$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: gl/6LdSLXcwz4Gexhm8aw5wcTAD8qwHh1tysZeFxGm8= Subject key identifier: 1F:F9:0B:8F:45:F8:23:29:3C:75:57:74:98:DC:3A:81:F5:85:54:74 Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584D8C83B76A965AE7445F25C6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F04474 Signing time: Sat 18 Apr 2026 16:00:03 +0000 Manifest this update: Sat 18 Apr 2026 16:00:03 +0000 Manifest next update: Tue 21 Apr 2026 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: Tu0KIPlzhegoTyBmzSWcY5UZmuk3P7Rh8/7hHJrzIEw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:83:b7:6a:96:5a:e7:44:5f:25:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: Apr 18 16:00:03 2026 GMT Not After : Apr 21 16:00:00 2026 GMT Subject: CN=67c52cf8-a13d-4c5b-bce0-f3f1709915c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:47:3a:fd:a7:ae:f2:91:9d:48:c2:28:bf: f1:e6:6d:d5:4b:a7:f2:99:5a:a7:b8:ca:6a:50:33: 7f:c3:31:1e:6b:be:40:09:ed:67:1e:30:9b:7e:41: 31:c8:7a:da:ad:07:b0:1f:1b:01:a3:55:8e:63:13: c6:b1:be:9f:f1:9e:ce:a9:a0:d4:1c:a1:9c:47:f0: ca:f1:68:46:a0:9f:48:02:1a:81:52:f1:c6:44:07: b5:e3:58:15:7d:9a:dc:85:30:cb:94:ae:14:45:81: 36:89:00:2f:2b:5c:e7:bb:d4:ef:c8:c7:c7:94:eb: 6a:f8:f1:59:90:f3:b2:2a:30:dc:2e:b0:0f:af:00: 02:29:4a:b9:9d:38:ac:38:28:c8:53:46:1d:8f:9c: 6c:f5:87:8f:b7:73:87:b9:39:9e:a0:19:1d:17:f4: 4e:d2:52:fc:f9:e8:97:77:36:fb:f3:e0:e7:00:27: 65:0a:f1:1c:ca:26:de:86:1d:66:c1:00:76:00:91: 46:1c:13:6b:2d:42:78:fe:9b:81:00:95:5d:94:56: 5f:53:71:95:dc:45:eb:1a:6b:92:9f:a9:c0:dd:f5: 65:87:64:8c:36:51:07:64:24:e0:5d:06:cc:e5:ef: 91:04:1a:fb:e9:b4:b8:70:a2:9f:7d:6f:73:e8:0f: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F9:0B:8F:45:F8:23:29:3C:75:57:74:98:DC:3A:81:F5:85:54:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0b:64:ae:69:71:bc:e4:8d:b4:94:7d:f6:af:87:ba:8c:d2: 2a:4e:c6:59:c8:4e:b4:be:67:1d:d5:c5:01:a5:03:d0:4b:84: bc:23:4c:57:0c:5c:50:d3:1f:76:d7:44:40:95:aa:3e:d1:a7: 71:6c:03:5e:c7:d2:eb:87:ae:79:2d:94:79:32:51:58:ae:37: e5:15:07:59:35:d6:c8:69:a7:db:e2:5f:3e:c6:ed:05:bb:ce: a4:06:6f:44:28:8d:bc:7c:3e:97:8d:ff:61:a9:71:c4:f4:09: 4c:d6:24:d1:4a:ac:2c:24:17:85:a9:22:c5:60:8a:07:d3:4c: 22:56:8a:5f:f9:0a:1b:ac:dc:35:85:dd:8a:ba:f1:fb:20:9a: f2:31:49:91:c1:bd:50:4b:f2:f2:c5:a0:4d:d5:1b:fc:0f:16: 9a:de:05:ae:fb:09:9b:01:2e:fb:a0:bf:b0:be:c8:be:c3:47: 2a:f2:59:a5:b4:00:76:1d:53:9a:3b:bc:f0:e7:4b:06:ff:82: 1a:60:da:20:fa:80:27:b3:cc:b2:a0:5e:92:d1:16:f7:03:07: db:dd:2a:07:74:7e:6a:4a:66:81:c3:01:39:99:89:cc:5a:46: 1e:06:99:6b:51:0a:37:a0:82:16:70:95:e3:a0:45:d8:4f:fa: 85:21:ce:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Mg7dqllrnRF8lxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI2MDQxODE2MDAwM1oXDTI2MDQyMTE2MDAwMFowLzEtMCsGA1UEAxMk NjdjNTJjZjgtYTEzZC00YzViLWJjZTAtZjNmMTcwOTkxNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNHOv2nrvKRnUjCKL/x5m3VS6fymVqnuMpq UDN/wzEea75ACe1nHjCbfkExyHrarQewHxsBo1WOYxPGsb6f8Z7OqaDUHKGcR/DK 8WhGoJ9IAhqBUvHGRAe141gVfZrchTDLlK4URYE2iQAvK1znu9TvyMfHlOtq+PFZ kPOyKjDcLrAPrwACKUq5nTisOCjIU0Ydj5xs9YePt3OHuTmeoBkdF/RO0lL8+eiX dzb78+DnACdlCvEcyibehh1mwQB2AJFGHBNrLUJ4/puBAJVdlFZfU3GV3EXrGmuS n6nA3fVlh2SMNlEHZCTgXQbM5e+RBBr76bS4cKKffW9z6A8ieQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB/5C49F+CMpPHVXdJjcOoH1hVR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0C2SuaXG85I20lH32r4e6 jNIqTsZZyE60vmcd1cUBpQPQS4S8I0xXDFxQ0x9210RAlao+0adxbANex9Lrh655 LZR5MlFYrjflFQdZNdbIaafb4l8+xu0Fu86kBm9EKI28fD6Xjf9hqXHE9AlM1iTR SqwsJBeFqSLFYIoH00wiVopf+QobrNw1hd2KuvH7IJryMUmRwb1QS/LyxaBN1Rv8 Dxaa3gWu+wmbAS77oL+wvsi+w0cq8lmltAB2HVOaO7zw50sG/4IaYNog+oAns8yy oF6S0Rb3Awfb3SoHdH5qSmaBwwE5mYnMWkYeBplrUQo3oIIWcJXjoEXYT/qFIc56 -----END CERTIFICATE-----Generated at Sun Apr 19 10:12:13 2026 by rpki-client