$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft File: 2834b5a1-c928-431a-9adf-e4de23e7245a.mft (raw, json) Hash identifier: 0zdVytPBaqgo+IXXHCSpacT1zG5DGAttU0t/uwt792M= Subject key identifier: 8E:DD:BB:A6:51:B2:9B:0E:BA:4C:95:46:B3:48:93:7A:9B:CC:60:96 Authority key identifier: AE:5D:D2:AD:9C:60:02:04:B1:77:E3:F3:78:0C:81:5D:46:D4:E2:88 Certificate issuer: /CN=2834b5a1-c928-431a-9adf-e4de23e7245a Certificate serial: 010D0C9F4328584D3009CAD29EDFD694F73F3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft Manifest number: 010D0C9F432858437E339F9E346CE08CB050AE65 Signing time: Mon 16 Mar 2026 13:00:04 +0000 Manifest this update: Mon 16 Mar 2026 13:00:04 +0000 Manifest next update: Wed 18 Mar 2026 13:00:00 +0000 Files and hashes: 1: 2834b5a1-c928-431a-9adf-e4de23e7245a.crl (hash: EosUM6WXCDowXFeRw6SE7qx0AtX4T0WHDB/21wovtlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:09:ca:d2:9e:df:d6:94:f7:3f:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2834b5a1-c928-431a-9adf-e4de23e7245a Validity Not Before: Mar 16 13:00:04 2026 GMT Not After : Mar 18 13:00:00 2026 GMT Subject: CN=2cf2ec43-07b8-41ad-94cb-26f9a9713761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:51:be:f2:ae:91:39:43:f6:52:57:7e:44: 98:8a:80:52:c0:9b:17:45:b9:8e:45:2b:da:eb:7c: ad:b1:4f:0a:a8:b5:c7:55:c0:5d:4c:b0:cd:5f:c6: ce:32:2d:1e:31:97:63:94:f9:f7:ad:9c:2d:e2:9c: 3b:ce:57:0b:89:62:a2:65:12:34:a6:fe:c2:6a:a2: e5:9d:47:45:3a:f0:45:3a:8e:83:80:1a:1a:23:9f: a1:59:96:fe:f4:21:75:54:df:66:98:79:73:64:89: 79:c6:fa:83:3f:b8:74:ed:d8:9b:d4:ed:5a:97:4f: 1e:ba:55:91:fc:7e:ce:8c:16:98:64:ea:0d:de:26: 9c:ae:6f:93:90:2f:bd:61:f6:55:88:75:9e:47:9d: ed:a6:3f:4f:06:a0:7c:0d:56:b7:06:f3:2c:d6:b1: 24:0b:2a:0f:cf:12:e7:32:3f:27:b8:a6:d9:de:bf: 71:5f:5a:67:b3:0d:bb:c7:4c:04:6a:e6:e0:e3:71: ee:96:59:5f:44:51:8c:57:33:0b:a2:21:0f:e9:4c: c0:3b:f1:9c:f7:59:f9:07:0a:25:4b:9f:02:d6:50: aa:43:e1:79:f9:c3:81:24:4b:59:3d:96:23:9b:3e: ef:f6:f8:2a:c4:e4:c2:e3:09:f0:63:60:cd:22:2b: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DD:BB:A6:51:B2:9B:0E:BA:4C:95:46:B3:48:93:7A:9B:CC:60:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.crl X509v3 Authority Key Identifier: keyid:AE:5D:D2:AD:9C:60:02:04:B1:77:E3:F3:78:0C:81:5D:46:D4:E2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:9b:c8:00:76:2e:6e:e4:4d:d2:47:d8:7e:fb:bb:d3:7e:ac: 8f:2f:6c:bd:be:75:bc:23:c5:e8:45:9e:43:1e:23:80:33:56: 46:f1:50:ca:55:de:79:d3:17:23:62:9d:10:b6:46:a4:30:2f: ea:1c:44:b9:a8:96:74:c4:c0:3d:ae:4d:c7:42:01:e3:79:e9: 0b:95:0f:18:62:be:26:48:3c:d2:5f:22:47:16:3c:93:0a:b8: 6b:8b:16:2a:9a:2a:db:47:c1:8b:fd:b0:ce:40:cb:84:92:ff: 89:bb:33:f1:b3:0d:0f:97:a4:fa:42:36:b4:44:0e:24:d9:38: eb:bf:7d:95:29:44:14:11:e0:cd:5d:6e:3e:df:a7:65:4b:39: 5a:50:4b:f8:ac:95:f4:b4:c5:f5:27:e0:5b:a5:5d:24:56:16: 42:b4:83:95:7d:04:d5:8c:ab:a2:de:3b:ad:88:41:62:8d:38: 91:fb:74:70:71:bf:85:58:65:51:06:33:83:44:49:a3:21:ab: 2a:a7:9a:3e:eb:41:1d:81:03:34:18:93:4d:bd:88:d2:44:cf: 13:13:51:9a:0f:12:10:60:2f:98:2f:2a:54:03:de:38:a7:0a: 99:2e:f6:d8:c6:ea:a4:d0:39:79:a7:1a:cb:91:7c:f5:a6:98: 2f:3e:bd:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0wCcrSnt/WlPc/M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzNGI1YTEtYzkyOC00MzFhLTlhZGYtZTRkZTIzZTcy NDVhMB4XDTI2MDMxNjEzMDAwNFoXDTI2MDMxODEzMDAwMFowLzEtMCsGA1UEAxMk MmNmMmVjNDMtMDdiOC00MWFkLTk0Y2ItMjZmOWE5NzEzNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudRRvvKukTlD9lJXfkSYioBSwJsXRbmORSva 63ytsU8KqLXHVcBdTLDNX8bOMi0eMZdjlPn3rZwt4pw7zlcLiWKiZRI0pv7CaqLl nUdFOvBFOo6DgBoaI5+hWZb+9CF1VN9mmHlzZIl5xvqDP7h07dib1O1al08eulWR /H7OjBaYZOoN3iacrm+TkC+9YfZViHWeR53tpj9PBqB8DVa3BvMs1rEkCyoPzxLn Mj8nuKbZ3r9xX1pnsw27x0wEaubg43HulllfRFGMVzMLoiEP6UzAO/Gc91n5Bwol S58C1lCqQ+F5+cOBJEtZPZYjmz7v9vgqxOTC4wnwY2DNIivbLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI7du6ZRspsOukyVRrNIk3qbzGCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yODM0 YjVhMS1jOTI4LTQzMWEtOWFkZi1lNGRlMjNlNzI0NWEvMjgzNGI1YTEtYzkyOC00 MzFhLTlhZGYtZTRkZTIzZTcyNDVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjgzNGI1YTEtYzkyOC00MzFhLTlh ZGYtZTRkZTIzZTcyNDVhLzI4MzRiNWExLWM5MjgtNDMxYS05YWRmLWU0ZGUyM2U3 MjQ1YS5jcmwwHwYDVR0jBBgwFoAUrl3SrZxgAgSxd+PzeAyBXUbU4ogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yODM0YjVhMS1jOTI4LTQzMWEtOWFkZi1lNGRl MjNlNzI0NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBm8gAdi5u5E3SR9h++7vT fqyPL2y9vnW8I8XoRZ5DHiOAM1ZG8VDKVd550xcjYp0QtkakMC/qHES5qJZ0xMA9 rk3HQgHjeekLlQ8YYr4mSDzSXyJHFjyTCrhrixYqmirbR8GL/bDOQMuEkv+JuzPx sw0Pl6T6Qja0RA4k2Tjrv32VKUQUEeDNXW4+36dlSzlaUEv4rJX0tMX1J+BbpV0k VhZCtIOVfQTVjKui3jutiEFijTiR+3Rwcb+FWGVRBjODREmjIasqp5o+60EdgQM0 GJNNvYjSRM8TE1GaDxIQYC+YLypUA944pwqZLvbYxuqk0Dl5pxrLkXz1ppgvPr1q -----END CERTIFICATE-----Generated at Mon Mar 16 23:18:04 2026 by rpki-client