$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft File: 521afd0e-d4dc-449b-89c3-9881a2bfd053.mft (raw, json) Hash identifier: ZjvKeQTKM35K4QQWoe4U+hXtZtMDHsAejWuZpVDLMck= Subject key identifier: CB:4D:86:FC:05:9F:EC:9D:36:1D:25:A5:F1:7A:2B:5B:2E:4B:EE:99 Authority key identifier: 41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA Certificate issuer: /CN=521afd0e-d4dc-449b-89c3-9881a2bfd053 Certificate serial: 010D0C9F4328584D8CA17F5D7740E1EE43F64C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft Manifest number: 010D0C9F432858472E44014E34E5BE43E57AF448 Signing time: Sat 18 Apr 2026 17:00:03 +0000 Manifest this update: Sat 18 Apr 2026 17:00:03 +0000 Manifest next update: Tue 21 Apr 2026 17:00:00 +0000 Files and hashes: 1: 521afd0e-d4dc-449b-89c3-9881a2bfd053.crl (hash: LfDnTFkFb+GvVMtpbvpJBW+qLW8rOIdbXygXYh0Fr3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:a1:7f:5d:77:40:e1:ee:43:f6:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521afd0e-d4dc-449b-89c3-9881a2bfd053 Validity Not Before: Apr 18 17:00:03 2026 GMT Not After : Apr 21 17:00:00 2026 GMT Subject: CN=bc1c0e15-b16f-4570-83e0-74b8a80a4395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:52:1c:08:05:d0:b3:f7:4a:1a:1c:ce:77: 7a:5a:f3:80:06:b6:15:73:2d:85:ec:4a:e7:67:a5: 70:21:9c:99:87:d3:8a:b8:e7:9e:bb:1f:3e:65:e8: 2e:51:b4:0b:df:11:fb:3c:60:4d:96:30:f4:be:20: 10:2d:b2:fe:cc:7b:08:41:da:f5:a8:04:35:34:e2: af:8e:8e:09:8c:ee:5b:9d:4a:b8:fa:c4:97:5f:6a: 9c:07:e8:5b:d5:d8:53:6d:5b:b5:ac:6b:98:50:9f: 02:e5:33:81:55:3f:d8:61:30:a1:cd:a5:8c:86:89: 8f:38:07:e6:4c:fb:de:45:f1:a5:cb:4b:9f:cf:bb: 4f:3b:64:3e:e4:82:70:e4:99:3e:ef:ac:16:2f:52: 49:91:48:5c:de:39:ba:78:f5:53:ec:b6:ec:69:c0: b9:38:40:ef:26:62:24:95:a7:4e:69:57:53:41:1d: e8:11:e2:6a:fe:16:c2:79:bb:85:cf:56:c7:45:5c: 39:4c:e8:55:a3:61:5b:64:e2:f1:08:71:af:10:30: b3:bf:05:e3:9b:23:43:21:ae:5f:7e:a5:60:7d:01: 6a:38:c1:50:f8:6d:f7:03:67:a0:e8:5f:2f:ee:6d: ab:b3:9c:93:6c:4e:14:c7:87:bd:68:42:b2:29:95: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4D:86:FC:05:9F:EC:9D:36:1D:25:A5:F1:7A:2B:5B:2E:4B:EE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.crl X509v3 Authority Key Identifier: keyid:41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fb:f5:af:1d:c8:6e:a6:5f:34:e0:c7:20:e9:df:ab:e1:eb: a9:f6:c3:b3:58:04:88:ac:ef:fd:26:37:7f:62:57:d0:85:c4: b7:64:37:1c:77:99:87:40:d6:d6:79:e0:68:f5:26:72:4b:bb: 23:b0:0c:32:30:9a:d5:8c:ef:5a:6d:62:1b:f8:cf:38:f1:d0: 42:b0:0f:83:62:d9:50:34:0a:04:70:e8:75:c3:9b:28:a6:75: 70:79:9f:9b:57:ab:b7:93:2c:1f:53:a6:e2:22:e2:1b:bf:5d: f2:e7:30:40:26:c2:06:7c:b4:06:ea:e3:04:b7:72:a5:bd:63: 0c:ce:bf:50:80:4b:68:50:3d:56:16:21:73:51:c6:ef:f9:a7: 52:7c:b9:99:12:36:bf:8e:59:14:a0:58:33:65:b3:82:ca:17: f3:fe:0d:79:fd:dc:6f:7f:6d:1f:b3:a5:e3:6d:37:1e:ca:f3: ef:83:ec:d0:64:c1:74:91:66:a7:c1:56:3a:2b:49:3f:83:e9: 10:10:f4:b9:d0:8d:2b:e8:c5:5c:af:24:5b:7c:09:c4:b3:1e: 91:24:ea:98:c5:4e:20:d4:30:85:61:d3:d8:b2:13:7f:da:f3: de:d6:5b:39:ab:f1:72:c0:31:ac:c7:5f:33:28:94:0c:b6:d6: 56:6b:76:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MoX9dd0Dh7kP2TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxYWZkMGUtZDRkYy00NDliLTg5YzMtOTg4MWEyYmZk MDUzMB4XDTI2MDQxODE3MDAwM1oXDTI2MDQyMTE3MDAwMFowLzEtMCsGA1UEAxMk YmMxYzBlMTUtYjE2Zi00NTcwLTgzZTAtNzRiOGE4MGE0Mzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKZSHAgF0LP3Shocznd6WvOABrYVcy2F7Ern Z6VwIZyZh9OKuOeeux8+ZeguUbQL3xH7PGBNljD0viAQLbL+zHsIQdr1qAQ1NOKv jo4JjO5bnUq4+sSXX2qcB+hb1dhTbVu1rGuYUJ8C5TOBVT/YYTChzaWMhomPOAfm TPveRfGly0ufz7tPO2Q+5IJw5Jk+76wWL1JJkUhc3jm6ePVT7LbsacC5OEDvJmIk ladOaVdTQR3oEeJq/hbCebuFz1bHRVw5TOhVo2FbZOLxCHGvEDCzvwXjmyNDIa5f fqVgfQFqOMFQ+G33A2eg6F8v7m2rs5yTbE4Ux4e9aEKyKZW1gQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMtNhvwFn+ydNh0lpfF6K1suS+6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MjFh ZmQwZS1kNGRjLTQ0OWItODljMy05ODgxYTJiZmQwNTMvNTIxYWZkMGUtZDRkYy00 NDliLTg5YzMtOTg4MWEyYmZkMDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTIxYWZkMGUtZDRkYy00NDliLTg5 YzMtOTg4MWEyYmZkMDUzLzUyMWFmZDBlLWQ0ZGMtNDQ5Yi04OWMzLTk4ODFhMmJm ZDA1My5jcmwwHwYDVR0jBBgwFoAUQWbT5G9HK6y8oF3v6lLydG8tAdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81MjFhZmQwZS1kNGRjLTQ0OWItODljMy05ODgx YTJiZmQwNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/+/WvHchupl804Mcg6d+r 4eup9sOzWASIrO/9Jjd/YlfQhcS3ZDccd5mHQNbWeeBo9SZyS7sjsAwyMJrVjO9a bWIb+M848dBCsA+DYtlQNAoEcOh1w5sopnVweZ+bV6u3kywfU6biIuIbv13y5zBA JsIGfLQG6uMEt3KlvWMMzr9QgEtoUD1WFiFzUcbv+adSfLmZEja/jlkUoFgzZbOC yhfz/g15/dxvf20fs6XjbTceyvPvg+zQZMF0kWanwVY6K0k/g+kQEPS50I0r6MVc ryRbfAnEsx6RJOqYxU4g1DCFYdPYshN/2vPe1ls5q/FywDGsx18zKJQMttZWa3bk -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:03 2026 by rpki-client