$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft File: 823d4627-1a90-4c5f-a8f6-425e39047cb1.mft (raw, json) Hash identifier: 0IMpNIFTeJb28H9dG87cEPqZ3kOdwvWVJesPteG3vtw= Subject key identifier: 3E:FC:BA:FB:27:DA:93:63:AB:48:A5:DC:CF:28:60:A1:3C:DA:4E:DE Authority key identifier: 7B:C2:C1:F3:E8:4F:52:55:53:87:8B:22:8B:89:33:10:6D:C9:3E:FE Certificate issuer: /CN=823d4627-1a90-4c5f-a8f6-425e39047cb1 Certificate serial: 010D0C9F4328584D87FA5587C6F85BE2C5E73D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft Manifest number: 010D0C9F4328584073A834BA931DB801CC6C2A8F Signing time: Fri 17 Apr 2026 01:00:03 +0000 Manifest this update: Fri 17 Apr 2026 01:00:03 +0000 Manifest next update: Sun 19 Apr 2026 01:00:00 +0000 Files and hashes: 1: 823d4627-1a90-4c5f-a8f6-425e39047cb1.crl (hash: 1eFUv25MDAeBww4VFJtZOzn+AOW58cJxud9OfgqNbpU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:55:87:c6:f8:5b:e2:c5:e7:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823d4627-1a90-4c5f-a8f6-425e39047cb1 Validity Not Before: Apr 17 01:00:03 2026 GMT Not After : Apr 19 01:00:00 2026 GMT Subject: CN=ca1e06b0-ad9a-412d-ba67-e1316461573c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:d3:e1:aa:d3:f3:3e:f3:94:2d:a0:4b:38: a6:0a:f7:be:36:99:37:64:cc:5b:92:10:c1:db:50: 1e:2b:73:b8:21:35:d1:c5:29:dd:e0:9c:da:0e:ad: 7a:93:b9:7d:32:a2:84:c6:20:e1:a1:57:ee:e2:8a: c2:58:06:d2:ad:0d:34:a7:78:53:b5:18:42:c0:de: 81:9b:87:0d:dc:15:64:d0:09:a8:a9:84:e5:06:bf: e4:0e:bb:2f:1a:d5:a3:78:09:55:47:7a:f1:e8:1a: 32:ef:df:48:b6:d1:08:2d:f3:e3:9b:07:8b:f2:d3: c2:be:65:cb:2f:0c:00:36:55:f0:44:b9:6f:df:29: d1:98:89:2a:fe:24:71:9c:61:1c:01:62:a7:a0:3e: 1c:0e:84:12:dd:c0:8d:f2:66:7b:ce:42:6b:22:47: f0:82:3c:f1:71:a9:fe:f5:b3:96:01:c8:ba:7a:d6: 4e:5c:85:a3:2e:b8:89:50:d9:ed:68:32:51:0f:6b: 75:d6:77:5c:2d:46:1b:3a:e4:a8:e5:8a:60:c4:5c: 6d:0d:a0:13:97:d8:e0:e8:76:d4:09:e5:58:f3:16: ed:60:fd:f6:0b:24:42:e4:c1:22:de:f6:1c:38:8e: 57:81:cf:a9:16:31:50:24:3c:a3:dd:0d:74:15:0a: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:BA:FB:27:DA:93:63:AB:48:A5:DC:CF:28:60:A1:3C:DA:4E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.crl X509v3 Authority Key Identifier: keyid:7B:C2:C1:F3:E8:4F:52:55:53:87:8B:22:8B:89:33:10:6D:C9:3E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:64:40:d0:55:8c:d5:6a:43:02:df:40:c1:2b:2b:d9:3b:41: 3d:5c:97:c8:99:a7:c1:2f:e1:49:7d:af:f4:3b:8a:2e:46:3d: dc:a9:ad:f7:b9:10:57:35:c5:c6:26:4b:ba:23:08:2d:8b:64: f0:d2:df:e2:21:b6:16:d2:dc:e7:e8:3b:7a:ef:c2:44:d1:20: 19:81:bc:0f:62:7b:17:40:52:58:b7:c2:64:4a:05:0b:da:dc: 22:fe:a8:55:58:64:9d:53:f0:ed:c2:51:3a:33:b3:af:11:ae: 56:6f:b6:c6:2e:a7:15:44:ee:08:d9:b0:17:72:92:54:fb:7c: 37:e9:fc:24:c4:5d:f6:9a:3d:cf:5d:88:36:d5:a0:14:d8:35: 88:39:c6:4a:a0:3b:51:7d:1b:1d:a0:de:34:a5:c5:c6:95:02: f4:05:d8:3e:b1:f0:26:5b:ee:9d:75:e4:3d:df:df:d2:d2:49: c6:97:70:67:9f:ed:8b:f3:6b:9c:e9:da:a6:17:71:6f:dc:5f: 4d:e0:5e:d9:6a:2a:83:db:28:32:88:9f:32:3d:9c:e4:6a:e5: 15:a8:34:e6:10:40:f0:b2:79:18:85:d7:b3:dd:2d:52:ff:c0: e5:75:26:ce:5c:3a:f2:0c:4e:3e:d2:e5:a3:ca:91:3e:24:b8: 19:c5:71:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2H+lWHxvhb4sXnPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZDQ2MjctMWE5MC00YzVmLWE4ZjYtNDI1ZTM5MDQ3 Y2IxMB4XDTI2MDQxNzAxMDAwM1oXDTI2MDQxOTAxMDAwMFowLzEtMCsGA1UEAxMk Y2ExZTA2YjAtYWQ5YS00MTJkLWJhNjctZTEzMTY0NjE1NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kbT4arT8z7zlC2gSzimCve+Npk3ZMxbkhDB 21AeK3O4ITXRxSnd4JzaDq16k7l9MqKExiDhoVfu4orCWAbSrQ00p3hTtRhCwN6B m4cN3BVk0AmoqYTlBr/kDrsvGtWjeAlVR3rx6Boy799IttEILfPjmweL8tPCvmXL LwwANlXwRLlv3ynRmIkq/iRxnGEcAWKnoD4cDoQS3cCN8mZ7zkJrIkfwgjzxcan+ 9bOWAci6etZOXIWjLriJUNntaDJRD2t11ndcLUYbOuSo5YpgxFxtDaATl9jg6HbU CeVY8xbtYP32CyRC5MEi3vYcOI5Xgc+pFjFQJDyj3Q10FQpCUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD78uvsn2pNjq0il3M8oYKE82k7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjNk NDYyNy0xYTkwLTRjNWYtYThmNi00MjVlMzkwNDdjYjEvODIzZDQ2MjctMWE5MC00 YzVmLWE4ZjYtNDI1ZTM5MDQ3Y2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIzZDQ2MjctMWE5MC00YzVmLWE4 ZjYtNDI1ZTM5MDQ3Y2IxLzgyM2Q0NjI3LTFhOTAtNGM1Zi1hOGY2LTQyNWUzOTA0 N2NiMS5jcmwwHwYDVR0jBBgwFoAUe8LB8+hPUlVTh4sii4kzEG3JPv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjNkNDYyNy0xYTkwLTRjNWYtYThmNi00MjVl MzkwNDdjYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsZEDQVYzVakMC30DBKyvZ O0E9XJfImafBL+FJfa/0O4ouRj3cqa33uRBXNcXGJku6Iwgti2Tw0t/iIbYW0tzn 6Dt678JE0SAZgbwPYnsXQFJYt8JkSgUL2twi/qhVWGSdU/DtwlE6M7OvEa5Wb7bG LqcVRO4I2bAXcpJU+3w36fwkxF32mj3PXYg21aAU2DWIOcZKoDtRfRsdoN40pcXG lQL0Bdg+sfAmW+6ddeQ939/S0knGl3Bnn+2L82uc6dqmF3Fv3F9N4F7ZaiqD2ygy iJ8yPZzkauUVqDTmEEDwsnkYhdez3S1S/8DldSbOXDryDE4+0uWjypE+JLgZxXE4 -----END CERTIFICATE-----Generated at Sat Apr 18 00:27:50 2026 by rpki-client