$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: 7RkFgF0QfaebMwVtAqYouze5V2ip78cu7W1QU81tZEU= Subject key identifier: 17:8B:8B:BB:6E:AF:19:4B:2A:F2:C0:73:5F:1F:4D:E4:65:CB:84:21 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584D8C4827008C6C3CC357070BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602AD77 Signing time: Sat 18 Apr 2026 14:00:03 +0000 Manifest this update: Sat 18 Apr 2026 14:00:03 +0000 Manifest next update: Tue 21 Apr 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: hj2uljHZp0q9SnLbLhHXIHR70sKz6mKnoEHgDz0dIpk=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: cEa5xo4Y8VYD9QHDP38f7gPk32ub7h11h3vlOz3Sogs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:48:27:00:8c:6c:3c:c3:57:07:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Apr 18 14:00:03 2026 GMT Not After : Apr 21 14:00:00 2026 GMT Subject: CN=2a543e65-d67b-498e-9a35-a24598a436b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:f6:1d:ac:f1:4c:b7:92:d5:b8:a1:57:87: 47:dd:fd:00:ed:34:02:37:0d:4f:1b:36:49:0a:f3: 52:74:c0:d7:4d:df:ce:f9:b3:47:31:d2:3e:3a:ce: ff:e9:a5:93:a5:6b:b7:d7:d9:2c:58:08:58:dc:29: be:cc:a0:3e:91:4a:f6:06:c7:43:e0:53:9d:3f:7d: 7f:93:4b:19:61:ca:db:0d:c2:7f:48:2f:b3:89:53: f8:04:02:66:97:e7:da:3e:df:f6:91:a1:5f:08:01: ad:57:8d:12:8a:a0:a8:3f:22:4b:7c:7e:00:c8:7a: 7f:f9:d0:4b:cd:70:ab:87:3e:1d:a1:68:c8:4f:71: 96:1a:b6:46:f9:7f:84:bf:c1:0c:f0:55:a8:dd:41: a2:2c:16:a1:75:80:c8:6b:d0:ce:44:79:4f:b8:1d: 8e:a7:ab:ae:b1:dd:a5:a3:24:89:ac:cd:38:ed:07: 41:78:46:30:64:02:e8:bf:53:c1:32:92:c8:23:7a: 15:a8:e7:16:d2:d0:2f:95:6e:ef:fc:c7:17:5a:ec: 10:4f:f5:bf:52:e8:3f:da:c3:7c:d1:4c:2d:37:47: 9c:f6:ef:9a:f8:48:48:af:57:c0:2c:c5:64:cf:bd: 96:63:b6:15:82:5b:15:14:79:9a:11:30:1a:0e:94: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8B:8B:BB:6E:AF:19:4B:2A:F2:C0:73:5F:1F:4D:E4:65:CB:84:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4f:45:af:31:3f:29:11:68:bf:9f:af:73:52:94:e0:ba:cc: 63:a0:93:3f:21:e5:8e:58:3b:df:34:27:07:44:53:a6:12:9f: 6f:74:92:95:4c:59:fe:73:aa:b4:16:cf:13:32:9e:4f:13:dc: 59:94:80:04:08:c8:dd:8b:23:cd:39:42:8a:6c:0c:0b:b9:f7: 7c:ac:54:c2:bc:9c:4c:28:b8:c4:9e:25:b7:55:87:af:ce:ed: 1d:6d:9d:1f:33:f1:eb:a3:42:1e:14:b9:14:23:6e:1b:f8:90: da:f6:05:0a:14:f3:00:35:f7:65:8d:00:5a:b4:32:5f:68:ac: b6:dc:f6:ca:4d:ef:25:7e:e4:c1:f2:4e:e1:de:de:50:9f:6d: 61:fa:2f:bf:2d:f5:12:49:9f:6e:32:36:a2:7c:ba:5f:da:24: ae:c3:74:53:b8:a5:a7:e1:4a:17:ff:78:76:fa:b0:e8:85:08: 91:95:f4:e0:d2:28:92:23:ba:45:b9:97:3e:28:dc:b0:85:de: 2a:3f:91:5f:87:4f:50:0d:fa:9f:b2:50:34:a5:60:d6:25:8d: 5e:6d:af:0f:58:22:1a:df:68:ac:44:ad:b0:6a:40:94:82:2b: 3e:18:ab:37:cf:b4:f6:7b:a8:32:b0:54:60:4e:25:36:5d:31: 42:1c:77:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MSCcAjGw8w1cHC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDQxODE0MDAwM1oXDTI2MDQyMTE0MDAwMFowLzEtMCsGA1UEAxMk MmE1NDNlNjUtZDY3Yi00OThlLTlhMzUtYTI0NTk4YTQzNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD/2HazxTLeS1bihV4dH3f0A7TQCNw1PGzZJ CvNSdMDXTd/O+bNHMdI+Os7/6aWTpWu319ksWAhY3Cm+zKA+kUr2BsdD4FOdP31/ k0sZYcrbDcJ/SC+ziVP4BAJml+faPt/2kaFfCAGtV40SiqCoPyJLfH4AyHp/+dBL zXCrhz4doWjIT3GWGrZG+X+Ev8EM8FWo3UGiLBahdYDIa9DORHlPuB2Op6uusd2l oySJrM047QdBeEYwZALov1PBMpLII3oVqOcW0tAvlW7v/McXWuwQT/W/Uug/2sN8 0UwtN0ec9u+a+EhIr1fALMVkz72WY7YVglsVFHmaETAaDpTipwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBeLi7turxlLKvLAc18fTeRly4QhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZT0WvMT8pEWi/n69zUpTg usxjoJM/IeWOWDvfNCcHRFOmEp9vdJKVTFn+c6q0Fs8TMp5PE9xZlIAECMjdiyPN OUKKbAwLufd8rFTCvJxMKLjEniW3VYevzu0dbZ0fM/Hro0IeFLkUI24b+JDa9gUK FPMANfdljQBatDJfaKy23PbKTe8lfuTB8k7h3t5Qn21h+i+/LfUSSZ9uMjaifLpf 2iSuw3RTuKWn4UoX/3h2+rDohQiRlfTg0iiSI7pFuZc+KNywhd4qP5Ffh09QDfqf slA0pWDWJY1eba8PWCIa32isRK2wakCUgis+GKs3z7T2e6gysFRgTiU2XTFCHHeZ -----END CERTIFICATE-----Generated at Sun Apr 19 11:52:01 2026 by rpki-client