$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: e0wJatWAPeQtOlrGDPLPB494pGSAz1om8tUsrm1RSw0= Subject key identifier: 59:3B:78:11:19:31:F7:1E:BC:C2:71:52:0B:73:C0:99:52:0A:51:4F Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584D861DE57377682E361DC01AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF02254A Signing time: Thu 16 Apr 2026 09:00:04 +0000 Manifest this update: Thu 16 Apr 2026 09:00:04 +0000 Manifest next update: Sun 19 Apr 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: soRnpNY/qCQGjRpp8pwFT14DqfZ5u8LdXtvSoNwL5Kc=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: JJ2tVW7jEw/T+wSa/SZsK6ZROHFtg++Y4yRhiSqE21c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:1d:e5:73:77:68:2e:36:1d:c0:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Apr 16 09:00:04 2026 GMT Not After : Apr 19 09:00:00 2026 GMT Subject: CN=dd8b8a3c-f589-499a-b324-3b1d745299fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:73:8c:29:6f:6d:5e:16:f4:9b:80:d7:48: b5:97:aa:5f:12:4d:39:ec:54:30:a9:53:5a:f7:16: 0b:c8:f0:28:e2:a8:17:4e:50:62:8a:2e:41:44:14: a0:9d:7d:54:94:c6:dc:9b:11:19:5f:ae:22:09:1e: 34:31:73:41:18:81:75:0c:f6:e1:e5:f9:7f:f2:97: 69:67:18:1b:69:49:1a:d2:25:11:bb:36:29:58:fb: ba:30:9f:fa:5d:19:6c:5f:53:5e:e3:f0:56:d8:8e: c9:0e:85:cd:50:f2:78:a9:db:a9:3d:5c:e8:b5:55: e2:2a:53:f8:82:6e:63:b0:b2:dd:80:73:5a:4a:2e: b6:1b:ea:bc:55:b2:67:1f:c5:d5:79:89:78:26:b3: 51:86:79:6c:2c:65:0d:aa:96:c8:16:2d:cd:32:ae: 32:e0:bd:6e:c1:af:4b:93:64:be:94:de:e9:ea:14: d0:9d:99:55:80:67:26:05:b8:8a:2f:3e:4c:c2:ec: de:f5:d8:fb:5d:a0:e3:ff:84:c1:05:24:c4:52:57: 6c:06:d1:7a:9e:49:a9:df:51:29:06:6e:b5:5c:00: 50:c4:bd:35:b4:af:fb:7c:48:2a:81:c3:74:c5:b4: c5:cd:73:f5:ff:e7:f1:a2:ea:03:3b:fb:0e:41:3c: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:78:11:19:31:F7:1E:BC:C2:71:52:0B:73:C0:99:52:0A:51:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:39:e1:71:28:46:bd:f5:3a:43:c0:c0:ce:2a:3b:d2:2e:96: e6:66:13:01:55:c9:59:e1:82:7f:fb:24:8b:28:8c:ac:c4:fe: 90:90:ab:c0:35:d6:13:c6:f6:70:a3:32:54:cf:9a:06:da:69: e9:9a:91:b6:76:64:88:fb:0c:65:4a:3d:52:7c:27:48:38:ae: 00:08:38:da:45:cb:18:60:1a:ac:7d:9c:96:bf:d2:a8:6c:2d: 0d:98:84:2a:83:49:74:31:d9:03:cc:8b:f9:b5:80:fb:aa:78: 31:65:97:c5:18:ad:b6:7f:5e:e8:33:ec:97:02:fb:99:89:6c: a1:1d:9d:70:a9:51:74:fc:57:5b:e6:d8:a5:ff:00:10:9a:93: 2b:a2:2d:8e:81:fd:80:57:cf:54:a8:33:04:52:61:d9:2d:24: f2:b1:9f:63:3b:74:93:5d:1e:07:61:52:35:7b:4a:ac:a4:25: b3:e6:85:7b:7e:8c:09:02:c7:1d:db:3e:3e:13:47:06:3a:b4: 0b:4a:e5:be:3d:63:f0:ae:3e:c6:9e:27:56:52:91:e3:95:ec: 3f:7e:f3:2b:24:f9:7a:0e:f8:c8:c4:b6:ac:d2:6f:3a:61:79: 7f:24:f6:25:49:9c:ad:a7:fb:29:e1:08:27:c8:20:24:0e:f3: f4:6f:c7:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GHeVzd2guNh3AGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDQxNjA5MDAwNFoXDTI2MDQxOTA5MDAwMFowLzEtMCsGA1UEAxMk ZGQ4YjhhM2MtZjU4OS00OTlhLWIzMjQtM2IxZDc0NTI5OWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOxzjClvbV4W9JuA10i1l6pfEk057FQwqVNa 9xYLyPAo4qgXTlBiii5BRBSgnX1UlMbcmxEZX64iCR40MXNBGIF1DPbh5fl/8pdp ZxgbaUka0iURuzYpWPu6MJ/6XRlsX1Ne4/BW2I7JDoXNUPJ4qdupPVzotVXiKlP4 gm5jsLLdgHNaSi62G+q8VbJnH8XVeYl4JrNRhnlsLGUNqpbIFi3NMq4y4L1uwa9L k2S+lN7p6hTQnZlVgGcmBbiKLz5Mwuze9dj7XaDj/4TBBSTEUldsBtF6nkmp31Ep Bm61XABQxL01tK/7fEgqgcN0xbTFzXP1/+fxouoDO/sOQTzIMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFk7eBEZMfcevMJxUgtzwJlSClFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALOeFxKEa99TpDwMDOKjvS LpbmZhMBVclZ4YJ/+ySLKIysxP6QkKvANdYTxvZwozJUz5oG2mnpmpG2dmSI+wxl Sj1SfCdIOK4ACDjaRcsYYBqsfZyWv9KobC0NmIQqg0l0MdkDzIv5tYD7qngxZZfF GK22f17oM+yXAvuZiWyhHZ1wqVF0/Fdb5til/wAQmpMroi2Ogf2AV89UqDMEUmHZ LSTysZ9jO3STXR4HYVI1e0qspCWz5oV7fowJAscd2z4+E0cGOrQLSuW+PWPwrj7G nidWUpHjlew/fvMrJPl6DvjIxLas0m86YXl/JPYlSZytp/sp4QgnyCAkDvP0b8d3 -----END CERTIFICATE-----Generated at Fri Apr 17 10:08:53 2026 by rpki-client