$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft File: 71effefa-6381-4c3d-8487-95f07e37a7cf.mft (raw, json) Hash identifier: FDOKQ8Us4Cn19IUjKE1u6byu+mgD/WYMj7M2fQcz0hA= Subject key identifier: D8:A0:0C:53:CB:02:6B:90:57:E0:90:8B:2C:45:4C:36:19:5B:1B:E7 Authority key identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Certificate issuer: /CN=71effefa-6381-4c3d-8487-95f07e37a7cf Certificate serial: 010D0C9F4328584D88CAC910C8ED0EEB79D3AA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft Manifest number: 010D0C9F4328584073A84657CD0005EEFC67F3B2 Signing time: Fri 17 Apr 2026 08:00:03 +0000 Manifest this update: Fri 17 Apr 2026 08:00:03 +0000 Manifest next update: Sun 19 Apr 2026 08:00:00 +0000 Files and hashes: 1: 71effefa-6381-4c3d-8487-95f07e37a7cf.crl (hash: CCFJwQplD6QDIviRDgcQeVVXfHeMilG6Dj0SpM/KR10=) 2: d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer (hash: 7SbhUuhWFrB4lMi0kOiy/WTqSn/oNr60jiHW7VbGiiU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:ca:c9:10:c8:ed:0e:eb:79:d3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71effefa-6381-4c3d-8487-95f07e37a7cf Validity Not Before: Apr 17 08:00:03 2026 GMT Not After : Apr 19 08:00:00 2026 GMT Subject: CN=be3a645b-e4f4-470c-9828-edb2cf5f2b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:9a:65:2c:5b:55:2b:36:57:0c:97:26:ea: ff:03:d5:58:18:33:3a:42:7f:4b:46:31:ff:07:f2: 93:65:84:04:5f:1d:70:3b:8e:70:48:8b:2d:4a:42: 1d:72:74:ee:57:93:eb:ae:9c:e3:9f:2d:17:93:b7: 09:08:41:9c:ad:16:5b:c9:55:0d:10:0d:d7:0b:5a: 02:af:a1:5e:be:99:97:34:52:46:a4:5c:e4:22:fe: 7b:84:5a:28:de:d9:b9:99:5a:50:a9:e0:10:da:9a: a6:e7:b2:a8:2e:f4:59:9e:e8:40:f9:79:c0:c6:b0: b3:22:c3:6a:cd:9e:d5:55:ea:aa:25:07:3b:6b:7e: b7:aa:b7:1e:f2:23:f8:99:db:c1:28:07:d5:af:27: 4d:fc:cf:55:32:17:c8:37:2f:99:ff:61:ec:ae:ae: 8a:8b:92:3f:a1:80:6d:47:7c:8c:b0:36:69:a8:81: ac:f5:83:af:6f:f5:38:35:b7:b8:3d:c8:ff:6c:60: 19:05:c4:d2:e9:53:f9:22:36:1c:83:4d:3e:fc:85: b9:f0:6c:d9:16:f9:a9:48:68:aa:7f:53:34:4e:06: 1e:20:2a:de:fa:82:42:c5:22:53:36:6b:b5:0a:fd: f0:6c:fb:3d:c7:b0:08:06:1e:c8:95:f8:e7:07:2b: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:0C:53:CB:02:6B:90:57:E0:90:8B:2C:45:4C:36:19:5B:1B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl X509v3 Authority Key Identifier: keyid:CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:74:e3:a5:b0:38:e0:a9:20:da:0f:de:66:70:09:3a:57:e3: d9:35:2d:a6:20:00:99:67:71:a9:06:6b:02:3b:ec:16:24:5f: fc:83:08:30:52:b4:f0:8b:13:43:8a:a4:5e:1d:44:f7:c1:d8: e2:10:3f:29:d7:d9:e9:0a:6e:9e:61:ce:5c:47:97:e6:5d:37: e3:17:61:d8:d7:85:d0:f4:e9:ec:a0:c2:e8:47:10:44:b1:0a: ef:7a:82:3b:e9:45:fb:20:4e:22:e4:aa:e2:c2:01:1d:cd:86: 3c:1f:1c:c2:f9:5c:1e:86:76:15:cc:b9:e7:75:6b:0e:f6:b5: 4c:5e:3d:47:ca:c6:80:c4:8e:11:b8:52:22:7e:0e:ce:77:fb: e3:83:9b:ad:44:2f:a1:4e:2f:ec:da:cb:9e:d1:8f:79:e2:1c: 9d:f9:04:d2:42:af:9d:94:c2:c2:f8:c6:b1:fe:eb:55:73:40: 54:c4:e3:39:fc:aa:72:d4:dd:f0:92:8f:a5:b0:7d:4e:d2:b1: 75:06:13:ab:6b:62:ac:67:c6:23:1c:64:7f:66:c6:28:b5:a4: 6b:d2:00:81:55:61:54:d1:28:29:6f:96:56:51:a7:bf:2c:36: 45:31:2f:59:1d:92:ee:0e:1f:03:04:dd:de:c4:96:62:bf:87: 00:69:18:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IyskQyO0O63nTqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlZmZlZmEtNjM4MS00YzNkLTg0ODctOTVmMDdlMzdh N2NmMB4XDTI2MDQxNzA4MDAwM1oXDTI2MDQxOTA4MDAwMFowLzEtMCsGA1UEAxMk YmUzYTY0NWItZTRmNC00NzBjLTk4MjgtZWRiMmNmNWYyYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+qaZSxbVSs2VwyXJur/A9VYGDM6Qn9LRjH/ B/KTZYQEXx1wO45wSIstSkIdcnTuV5Prrpzjny0Xk7cJCEGcrRZbyVUNEA3XC1oC r6FevpmXNFJGpFzkIv57hFoo3tm5mVpQqeAQ2pqm57KoLvRZnuhA+XnAxrCzIsNq zZ7VVeqqJQc7a363qrce8iP4mdvBKAfVrydN/M9VMhfINy+Z/2Hsrq6Ki5I/oYBt R3yMsDZpqIGs9YOvb/U4Nbe4Pcj/bGAZBcTS6VP5IjYcg00+/IW58GzZFvmpSGiq f1M0TgYeICre+oJCxSJTNmu1Cv3wbPs9x7AIBh7IlfjnByuoIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNigDFPLAmuQV+CQiyxFTDYZWxvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MWVm ZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2UzN2E3Y2YvNzFlZmZlZmEtNjM4MS00 YzNkLTg0ODctOTVmMDdlMzdhN2NmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzFlZmZlZmEtNjM4MS00YzNkLTg0 ODctOTVmMDdlMzdhN2NmLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi5jcmwwHwYDVR0jBBgwFoAUzqZHU53go10NUniHlU3Mg/czf9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYw N2UzN2E3Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAodOOlsDjgqSDaD95mcAk6 V+PZNS2mIACZZ3GpBmsCO+wWJF/8gwgwUrTwixNDiqReHUT3wdjiED8p19npCm6e Yc5cR5fmXTfjF2HY14XQ9OnsoMLoRxBEsQrveoI76UX7IE4i5KriwgEdzYY8HxzC +VwehnYVzLnndWsO9rVMXj1HysaAxI4RuFIifg7Od/vjg5utRC+hTi/s2sue0Y95 4hyd+QTSQq+dlMLC+Max/utVc0BUxOM5/Kpy1N3wko+lsH1O0rF1BhOra2KsZ8Yj HGR/ZsYotaRr0gCBVWFU0Sgpb5ZWUae/LDZFMS9ZHZLuDh8DBN3exJZiv4cAaRgT -----END CERTIFICATE-----Generated at Fri Apr 17 14:26:03 2026 by rpki-client