$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: Y+WdTbopnba4HKBvPck7eupCipMi17o0GHs+zFS2tBY= Subject key identifier: 13:0B:C4:AE:92:F1:E3:3E:F8:59:D0:6E:70:07:E9:CF:9B:A2:A2:59 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584D86950015E152EE4805BC5BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060D36 Signing time: Thu 16 Apr 2026 13:00:03 +0000 Manifest this update: Thu 16 Apr 2026 13:00:03 +0000 Manifest next update: Sun 19 Apr 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: viX5275hCZDASahnPI7gkWG7fGe1BXW+MRT9M9WWfbE=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: a0LiXaDyN5WKRehyJs7m+TOLmy/7oXtdMaDfgurFtPI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:00:15:e1:52:ee:48:05:bc:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Apr 16 13:00:03 2026 GMT Not After : Apr 19 13:00:00 2026 GMT Subject: CN=86a0ae8d-5c4f-4aa0-abca-5ae70b9d31f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:0e:f8:e1:ce:82:be:7c:f9:b2:93:2f:f8: 72:40:00:e6:ed:d3:a3:bb:65:3c:52:2c:cb:6b:e4: 4e:49:e4:2c:9f:66:e9:d1:4b:a3:5c:28:a0:4a:75: e4:09:41:af:5b:db:4e:ac:96:dd:11:1b:1c:b9:00: e3:1d:97:b8:65:76:8b:55:61:15:d7:0a:bf:2a:d4: 41:e8:d1:18:f4:b6:85:aa:11:72:b0:da:be:37:33: 82:66:09:dc:2d:94:a0:80:ec:7b:7c:7a:78:be:13: 31:2a:37:d6:d7:6f:51:c1:33:fd:2e:8b:11:d4:9e: e1:d8:c7:51:70:ac:6a:bc:88:fb:c3:ff:73:f6:ed: b3:b9:8b:15:0c:f1:39:59:42:4f:e5:e6:4f:c8:81: 8e:2c:06:94:b3:ff:0a:e0:fa:92:4e:d7:2d:be:9e: cb:a9:60:b2:0d:35:fb:58:1d:51:05:ba:30:23:d8: 0e:a3:95:51:fa:40:27:78:d7:5f:6b:dc:63:29:1e: 86:00:8e:f0:f3:90:06:44:56:1f:1b:f0:ac:77:ec: a1:11:80:74:6b:c0:60:92:e6:49:42:3e:93:0b:6f: 1c:f8:4d:49:65:90:28:5d:fe:44:43:b7:18:ef:0f: 4c:4c:69:d9:90:2b:e8:e7:37:7f:bb:31:ed:62:a3: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0B:C4:AE:92:F1:E3:3E:F8:59:D0:6E:70:07:E9:CF:9B:A2:A2:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a4:50:3d:9b:87:47:12:a2:45:ab:24:28:0c:ac:65:51:c9: bc:19:e0:7e:56:b8:e0:75:76:db:b6:54:45:e5:24:a3:a4:c3: 43:20:cb:2d:a2:2b:62:81:28:d2:b6:a1:59:1e:80:24:9e:fb: c1:98:20:8f:bf:dd:a9:af:dd:e7:82:0f:1c:01:ef:74:33:11: 3f:a1:99:37:ca:a4:cc:ba:32:9f:f4:2d:21:6f:9f:9e:92:e9: 4d:e3:17:16:00:04:8e:97:91:d3:2b:90:16:69:4a:a1:63:d1: 14:9b:25:2b:fc:65:10:08:7c:2a:84:47:97:8c:d1:63:aa:55: 89:2c:97:53:43:b2:e3:38:6a:f0:5f:b0:1b:b4:50:5f:c2:ed: f5:39:d9:56:ed:8d:cd:3b:32:aa:d3:29:b2:9d:4c:b5:ba:35: 6a:da:85:c3:dc:77:cd:3d:45:1a:7e:f6:99:c1:1a:6f:49:16: 1d:32:89:90:63:c8:a9:cd:38:b1:31:74:5c:e9:f4:93:a5:55: 05:9a:4f:e3:5a:98:71:df:7b:11:66:70:fd:06:87:79:6c:0e: b1:df:c6:6f:92:ca:62:7f:23:58:a8:3e:54:59:d8:c0:77:ca: 92:09:4b:56:25:a2:25:cf:2e:24:0c:bc:c1:3d:2d:9c:42:6b: 90:12:c1:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GlQAV4VLuSAW8W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDQxNjEzMDAwM1oXDTI2MDQxOTEzMDAwMFowLzEtMCsGA1UEAxMk ODZhMGFlOGQtNWM0Zi00YWEwLWFiY2EtNWFlNzBiOWQzMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAIO+OHOgr58+bKTL/hyQADm7dOju2U8UizL a+ROSeQsn2bp0UujXCigSnXkCUGvW9tOrJbdERscuQDjHZe4ZXaLVWEV1wq/KtRB 6NEY9LaFqhFysNq+NzOCZgncLZSggOx7fHp4vhMxKjfW129RwTP9LosR1J7h2MdR cKxqvIj7w/9z9u2zuYsVDPE5WUJP5eZPyIGOLAaUs/8K4PqSTtctvp7LqWCyDTX7 WB1RBbowI9gOo5VR+kAneNdfa9xjKR6GAI7w85AGRFYfG/Csd+yhEYB0a8BgkuZJ Qj6TC28c+E1JZZAoXf5EQ7cY7w9MTGnZkCvo5zd/uzHtYqMQPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBMLxK6S8eM++FnQbnAH6c+boqJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9pFA9m4dHEqJFqyQoDKxl Ucm8GeB+VrjgdXbbtlRF5SSjpMNDIMstoitigSjStqFZHoAknvvBmCCPv92pr93n gg8cAe90MxE/oZk3yqTMujKf9C0hb5+ekulN4xcWAASOl5HTK5AWaUqhY9EUmyUr /GUQCHwqhEeXjNFjqlWJLJdTQ7LjOGrwX7AbtFBfwu31OdlW7Y3NOzKq0ymynUy1 ujVq2oXD3HfNPUUafvaZwRpvSRYdMomQY8ipzTixMXRc6fSTpVUFmk/jWphx33sR ZnD9Bod5bA6x38ZvkspifyNYqD5UWdjAd8qSCUtWJaIlzy4kDLzBPS2cQmuQEsF2 -----END CERTIFICATE-----Generated at Fri Apr 17 11:35:26 2026 by rpki-client