$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft File: 525bd43e-79fc-4d46-b0a3-ea097485469b.mft (raw, json) Hash identifier: jX2rf0ekKr0VN323LN3EaNqFt9iQYttwIj8JrsOdB0g= Subject key identifier: 63:90:DB:8A:63:EE:6D:7C:63:59:9B:6E:7C:8E:49:6D:62:B9:18:2D Authority key identifier: 74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8 Certificate issuer: /CN=525bd43e-79fc-4d46-b0a3-ea097485469b Certificate serial: 010D0C9F4328584D8C65EB289114F51E776E7700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft Manifest number: 010D0C9F43285848DBF8C580606BB599580048B1 Signing time: Sat 18 Apr 2026 15:00:03 +0000 Manifest this update: Sat 18 Apr 2026 15:00:03 +0000 Manifest next update: Tue 21 Apr 2026 15:00:00 +0000 Files and hashes: 1: 525bd43e-79fc-4d46-b0a3-ea097485469b.crl (hash: 0ZrkLLlM4pjzetoRUQYEhfc7orCG/IiWjOP+hpVEHjM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:65:eb:28:91:14:f5:1e:77:6e:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525bd43e-79fc-4d46-b0a3-ea097485469b Validity Not Before: Apr 18 15:00:03 2026 GMT Not After : Apr 21 15:00:00 2026 GMT Subject: CN=035ba926-3fc8-4e7c-b5e2-fc3a3d0bece5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:d6:85:25:75:1f:75:60:4b:d1:e9:de:06: b6:3c:9d:06:a1:6a:81:2c:19:1f:3e:a0:28:2e:b7: 95:b6:61:82:5a:a2:4a:a6:15:4c:15:f7:d5:b0:7a: a9:99:14:a8:ee:9a:f0:20:f1:7f:ce:93:99:10:d3: af:bf:64:99:31:8a:e0:68:5e:e1:36:1e:51:15:46: 52:44:cb:8a:db:a2:ef:56:fe:4a:da:fd:87:44:fc: 1a:06:49:c8:bd:99:cd:65:49:f4:8f:7d:6b:ef:18: f8:14:ad:ef:5d:87:23:2c:96:89:70:10:e7:0a:fb: 3c:73:ad:79:2b:95:33:e5:b0:e5:58:4e:51:8a:76: bf:ce:18:e1:0a:69:5b:30:09:6c:2c:53:40:a9:09: 31:50:51:9b:ce:11:e1:23:e1:75:94:2e:3f:f5:28: 5c:3c:64:d7:d4:22:b6:f7:c4:00:09:e7:02:20:d6: 7f:b9:c3:97:ce:98:88:ef:2a:9e:45:3f:94:5a:12: 16:b8:f1:63:ef:57:6d:08:cf:67:e8:4b:d4:b3:75: c6:de:fb:e0:65:21:bc:04:b5:5b:14:72:e0:dd:0c: 81:2d:b4:84:3e:55:b2:7a:9a:fe:3a:58:04:ce:bc: ec:8f:e2:38:d4:1e:57:85:9f:55:0e:c5:09:3a:96: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:90:DB:8A:63:EE:6D:7C:63:59:9B:6E:7C:8E:49:6D:62:B9:18:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.crl X509v3 Authority Key Identifier: keyid:74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:aa:4a:e9:71:f8:41:f6:30:b2:7f:20:10:dc:3d:d0:25:9e: 48:db:6d:e4:b5:d8:43:1c:5b:af:ec:69:61:c6:9a:ef:61:4c: f2:0f:6d:12:4c:d1:34:fc:7d:65:7b:75:2d:d0:68:18:e6:0a: 43:be:3f:51:aa:3a:a0:ac:ef:10:a9:03:08:49:57:f0:9f:da: 95:b1:bc:d1:7a:0d:0e:09:bd:23:04:2d:5e:f0:19:40:bb:6b: 9d:37:f4:8f:52:0b:84:8d:53:f8:db:10:0b:19:a0:3a:d7:74: 31:3b:b0:bc:4d:90:c5:d4:b8:7e:fe:05:9c:67:a3:47:7e:46: d1:c2:6e:ce:8a:d1:03:79:19:82:f1:51:5f:09:2b:7a:0a:da: f1:55:d8:aa:41:37:c2:d8:48:6c:5d:8e:1b:d7:7c:1f:ff:7d: 92:5e:cc:95:a9:82:e2:9a:0c:0b:d3:c7:e8:7b:75:07:a5:e7: 4e:d0:12:79:e9:10:00:3e:f6:7d:32:72:86:23:d9:31:17:f0: 7b:ac:44:57:5a:1b:c6:61:c7:19:9a:e7:9d:87:62:38:3e:d5: 1a:55:b6:00:fa:07:99:62:80:62:a7:1e:e5:dc:e7:78:03:fd: 6e:9a:7e:02:6c:89:5a:fb:55:f9:09:8a:e9:9f:74:f0:e4:c7: ff:ed:f0:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MZesokRT1HndudwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI1YmQ0M2UtNzlmYy00ZDQ2LWIwYTMtZWEwOTc0ODU0 NjliMB4XDTI2MDQxODE1MDAwM1oXDTI2MDQyMTE1MDAwMFowLzEtMCsGA1UEAxMk MDM1YmE5MjYtM2ZjOC00ZTdjLWI1ZTItZmMzYTNkMGJlY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoinWhSV1H3VgS9Hp3ga2PJ0GoWqBLBkfPqAo LreVtmGCWqJKphVMFffVsHqpmRSo7prwIPF/zpOZENOvv2SZMYrgaF7hNh5RFUZS RMuK26LvVv5K2v2HRPwaBknIvZnNZUn0j31r7xj4FK3vXYcjLJaJcBDnCvs8c615 K5Uz5bDlWE5Rina/zhjhCmlbMAlsLFNAqQkxUFGbzhHhI+F1lC4/9ShcPGTX1CK2 98QACecCINZ/ucOXzpiI7yqeRT+UWhIWuPFj71dtCM9n6EvUs3XG3vvgZSG8BLVb FHLg3QyBLbSEPlWyepr+OlgEzrzsj+I41B5XhZ9VDsUJOpYgnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGOQ24pj7m18Y1mbbnyOSW1iuRgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MjVi ZDQzZS03OWZjLTRkNDYtYjBhMy1lYTA5NzQ4NTQ2OWIvNTI1YmQ0M2UtNzlmYy00 ZDQ2LWIwYTMtZWEwOTc0ODU0NjliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTI1YmQ0M2UtNzlmYy00ZDQ2LWIw YTMtZWEwOTc0ODU0NjliLzUyNWJkNDNlLTc5ZmMtNGQ0Ni1iMGEzLWVhMDk3NDg1 NDY5Yi5jcmwwHwYDVR0jBBgwFoAUdLVrqsXYdK0tcsXr36i2g4IOX6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MjViZDQzZS03OWZjLTRkNDYtYjBhMy1lYTA5 NzQ4NTQ2OWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPqkrpcfhB9jCyfyAQ3D3Q JZ5I223ktdhDHFuv7GlhxprvYUzyD20STNE0/H1le3Ut0GgY5gpDvj9RqjqgrO8Q qQMISVfwn9qVsbzReg0OCb0jBC1e8BlAu2udN/SPUguEjVP42xALGaA613QxO7C8 TZDF1Lh+/gWcZ6NHfkbRwm7OitEDeRmC8VFfCSt6CtrxVdiqQTfC2EhsXY4b13wf /32SXsyVqYLimgwL08foe3UHpedO0BJ56RAAPvZ9MnKGI9kxF/B7rERXWhvGYccZ muedh2I4PtUaVbYA+geZYoBipx7l3Od4A/1umn4CbIla+1X5CYrpn3Tw5Mf/7fBy -----END CERTIFICATE-----Generated at Sun Apr 19 12:54:28 2026 by rpki-client