$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft File: 4cd7357f-5806-4e1e-a57e-078529f02d78.mft (raw, json) Hash identifier: ZRMHN1ttv+dm5kUBoMdBjyNrfESDa12QnDG2UfH32mw= Subject key identifier: D8:86:85:E4:81:97:C9:43:D4:85:EC:7C:D2:E9:55:21:E8:2D:1C:3A Authority key identifier: A4:42:AD:8B:45:0F:79:F1:D9:BE:1D:09:A8:2A:68:F6:AE:56:4C:E7 Certificate issuer: /CN=4cd7357f-5806-4e1e-a57e-078529f02d78 Certificate serial: 010D0C9F4328584D87657050ABAFD485F3C77180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft Manifest number: 010D0C9F432858441E3AE8CA65AC133310FBAF8F Signing time: Thu 16 Apr 2026 20:00:03 +0000 Manifest this update: Thu 16 Apr 2026 20:00:03 +0000 Manifest next update: Sat 18 Apr 2026 20:00:00 +0000 Files and hashes: 1: 4cd7357f-5806-4e1e-a57e-078529f02d78.crl (hash: 0lujm/qhVAA/MR369j4AlQ+/bzsIYvsg56YbzMsg4Uo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:65:70:50:ab:af:d4:85:f3:c7:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd7357f-5806-4e1e-a57e-078529f02d78 Validity Not Before: Apr 16 20:00:03 2026 GMT Not After : Apr 18 20:00:00 2026 GMT Subject: CN=b8c9049d-2035-4eed-81b9-2ba934c57a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:f8:12:a1:bc:87:74:46:de:cd:e1:27:c5: 47:70:b7:fb:2c:55:68:35:12:97:15:67:f4:52:63: cd:75:00:99:4d:84:b8:b2:fa:be:46:bf:13:f1:25: dd:7a:45:3f:b5:91:f9:47:83:4c:3d:65:c9:be:eb: b9:7e:c7:bb:ca:b1:2b:a1:16:41:86:e7:f1:e6:d7: ef:a8:34:44:1b:dd:0d:bb:64:c8:50:9e:ab:38:6b: b3:94:c5:bd:a3:92:71:73:51:bc:34:08:18:ce:b6: d9:f8:a6:ef:fd:9d:2c:01:b0:fd:7c:d9:96:c4:1d: b7:bd:f9:68:f3:b3:69:33:33:c5:2c:78:db:7c:98: 92:4d:26:4c:e1:a7:12:9e:a0:4e:93:d6:9b:96:71: bd:68:af:6b:a6:7d:e4:e1:31:85:f8:13:e0:18:ac: 4a:24:a2:ec:48:fa:41:e3:d7:2f:33:6c:ca:18:48: 84:8c:b4:06:5e:b7:b9:7e:32:d8:e8:53:47:78:35: a2:86:55:a6:33:44:4a:3b:11:f0:10:84:42:ae:fc: 8c:ac:0c:ff:52:ae:72:46:ad:97:de:d3:8d:1c:28: a3:b0:fa:9c:e7:34:a2:e9:fa:15:f4:8b:10:25:ff: 09:24:82:3f:08:5c:97:21:6d:41:b9:65:55:a3:9d: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:85:E4:81:97:C9:43:D4:85:EC:7C:D2:E9:55:21:E8:2D:1C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.crl X509v3 Authority Key Identifier: keyid:A4:42:AD:8B:45:0F:79:F1:D9:BE:1D:09:A8:2A:68:F6:AE:56:4C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e9:d4:1f:78:1f:e2:69:3a:a5:cf:3b:dd:02:01:60:ab:81: 21:af:6c:e2:30:7a:6c:72:10:fb:1e:b4:e8:2b:79:2f:97:b9: 71:46:58:dc:82:97:25:2f:7d:60:ae:15:8a:28:56:60:00:d7: ca:17:19:83:9f:a0:31:1f:01:66:26:1f:c7:31:95:25:00:4f: b4:f7:40:24:7c:53:06:2b:bf:cf:ee:5c:b9:70:81:58:40:5b: 87:8e:47:96:8a:d5:5a:af:4d:0a:45:98:20:8c:28:0a:53:bf: 45:0e:f7:94:0f:3a:6b:4e:1c:17:b4:12:86:44:49:58:3f:73: 15:bb:68:b8:69:c3:1d:b2:9b:33:d4:7f:11:0d:28:64:f4:02: e7:17:15:0a:79:bf:10:73:61:f9:fc:56:8e:3f:2b:3f:5d:2b: 08:89:57:a4:13:16:7c:6b:fb:59:8b:e3:65:ab:8d:80:a4:84: 82:40:01:12:13:f6:ff:42:a9:7a:0b:54:2d:a9:73:5c:54:c4: 23:87:b3:0a:c8:2a:e1:78:ef:67:29:b1:cd:71:46:6e:ab:f6: fe:27:3e:2c:a3:c4:c8:05:c2:d8:6a:86:35:61:62:92:a8:4d: 15:ed:54:56:03:72:3f:e3:12:55:cf:60:59:b8:a8:8b:3d:2d: 6d:f7:f5:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HZXBQq6/UhfPHcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNkNzM1N2YtNTgwNi00ZTFlLWE1N2UtMDc4NTI5ZjAy ZDc4MB4XDTI2MDQxNjIwMDAwM1oXDTI2MDQxODIwMDAwMFowLzEtMCsGA1UEAxMk YjhjOTA0OWQtMjAzNS00ZWVkLTgxYjktMmJhOTM0YzU3YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5b4EqG8h3RG3s3hJ8VHcLf7LFVoNRKXFWf0 UmPNdQCZTYS4svq+Rr8T8SXdekU/tZH5R4NMPWXJvuu5fse7yrEroRZBhufx5tfv qDREG90Nu2TIUJ6rOGuzlMW9o5Jxc1G8NAgYzrbZ+Kbv/Z0sAbD9fNmWxB23vflo 87NpMzPFLHjbfJiSTSZM4acSnqBOk9ablnG9aK9rpn3k4TGF+BPgGKxKJKLsSPpB 49cvM2zKGEiEjLQGXre5fjLY6FNHeDWihlWmM0RKOxHwEIRCrvyMrAz/Uq5yRq2X 3tONHCijsPqc5zSi6foV9IsQJf8JJII/CFyXIW1BuWVVo50ZfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNiGheSBl8lD1IXsfNLpVSHoLRw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Y2Q3 MzU3Zi01ODA2LTRlMWUtYTU3ZS0wNzg1MjlmMDJkNzgvNGNkNzM1N2YtNTgwNi00 ZTFlLWE1N2UtMDc4NTI5ZjAyZDc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGNkNzM1N2YtNTgwNi00ZTFlLWE1 N2UtMDc4NTI5ZjAyZDc4LzRjZDczNTdmLTU4MDYtNGUxZS1hNTdlLTA3ODUyOWYw MmQ3OC5jcmwwHwYDVR0jBBgwFoAUpEKti0UPefHZvh0JqCpo9q5WTOcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80Y2Q3MzU3Zi01ODA2LTRlMWUtYTU3ZS0wNzg1 MjlmMDJkNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR6dQfeB/iaTqlzzvdAgFg q4Ehr2ziMHpschD7HrToK3kvl7lxRljcgpclL31grhWKKFZgANfKFxmDn6AxHwFm Jh/HMZUlAE+090AkfFMGK7/P7ly5cIFYQFuHjkeWitVar00KRZggjCgKU79FDveU DzprThwXtBKGRElYP3MVu2i4acMdspsz1H8RDShk9ALnFxUKeb8Qc2H5/FaOPys/ XSsIiVekExZ8a/tZi+Nlq42ApISCQAESE/b/Qql6C1QtqXNcVMQjh7MKyCrheO9n KbHNcUZuq/b+Jz4so8TIBcLYaoY1YWKSqE0V7VRWA3I/4xJVz2BZuKiLPS1t9/Ul -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:24 2026 by rpki-client