$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft File: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft (raw, json) Hash identifier: 1nndnE6CYY/NmqK4gQ6GbBrlcVF0Ur05PhSrsNdQSqE= Subject key identifier: 24:F0:05:71:28:45:CE:92:58:87:E8:BF:10:55:75:66:07:86:EA:B2 Authority key identifier: 4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 Certificate issuer: /CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Certificate serial: 010D0C9F4328584D87FA58C8FADCD29470EFB280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft Manifest number: 010D0C9F4328584073A8344B79DA88D5249B5E2F Signing time: Fri 17 Apr 2026 01:00:03 +0000 Manifest this update: Fri 17 Apr 2026 01:00:03 +0000 Manifest next update: Sun 19 Apr 2026 01:00:00 +0000 Files and hashes: 1: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl (hash: HoNcoAAP6CpJXOz9GXASmh9dQgSeAtznZuSjZo2z5ro=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:58:c8:fa:dc:d2:94:70:ef:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Validity Not Before: Apr 17 01:00:03 2026 GMT Not After : Apr 19 01:00:00 2026 GMT Subject: CN=a4f5004c-2c8f-4e40-bd00-f94be9d87343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:3b:7a:77:08:19:9f:7e:2d:75:23:7b:51: d9:13:76:50:4a:ff:d2:81:4d:93:e4:4c:a3:87:b8: 1e:96:35:c3:42:a1:39:d7:88:cd:13:8f:c3:60:72: 1e:0c:af:7e:0d:00:e5:45:d7:19:a8:64:d1:2c:56: 3e:72:3d:85:78:79:40:11:c6:68:39:ee:a5:76:0d: f9:c5:65:ee:1d:e0:dc:72:1a:2d:41:83:32:ce:2d: 71:7c:f2:66:93:70:41:d1:7e:d8:c8:a9:b1:4f:b5: d1:db:bb:17:bf:50:3f:d8:f4:d7:09:83:c6:14:4a: 06:f0:0f:62:27:b5:1d:1e:35:e2:63:3c:ac:98:02: a5:e7:85:5d:60:3d:a3:5e:c4:97:6e:d1:43:2e:c2: 2e:be:45:c4:b4:3e:07:b6:d1:0a:71:74:07:c6:6c: 12:48:4f:57:34:a1:9c:73:0e:42:2b:25:ba:b0:bc: 2b:d2:20:ae:50:1e:1f:e1:df:6b:b3:a6:c0:4e:b3: fc:0f:f8:72:3d:31:ea:3d:39:72:2e:1b:9f:65:f0: b7:56:b6:b5:40:ef:c7:9c:eb:0a:6c:d8:4c:8d:c4: 5e:b0:09:ba:45:6b:06:e3:f4:d4:47:36:67:c8:b2: 6a:61:93:96:85:53:89:4d:fd:0c:53:9c:87:97:81: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:05:71:28:45:CE:92:58:87:E8:BF:10:55:75:66:07:86:EA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl X509v3 Authority Key Identifier: keyid:4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:84:85:a6:73:ed:be:c2:ff:06:b6:a9:1c:48:29:5a:b0:2d: 2b:15:b1:1c:46:20:a9:06:fd:0e:d1:24:99:16:64:03:84:71: 38:bd:bd:80:8e:fd:92:39:b6:16:89:f2:d1:ab:d7:17:3f:39: bc:4f:40:e1:e3:68:9e:76:f8:06:84:7e:84:97:fe:96:78:ea: 97:c5:8e:05:e2:25:fd:27:c0:c2:51:e9:e7:f4:02:85:1a:e9: c1:57:dc:fb:2a:56:8c:48:93:cc:98:bd:35:b7:78:e1:a8:b9: 29:f1:63:f0:80:fa:2b:6a:59:e0:0e:53:39:fa:4e:69:e0:cf: 8e:ad:c3:90:b9:5c:6b:9e:71:73:3c:1e:2a:fc:4a:62:f2:83: 11:59:35:a2:36:be:eb:80:7a:d6:11:00:0c:b9:b3:49:6a:db: 8a:63:cc:0b:fd:d6:96:c6:a0:ce:13:05:bf:db:98:71:65:7e: 2b:07:a4:50:ae:27:dc:f8:d9:0c:77:7b:6c:29:51:8f:83:aa: d3:9f:46:f8:07:e8:27:d9:fa:da:7c:cf:a1:76:e9:13:2e:69: a3:f6:f5:09:5e:4e:b6:56:52:8b:6b:d8:df:28:d9:8e:b1:5d: 59:ce:ab:bc:de:4a:7c:b2:dd:71:cf:4f:9c:0d:5a:d2:b9:42: 5a:3c:05:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2H+ljI+tzSlHDvsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4YzAxNDktZTNjZC00NGE0LWJiOGEtNWU0MWQ0ODIz YzBkMB4XDTI2MDQxNzAxMDAwM1oXDTI2MDQxOTAxMDAwMFowLzEtMCsGA1UEAxMk YTRmNTAwNGMtMmM4Zi00ZTQwLWJkMDAtZjk0YmU5ZDg3MzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX87encIGZ9+LXUje1HZE3ZQSv/SgU2T5Eyj h7geljXDQqE514jNE4/DYHIeDK9+DQDlRdcZqGTRLFY+cj2FeHlAEcZoOe6ldg35 xWXuHeDcchotQYMyzi1xfPJmk3BB0X7YyKmxT7XR27sXv1A/2PTXCYPGFEoG8A9i J7UdHjXiYzysmAKl54VdYD2jXsSXbtFDLsIuvkXEtD4HttEKcXQHxmwSSE9XNKGc cw5CKyW6sLwr0iCuUB4f4d9rs6bATrP8D/hyPTHqPTlyLhufZfC3Vra1QO/HnOsK bNhMjcResAm6RWsG4/TURzZnyLJqYZOWhVOJTf0MU5yHl4GtdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCTwBXEoRc6SWIfovxBVdWYHhuqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iOThj MDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQxZDQ4MjNjMGQvYjk4YzAxNDktZTNjZC00 NGE0LWJiOGEtNWU0MWQ0ODIzYzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjk4YzAxNDktZTNjZC00NGE0LWJi OGEtNWU0MWQ0ODIzYzBkL2I5OGMwMTQ5LWUzY2QtNDRhNC1iYjhhLTVlNDFkNDgy M2MwZC5jcmwwHwYDVR0jBBgwFoAUTp9WH/SNpQyehZ1MjBxFmyqHdCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iOThjMDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQx ZDQ4MjNjMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzhIWmc+2+wv8GtqkcSCla sC0rFbEcRiCpBv0O0SSZFmQDhHE4vb2Ajv2SObYWifLRq9cXPzm8T0Dh42iedvgG hH6El/6WeOqXxY4F4iX9J8DCUenn9AKFGunBV9z7KlaMSJPMmL01t3jhqLkp8WPw gPoralngDlM5+k5p4M+OrcOQuVxrnnFzPB4q/Epi8oMRWTWiNr7rgHrWEQAMubNJ atuKY8wL/daWxqDOEwW/25hxZX4rB6RQrifc+NkMd3tsKVGPg6rTn0b4B+gn2fra fM+hdukTLmmj9vUJXk62VlKLa9jfKNmOsV1Zzqu83kp8st1xz0+cDVrSuUJaPAXx -----END CERTIFICATE-----Generated at Fri Apr 17 04:15:48 2026 by rpki-client