$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft File: 3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft (raw, json) Hash identifier: 3KtUzj4qRJXMqv3FVrTYqK8bGgtvYHc8Jz65kh8wj7c= Subject key identifier: 9A:C1:77:FC:10:13:2F:73:3B:70:72:62:7D:52:57:AC:64:DD:54:BD Authority key identifier: 40:85:E8:20:C6:8E:B7:7B:40:0C:C0:C5:D1:58:38:C8:EF:5F:80:17 Certificate issuer: /CN=3a402fb7-2c3d-4c65-a693-41ffae7b91c5 Certificate serial: 010D0C9F4328584D888F39C475CD72231F72DE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft Manifest number: 010D0C9F43285847A252039F3385FBD09F375DDD Signing time: Fri 17 Apr 2026 06:00:03 +0000 Manifest this update: Fri 17 Apr 2026 06:00:03 +0000 Manifest next update: Sun 19 Apr 2026 06:00:00 +0000 Files and hashes: 1: 3a402fb7-2c3d-4c65-a693-41ffae7b91c5.crl (hash: HY2Sn/xZWB63ZP1egjkoGHGk/Vrn8DL/3svTfoDB31w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:8f:39:c4:75:cd:72:23:1f:72:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a402fb7-2c3d-4c65-a693-41ffae7b91c5 Validity Not Before: Apr 17 06:00:03 2026 GMT Not After : Apr 19 06:00:00 2026 GMT Subject: CN=6b95a629-f4eb-4d7c-bbbd-8ec0d56b4422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:e7:a9:21:e4:a4:16:2c:92:60:3a:3c:1b: b2:10:68:19:5b:63:05:46:6e:8f:55:21:ed:ea:9f: d8:aa:38:a8:e6:f7:52:17:5a:c4:39:9c:e5:f8:75: fb:a3:81:e1:9e:80:06:10:3a:32:cb:e1:b5:6b:98: 99:72:5d:af:ce:e7:70:41:f0:b3:a0:2d:64:5d:b9: 39:7d:b3:ef:cb:93:65:68:2e:08:0d:78:94:26:45: bc:c8:c2:dd:ff:05:89:3f:8d:b6:83:73:d3:09:fd: f9:df:77:78:e5:f5:f4:76:87:c9:16:68:b1:30:e9: fc:49:fb:a7:ef:c8:ef:fd:49:ab:6d:f0:6b:52:ab: f5:ec:f8:d1:fd:81:ea:a6:ae:04:9a:69:ef:a2:94: 98:c8:1b:64:a0:5c:4e:29:27:e2:76:a2:1a:05:f9: 0a:93:9f:5a:10:91:52:8b:76:98:f2:4a:98:e8:73: 30:8b:0f:e4:be:6f:c4:c1:f4:a3:1f:c3:7f:e5:f7: 01:e0:18:ba:40:da:c0:8e:32:3c:4a:59:e8:be:66: 08:8f:9e:35:67:91:cc:27:66:22:e4:48:5b:82:49: 5a:35:82:28:09:30:b3:66:b0:88:2c:49:93:06:9c: 75:84:ed:c6:70:46:44:46:d6:02:92:d3:1a:7a:16: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C1:77:FC:10:13:2F:73:3B:70:72:62:7D:52:57:AC:64:DD:54:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.crl X509v3 Authority Key Identifier: keyid:40:85:E8:20:C6:8E:B7:7B:40:0C:C0:C5:D1:58:38:C8:EF:5F:80:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c6:db:66:74:85:7e:b5:de:e6:d7:2f:05:27:e0:f7:9a:5d: e9:7c:81:a9:ac:33:40:69:1a:0d:b4:8f:36:93:d6:0d:4c:d0: 4d:7c:5c:6e:19:35:8b:b6:4a:0d:f3:82:e4:aa:42:f9:47:ff: 1f:2e:fe:76:40:de:f5:60:ab:99:55:59:93:9a:ac:fa:39:54: f4:4f:7e:f0:37:30:05:ff:fb:26:f2:f6:92:04:40:5c:78:f1: ea:3c:fa:22:7b:a8:cd:f3:52:d1:6c:d8:26:cd:08:3f:d0:17: 9b:0f:20:23:5e:89:4a:84:de:c5:f3:c0:00:db:8f:f7:36:7f: 7f:f2:df:90:cd:db:1d:05:7c:1b:b7:e3:04:d5:ef:37:0b:fa: 73:7f:c5:69:e4:9d:fb:05:17:7b:99:80:8a:cb:64:45:90:ec: 54:c7:41:69:47:6c:e8:21:07:7f:06:a7:02:6e:13:86:76:65: d0:db:4c:14:62:df:0e:ea:57:33:2a:ef:62:2b:c8:f7:72:35: 2e:38:96:59:be:45:b1:9e:49:4f:60:1b:87:cf:ce:18:97:18: 37:d1:cc:b3:33:b4:ff:e3:cd:b1:65:05:30:57:50:f9:dd:3e: 68:d4:8a:c8:c2:5b:08:99:16:fc:82:dc:4b:5d:1d:78:e2:7e: 04:6f:c3:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IjznEdc1yIx9y3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E0MDJmYjctMmMzZC00YzY1LWE2OTMtNDFmZmFlN2I5 MWM1MB4XDTI2MDQxNzA2MDAwM1oXDTI2MDQxOTA2MDAwMFowLzEtMCsGA1UEAxMk NmI5NWE2MjktZjRlYi00ZDdjLWJiYmQtOGVjMGQ1NmI0NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2fnqSHkpBYskmA6PBuyEGgZW2MFRm6PVSHt 6p/Yqjio5vdSF1rEOZzl+HX7o4HhnoAGEDoyy+G1a5iZcl2vzudwQfCzoC1kXbk5 fbPvy5NlaC4IDXiUJkW8yMLd/wWJP422g3PTCf3533d45fX0dofJFmixMOn8Sfun 78jv/UmrbfBrUqv17PjR/YHqpq4EmmnvopSYyBtkoFxOKSfidqIaBfkKk59aEJFS i3aY8kqY6HMwiw/kvm/EwfSjH8N/5fcB4Bi6QNrAjjI8SlnovmYIj541Z5HMJ2Yi 5EhbgklaNYIoCTCzZrCILEmTBpx1hO3GcEZERtYCktMaehbbRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJrBd/wQEy9zO3ByYn1SV6xk3VS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYTQw MmZiNy0yYzNkLTRjNjUtYTY5My00MWZmYWU3YjkxYzUvM2E0MDJmYjctMmMzZC00 YzY1LWE2OTMtNDFmZmFlN2I5MWM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2E0MDJmYjctMmMzZC00YzY1LWE2 OTMtNDFmZmFlN2I5MWM1LzNhNDAyZmI3LTJjM2QtNGM2NS1hNjkzLTQxZmZhZTdi OTFjNS5jcmwwHwYDVR0jBBgwFoAUQIXoIMaOt3tADMDF0Vg4yO9fgBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYTQwMmZiNy0yYzNkLTRjNjUtYTY5My00MWZm YWU3YjkxYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOxttmdIV+td7m1y8FJ+D3 ml3pfIGprDNAaRoNtI82k9YNTNBNfFxuGTWLtkoN84LkqkL5R/8fLv52QN71YKuZ VVmTmqz6OVT0T37wNzAF//sm8vaSBEBcePHqPPoie6jN81LRbNgmzQg/0BebDyAj XolKhN7F88AA24/3Nn9/8t+QzdsdBXwbt+ME1e83C/pzf8Vp5J37BRd7mYCKy2RF kOxUx0FpR2zoIQd/BqcCbhOGdmXQ20wUYt8O6lczKu9iK8j3cjUuOJZZvkWxnklP YBuHz84Ylxg30cyzM7T/482xZQUwV1D53T5o1IrIwlsImRb8gtxLXR144n4Eb8MT -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:21 2026 by rpki-client