$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft File: a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft (raw, json) Hash identifier: +9Srr9SckGApCccpZbpSIUecwPRX381GXzxkhn4vh0g= Subject key identifier: 5D:DB:AA:C5:07:69:B9:E3:D2:D4:48:7F:6E:A9:D1:DF:64:C1:39:88 Authority key identifier: C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E Certificate issuer: /CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5 Certificate serial: 010D0C9F4328584D2EE00CA12ADE6D39DC74D6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft Manifest number: 010D0C9F4328584073A8395F6D4B70DD67F5BE8F Signing time: Mon 16 Mar 2026 03:00:08 +0000 Manifest this update: Mon 16 Mar 2026 03:00:08 +0000 Manifest next update: Wed 18 Mar 2026 03:00:00 +0000 Files and hashes: 1: a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl (hash: cSxO+WI5XSfhPplaZLL0fcy5jkb/hX4BaKZNDXfRf/Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2e:e0:0c:a1:2a:de:6d:39:dc:74:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5 Validity Not Before: Mar 16 03:00:08 2026 GMT Not After : Mar 18 03:00:00 2026 GMT Subject: CN=892c42c3-c742-4ea4-9abd-bd9d9ebee170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:46:9e:69:6f:29:f8:e0:59:2c:f9:6c:f7: 68:33:24:7b:6a:5b:16:fc:7f:3d:a1:2c:b8:af:33: 03:b7:e7:88:d1:ba:ee:00:3f:5c:f9:df:07:ba:b4: bd:18:c3:84:59:29:8e:24:c1:25:2b:66:9a:d1:cc: 54:f3:96:d5:e7:bb:73:5b:04:6f:49:ab:c3:b9:4b: ef:f1:a8:6c:e6:cb:28:98:b0:b0:3f:6f:3a:c7:07: c8:e0:de:a3:bf:e0:37:56:16:f5:d6:55:a8:62:16: e5:96:99:2d:3e:4c:2c:64:b6:4e:cb:fd:e0:71:22: 43:f4:6d:9d:2e:ae:b2:31:a7:e7:b0:ad:f3:1c:05: 45:b8:03:ad:b0:2b:41:fe:a3:a4:d3:1a:44:34:24: 71:da:47:71:b3:89:0e:26:cf:99:29:aa:20:47:1c: 86:00:82:1d:3f:e3:04:9f:88:03:aa:00:2e:f3:e8: 7f:24:b0:0f:20:f1:1e:21:c5:0e:fa:92:a3:de:55: c8:88:bb:ea:43:49:56:65:cc:4c:f8:3d:f0:65:c1: 5b:7c:57:57:8f:ec:e2:87:43:0c:ef:08:6b:db:0e: a8:d9:f6:25:30:8a:5e:2d:c9:1c:10:06:cb:32:dc: 21:8d:fe:0b:aa:49:73:7f:48:9d:fa:ef:83:a3:df: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DB:AA:C5:07:69:B9:E3:D2:D4:48:7F:6E:A9:D1:DF:64:C1:39:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl X509v3 Authority Key Identifier: keyid:C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:07:00:f9:03:16:43:66:89:c8:6b:eb:1a:e2:e5:b8:1d:aa: 24:92:c1:df:48:32:a7:74:2b:75:61:5a:6f:c4:a4:2b:20:0d: 04:ab:3b:4c:9a:7a:10:24:db:fc:a2:bd:b1:33:38:9f:c4:b7: 22:68:c6:5f:8f:30:f9:1f:48:0a:bf:0d:29:50:23:cb:d4:80: ef:66:f7:12:01:65:3f:05:76:31:10:ac:72:c0:9f:06:c3:1b: d0:60:22:a8:3e:44:89:78:d2:13:48:74:5d:cd:95:95:83:90: c8:0a:16:38:00:03:7e:b1:73:f5:a5:31:5b:02:01:4c:02:4f: 05:6d:ee:47:eb:58:ac:78:c0:07:6f:c7:32:81:14:a0:2c:e4: f4:09:af:63:81:be:48:cc:0a:28:05:d1:0f:f1:05:82:c7:c5: 32:c6:ce:e9:b0:e1:09:48:2a:a2:4f:dc:20:b8:51:3b:2b:d3: 87:0f:9b:8b:a7:8b:61:26:54:6c:50:5f:f5:4e:01:3f:d8:00: 9d:bd:ad:36:b3:d2:41:c6:c0:d3:43:8c:1d:53:48:08:da:77: da:e1:72:5a:54:7c:01:98:4f:ca:dc:15:92:e2:96:55:56:c3: 81:73:87:08:e3:d6:59:dc:d5:63:6b:89:76:38:4b:64:9c:05: 88:69:98:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0u4AyhKt5tOdx01sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmOGY4Y2ItNWU3Yi00ZTAyLWIyN2UtYzY5NjM0Nzll OGI1MB4XDTI2MDMxNjAzMDAwOFoXDTI2MDMxODAzMDAwMFowLzEtMCsGA1UEAxMk ODkyYzQyYzMtYzc0Mi00ZWE0LTlhYmQtYmQ5ZDllYmVlMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z9GnmlvKfjgWSz5bPdoMyR7alsW/H89oSy4 rzMDt+eI0bruAD9c+d8HurS9GMOEWSmOJMElK2aa0cxU85bV57tzWwRvSavDuUvv 8ahs5ssomLCwP286xwfI4N6jv+A3Vhb11lWoYhbllpktPkwsZLZOy/3gcSJD9G2d Lq6yMafnsK3zHAVFuAOtsCtB/qOk0xpENCRx2kdxs4kOJs+ZKaogRxyGAIIdP+ME n4gDqgAu8+h/JLAPIPEeIcUO+pKj3lXIiLvqQ0lWZcxM+D3wZcFbfFdXj+zih0MM 7whr2w6o2fYlMIpeLckcEAbLMtwhjf4Lqklzf0id+u+Do9+PJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF3bqsUHabnj0tRIf26p0d9kwTmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOGY4 ZjhjYi01ZTdiLTRlMDItYjI3ZS1jNjk2MzQ3OWU4YjUvYThmOGY4Y2ItNWU3Yi00 ZTAyLWIyN2UtYzY5NjM0NzllOGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYThmOGY4Y2ItNWU3Yi00ZTAyLWIy N2UtYzY5NjM0NzllOGI1L2E4ZjhmOGNiLTVlN2ItNGUwMi1iMjdlLWM2OTYzNDc5 ZThiNS5jcmwwHwYDVR0jBBgwFoAUwEaMet1v5t816Sa81RFdJzx/Uo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOGY4ZjhjYi01ZTdiLTRlMDItYjI3ZS1jNjk2 MzQ3OWU4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDBwD5AxZDZonIa+sa4uW4 HaokksHfSDKndCt1YVpvxKQrIA0EqztMmnoQJNv8or2xMzifxLciaMZfjzD5H0gK vw0pUCPL1IDvZvcSAWU/BXYxEKxywJ8GwxvQYCKoPkSJeNITSHRdzZWVg5DIChY4 AAN+sXP1pTFbAgFMAk8Fbe5H61iseMAHb8cygRSgLOT0Ca9jgb5IzAooBdEP8QWC x8Uyxs7psOEJSCqiT9wguFE7K9OHD5uLp4thJlRsUF/1TgE/2ACdva02s9JBxsDT Q4wdU0gI2nfa4XJaVHwBmE/K3BWS4pZVVsOBc4cI49ZZ3NVja4l2OEtknAWIaZhn -----END CERTIFICATE-----Generated at Mon Mar 16 09:34:46 2026 by rpki-client