$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft File: 2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft (raw, json) Hash identifier: O0ZKndwa9qvEReKZN1Xh7BBeMmjuEsyylEbgAihLNbw= Subject key identifier: B5:59:8A:B2:3C:27:5C:48:8D:46:7A:A7:92:D3:EC:E1:61:12:22:B2 Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD Certificate issuer: /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Certificate serial: 010D0C9F4328584D6C68D3E4D3548611FD03C240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft Manifest number: 010D0C9F4328584AE789C700205285FB9CBAD9E7 Signing time: Tue 07 Apr 2026 04:00:03 +0000 Manifest this update: Tue 07 Apr 2026 04:00:03 +0000 Manifest next update: Thu 09 Apr 2026 04:00:00 +0000 Files and hashes: 1: 2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl (hash: GAi0Je6ZJ6mdcV8EzCM9OyUbvx4mGhtH58C8zq5cjw8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:68:d3:e4:d3:54:86:11:fd:03:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Validity Not Before: Apr 7 04:00:03 2026 GMT Not After : Apr 9 04:00:00 2026 GMT Subject: CN=5633bf65-ad13-4820-9d4a-846d4d7beee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:c9:ea:e0:d7:6e:ae:93:61:f1:80:fc:7a: 5a:10:eb:02:d3:ce:e8:1b:6c:f4:cb:aa:ae:79:5e: 38:86:b3:2c:3e:ff:6d:5f:fa:a5:7b:39:24:d6:4d: f4:fa:63:91:c8:07:f5:2c:86:0a:6a:e3:91:2c:96: 0d:86:3b:51:ff:91:6c:24:cb:ce:b5:2c:85:62:99: 79:d4:ac:df:2c:1e:a7:36:3b:4a:0d:e9:9f:21:4e: c5:ba:9a:e9:9d:e9:e6:a9:49:54:49:81:02:16:0f: 08:6a:2b:3e:52:22:2a:9c:88:20:ea:b7:33:94:94: 84:42:54:c5:89:75:66:3f:ff:e6:b2:12:a2:2a:99: 2c:e4:ee:5c:c1:09:35:71:fe:8c:7e:a1:7f:9a:68: a5:97:0b:98:27:3a:5d:2f:c4:0e:df:60:69:ad:40: db:e8:c0:b7:df:0c:af:c4:f0:40:47:90:95:c8:fe: aa:8a:19:65:e7:ca:d9:3c:e2:56:bc:82:49:02:ce: 87:1d:78:de:ee:32:6b:c4:c1:8f:fb:b2:ad:ad:37: 07:59:d4:32:cb:87:a3:0b:ae:b9:71:16:c4:ba:8b: c1:46:e2:de:b9:e6:be:60:0d:98:a0:9a:73:ac:4a: a2:60:93:79:6b:61:5d:e6:d6:54:36:30:3f:5e:d2: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:8A:B2:3C:27:5C:48:8D:46:7A:A7:92:D3:EC:E1:61:12:22:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl X509v3 Authority Key Identifier: keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:84:ba:39:f9:0a:89:92:4b:63:69:b5:86:ab:fe:95:b8:cb: 59:9a:28:4c:62:81:d8:2d:4c:02:c7:06:32:d1:d9:f6:ff:82: 2a:93:7f:8c:fe:c5:fd:58:b8:3e:67:ad:2a:63:ab:9a:18:62: e0:4d:f2:0c:60:18:82:28:1e:b7:12:dc:7b:66:40:f3:1a:22: dd:76:c0:eb:90:c9:74:67:57:78:0c:e7:d8:58:3c:84:6a:f0: e1:3d:20:63:97:e6:95:12:ef:2f:57:04:bc:0c:96:ad:bb:05: f9:d1:36:82:40:b5:5d:50:bf:a3:6b:fd:e3:7a:aa:00:4c:f7: 79:ec:5b:e1:ba:7f:d7:34:e8:bc:bd:99:25:9e:c2:7c:7b:08: ff:53:95:39:fd:26:2a:19:9a:57:b2:9d:df:79:85:87:ca:4b: b3:e1:50:58:40:23:7d:ea:d7:35:25:8d:f3:b9:53:0c:58:5a: 77:bf:da:8b:6f:dc:a5:3e:d2:e2:37:62:f2:04:3c:8d:77:21: 80:24:1d:27:6f:0f:38:cb:65:66:e1:5d:9b:12:f6:66:c0:5b: 84:c0:4b:a7:8e:c7:6e:1b:1a:12:cb:6b:ad:3a:fa:46:f8:38: 78:db:69:24:dd:ca:b2:24:65:60:ab:8b:6b:66:99:a3:63:51: 82:fe:52:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1saNPk01SGEf0DwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2 ZmIxMB4XDTI2MDQwNzA0MDAwM1oXDTI2MDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk NTYzM2JmNjUtYWQxMy00ODIwLTlkNGEtODQ2ZDRkN2JlZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl93J6uDXbq6TYfGA/HpaEOsC087oG2z0y6qu eV44hrMsPv9tX/qlezkk1k30+mORyAf1LIYKauORLJYNhjtR/5FsJMvOtSyFYpl5 1KzfLB6nNjtKDemfIU7FuprpnenmqUlUSYECFg8Iais+UiIqnIgg6rczlJSEQlTF iXVmP//mshKiKpks5O5cwQk1cf6MfqF/mmillwuYJzpdL8QO32BprUDb6MC33wyv xPBAR5CVyP6qihll58rZPOJWvIJJAs6HHXje7jJrxMGP+7KtrTcHWdQyy4ejC665 cRbEuovBRuLeuea+YA2YoJpzrEqiYJN5a2Fd5tZUNjA/XtIDEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLVZirI8J1xIjUZ6p5LT7OFhEiKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4 Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvMmJmOGM3NGEtZjhmMC00 MmQzLTg0ZWUtZDlhMWUxYjQ2ZmIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0 ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0 NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx ZTFiNDZmYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCphLo5+QqJkktjabWGq/6V uMtZmihMYoHYLUwCxwYy0dn2/4Iqk3+M/sX9WLg+Z60qY6uaGGLgTfIMYBiCKB63 Etx7ZkDzGiLddsDrkMl0Z1d4DOfYWDyEavDhPSBjl+aVEu8vVwS8DJatuwX50TaC QLVdUL+ja/3jeqoATPd57Fvhun/XNOi8vZklnsJ8ewj/U5U5/SYqGZpXsp3feYWH ykuz4VBYQCN96tc1JY3zuVMMWFp3v9qLb9ylPtLiN2LyBDyNdyGAJB0nbw84y2Vm 4V2bEvZmwFuEwEunjsduGxoSy2utOvpG+Dh422kk3cqyJGVgq4trZpmjY1GC/lL1 -----END CERTIFICATE-----Generated at Tue Apr 7 15:07:00 2026 by rpki-client