$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft File: a8f311de-c6af-4322-a952-b9c622f40e51.mft (raw, json) Hash identifier: 7si8RFAOvSvUnPh6zAh+QQyod2dngLmuaNcDTsUgpHE= Subject key identifier: 0B:A2:12:14:FE:34:76:79:3D:61:CB:80:98:CA:54:FE:A6:C6:0E:C3 Authority key identifier: 5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5 Certificate issuer: /CN=a8f311de-c6af-4322-a952-b9c622f40e51 Certificate serial: 010D0C9F4328584D70D46A54AB74D6CD7DDA1D60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft Manifest number: 010D0C9F4328584073A81B468D491D97A5AB88A7 Signing time: Wed 08 Apr 2026 18:00:04 +0000 Manifest this update: Wed 08 Apr 2026 18:00:04 +0000 Manifest next update: Fri 10 Apr 2026 18:00:00 +0000 Files and hashes: 1: a8f311de-c6af-4322-a952-b9c622f40e51.crl (hash: vkLR3XkFegk3GG1jbwQL8XRRj1hghZ2m8Hty1yFIc08=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:d4:6a:54:ab:74:d6:cd:7d:da:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f311de-c6af-4322-a952-b9c622f40e51 Validity Not Before: Apr 8 18:00:04 2026 GMT Not After : Apr 10 18:00:00 2026 GMT Subject: CN=75349baa-d9a8-4462-b7b7-309a958de841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:b8:81:f9:94:6c:0a:8b:83:53:ee:c3:36: fa:f1:2d:26:17:09:21:96:65:49:05:2e:05:cd:d1: 23:fa:35:04:75:7f:9c:a8:25:6a:af:e6:e0:14:fd: 64:78:b4:04:91:8f:10:97:86:e0:1d:4a:aa:ac:a0: 38:74:ad:d4:ff:00:8e:b5:cb:be:94:99:67:e7:3b: 89:ce:13:af:79:6f:fb:90:10:3f:a4:0e:ef:94:8f: 87:3d:11:b9:7b:2a:70:15:be:41:21:32:8e:ce:e9: 9a:84:ff:69:c4:80:23:86:0f:d1:e4:6d:4d:43:9b: fc:4d:85:c6:61:62:93:e0:cd:82:3a:67:02:f3:a2: 51:c2:ec:79:64:bd:e0:0e:c7:eb:71:00:de:b8:8b: cd:c3:66:17:44:f0:21:fa:21:1f:77:78:db:94:e4: 77:9b:dd:fb:b2:b5:bd:94:5f:29:ad:c0:d4:81:db: ab:1b:68:e0:76:b8:f3:54:5c:77:16:54:f7:e3:92: 1b:fe:42:15:65:57:74:47:38:5c:7b:57:49:e6:a9: b0:ee:a4:46:1f:bc:cb:1a:a6:6b:01:f6:b7:b3:fe: ce:5f:c1:9f:f1:b9:12:31:15:97:b1:ca:c0:07:55: 02:13:c3:82:c3:6e:48:73:50:43:96:8d:1d:20:cb: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A2:12:14:FE:34:76:79:3D:61:CB:80:98:CA:54:FE:A6:C6:0E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.crl X509v3 Authority Key Identifier: keyid:5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:56:72:3f:6b:b3:03:f5:dd:c3:c8:0a:9e:2d:13:cf:6f:ff: 6e:0f:9b:8f:04:2b:ad:b4:36:c7:9a:66:38:96:2e:85:02:af: 4d:92:71:e2:fd:b3:a7:db:bc:23:09:b8:96:8b:ab:93:eb:5e: 01:a1:e4:c5:60:f1:4e:76:be:4f:b1:2c:ed:9b:6f:0b:92:e1: 37:b0:0f:ea:30:2b:85:64:36:08:d1:12:f7:8d:5b:77:3e:b5: 2b:da:5d:80:08:a1:5b:52:6c:91:fa:f4:14:52:e0:11:58:2e: 20:60:88:30:e5:d6:2d:a3:7d:d1:c3:d7:f1:40:da:40:4f:90: ce:d2:c8:f5:2d:70:1c:ca:bb:f6:f7:b0:3b:47:aa:88:0a:04: 59:29:2e:95:56:c2:26:9e:ac:88:bc:bf:81:1a:53:fa:63:36: 46:35:67:ff:dd:3e:9e:d6:02:12:27:aa:0f:36:a4:93:67:4a: da:e2:b7:7f:76:88:3d:a5:a6:98:48:4b:3e:d8:19:34:42:cb: 7e:3e:f8:eb:ca:73:b7:40:ba:bb:7c:6c:8a:b4:19:58:63:41: 64:9a:99:d2:b6:89:ea:da:85:51:8f:34:91:42:76:68:d2:14: 4f:9e:03:58:a8:5e:f8:ec:29:54:ec:0b:3e:87:83:e4:a7:96: 22:0e:23:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1w1GpUq3TWzX3aHWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmMzExZGUtYzZhZi00MzIyLWE5NTItYjljNjIyZjQw ZTUxMB4XDTI2MDQwODE4MDAwNFoXDTI2MDQxMDE4MDAwMFowLzEtMCsGA1UEAxMk NzUzNDliYWEtZDlhOC00NDYyLWI3YjctMzA5YTk1OGRlODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle+4gfmUbAqLg1Puwzb68S0mFwkhlmVJBS4F zdEj+jUEdX+cqCVqr+bgFP1keLQEkY8Ql4bgHUqqrKA4dK3U/wCOtcu+lJln5zuJ zhOveW/7kBA/pA7vlI+HPRG5eypwFb5BITKOzumahP9pxIAjhg/R5G1NQ5v8TYXG YWKT4M2COmcC86JRwux5ZL3gDsfrcQDeuIvNw2YXRPAh+iEfd3jblOR3m937srW9 lF8prcDUgdurG2jgdrjzVFx3FlT345Ib/kIVZVd0Rzhce1dJ5qmw7qRGH7zLGqZr Afa3s/7OX8Gf8bkSMRWXscrAB1UCE8OCw25Ic1BDlo0dIMvSvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAuiEhT+NHZ5PWHLgJjKVP6mxg7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGYz MTFkZS1jNmFmLTQzMjItYTk1Mi1iOWM2MjJmNDBlNTEvYThmMzExZGUtYzZhZi00 MzIyLWE5NTItYjljNjIyZjQwZTUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYThmMzExZGUtYzZhZi00MzIyLWE5 NTItYjljNjIyZjQwZTUxL2E4ZjMxMWRlLWM2YWYtNDMyMi1hOTUyLWI5YzYyMmY0 MGU1MS5jcmwwHwYDVR0jBBgwFoAUWzOve+l/ri8VWJzXK67gX1dHCvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGYzMTFkZS1jNmFmLTQzMjItYTk1Mi1iOWM2 MjJmNDBlNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8VnI/a7MD9d3DyAqeLRPP b/9uD5uPBCuttDbHmmY4li6FAq9NknHi/bOn27wjCbiWi6uT614BoeTFYPFOdr5P sSztm28LkuE3sA/qMCuFZDYI0RL3jVt3PrUr2l2ACKFbUmyR+vQUUuARWC4gYIgw 5dYto33Rw9fxQNpAT5DO0sj1LXAcyrv297A7R6qICgRZKS6VVsImnqyIvL+BGlP6 YzZGNWf/3T6e1gISJ6oPNqSTZ0ra4rd/dog9paaYSEs+2Bk0Qst+PvjrynO3QLq7 fGyKtBlYY0FkmpnStonq2oVRjzSRQnZo0hRPngNYqF747ClU7As+h4Pkp5YiDiPA -----END CERTIFICATE-----Generated at Thu Apr 9 01:23:26 2026 by rpki-client