$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft File: a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft (raw, json) Hash identifier: pFNOWeUejx++FuZiEhlJJz6N84NTBJcn2vXy1uboD90= Subject key identifier: C2:46:9A:4F:BF:2A:D2:81:ED:97:51:8C:8B:82:9F:37:C0:C7:62:B5 Authority key identifier: 35:1D:42:87:DA:37:2A:71:0C:3F:13:03:E8:05:3C:9D:74:B2:21:DA Certificate issuer: /CN=a20fe800-abb3-4f4b-a5be-6e36a478c95f Certificate serial: 010D0C9F4328584D87A10184EA2F987E79E2B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft Manifest number: 010D0C9F43285849763E0340556EB72C77A7E515 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sat 18 Apr 2026 22:00:00 +0000 Files and hashes: 1: a20fe800-abb3-4f4b-a5be-6e36a478c95f.crl (hash: NHSWUKhVc1aLxdGH4enOZgZz68iJuuGmB76/xnaEEP0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:01:84:ea:2f:98:7e:79:e2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20fe800-abb3-4f4b-a5be-6e36a478c95f Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 18 22:00:00 2026 GMT Subject: CN=7764db45-67b9-453e-9fde-0fbb4bd9f4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:92:fa:e3:4f:a1:ca:4c:59:ae:b3:56:f5: 12:b2:3a:e1:9a:71:d3:62:1e:d7:33:bb:69:b6:7a: 65:3c:87:7f:f5:66:c4:63:00:0f:e6:35:8d:4c:e3: 9a:55:ff:92:f5:7e:70:1d:7f:91:fd:2d:22:0a:80: 09:98:9f:a6:6d:5e:6d:c8:04:05:d7:48:90:0a:29: 2e:80:88:8a:7f:5b:4a:c2:9d:03:a2:63:f9:5c:45: 1e:c7:20:e5:50:ad:ec:9a:38:9e:d5:89:cc:3e:2a: 38:c7:4f:e2:a4:16:c4:9b:81:bf:80:23:78:e2:1a: 19:80:c8:51:eb:e2:bc:b7:b5:10:36:6a:ae:44:03: 4c:6a:0c:7b:be:01:42:82:94:9d:47:38:a2:06:7c: 35:fa:58:5c:ba:cb:44:20:07:ad:ab:f1:f1:72:cf: e3:b7:23:0e:d4:77:17:dc:47:c5:33:2e:93:e6:ed: 6d:70:7b:96:5d:57:69:d3:52:09:40:a0:8b:dc:c8: 07:48:eb:47:4f:73:82:e7:59:9a:8f:ae:76:89:e0: da:1e:f7:5b:f0:f6:b3:c1:60:53:5a:c1:be:c0:7a: 1a:e6:51:5d:33:8a:ee:f9:32:8a:35:d1:07:45:8f: 7a:7b:f6:ce:9a:f5:e1:db:66:cf:89:8b:d1:52:a2: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:46:9A:4F:BF:2A:D2:81:ED:97:51:8C:8B:82:9F:37:C0:C7:62:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.crl X509v3 Authority Key Identifier: keyid:35:1D:42:87:DA:37:2A:71:0C:3F:13:03:E8:05:3C:9D:74:B2:21:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a3:7b:c6:4c:9c:73:28:06:f6:c3:51:4a:8c:1a:57:f6:ac: 40:be:4d:27:46:46:31:a8:1e:94:f3:a0:7a:7e:ea:72:03:05: 0d:87:7a:54:f7:89:78:8a:be:9b:f5:42:a1:f3:88:16:d1:a6: 21:c5:b0:95:fa:a9:d0:3e:0f:be:87:e2:bb:b6:fc:08:d6:6c: 27:0a:d2:96:75:8f:ed:3e:af:97:cf:a4:e6:a9:2a:6c:00:50: e4:1e:66:f8:ff:ec:4f:8a:bf:71:f5:87:c1:26:95:7f:f6:cd: 27:05:35:29:dc:43:a6:66:2e:a0:82:b1:3a:20:8b:80:47:e4: 6f:66:26:42:1e:85:27:8d:22:50:bd:a9:67:b4:d1:81:8c:dc: ac:1a:58:04:46:9b:cd:a3:c0:3e:aa:bb:0b:0b:01:72:f8:a0: 4e:79:4e:c2:bf:4b:4b:e7:85:79:10:c3:a0:70:22:ca:ae:4b: 78:27:30:e0:90:e5:56:e5:98:61:5c:36:23:c5:dc:34:4f:c5: b3:48:58:b9:92:3f:d0:5b:89:c2:ed:7a:8f:be:75:0e:07:87: be:62:06:cb:57:0f:55:93:6a:74:bf:ad:9f:4d:93:ac:85:77: d5:36:53:d8:06:9a:ae:c7:7a:43:eb:e4:26:8e:93:44:37:13: e2:af:a6:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQGE6i+YfnniswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwZmU4MDAtYWJiMy00ZjRiLWE1YmUtNmUzNmE0Nzhj OTVmMB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxODIyMDAwMFowLzEtMCsGA1UEAxMk Nzc2NGRiNDUtNjdiOS00NTNlLTlmZGUtMGZiYjRiZDlmNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoveS+uNPocpMWa6zVvUSsjrhmnHTYh7XM7tp tnplPId/9WbEYwAP5jWNTOOaVf+S9X5wHX+R/S0iCoAJmJ+mbV5tyAQF10iQCiku gIiKf1tKwp0DomP5XEUexyDlUK3smjie1YnMPio4x0/ipBbEm4G/gCN44hoZgMhR 6+K8t7UQNmquRANMagx7vgFCgpSdRziiBnw1+lhcustEIAetq/Hxcs/jtyMO1HcX 3EfFMy6T5u1tcHuWXVdp01IJQKCL3MgHSOtHT3OC51maj652ieDaHvdb8PazwWBT WsG+wHoa5lFdM4ru+TKKNdEHRY96e/bOmvXh22bPiYvRUqJALQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJGmk+/KtKB7ZdRjIuCnzfAx2K1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjBm ZTgwMC1hYmIzLTRmNGItYTViZS02ZTM2YTQ3OGM5NWYvYTIwZmU4MDAtYWJiMy00 ZjRiLWE1YmUtNmUzNmE0NzhjOTVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTIwZmU4MDAtYWJiMy00ZjRiLWE1 YmUtNmUzNmE0NzhjOTVmL2EyMGZlODAwLWFiYjMtNGY0Yi1hNWJlLTZlMzZhNDc4 Yzk1Zi5jcmwwHwYDVR0jBBgwFoAUNR1Ch9o3KnEMPxMD6AU8nXSyIdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjBmZTgwMC1hYmIzLTRmNGItYTViZS02ZTM2 YTQ3OGM5NWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCo3vGTJxzKAb2w1FKjBpX 9qxAvk0nRkYxqB6U86B6fupyAwUNh3pU94l4ir6b9UKh84gW0aYhxbCV+qnQPg++ h+K7tvwI1mwnCtKWdY/tPq+Xz6TmqSpsAFDkHmb4/+xPir9x9YfBJpV/9s0nBTUp 3EOmZi6ggrE6IIuAR+RvZiZCHoUnjSJQvalntNGBjNysGlgERpvNo8A+qrsLCwFy +KBOeU7Cv0tL54V5EMOgcCLKrkt4JzDgkOVW5ZhhXDYjxdw0T8WzSFi5kj/QW4nC 7XqPvnUOB4e+YgbLVw9Vk2p0v62fTZOshXfVNlPYBpqux3pD6+QmjpNENxPir6bP -----END CERTIFICATE-----Generated at Fri Apr 17 14:46:09 2026 by rpki-client