$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft File: bfc0b168-b834-4192-acf1-30565a4b3e0c.mft (raw, json) Hash identifier: ZtLE0RCfakjyVB9KNy2F3aGy93FnTJinUYpmigZ1u6I= Subject key identifier: DF:F3:F2:15:F3:C0:63:B2:57:DD:6F:E3:00:4B:7F:7A:5C:1C:DF:E4 Authority key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Certificate issuer: /CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Certificate serial: 010D0C9F4328584D8CBF45DA4DCFA1906626B2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft Manifest number: 010D0C9F4328584073A822049B70DB112D5CE3B1 Signing time: Sat 18 Apr 2026 18:00:03 +0000 Manifest this update: Sat 18 Apr 2026 18:00:03 +0000 Manifest next update: Mon 20 Apr 2026 18:00:00 +0000 Files and hashes: 1: bfc0b168-b834-4192-acf1-30565a4b3e0c.crl (hash: tDWtCPes1hnY0EmPJQD449hj4z2huIrPpYPLxePzpe4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:bf:45:da:4d:cf:a1:90:66:26:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Validity Not Before: Apr 18 18:00:03 2026 GMT Not After : Apr 20 18:00:00 2026 GMT Subject: CN=a01133fc-b2e8-4d37-b12c-993cd8b9a1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:41:76:43:31:23:1e:23:3c:6c:33:7a:c6: 8c:84:0b:b5:5d:cf:62:fc:9d:3b:31:6b:d7:eb:8a: 1c:26:d3:63:80:6e:99:a0:7e:93:05:51:e2:ca:da: 84:c2:d5:90:84:c7:7e:77:11:ed:a8:fc:bc:b7:f0: 69:a9:ac:b1:64:82:cd:44:66:ea:3e:73:38:0c:8f: 02:67:c4:d0:28:c9:ec:b9:40:27:89:78:f0:c2:ce: 33:7f:fb:9b:3a:a5:a0:1a:16:cd:38:8b:65:3a:fd: f4:71:58:57:fb:f7:8d:24:28:bb:6a:51:5d:57:48: a2:ac:2c:cb:1f:b3:d6:14:c9:47:d0:d6:df:59:84: 85:e6:79:1c:70:26:24:f6:69:cf:35:de:87:d8:d5: 45:4c:ff:53:67:0b:85:d0:aa:fe:a7:31:70:6f:03: 83:ae:c3:43:04:4a:7e:d1:ed:3a:8b:c8:3c:95:78: 34:f5:7f:e6:b7:ab:c2:a9:0c:3c:2c:57:98:b2:86: b8:2f:00:8e:f4:6d:44:f2:b5:ca:8e:6e:f9:fa:fb: cf:e0:bc:9c:da:84:05:dd:bc:27:83:86:c0:b0:81: 0f:71:d4:2b:e6:f0:6d:94:53:c7:41:21:a7:6a:aa: d9:2f:12:8a:3c:4d:22:5c:77:bb:f3:7c:89:1b:2f: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F3:F2:15:F3:C0:63:B2:57:DD:6F:E3:00:4B:7F:7A:5C:1C:DF:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl X509v3 Authority Key Identifier: keyid:0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:43:77:58:90:3c:00:c2:fd:5c:a6:26:d2:e0:e7:48:b3:27: 3b:72:13:16:82:25:a0:3f:71:d5:4d:a6:a7:b6:4f:d3:2f:25: 4d:2a:2a:4d:dd:fc:54:96:e0:72:11:49:1a:d2:4f:c3:0e:39: 2b:aa:53:4a:f8:7e:92:47:74:80:52:cf:ef:5f:79:7a:c9:70: 24:10:c3:7f:82:b8:15:21:39:2b:ce:79:70:96:a2:1a:f4:00: c1:8a:3c:57:d9:76:02:ec:e4:91:49:6d:c9:ec:02:84:53:4b: 5c:4f:b8:16:7d:3f:aa:3a:ff:05:be:2a:81:49:a2:44:e5:86: 36:d5:19:cb:1e:ba:d9:46:9c:1d:f4:c8:d1:ff:44:75:ad:0f: 4a:73:f3:a0:f5:85:9c:ab:2b:ef:49:a6:17:d9:bc:7a:02:6c: 27:52:89:87:63:68:2a:c8:5a:c7:03:1b:3b:68:bc:5a:71:84: 17:86:27:5a:35:c5:54:6c:16:28:8f:2d:56:64:a6:c4:8e:7d: 61:cd:22:ba:ee:25:9f:63:f4:9c:37:18:1a:64:62:62:e0:ea: 5a:6a:24:ec:97:55:3a:53:31:5d:90:cd:eb:4c:a7:8e:d4:a9: 4b:88:f8:cd:6c:46:a0:ed:8c:f3:ea:92:5d:d0:46:d6:9a:41: 63:2c:4f:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Mv0XaTc+hkGYmssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIz ZTBjMB4XDTI2MDQxODE4MDAwM1oXDTI2MDQyMDE4MDAwMFowLzEtMCsGA1UEAxMk YTAxMTMzZmMtYjJlOC00ZDM3LWIxMmMtOTkzY2Q4YjlhMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy9BdkMxIx4jPGwzesaMhAu1Xc9i/J07MWvX 64ocJtNjgG6ZoH6TBVHiytqEwtWQhMd+dxHtqPy8t/BpqayxZILNRGbqPnM4DI8C Z8TQKMnsuUAniXjwws4zf/ubOqWgGhbNOItlOv30cVhX+/eNJCi7alFdV0iirCzL H7PWFMlH0NbfWYSF5nkccCYk9mnPNd6H2NVFTP9TZwuF0Kr+pzFwbwODrsNDBEp+ 0e06i8g8lXg09X/mt6vCqQw8LFeYsoa4LwCO9G1E8rXKjm75+vvP4Lyc2oQF3bwn g4bAsIEPcdQr5vBtlFPHQSGnaqrZLxKKPE0iXHe783yJGy/iLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN/z8hXzwGOyV91v4wBLf3pcHN/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMw YjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvYmZjMGIxNjgtYjgzNC00 MTkyLWFjZjEtMzA1NjVhNGIzZTBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmZjMGIxNjgtYjgzNC00MTkyLWFj ZjEtMzA1NjVhNGIzZTBjL2JmYzBiMTY4LWI4MzQtNDE5Mi1hY2YxLTMwNTY1YTRi M2UwYy5jcmwwHwYDVR0jBBgwFoAUC19oQniK36OwGqua4T3GuR4P0aEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2 NWE0YjNlMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABQ3dYkDwAwv1cpibS4OdI syc7chMWgiWgP3HVTaantk/TLyVNKipN3fxUluByEUka0k/DDjkrqlNK+H6SR3SA Us/vX3l6yXAkEMN/grgVITkrznlwlqIa9ADBijxX2XYC7OSRSW3J7AKEU0tcT7gW fT+qOv8FviqBSaJE5YY21RnLHrrZRpwd9MjR/0R1rQ9Kc/Og9YWcqyvvSaYX2bx6 AmwnUomHY2gqyFrHAxs7aLxacYQXhidaNcVUbBYojy1WZKbEjn1hzSK67iWfY/Sc NxgaZGJi4OpaaiTsl1U6UzFdkM3rTKeO1KlLiPjNbEag7Yzz6pJd0EbWmkFjLE9o -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:48 2026 by rpki-client