$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.mft File: 539ee82c-bd0d-4432-a548-f342cc4d2689.mft (raw, json) Hash identifier: gjPRdI4M/apYq4y9PIJIESjgnQvTuxRwZwc92DuAh8U= Subject key identifier: 28:BA:BC:84:BE:E3:E3:71:93:1B:DB:F0:7C:53:DD:1F:69:04:16:C1 Authority key identifier: A2:9B:7B:50:6C:E1:A3:CD:1B:D3:13:BE:BA:E1:C4:BB:2B:19:A6:21 Certificate issuer: /CN=539ee82c-bd0d-4432-a548-f342cc4d2689 Certificate serial: 010D0C9F4328584D876571F91F0EC9D932D87340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.mft Manifest number: 010D0C9F4328584CEDEBAF5EF317938FB4E53B37 Signing time: Thu 16 Apr 2026 20:00:03 +0000 Manifest this update: Thu 16 Apr 2026 20:00:03 +0000 Manifest next update: Sat 18 Apr 2026 20:00:00 +0000 Files and hashes: 1: 539ee82c-bd0d-4432-a548-f342cc4d2689.crl (hash: 6zQhVoarda4caoQX4CfPfjKTayNc+xM6zkqVooCYBa4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:65:71:f9:1f:0e:c9:d9:32:d8:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539ee82c-bd0d-4432-a548-f342cc4d2689 Validity Not Before: Apr 16 20:00:03 2026 GMT Not After : Apr 18 20:00:00 2026 GMT Subject: CN=59dcf6d2-cff4-43d1-956f-1cd5bb65bf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:df:12:d6:0c:18:b6:e0:68:57:18:f7:bf: 7d:1b:a2:f4:b9:04:98:8c:8f:e6:22:89:06:6c:3c: 9b:6a:39:54:65:d9:e5:78:3e:c7:c1:c3:54:d4:c1: a4:6c:8a:76:c0:4e:06:ab:1e:0d:99:1b:b2:b2:85: c7:58:f5:c9:ac:98:dc:90:4c:aa:45:45:cc:38:da: f2:5f:58:2f:8f:88:23:b3:3f:24:c6:37:48:15:e6: c4:1f:21:82:14:5a:f2:41:bc:11:35:c2:d0:d3:b7: ff:67:de:49:d3:6d:5f:01:61:38:e6:c1:26:37:e8: 7c:10:a4:39:72:48:ee:3c:71:dd:7c:ef:91:64:a5: 6e:7a:82:d0:10:38:87:cc:fd:85:d6:ed:93:8e:1d: 1a:10:f5:38:69:a3:03:bc:fe:32:c7:4d:1e:0a:5c: d8:27:10:7b:cb:50:53:96:67:e1:5d:75:03:48:d8: 02:48:f2:a1:50:d0:e0:9c:97:d3:59:11:11:76:13: 91:1d:f4:c4:d0:8e:a8:3f:7d:d0:a3:0f:e2:da:e0: 46:73:33:63:02:f3:96:5f:7e:08:f0:7e:86:96:3a: dd:85:e5:b6:0c:d3:50:4d:aa:3d:de:b3:c8:cb:aa: 97:33:ac:41:6b:b6:98:6a:93:03:28:6a:9a:99:8b: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:BC:84:BE:E3:E3:71:93:1B:DB:F0:7C:53:DD:1F:69:04:16:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.crl X509v3 Authority Key Identifier: keyid:A2:9B:7B:50:6C:E1:A3:CD:1B:D3:13:BE:BA:E1:C4:BB:2B:19:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:69:5f:3f:a2:19:56:7b:d1:3b:c3:c8:4b:e4:45:00:ee:b7: 59:19:00:c6:35:b6:4d:d8:df:50:c0:40:d7:61:ad:cd:a3:2c: 09:5c:dd:40:40:be:c9:dc:5b:dc:58:9a:d0:95:c2:18:02:04: 02:6b:d8:33:16:0f:db:c2:ca:61:6d:eb:f5:88:a7:dc:ac:8d: 69:ac:a3:31:23:5b:b0:89:d1:00:39:4e:03:bb:42:a5:e3:0b: 61:11:14:12:df:65:3e:c9:a4:2c:6e:26:bb:6f:ee:6b:98:2b: e8:46:ab:15:19:75:1e:7a:5a:65:a0:5a:54:b8:2b:74:7a:76: c0:bf:57:e9:90:2a:68:25:81:f4:02:ef:6c:61:4e:c6:d9:18: 6c:1e:95:1f:60:7d:92:c2:bb:49:51:a9:3e:b8:3e:d5:88:f1: 3f:d2:70:1a:3a:70:b6:90:9e:6b:6b:19:1a:b9:68:af:da:dd: 8d:30:b3:fc:03:97:bb:cb:55:61:e2:b2:10:d6:e0:11:98:5e: 9d:57:8d:cd:6a:7f:d6:9e:06:48:a4:dd:1a:95:1e:86:b9:79: 6d:b9:29:08:9e:fd:3a:c0:41:44:c0:0a:48:76:fe:63:44:71: c2:ef:d3:77:7a:c9:aa:2d:8b:cb:4d:f6:17:b2:d3:53:be:fd: bc:b9:bf:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HZXH5Hw7J2TLYc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTM5ZWU4MmMtYmQwZC00NDMyLWE1NDgtZjM0MmNjNGQy Njg5MB4XDTI2MDQxNjIwMDAwM1oXDTI2MDQxODIwMDAwMFowLzEtMCsGA1UEAxMk NTlkY2Y2ZDItY2ZmNC00M2QxLTk1NmYtMWNkNWJiNjViZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk/fEtYMGLbgaFcY9799G6L0uQSYjI/mIokG bDybajlUZdnleD7HwcNU1MGkbIp2wE4Gqx4NmRuysoXHWPXJrJjckEyqRUXMONry X1gvj4gjsz8kxjdIFebEHyGCFFryQbwRNcLQ07f/Z95J021fAWE45sEmN+h8EKQ5 ckjuPHHdfO+RZKVueoLQEDiHzP2F1u2Tjh0aEPU4aaMDvP4yx00eClzYJxB7y1BT lmfhXXUDSNgCSPKhUNDgnJfTWRERdhORHfTE0I6oP33Qow/i2uBGczNjAvOWX34I 8H6GljrdheW2DNNQTao93rPIy6qXM6xBa7aYapMDKGqamYs5IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCi6vIS+4+Nxkxvb8HxT3R9pBBbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81Mzll ZTgyYy1iZDBkLTQ0MzItYTU0OC1mMzQyY2M0ZDI2ODkvNTM5ZWU4MmMtYmQwZC00 NDMyLWE1NDgtZjM0MmNjNGQyNjg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTM5ZWU4MmMtYmQwZC00NDMyLWE1 NDgtZjM0MmNjNGQyNjg5LzUzOWVlODJjLWJkMGQtNDQzMi1hNTQ4LWYzNDJjYzRk MjY4OS5jcmwwHwYDVR0jBBgwFoAUopt7UGzho80b0xO+uuHEuysZpiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MzllZTgyYy1iZDBkLTQ0MzItYTU0OC1mMzQy Y2M0ZDI2ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASaV8/ohlWe9E7w8hL5EUA 7rdZGQDGNbZN2N9QwEDXYa3NoywJXN1AQL7J3FvcWJrQlcIYAgQCa9gzFg/bwsph bev1iKfcrI1prKMxI1uwidEAOU4Du0Kl4wthERQS32U+yaQsbia7b+5rmCvoRqsV GXUeelploFpUuCt0enbAv1fpkCpoJYH0Au9sYU7G2RhsHpUfYH2SwrtJUak+uD7V iPE/0nAaOnC2kJ5raxkauWiv2t2NMLP8A5e7y1Vh4rIQ1uARmF6dV43Nan/WngZI pN0alR6GuXltuSkInv06wEFEwApIdv5jRHHC79N3esmqLYvLTfYXstNTvv28ub8A -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:22 2026 by rpki-client