$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft File: 038ee168-0708-4733-8cfc-355a87de7fc2.mft (raw, json) Hash identifier: UbsmqvypxNlgXWu46KALPwot+Z+d+sRTz5n9QIcZ1Sk= Subject key identifier: 2E:B2:CD:C7:51:BB:B6:F5:F6:31:DF:7F:73:AB:8A:9D:CC:55:00:EE Authority key identifier: 70:F4:64:9D:F1:C5:0C:F4:E9:B7:1C:D0:CF:C5:CD:2D:2F:D3:9C:79 Certificate issuer: /CN=038ee168-0708-4733-8cfc-355a87de7fc2 Certificate serial: 010D0C9F4328584D3DFF334B89B1EC0916147E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft Manifest number: 010D0C9F4328584073A8556A7721F681302D0914 Signing time: Sat 21 Mar 2026 13:00:03 +0000 Manifest this update: Sat 21 Mar 2026 13:00:03 +0000 Manifest next update: Tue 24 Mar 2026 13:00:00 +0000 Files and hashes: 1: 038ee168-0708-4733-8cfc-355a87de7fc2.crl (hash: ycJEDby9fTZ8ogF32FNgsPthnp4M95WwrVLO6G/0Gvg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:33:4b:89:b1:ec:09:16:14:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038ee168-0708-4733-8cfc-355a87de7fc2 Validity Not Before: Mar 21 13:00:03 2026 GMT Not After : Mar 24 13:00:00 2026 GMT Subject: CN=2b78807c-d22e-4c71-8c39-34d57e4544ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:f4:e9:81:c5:25:20:a4:7c:64:d6:ab:55: 9b:4f:64:55:21:92:68:8e:73:be:ac:55:74:83:55: 70:b0:c1:e9:0e:e0:81:10:e8:8c:bb:d4:3b:00:b9: 71:48:da:96:bb:1e:88:4b:56:9e:56:ef:58:be:d9: a2:df:27:14:fa:5f:8d:4e:65:31:77:02:cb:71:99: b1:46:4b:3d:04:e7:62:da:7e:0a:1c:0f:08:5b:f6: 37:a2:9c:b6:5b:76:a4:61:04:b9:d7:f7:73:c7:d4: 77:a4:23:30:56:b5:3a:d1:67:77:7d:57:a5:7d:24: 07:90:a1:b0:8e:37:45:03:de:43:51:3e:fa:b6:23: 6f:57:61:35:05:a9:1e:ec:d4:e4:24:8d:41:c0:b0: 38:93:03:80:46:14:31:5c:ca:b7:12:a6:7c:c9:74: 13:e4:4b:60:a0:01:ad:83:34:ae:27:ad:a2:24:33: e5:32:f3:33:55:f6:3c:88:cc:f7:21:64:f5:aa:48: 8e:bf:75:f2:ac:19:72:a7:de:8e:e9:47:7c:eb:80: 36:d2:06:60:f6:24:f0:a9:3c:7d:cc:fa:2f:ac:ed: a8:9b:e6:45:ce:c7:f5:c2:ad:27:5b:63:7f:70:d9: 41:bb:f6:f9:b0:2b:08:4d:3c:bb:61:1e:e5:f3:84: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B2:CD:C7:51:BB:B6:F5:F6:31:DF:7F:73:AB:8A:9D:CC:55:00:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.crl X509v3 Authority Key Identifier: keyid:70:F4:64:9D:F1:C5:0C:F4:E9:B7:1C:D0:CF:C5:CD:2D:2F:D3:9C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c4:19:bc:19:8c:eb:bc:b5:42:97:d6:4c:84:64:4c:e9:5f: 0b:2d:55:ac:de:3a:09:d8:7c:16:98:4a:16:db:e6:97:2e:2f: 45:2f:28:54:9c:06:e9:ed:22:fc:2c:06:50:f0:ed:50:a3:08: 3f:31:8d:c7:c7:26:18:13:60:10:b1:3f:bd:18:c7:ab:74:d0: 0c:21:75:f0:c7:9c:73:05:89:4c:73:c9:aa:ed:36:75:21:f2: 8e:f6:32:4e:e8:60:67:8b:5a:32:d9:f2:eb:25:ae:d6:23:e9: 4a:3e:46:dc:04:6d:a7:3b:14:0b:f8:a0:2f:ca:19:e3:94:89: 83:80:e0:8a:2a:8f:64:c3:d1:f1:59:84:55:8f:c1:11:7a:2b: 4d:97:27:db:a1:b6:e4:d7:d0:b4:18:b2:cc:2b:07:2d:4c:00: ca:b9:e6:1b:92:16:a5:73:1f:60:72:7b:0c:b8:c4:eb:37:94: 27:ea:77:89:a6:71:09:53:b3:5f:8d:65:8a:96:4c:f6:08:54: b1:a2:0c:5b:27:e0:f8:71:01:d0:0a:41:4d:39:4e:41:ea:16: 6f:3a:6c:e3:88:e6:39:d9:24:45:a7:f2:fb:91:01:6d:75:eb: ac:c3:ec:5f:c9:44:98:34:d5:b9:da:43:ed:dd:41:28:62:af: bb:5b:cf:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE09/zNLibHsCRYUfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4ZWUxNjgtMDcwOC00NzMzLThjZmMtMzU1YTg3ZGU3 ZmMyMB4XDTI2MDMyMTEzMDAwM1oXDTI2MDMyNDEzMDAwMFowLzEtMCsGA1UEAxMk MmI3ODgwN2MtZDIyZS00YzcxLThjMzktMzRkNTdlNDU0NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmv06YHFJSCkfGTWq1WbT2RVIZJojnO+rFV0 g1VwsMHpDuCBEOiMu9Q7ALlxSNqWux6IS1aeVu9Yvtmi3ycU+l+NTmUxdwLLcZmx Rks9BOdi2n4KHA8IW/Y3opy2W3akYQS51/dzx9R3pCMwVrU60Wd3fVelfSQHkKGw jjdFA95DUT76tiNvV2E1Bake7NTkJI1BwLA4kwOARhQxXMq3EqZ8yXQT5EtgoAGt gzSuJ62iJDPlMvMzVfY8iMz3IWT1qkiOv3XyrBlyp96O6Ud864A20gZg9iTwqTx9 zPovrO2om+ZFzsf1wq0nW2N/cNlBu/b5sCsITTy7YR7l84TDDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC6yzcdRu7b19jHff3Orip3MVQDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzhl ZTE2OC0wNzA4LTQ3MzMtOGNmYy0zNTVhODdkZTdmYzIvMDM4ZWUxNjgtMDcwOC00 NzMzLThjZmMtMzU1YTg3ZGU3ZmMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4ZWUxNjgtMDcwOC00NzMzLThj ZmMtMzU1YTg3ZGU3ZmMyLzAzOGVlMTY4LTA3MDgtNDczMy04Y2ZjLTM1NWE4N2Rl N2ZjMi5jcmwwHwYDVR0jBBgwFoAUcPRknfHFDPTptxzQz8XNLS/TnHkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzhlZTE2OC0wNzA4LTQ3MzMtOGNmYy0zNTVh ODdkZTdmYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFxBm8GYzrvLVCl9ZMhGRM 6V8LLVWs3joJ2HwWmEoW2+aXLi9FLyhUnAbp7SL8LAZQ8O1Qowg/MY3HxyYYE2AQ sT+9GMerdNAMIXXwx5xzBYlMc8mq7TZ1IfKO9jJO6GBni1oy2fLrJa7WI+lKPkbc BG2nOxQL+KAvyhnjlImDgOCKKo9kw9HxWYRVj8EReitNlyfbobbk19C0GLLMKwct TADKueYbkhalcx9gcnsMuMTrN5Qn6neJpnEJU7NfjWWKlkz2CFSxogxbJ+D4cQHQ CkFNOU5B6hZvOmzjiOY52SRFp/L7kQFtdeusw+xfyUSYNNW52kPt3UEoYq+7W8/n -----END CERTIFICATE-----Generated at Sun Mar 22 08:37:12 2026 by rpki-client