$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft File: d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft (raw, json) Hash identifier: MHbQBANv2CCLSi2jfgLEHB1TSlTiTtk9AMhd6B7HLXc= Subject key identifier: A1:AD:64:19:A8:E2:03:63:EE:5D:E7:D5:64:E2:04:91:3A:06:03:11 Authority key identifier: DB:4C:64:33:D9:E2:FD:6A:C3:BE:2E:95:BD:EF:FF:5B:0F:7B:39:8F Certificate issuer: /CN=d20efc30-2cdf-4e2a-b771-679644d5f2b9 Certificate serial: 010D0C9F4328584D8E426016CF4549D825E66A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft Manifest number: 010D0C9F4328584073A846126535735C13F6A7F1 Signing time: Sun 19 Apr 2026 07:00:03 +0000 Manifest this update: Sun 19 Apr 2026 07:00:03 +0000 Manifest next update: Tue 21 Apr 2026 07:00:00 +0000 Files and hashes: 1: d20efc30-2cdf-4e2a-b771-679644d5f2b9.crl (hash: 4+EU4BroQnGniw4I7MulLieCK3Dcke+ewC58kf5UoOg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:42:60:16:cf:45:49:d8:25:e6:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20efc30-2cdf-4e2a-b771-679644d5f2b9 Validity Not Before: Apr 19 07:00:03 2026 GMT Not After : Apr 21 07:00:00 2026 GMT Subject: CN=2f868db1-dd18-4c0b-870c-902654b87562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:49:21:bb:37:86:29:3f:72:85:2f:76:80: 71:7c:f7:b4:ea:b7:8e:20:9b:dd:2f:35:45:e7:a1: f8:48:23:88:81:07:d2:7f:33:7a:ae:51:8f:e5:c0: 0f:ce:25:cb:89:3c:d7:61:95:1b:a5:d3:dc:f4:c8: 15:d0:9d:83:57:16:94:67:77:47:1b:24:fd:a1:b2: 29:06:75:76:8f:f1:b0:31:72:14:ba:b5:6e:c4:9c: 7f:b5:85:59:9b:b7:4f:8b:9d:09:a6:47:f9:46:59: 8a:e1:60:49:13:55:c1:fe:ae:44:62:d0:78:b0:a6: 39:9d:f6:03:93:8f:cb:8f:fa:bf:93:46:69:2f:2f: 82:88:65:21:e9:78:11:50:4c:6e:47:e2:e7:11:29: 61:b0:e7:73:6c:2e:a3:5c:87:64:f1:37:c7:ad:10: 47:9f:7d:15:a7:5a:9f:a2:80:54:09:41:98:22:c5: 80:56:23:88:e0:7c:73:92:19:24:e2:09:86:96:b0: cd:da:16:41:2c:ef:8c:29:79:7d:c1:b9:ae:67:f8: 13:ef:6c:0a:13:2c:92:03:d1:a9:6a:cb:22:38:51: d2:d7:d7:09:d0:18:86:d1:2b:fc:1c:57:b0:86:81: 59:b6:88:59:a6:7a:00:d0:3e:e8:ad:4e:0b:53:0c: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AD:64:19:A8:E2:03:63:EE:5D:E7:D5:64:E2:04:91:3A:06:03:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.crl X509v3 Authority Key Identifier: keyid:DB:4C:64:33:D9:E2:FD:6A:C3:BE:2E:95:BD:EF:FF:5B:0F:7B:39:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:98:fe:65:f3:2f:f5:e9:6f:b6:95:7d:ab:50:72:a3:1b:7e: bc:03:5e:a8:65:65:5f:1f:a6:78:35:e7:a7:6d:19:42:ba:21: a6:77:1c:19:80:f0:68:32:52:5e:fa:3b:5c:14:52:fc:7f:2c: 3b:0f:22:b4:37:fc:a2:e7:39:32:c7:06:f8:e2:8d:df:13:74: 7a:75:ad:44:be:13:08:65:58:a7:5b:98:09:10:06:e4:b9:3b: 5e:5a:74:ff:d2:32:b6:e5:e0:f1:41:f2:4f:e2:80:28:f3:07: 2a:79:1b:a4:92:a3:92:b6:95:0c:61:b5:6e:53:b6:fb:ee:d0: 12:2e:f0:f9:30:cd:b3:11:b2:a7:77:14:74:e2:a2:34:4c:a8: 2a:33:7e:0f:3b:f1:e3:a4:36:db:ab:f2:e4:fb:17:61:db:83: 1d:a1:df:dd:08:37:87:f9:61:f3:9f:7e:23:10:44:15:13:46: 14:eb:a5:e5:e3:10:ef:04:a0:31:91:b1:32:b9:db:a8:cc:35: c3:0f:07:4a:75:39:99:34:fa:76:74:40:ff:bb:7a:c5:0b:c6: 00:2a:4b:18:5c:65:31:83:87:2a:af:f6:9e:cc:b2:7a:e3:d3: 04:90:f0:79:8f:7f:bd:92:a0:88:55:fa:f2:6f:89:c5:0b:9f: 76:33:d2:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2OQmAWz0VJ2CXmakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwZWZjMzAtMmNkZi00ZTJhLWI3NzEtNjc5NjQ0ZDVm MmI5MB4XDTI2MDQxOTA3MDAwM1oXDTI2MDQyMTA3MDAwMFowLzEtMCsGA1UEAxMk MmY4NjhkYjEtZGQxOC00YzBiLTg3MGMtOTAyNjU0Yjg3NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXlJIbs3hik/coUvdoBxfPe06reOIJvdLzVF 56H4SCOIgQfSfzN6rlGP5cAPziXLiTzXYZUbpdPc9MgV0J2DVxaUZ3dHGyT9obIp BnV2j/GwMXIUurVuxJx/tYVZm7dPi50Jpkf5RlmK4WBJE1XB/q5EYtB4sKY5nfYD k4/Lj/q/k0ZpLy+CiGUh6XgRUExuR+LnESlhsOdzbC6jXIdk8TfHrRBHn30Vp1qf ooBUCUGYIsWAViOI4Hxzkhkk4gmGlrDN2hZBLO+MKXl9wbmuZ/gT72wKEyySA9Gp assiOFHS19cJ0BiG0Sv8HFewhoFZtohZpnoA0D7orU4LUwxrZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGtZBmo4gNj7l3n1WTiBJE6BgMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjBl ZmMzMC0yY2RmLTRlMmEtYjc3MS02Nzk2NDRkNWYyYjkvZDIwZWZjMzAtMmNkZi00 ZTJhLWI3NzEtNjc5NjQ0ZDVmMmI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIwZWZjMzAtMmNkZi00ZTJhLWI3 NzEtNjc5NjQ0ZDVmMmI5L2QyMGVmYzMwLTJjZGYtNGUyYS1iNzcxLTY3OTY0NGQ1 ZjJiOS5jcmwwHwYDVR0jBBgwFoAU20xkM9ni/WrDvi6Vve//Ww97OY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjBlZmMzMC0yY2RmLTRlMmEtYjc3MS02Nzk2 NDRkNWYyYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATmP5l8y/16W+2lX2rUHKj G368A16oZWVfH6Z4NeenbRlCuiGmdxwZgPBoMlJe+jtcFFL8fyw7DyK0N/yi5zky xwb44o3fE3R6da1EvhMIZVinW5gJEAbkuTteWnT/0jK25eDxQfJP4oAo8wcqeRuk kqOStpUMYbVuU7b77tASLvD5MM2zEbKndxR04qI0TKgqM34PO/HjpDbbq/Lk+xdh 24Mdod/dCDeH+WHzn34jEEQVE0YU66Xl4xDvBKAxkbEyuduozDXDDwdKdTmZNPp2 dED/u3rFC8YAKksYXGUxg4cqr/aezLJ649MEkPB5j3+9kqCIVfryb4nFC592M9JT -----END CERTIFICATE-----Generated at Sun Apr 19 15:30:12 2026 by rpki-client