$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft File: 038ee168-0708-4733-8cfc-355a87de7fc2.mft (raw, json) Hash identifier: 7SN0WkyrLDUS/etLsb2GK/jifY3Jj65ZjBxPUho0msc= Subject key identifier: 84:BE:95:54:FC:45:20:78:A0:B3:05:C4:CD:F8:00:9F:4B:C2:C4:6A Authority key identifier: 70:F4:64:9D:F1:C5:0C:F4:E9:B7:1C:D0:CF:C5:CD:2D:2F:D3:9C:79 Certificate issuer: /CN=038ee168-0708-4733-8cfc-355a87de7fc2 Certificate serial: 010D0C9F4328584D895FB0EBF12B5718725B6B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft Manifest number: 010D0C9F4328584073A8556A7721F681302D092F Signing time: Fri 17 Apr 2026 13:00:03 +0000 Manifest this update: Fri 17 Apr 2026 13:00:03 +0000 Manifest next update: Sun 19 Apr 2026 13:00:00 +0000 Files and hashes: 1: 038ee168-0708-4733-8cfc-355a87de7fc2.crl (hash: Ml5vdzxTRYY8CSRFYJeOrKPtnUIH8eXWXOvtiMoNR8w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:5f:b0:eb:f1:2b:57:18:72:5b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038ee168-0708-4733-8cfc-355a87de7fc2 Validity Not Before: Apr 17 13:00:03 2026 GMT Not After : Apr 19 13:00:00 2026 GMT Subject: CN=d2d2224f-85c0-4a17-bdfd-6b8517ec7e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:6e:d6:5b:e9:25:45:7e:f7:05:0d:b0:8d: 7a:f7:90:5f:b8:b4:55:d0:c8:95:99:b0:2a:1a:91: 55:18:d4:63:19:4c:85:fa:88:f3:57:39:3e:58:78: ea:aa:f0:8d:5f:95:0c:13:fa:2c:53:14:6c:3d:e8: 3d:3f:8e:7f:f0:ea:93:79:ac:a7:25:43:46:0b:5c: 90:4d:31:69:23:11:99:34:0b:35:33:3f:a5:a6:36: 30:47:68:17:fd:af:93:84:e1:79:0a:4e:42:93:4c: 4a:32:8c:f2:8c:26:b2:50:62:b5:be:5b:d1:32:08: 41:44:c5:bf:77:ae:cb:53:a9:44:3c:5f:0a:09:d6: 28:be:bc:64:bf:1a:28:ef:fc:53:c3:e6:f5:68:59: 6c:7d:d5:84:2b:a8:49:55:3e:22:77:98:67:0d:ac: fd:fd:dc:98:68:7a:62:56:8a:23:e4:b8:3a:b6:74: a5:71:12:53:1d:bc:57:02:c0:b0:90:66:ba:81:0c: 73:c1:ee:0b:d2:ca:a2:f3:3d:b2:95:81:4f:a9:e7: cd:0f:35:70:e3:a2:58:b0:52:2f:09:70:c5:7a:0e: b6:45:5b:f9:fd:43:06:99:3b:c3:4a:5b:de:00:1c: 21:e9:82:fc:d3:ba:41:67:af:57:18:c0:98:fd:7a: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:95:54:FC:45:20:78:A0:B3:05:C4:CD:F8:00:9F:4B:C2:C4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2/038ee168-0708-4733-8cfc-355a87de7fc2.crl X509v3 Authority Key Identifier: keyid:70:F4:64:9D:F1:C5:0C:F4:E9:B7:1C:D0:CF:C5:CD:2D:2F:D3:9C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/038ee168-0708-4733-8cfc-355a87de7fc2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:e9:cc:1a:de:7d:f5:fd:d7:24:f6:61:b8:1e:c0:83:f8: 08:a6:2c:c0:13:c7:33:05:8b:bf:ea:c8:61:4a:77:1a:3e:cb: b7:3f:72:5e:51:14:98:e6:8c:c8:a1:66:d6:54:74:62:26:01: 07:1c:4d:16:a3:15:0c:a6:f1:94:f1:dc:c7:3b:c7:09:0a:18: eb:8c:af:45:ad:d4:b7:b2:74:3e:e7:47:58:87:78:90:46:a9: c8:f5:fc:02:ca:f8:d4:de:eb:18:4f:90:e8:d6:95:5c:77:a0: f5:15:1a:80:6c:a9:3b:8b:db:46:c7:d0:f2:c6:68:ec:be:36: 57:2e:c5:76:11:42:a5:37:03:ef:6d:b0:e9:2e:f8:05:75:5a: e8:65:28:d3:61:ed:3d:60:67:dd:69:28:35:7b:8f:86:e2:82: 8a:74:b3:1f:05:e1:f6:31:af:fe:93:8e:47:e8:36:4c:64:a0: ae:66:ed:44:b5:96:11:54:6e:36:69:e9:b7:86:40:a9:9e:13: f2:3f:3f:8a:a5:00:54:ee:0e:e1:1b:9a:3f:c6:cc:4c:ac:9f: c8:62:72:75:1e:70:35:28:35:12:80:66:02:65:14:b1:2a:4d: 84:b9:fa:95:ce:77:24:95:0f:0c:72:00:71:c5:e2:80:2f:20: 54:db:d0:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JX7Dr8StXGHJba4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4ZWUxNjgtMDcwOC00NzMzLThjZmMtMzU1YTg3ZGU3 ZmMyMB4XDTI2MDQxNzEzMDAwM1oXDTI2MDQxOTEzMDAwMFowLzEtMCsGA1UEAxMk ZDJkMjIyNGYtODVjMC00YTE3LWJkZmQtNmI4NTE3ZWM3ZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA1u1lvpJUV+9wUNsI1695BfuLRV0MiVmbAq GpFVGNRjGUyF+ojzVzk+WHjqqvCNX5UME/osUxRsPeg9P45/8OqTeaynJUNGC1yQ TTFpIxGZNAs1Mz+lpjYwR2gX/a+ThOF5Ck5Ck0xKMozyjCayUGK1vlvRMghBRMW/ d67LU6lEPF8KCdYovrxkvxoo7/xTw+b1aFlsfdWEK6hJVT4id5hnDaz9/dyYaHpi Vooj5Lg6tnSlcRJTHbxXAsCwkGa6gQxzwe4L0sqi8z2ylYFPqefNDzVw46JYsFIv CXDFeg62RVv5/UMGmTvDSlveABwh6YL807pBZ69XGMCY/XovRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIS+lVT8RSB4oLMFxM34AJ9LwsRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzhl ZTE2OC0wNzA4LTQ3MzMtOGNmYy0zNTVhODdkZTdmYzIvMDM4ZWUxNjgtMDcwOC00 NzMzLThjZmMtMzU1YTg3ZGU3ZmMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4ZWUxNjgtMDcwOC00NzMzLThj ZmMtMzU1YTg3ZGU3ZmMyLzAzOGVlMTY4LTA3MDgtNDczMy04Y2ZjLTM1NWE4N2Rl N2ZjMi5jcmwwHwYDVR0jBBgwFoAUcPRknfHFDPTptxzQz8XNLS/TnHkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzhlZTE2OC0wNzA4LTQ3MzMtOGNmYy0zNTVh ODdkZTdmYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApZenMGt599f3XJPZhuB7A g/gIpizAE8czBYu/6shhSncaPsu3P3JeURSY5ozIoWbWVHRiJgEHHE0WoxUMpvGU 8dzHO8cJChjrjK9FrdS3snQ+50dYh3iQRqnI9fwCyvjU3usYT5Do1pVcd6D1FRqA bKk7i9tGx9DyxmjsvjZXLsV2EUKlNwPvbbDpLvgFdVroZSjTYe09YGfdaSg1e4+G 4oKKdLMfBeH2Ma/+k45H6DZMZKCuZu1EtZYRVG42aem3hkCpnhPyPz+KpQBU7g7h G5o/xsxMrJ/IYnJ1HnA1KDUSgGYCZRSxKk2EufqVzncklQ8McgBxxeKALyBU29Ad -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:53 2026 by rpki-client