Mar 1 14:00:09 2026 GMT Not After : Mar 4 14:00:00 2026 GMT Subject: CN=dde88423-67a9-4e53-b792-16ca2ce5f628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4e:51:71:b5:ac:5c:2e:aa:6c:3e:9e:87:c7: b8:0b:8e:96:c2:d6:e5:7e:3a:9a:c5:11:cc:58:68: 26:b0:e4:2f:5f:14:04:17:24:44:46:2b:77:96:f9: f9:2d:ef:59:31:d8:ea:21:13:23:e5:34:09:f5:b6: 2b:5f:64:94:be:8a:ad:8c:ec:3c:fa:12:66:05:b6: 35:72:64:ed:02:48:1f:ea:65:48:78:f9:6a:84:29: 70:b3:24:43:be:c6:a8:96:2b:94:be:5d:44:8a:17: 91:6f:3d:9f:da:e2:38:a8:99:d5:26:20:96:78:e9: e9:a4:27:73:8d:22:be:3a:ce:8b:77:c5:30:52:83: 1e:93:0f:26:ca:a6:77:5a:a8:8a:96:b2:44:48:bc: d4:f8:21:31:e2:fd:8f:d4:a3:9a:6e:94:72:df:7d: 32:e9:de:06:f6:7f:b1:d1:40:54:0e:7a:d5:f5:8d: 71:62:c7:2a:99:14:1f:c4:ca:a4:33:c4:20:e9:ff: c0:88:15:26:57:09:0e:7e:f4:79:51:12:18:e5:71: a6:ae:2c:5a:1b:80:d2:43:02:02:3a:26:d7:99:ec: ce:30:bc:5e:b2:ae:e9:da:c0:87:8f:a9:d7:e4:ca: 9f:b0:da:98:06:95:43:f3:7a:c1:81:5f:7f:b3:71: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:C3:18:65:DD:62:19:E1:6D:F7:F9:4B:9B:1A:43:EC:65:AA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85/3eb5bb74-4a16-4fff-8fa3-705d67269f85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85/3eb5bb74-4a16-4fff-8fa3-705d67269f85.crl X509v3 Authority Key Identifier: keyid:81:70:EB:E5:01:2D:00:C9:0E:92:B1:A1:85:6A:22:D8:8D:A3:E4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3eb5bb74-4a16-4fff-8fa3-705d67269f85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cc:67:0d:e5:e9:83:90:64:90:b1:ef:59:2d:8e:02:a3:dd: 31:63:07:2a:f3:a4:c1:a1:bf:e7:7f:33:f6:1d:bc:2d:6e:e3: ef:32:d4:b8:95:25:79:bf:b1:32:08:97:e6:e5:dc:f0:1c:8e: e3:a3:0c:f0:22:6f:09:fd:3e:1f:32:ef:08:40:db:1c:96:c3: da:79:aa:2f:d8:ba:2b:0a:b6:57:f7:59:66:93:cb:1e:0b:ce: cc:9b:62:00:86:23:05:fa:f4:70:d6:8e:85:fa:25:1f:b8:c2: 96:67:f0:de:b6:4b:56:99:a9:4f:1b:ad:51:fc:11:4c:1a:9d: a7:99:f6:7f:81:6c:ff:ec:04:4c:15:39:f5:0b:08:3e:af:5a: 51:03:11:81:3a:f7:3e:fb:cc:c3:97:05:bb:04:1b:9f:44:28: 1c:c1:85:4f:dc:9b:54:bc:c8:51:87:25:bd:41:e4:e8:b9:b9: 32:dc:c2:3a:2e:7c:26:30:66:51:7d:8b:0f:80:97:40:27:97: ba:e0:3c:5f:d9:39:02:ed:db:90:91:11:74:5e:4f:5d:90:25: 57:fc:3a:3a:e3:ce:47:40:e8:79:16:23:cb:69:a9:21:2d:e2: ad:da:dd:78:89:30:72:9b:fb:50:17:d6:1a:af:eb:c4:34:48: ab:d9:b9:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GR1y5NFjt+UgdNlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNWJiNzQtNGExNi00ZmZmLThmYTMtNzA1ZDY3MjY5 Zjg1MB4XDTI2MDMwMTE0MDAwOVoXDTI2MDMwNDE0MDAwMFowLzEtMCsGA1UEAxMk ZGRlODg0MjMtNjdhOS00ZTUzLWI3OTItMTZjYTJjZTVmNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA805RcbWsXC6qbD6eh8e4C46WwtblfjqaxRHM WGgmsOQvXxQEFyRERit3lvn5Le9ZMdjqIRMj5TQJ9bYrX2SUvoqtjOw8+hJmBbY1 cmTtAkgf6mVIePlqhClwsyRDvsaoliuUvl1EiheRbz2f2uI4qJnVJiCWeOnppCdz jSK+Os6Ld8UwUoMekw8myqZ3WqiKlrJESLzU+CEx4v2P1KOabpRy330y6d4G9n+x 0UBUDnrV9Y1xYscqmRQfxMqkM8Qg6f/AiBUmVwkOfvR5URIY5XGmrixaG4DSQwIC OibXmezOMLxesq7p2sCHj6nX5MqfsNqYBpVD83rBgV9/s3GOTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL/Pwxhl3WIZ4W33+UubGkPsZaqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZWI1 YmI3NC00YTE2LTRmZmYtOGZhMy03MDVkNjcyNjlmODUvM2ViNWJiNzQtNGExNi00 ZmZmLThmYTMtNzA1ZDY3MjY5Zjg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2ViNWJiNzQtNGExNi00ZmZmLThm YTMtNzA1ZDY3MjY5Zjg1LzNlYjViYjc0LTRhMTYtNGZmZi04ZmEzLTcwNWQ2NzI2 OWY4NS5jcmwwHwYDVR0jBBgwFoAUgXDr5QEtAMkOkrGhhWoi2I2j5MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZWI1YmI3NC00YTE2LTRmZmYtOGZhMy03MDVk NjcyNjlmODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRzGcN5emDkGSQse9ZLY4C o90xYwcq86TBob/nfzP2HbwtbuPvMtS4lSV5v7EyCJfm5dzwHI7jowzwIm8J/T4f Mu8IQNsclsPaeaov2LorCrZX91lmk8seC87Mm2IAhiMF+vRw1o6F+iUfuMKWZ/De tktWmalPG61R/BFMGp2nmfZ/gWz/7ARMFTn1Cwg+r1pRAxGBOvc++8zDlwW7BBuf RCgcwYVP3JtUvMhRhyW9QeToubky3MI6LnwmMGZRfYsPgJdAJ5e64Dxf2TkC7duQ kRF0Xk9dkCVX/Do6485HQOh5FiPLaakhLeKt2t14iTBym/tQF9Yar+vENEir2bko -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:59 2026 by rpki-client