$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438/bf4c30eb-cd68-4e89-a03c-48d51b720438.mft File: bf4c30eb-cd68-4e89-a03c-48d51b720438.mft (raw, json) Hash identifier: YvzL+w5PwrZCs1AdMCPfBW8bKSnG1eNOua5RXMTnCDk= Subject key identifier: 74:9A:FC:08:D6:12:42:7D:A7:8C:0A:1B:5E:91:43:8F:21:86:0E:EA Authority key identifier: A0:FD:4F:57:65:35:CF:07:8F:42:3E:77:CE:24:9E:6E:85:BB:66:AF Certificate issuer: /CN=bf4c30eb-cd68-4e89-a03c-48d51b720438 Certificate serial: 010D0C9F4328584D458ECEF6EAEAE39E39887CF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438/bf4c30eb-cd68-4e89-a03c-48d51b720438.mft Manifest number: 010D0C9F4328584073A84195B34B9D2CAE6DE398 Signing time: Tue 24 Mar 2026 06:00:04 +0000 Manifest this update: Tue 24 Mar 2026 06:00:04 +0000 Manifest next update: Thu 26 Mar 2026 06:00:00 +0000 Files and hashes: 1: bf4c30eb-cd68-4e89-a03c-48d51b720438.crl (hash: COHCcLFKv2fPk1gpXXv7/8kWxEwNIp4JDfyqVy+77Io=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438/bf4c30eb-cd68-4e89-a03c-48d51b720438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438/bf4c30eb-cd68-4e89-a03c-48d51b720438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:45:8e:ce:f6:ea:ea:e3:9e:39:88:7c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4c30eb-cd68-4e89-a03c-48d51b720438 Validity Not Before: Mar 24 06:00:04 2026 GMT Not After : Mar 26 06:00:00 2026 GMT Subject: CN=ee156edc-cfbe-4dc8-afd0-ad33daf30982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:8d:63:a9:dc:34:f7:4c:7d:cf:3a:b3:11: 7b:29:8a:c7:ac:7f:65:b5:1e:09:82:65:21:5b:11: 0f:87:85:96:a3:a2:6c:6b:58:ee:dd:03:99:50:a1: c6:d3:cb:4a:77:39:ff:e4:2a:0f:d0:82:7b:e4:d6: 2b:f9:a7:3f:b2:00:ac:07:c9:16:f0:f1:1c:06:2b: ba:b5:aa:e6:83:e7:4e:01:a7:5d:0b:da:f6:12:42: 73:1b:32:50:66:2b:5c:64:ab:0c:2e:2f:b1:89:32: 2f:30:7f:25:4e:c6:f9:63:23:75:92:bf:28:a1:4b: b3:dd:f2:6d:fa:42:1f:60:1a:07:74:9c:2a:07:03: 1e:06:96:a6:bd:12:b1:60:a3:f3:84:6c:3f:e4:51: 29:ff:0c:4c:00:6f:79:96:1c:0b:ce:b0:63:c5:91: 57:4d:4b:da:41:49:eb:2a:c6:d0:7b:33:ae:43:65: a6:32:36:f9:ae:c6:dc:b9:01:21:ee:0b:68:20:f1: 8d:fb:1f:53:6f:43:b0:e0:95:57:44:f0:27:e0:11: 7f:df:98:53:61:67:91:cf:76:6f:46:28:fc:47:32: e5:a2:de:1a:fd:25:be:fa:4c:b3:00:05:9d:a9:5d: 74:da:aa:cc:a9:aa:f3:c8:b8:ed:ac:46:0c:6e:ce: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:FC:08:D6:12:42:7D:A7:8C:0A:1B:5E:91:43:8F:21:86:0E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438/bf4c30eb-cd68-4e89-a03c-48d51b720438.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438/bf4c30eb-cd68-4e89-a03c-48d51b720438.crl X509v3 Authority Key Identifier: keyid:A0:FD:4F:57:65:35:CF:07:8F:42:3E:77:CE:24:9E:6E:85:BB:66:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf4c30eb-cd68-4e89-a03c-48d51b720438.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d8:2d:e4:d8:92:be:d5:1a:d3:79:b0:9b:78:af:8f:b3:b7: bb:e2:0e:94:62:58:d8:ac:f2:47:74:06:64:fd:37:b6:f4:c8: 08:d8:41:54:e6:1b:89:16:a5:20:33:e0:95:f4:be:0f:51:75: a3:58:e9:6b:23:a8:b6:8e:bd:d5:e6:50:74:99:8e:02:69:09: 0a:f4:58:28:7d:cb:35:8a:de:f5:75:ad:41:06:97:75:68:60: 1a:95:aa:67:58:65:66:f6:9e:b0:41:73:73:7a:32:a8:d9:5c: 40:42:eb:92:be:09:18:d0:b2:f1:63:f6:12:9c:0c:3f:42:21: a1:bd:59:ae:a0:be:cc:09:83:b9:38:9f:ea:36:1d:59:4d:0b: db:11:aa:c1:1f:da:70:5e:48:0b:4f:56:70:32:69:38:2f:d8: 9e:2f:1d:2b:24:ba:ca:fa:b8:6c:06:11:66:77:56:a5:26:a7: dd:02:70:36:77:f4:3d:e2:d2:56:4a:3b:e5:f6:a7:2f:b1:41: e9:72:1f:89:db:63:78:22:36:82:7e:0d:4b:2c:2b:a7:4d:64: 31:96:c9:0c:31:1f:9f:45:c0:2e:69:72:51:dd:b9:40:8a:7b: e5:0f:60:ba:9c:cd:75:74:64:4c:8a:db:3f:08:f0:51:56:e6: da:73:d9:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Fjs726urjnjmIfPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY0YzMwZWItY2Q2OC00ZTg5LWEwM2MtNDhkNTFiNzIw NDM4MB4XDTI2MDMyNDA2MDAwNFoXDTI2MDMyNjA2MDAwMFowLzEtMCsGA1UEAxMk ZWUxNTZlZGMtY2ZiZS00ZGM4LWFmZDAtYWQzM2RhZjMwOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKaNY6ncNPdMfc86sxF7KYrHrH9ltR4JgmUh WxEPh4WWo6Jsa1ju3QOZUKHG08tKdzn/5CoP0IJ75NYr+ac/sgCsB8kW8PEcBiu6 tarmg+dOAaddC9r2EkJzGzJQZitcZKsMLi+xiTIvMH8lTsb5YyN1kr8ooUuz3fJt +kIfYBoHdJwqBwMeBpamvRKxYKPzhGw/5FEp/wxMAG95lhwLzrBjxZFXTUvaQUnr KsbQezOuQ2WmMjb5rsbcuQEh7gtoIPGN+x9Tb0Ow4JVXRPAn4BF/35hTYWeRz3Zv Rij8RzLlot4a/SW++kyzAAWdqV102qrMqarzyLjtrEYMbs7s4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHSa/AjWEkJ9p4wKG16RQ48hhg7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZjRj MzBlYi1jZDY4LTRlODktYTAzYy00OGQ1MWI3MjA0MzgvYmY0YzMwZWItY2Q2OC00 ZTg5LWEwM2MtNDhkNTFiNzIwNDM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmY0YzMwZWItY2Q2OC00ZTg5LWEw M2MtNDhkNTFiNzIwNDM4L2JmNGMzMGViLWNkNjgtNGU4OS1hMDNjLTQ4ZDUxYjcy MDQzOC5jcmwwHwYDVR0jBBgwFoAUoP1PV2U1zwePQj53ziSeboW7Zq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZjRjMzBlYi1jZDY4LTRlODktYTAzYy00OGQ1 MWI3MjA0MzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCz2C3k2JK+1RrTebCbeK+P s7e74g6UYljYrPJHdAZk/Te29MgI2EFU5huJFqUgM+CV9L4PUXWjWOlrI6i2jr3V 5lB0mY4CaQkK9Fgofcs1it71da1BBpd1aGAalapnWGVm9p6wQXNzejKo2VxAQuuS vgkY0LLxY/YSnAw/QiGhvVmuoL7MCYO5OJ/qNh1ZTQvbEarBH9pwXkgLT1ZwMmk4 L9ieLx0rJLrK+rhsBhFmd1alJqfdAnA2d/Q94tJWSjvl9qcvsUHpch+J22N4IjaC fg1LLCunTWQxlskMMR+fRcAuaXJR3blAinvlD2C6nM11dGRMits/CPBRVubac9nF -----END CERTIFICATE-----Generated at Tue Mar 24 15:36:59 2026 by rpki-client