$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft File: 2a093e3f-1d9b-4e68-9317-1de77daf9698.mft (raw, json) Hash identifier: dpAJHM4WkP6jpBAbV3FBv+Yl+CUbz1hRGkfBoCB8tLs= Subject key identifier: D9:94:25:D7:21:FF:A2:CC:F0:77:8E:5B:E9:65:7C:A8:82:FB:7B:7D Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Certificate serial: 010D0C9F4328584D87BEC7EFD4CEB923BF9F1740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft Manifest number: 010D0C9F43285843E9795D6A0F89BC0E7A98B791 Signing time: Thu 16 Apr 2026 23:00:03 +0000 Manifest this update: Thu 16 Apr 2026 23:00:03 +0000 Manifest next update: Sun 19 Apr 2026 23:00:00 +0000 Files and hashes: 1: 2a093e3f-1d9b-4e68-9317-1de77daf9698.crl (hash: 0enkGvZHGX5iyx5wJYaK8eZUxefC+HmlXRetEvjO2XU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:be:c7:ef:d4:ce:b9:23:bf:9f:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Validity Not Before: Apr 16 23:00:03 2026 GMT Not After : Apr 19 23:00:00 2026 GMT Subject: CN=1e84937f-fb23-4a54-88e7-8fc426739b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:83:4a:49:51:d1:c3:a1:04:67:12:4b:c5: b6:16:3d:d7:bd:12:11:ba:8b:25:79:e3:73:b1:af: a5:fb:6d:39:54:ad:74:c7:22:88:6b:ca:e4:45:ce: 20:55:57:80:53:e9:47:2d:ed:0f:dd:aa:83:6c:2c: b3:39:4d:63:65:01:07:3f:7d:b5:a0:2a:fa:7a:f1: d6:94:74:a9:87:3c:59:7c:e2:0f:8c:0b:12:01:7c: 87:8c:e1:92:50:13:c3:17:db:c6:d5:c6:c8:a6:52: b2:aa:b5:1e:c8:b4:a8:29:6c:24:44:52:3d:db:3c: 01:f4:16:74:c6:91:8c:f6:d1:d6:fd:1c:b5:77:36: 41:6f:ad:bc:78:f3:67:d6:27:d6:5d:41:99:44:91: 05:e9:f9:e3:a6:32:6d:ef:19:d4:17:91:9c:e6:35: 98:8c:57:cd:01:ee:43:a2:ad:05:e0:70:b5:fb:5a: fe:69:37:0c:ae:5c:eb:b1:ec:e7:9f:63:17:e4:1b: 3d:c0:4f:91:42:fe:3b:61:b4:43:32:65:4d:95:2b: 0c:e1:93:0d:24:24:e0:c5:c6:e0:e8:7c:5f:4d:9c: 26:fd:0b:fe:b1:77:48:5b:15:e8:59:9d:69:91:81: 07:6d:49:24:5f:ad:fe:90:aa:fd:77:67:82:2c:2a: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:94:25:D7:21:FF:A2:CC:F0:77:8E:5B:E9:65:7C:A8:82:FB:7B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl X509v3 Authority Key Identifier: keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d7:d5:80:a1:f6:25:7e:5b:49:96:6f:b0:e1:9a:46:2b:08: e0:55:e3:3f:99:23:f3:98:0e:9a:9a:a7:98:4f:b4:ea:df:95: 4f:c9:87:79:da:ff:87:3f:9c:f6:39:68:93:70:94:2c:74:8a: 93:1a:dc:76:de:42:63:2c:69:d9:df:39:f2:a3:7a:c6:2a:15: ca:a4:63:85:31:60:a6:49:a8:d8:04:56:69:ba:52:e3:3c:26: 4e:f4:b2:34:22:e7:da:f0:b7:cb:e8:98:6a:7d:82:97:1c:de: ca:ce:10:ca:51:37:33:fc:7d:b6:15:7d:4a:38:86:e0:e7:d0: 20:df:d1:d0:31:5b:e9:59:52:9f:11:88:d6:d7:d8:9c:ac:67: 19:95:52:58:f0:02:80:d2:10:f4:81:7a:59:69:74:cf:b2:43: 35:c2:e4:35:61:76:d7:ca:e8:f7:b3:9f:06:e3:c8:fc:31:61: ee:1a:dc:20:e2:be:02:32:d4:ae:db:49:af:31:31:8e:d0:71: 4e:d7:6d:1d:4c:53:bb:b7:1a:bf:5f:9e:c2:9a:ba:32:ed:16: ee:5a:f0:83:06:ca:ad:80:b2:3d:85:f6:9d:f8:d6:64:d2:40: 4a:c5:6f:9c:4e:ee:eb:fe:41:e7:ca:65:f1:9b:2c:4b:48:26: b9:51:1b:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Hvsfv1M65I7+fF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5 Njk4MB4XDTI2MDQxNjIzMDAwM1oXDTI2MDQxOTIzMDAwMFowLzEtMCsGA1UEAxMk MWU4NDkzN2YtZmIyMy00YTU0LTg4ZTctOGZjNDI2NzM5YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7aDSklR0cOhBGcSS8W2Fj3XvRIRuosleeNz sa+l+205VK10xyKIa8rkRc4gVVeAU+lHLe0P3aqDbCyzOU1jZQEHP321oCr6evHW lHSphzxZfOIPjAsSAXyHjOGSUBPDF9vG1cbIplKyqrUeyLSoKWwkRFI92zwB9BZ0 xpGM9tHW/Ry1dzZBb628ePNn1ifWXUGZRJEF6fnjpjJt7xnUF5Gc5jWYjFfNAe5D oq0F4HC1+1r+aTcMrlzrseznn2MX5Bs9wE+RQv47YbRDMmVNlSsM4ZMNJCTgxcbg 6HxfTZwm/Qv+sXdIWxXoWZ1pkYEHbUkkX63+kKr9d2eCLCrYpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNmUJdch/6LM8HeOW+llfKiC+3t9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5 M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvMmEwOTNlM2YtMWQ5Yi00 ZTY4LTkzMTctMWRlNzdkYWY5Njk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3 N2RhZjk2OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBq19WAofYlfltJlm+w4ZpG KwjgVeM/mSPzmA6amqeYT7Tq35VPyYd52v+HP5z2OWiTcJQsdIqTGtx23kJjLGnZ 3znyo3rGKhXKpGOFMWCmSajYBFZpulLjPCZO9LI0Iufa8LfL6JhqfYKXHN7KzhDK UTcz/H22FX1KOIbg59Ag39HQMVvpWVKfEYjW19icrGcZlVJY8AKA0hD0gXpZaXTP skM1wuQ1YXbXyuj3s58G48j8MWHuGtwg4r4CMtSu20mvMTGO0HFO120dTFO7txq/ X57Cmroy7RbuWvCDBsqtgLI9hfad+NZk0kBKxW+cTu7r/kHnymXxmyxLSCa5URtA -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:08 2026 by rpki-client