$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft File: 108d0589-c0d8-4414-978d-7eeb5898f3f8.mft (raw, json) Hash identifier: g8qgY2NfHcvkq6Ik4de8CHKwrfCtzDeEGG9vlAB9v8Q= Subject key identifier: AA:AD:BD:0A:40:00:D0:B7:0E:BB:FC:87:16:53:A6:53:BE:0A:64:BA Authority key identifier: 11:EC:89:8D:97:2B:C0:8A:8A:47:66:3D:5A:32:43:1B:03:37:BC:AD Certificate issuer: /CN=108d0589-c0d8-4414-978d-7eeb5898f3f8 Certificate serial: 010D0C9F4328584D8D36629CFBA6FAC64BDB8FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft Manifest number: 010D0C9F4328584BE4F543F4926062C0F1382AD8 Signing time: Sat 18 Apr 2026 22:00:04 +0000 Manifest this update: Sat 18 Apr 2026 22:00:04 +0000 Manifest next update: Tue 21 Apr 2026 22:00:00 +0000 Files and hashes: 1: 108d0589-c0d8-4414-978d-7eeb5898f3f8.crl (hash: 16UBwlJYFvsIS6EboQenMve/nxJkJudJLvXYUthad44=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:36:62:9c:fb:a6:fa:c6:4b:db:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108d0589-c0d8-4414-978d-7eeb5898f3f8 Validity Not Before: Apr 18 22:00:04 2026 GMT Not After : Apr 21 22:00:00 2026 GMT Subject: CN=013b1cb8-dd6d-4ca8-9d93-bf4574e6a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:87:b1:18:78:d4:36:9c:da:9a:5c:7b:d7: 11:bf:0d:5b:1d:50:34:64:a6:b2:6f:db:b1:e2:2f: 0a:2a:6b:e8:20:8d:2b:64:01:fa:5e:42:a1:90:fc: 50:f9:56:9b:11:7b:c4:17:b5:4b:6a:48:35:f9:0c: 4b:d9:e5:83:30:d5:7e:10:b2:56:53:f1:ef:f8:54: 38:8b:e0:03:07:8f:77:93:0e:00:2d:2a:f5:d1:b8: 3b:3c:9b:75:4e:69:77:a5:57:bc:6e:77:4f:b3:0b: 27:e7:77:e9:5c:be:e4:d3:c5:09:58:d3:ad:15:90: d0:0f:94:74:77:10:f0:b3:33:36:f3:7e:3b:93:19: d7:19:54:b3:c6:8e:56:7e:62:a4:c7:37:93:6b:35: d2:4b:dc:bb:c3:e6:90:a3:29:13:42:94:00:cb:d7: 54:19:c2:1f:62:7d:a7:4b:90:85:b2:cb:db:4b:13: 53:1c:28:47:a8:f5:95:41:31:de:c0:bc:93:c9:9e: 47:f7:a4:f3:9d:b4:6a:b0:db:e2:8f:72:b7:fe:36: 09:99:75:d1:42:7b:b9:03:d4:6d:e9:a4:7c:0a:da: 02:e3:2e:86:f5:28:fe:ec:7d:55:79:3c:a9:b6:53: 2e:a8:b4:00:90:5e:90:45:25:a7:19:1e:a7:da:6c: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:BD:0A:40:00:D0:B7:0E:BB:FC:87:16:53:A6:53:BE:0A:64:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.crl X509v3 Authority Key Identifier: keyid:11:EC:89:8D:97:2B:C0:8A:8A:47:66:3D:5A:32:43:1B:03:37:BC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:0e:b3:f3:cf:f9:7a:be:a2:96:d6:62:c4:52:99:14:63:3a: f7:c9:bd:b6:65:f2:48:eb:8e:74:b4:6b:0c:ae:43:31:e7:f0: 36:6c:9e:22:ae:79:99:90:3b:39:c0:26:08:cb:61:98:fe:5f: 38:25:a7:ee:51:a0:d7:9f:de:d6:0a:47:0b:d5:13:ad:94:dc: 13:f5:39:43:78:7b:49:cf:24:08:f5:83:19:49:4c:6a:78:33: 9e:cc:95:88:cf:52:81:8d:7d:1e:0c:97:64:c5:8b:4b:73:dd: 14:00:0d:c9:b2:60:55:58:b2:14:79:42:4b:4b:ef:38:9f:f5: 95:7d:ff:28:32:ff:99:3d:ba:88:ca:be:00:79:75:b6:39:ff: 78:78:30:1c:a2:4a:07:11:79:77:25:86:c4:6f:da:90:5a:79: b4:ec:b9:57:72:0b:1b:6e:c5:13:a7:f5:99:5a:c2:4d:6d:44: 8e:52:75:b5:8c:4d:95:e7:b8:d3:0b:28:9f:3c:c6:3c:bb:5b: be:0a:27:84:17:cb:ff:52:f3:94:50:db:9f:8f:ae:4f:49:40: 28:bd:7b:f6:9b:91:fa:96:3f:5d:8a:d5:5e:7f:b8:58:4d:28: 9b:a7:5d:bd:60:54:44:c2:53:1e:cc:e9:4c:9f:95:17:b9:8b: 7b:7f:0a:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2NNmKc+6b6xkvbj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA4ZDA1ODktYzBkOC00NDE0LTk3OGQtN2VlYjU4OThm M2Y4MB4XDTI2MDQxODIyMDAwNFoXDTI2MDQyMTIyMDAwMFowLzEtMCsGA1UEAxMk MDEzYjFjYjgtZGQ2ZC00Y2E4LTlkOTMtYmY0NTc0ZTZhOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMmHsRh41Dac2ppce9cRvw1bHVA0ZKayb9ux 4i8KKmvoII0rZAH6XkKhkPxQ+VabEXvEF7VLakg1+QxL2eWDMNV+ELJWU/Hv+FQ4 i+ADB493kw4ALSr10bg7PJt1Tml3pVe8bndPswsn53fpXL7k08UJWNOtFZDQD5R0 dxDwszM28347kxnXGVSzxo5WfmKkxzeTazXSS9y7w+aQoykTQpQAy9dUGcIfYn2n S5CFssvbSxNTHChHqPWVQTHewLyTyZ5H96TznbRqsNvij3K3/jYJmXXRQnu5A9Rt 6aR8CtoC4y6G9Sj+7H1VeTyptlMuqLQAkF6QRSWnGR6n2mzOawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKqtvQpAANC3Drv8hxZTplO+CmS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMDhk MDU4OS1jMGQ4LTQ0MTQtOTc4ZC03ZWViNTg5OGYzZjgvMTA4ZDA1ODktYzBkOC00 NDE0LTk3OGQtN2VlYjU4OThmM2Y4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTA4ZDA1ODktYzBkOC00NDE0LTk3 OGQtN2VlYjU4OThmM2Y4LzEwOGQwNTg5LWMwZDgtNDQxNC05NzhkLTdlZWI1ODk4 ZjNmOC5jcmwwHwYDVR0jBBgwFoAUEeyJjZcrwIqKR2Y9WjJDGwM3vK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMDhkMDU4OS1jMGQ4LTQ0MTQtOTc4ZC03ZWVi NTg5OGYzZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC7DrPzz/l6vqKW1mLEUpkU Yzr3yb22ZfJI6450tGsMrkMx5/A2bJ4irnmZkDs5wCYIy2GY/l84JafuUaDXn97W CkcL1ROtlNwT9TlDeHtJzyQI9YMZSUxqeDOezJWIz1KBjX0eDJdkxYtLc90UAA3J smBVWLIUeUJLS+84n/WVff8oMv+ZPbqIyr4AeXW2Of94eDAcokoHEXl3JYbEb9qQ Wnm07LlXcgsbbsUTp/WZWsJNbUSOUnW1jE2V57jTCyifPMY8u1u+CieEF8v/UvOU UNufj65PSUAovXv2m5H6lj9ditVef7hYTSibp129YFREwlMezOlMn5UXuYt7fwoM -----END CERTIFICATE-----Generated at Sun Apr 19 08:58:03 2026 by rpki-client