$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: PQhR6nIckc1hPBX3RcOG0fd7jY/AsDNn47WLI7FLo0c= Subject key identifier: 08:F8:3D:D0:1B:A5:AE:14:08:BA:1E:93:EB:C0:1C:B3:53:11:22:5D Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584D897D73AD9562B86E7FA79B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A076A Signing time: Fri 17 Apr 2026 14:00:03 +0000 Manifest this update: Fri 17 Apr 2026 14:00:03 +0000 Manifest next update: Sun 19 Apr 2026 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: k5yN3RuWBrPPpohuRX3RNKagTKASYRrHgVq10Ta7Cb8=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: /gNpsNOOxRZPPkaIoqsBte55BWyt5KvvCbU4C31NZNQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:7d:73:ad:95:62:b8:6e:7f:a7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Apr 17 14:00:03 2026 GMT Not After : Apr 19 14:00:00 2026 GMT Subject: CN=8d9fdf60-3bac-4833-b00e-6a7f318fbdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:eb:92:92:3e:de:d4:14:7e:68:01:ed:7a: 7c:8a:82:b7:94:1a:64:01:c8:e6:79:c8:94:80:ec: a7:e0:b6:4c:4a:b7:9a:09:a1:f8:48:c3:57:de:fd: 24:17:e7:28:06:be:9d:8b:b8:f1:ff:6d:3e:a1:7a: c4:11:4f:a4:9a:97:02:46:c5:c3:87:64:d4:72:25: da:58:17:b5:90:4a:d3:07:26:ea:4e:73:cc:a5:f6: 5d:53:e1:d6:46:04:28:f3:a1:80:b0:06:0c:0c:4c: cc:82:2c:d6:69:47:d0:da:ca:c0:f3:ef:5c:63:0a: 3b:49:17:94:1a:8e:7d:03:75:fb:1c:cc:c1:73:df: b3:61:4a:c6:01:64:93:29:24:5f:12:b6:69:3a:6b: 65:f5:f0:62:20:a7:05:ca:04:f3:aa:ec:69:4d:c6: ca:2c:26:07:f6:c6:d4:7e:87:86:d1:73:09:58:b2: e7:7c:7b:28:6b:77:9f:7a:6b:13:0d:13:3e:a2:be: 2c:30:4c:0b:d2:7f:a0:0f:c5:ac:86:90:9a:8b:11: 8d:aa:31:2e:43:e6:28:71:56:9e:e0:ca:26:03:23: 4f:eb:61:e0:52:d0:52:ce:18:4f:f5:b2:d2:c8:fe: 1d:35:24:28:17:41:84:24:53:c4:e2:e5:49:99:75: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:3D:D0:1B:A5:AE:14:08:BA:1E:93:EB:C0:1C:B3:53:11:22:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:be:ae:28:b5:56:59:17:93:ee:a2:d7:17:2b:57:c9:e5:d8: 89:65:fe:3d:b7:eb:b4:5e:16:6c:c8:4d:86:77:4c:15:80:b1: b3:aa:b3:85:46:07:c9:e3:ec:96:fd:9d:98:51:4d:5c:32:f9: 30:ec:84:21:f9:60:1a:46:50:68:d1:69:a5:b9:92:06:37:d2: 06:8a:e4:cb:54:b0:6e:a2:af:07:62:5c:46:3e:10:cf:55:33: 9e:da:b3:d1:b5:9f:c7:8f:1b:c8:fc:81:1c:a6:9e:c0:78:e0: a0:e3:74:7f:4e:74:e6:9b:51:b2:e1:e4:9b:ba:63:da:74:31: 48:d8:80:38:92:f6:ba:bd:85:7d:b4:57:c4:40:8e:f6:49:57: 35:00:05:cb:bb:1f:ea:c0:08:8e:5b:e4:0c:d8:a5:e2:af:01: 9c:57:e9:f6:d4:2c:b8:26:f7:a4:74:4f:56:a3:9b:f6:f9:c7: e5:d7:54:a5:09:87:c1:e3:60:d9:db:5f:13:0f:b1:71:13:02: 2a:a4:d8:2d:c0:0c:7b:33:62:4d:7d:4e:81:bc:42:e4:43:87: 44:74:08:7a:44:eb:d3:1e:27:08:01:ef:3a:e5:cd:3b:b2:b6: 77:14:2b:e8:d7:b7:af:59:f1:ef:2e:2d:7b:76:99:41:d3:cb: fb:92:3a:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JfXOtlWK4bn+nmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI2MDQxNzE0MDAwM1oXDTI2MDQxOTE0MDAwMFowLzEtMCsGA1UEAxMk OGQ5ZmRmNjAtM2JhYy00ODMzLWIwMGUtNmE3ZjMxOGZiZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGLrkpI+3tQUfmgB7Xp8ioK3lBpkAcjmeciU gOyn4LZMSreaCaH4SMNX3v0kF+coBr6di7jx/20+oXrEEU+kmpcCRsXDh2TUciXa WBe1kErTBybqTnPMpfZdU+HWRgQo86GAsAYMDEzMgizWaUfQ2srA8+9cYwo7SReU Go59A3X7HMzBc9+zYUrGAWSTKSRfErZpOmtl9fBiIKcFygTzquxpTcbKLCYH9sbU foeG0XMJWLLnfHsoa3efemsTDRM+or4sMEwL0n+gD8WshpCaixGNqjEuQ+YocVae 4MomAyNP62HgUtBSzhhP9bLSyP4dNSQoF0GEJFPE4uVJmXU/WwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAj4PdAbpa4UCLoek+vAHLNTESJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfvq4otVZZF5PuotcXK1fJ 5diJZf49t+u0XhZsyE2Gd0wVgLGzqrOFRgfJ4+yW/Z2YUU1cMvkw7IQh+WAaRlBo 0WmluZIGN9IGiuTLVLBuoq8HYlxGPhDPVTOe2rPRtZ/HjxvI/IEcpp7AeOCg43R/ TnTmm1Gy4eSbumPadDFI2IA4kva6vYV9tFfEQI72SVc1AAXLux/qwAiOW+QM2KXi rwGcV+n21Cy4JvekdE9Wo5v2+cfl11SlCYfB42DZ218TD7FxEwIqpNgtwAx7M2JN fU6BvELkQ4dEdAh6ROvTHicIAe865c07srZ3FCvo17evWfHvLi17dplB08v7kjra -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:33 2026 by rpki-client