$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: feYaMUQpn+r84n0/QaJaQ11xh24PoxuBKf7r+mUCJqs= Subject key identifier: 93:EE:8A:4F:FE:7F:33:45:84:57:95:30:EE:05:68:B0:B8:CB:3E:C2 Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584D88181C27D5757B32251BC520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D324D Signing time: Fri 17 Apr 2026 02:00:03 +0000 Manifest this update: Fri 17 Apr 2026 02:00:03 +0000 Manifest next update: Sun 19 Apr 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: BEuXmi+C1mG1kqHzmf5Dt1zoUrZy/K3AuOPBF7CiZK4=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:18:1c:27:d5:75:7b:32:25:1b:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Apr 17 02:00:03 2026 GMT Not After : Apr 19 02:00:00 2026 GMT Subject: CN=1fa32e11-bed7-4ba6-a25c-c0bc346370b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:61:f0:4c:86:85:d8:87:08:d2:54:9f:16: 27:2c:f4:e1:a9:43:cc:e3:a0:6a:14:3f:e1:31:1d: 09:cb:4c:74:9d:95:d4:b8:3f:47:dd:39:5f:f2:63: 63:8a:e5:a3:62:39:41:5c:f3:d6:5b:a0:3d:cb:09: 10:ec:ff:3b:7b:12:43:c6:31:1d:ce:cc:b9:98:e4: 5a:85:a0:17:dd:e5:ef:55:cb:c8:e1:49:a3:a8:54: 2c:fa:c2:bd:8a:9d:b7:69:83:5f:5a:2c:67:c2:ac: b9:30:43:6b:0d:4d:e9:6c:c5:9e:8a:33:89:e1:43: 70:b0:ca:14:d3:ba:af:c0:8f:51:97:5b:19:75:44: d6:96:b6:dd:b4:22:7f:9c:ad:88:5b:53:36:d2:2d: 3d:8d:c7:a2:d9:fb:91:ec:87:61:d1:0b:49:b0:46: ef:85:85:f0:19:f7:c9:9d:12:d4:7e:93:03:9a:a3: f5:6a:0b:d4:f7:cb:82:ef:bf:d4:c6:fd:cd:46:fb: 02:2d:be:1b:fd:f7:6d:98:93:1a:c6:f2:5c:94:02: 64:ff:84:6a:8e:d3:95:d9:51:12:58:3d:ab:55:71: bb:53:23:9c:c0:5f:52:ea:54:57:b7:49:b1:94:35: 57:5e:8b:2c:cf:ce:9e:28:9d:43:c2:67:d9:70:bd: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EE:8A:4F:FE:7F:33:45:84:57:95:30:EE:05:68:B0:B8:CB:3E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:24:b0:9f:79:f1:b0:86:dd:85:18:f6:d9:cc:1f:7d:b8:10: 4f:ba:d7:30:1e:f5:96:9b:b1:39:01:f7:c2:af:5e:9d:15:c3: 03:57:30:ea:b7:2d:6b:04:33:bd:66:10:5b:7f:c5:e0:0f:dd: ea:e2:0f:8a:02:3e:e9:c0:9c:97:32:b7:06:7f:ea:8f:b0:ee: 99:c8:ac:06:2a:bd:82:fd:f1:93:7d:97:14:be:cc:99:ce:f7: 34:6c:f9:c7:d2:d6:f4:86:d4:2f:d3:f1:85:52:34:eb:7e:cc: a1:fe:a1:a2:f0:aa:77:48:12:e3:8b:a4:b3:36:a3:3e:b3:0a: dc:14:8f:21:dc:4e:2d:db:ab:d0:4d:f6:18:1f:eb:23:97:17: c0:05:f9:0d:0e:f0:2a:5e:c7:0f:d7:a4:9a:61:68:2f:82:9e: 64:00:25:15:36:b1:86:b8:bf:c9:84:7d:78:ba:b1:48:47:ea: 7c:3b:5f:3c:46:2b:a4:22:23:32:cc:6f:46:bd:e6:52:10:e8: 40:a0:96:44:33:af:c3:6b:fb:09:65:c9:98:f6:23:8f:2c:3f: e6:75:e5:4e:ad:bc:1f:1b:ae:e8:74:f3:98:1c:b8:d2:9e:7e: 1c:5b:d0:85:b6:32:a1:46:52:b6:7b:70:c0:bb:af:12:d4:68: 78:61:1c:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IGBwn1XV7MiUbxSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDQxNzAyMDAwM1oXDTI2MDQxOTAyMDAwMFowLzEtMCsGA1UEAxMk MWZhMzJlMTEtYmVkNy00YmE2LWEyNWMtYzBiYzM0NjM3MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbdh8EyGhdiHCNJUnxYnLPThqUPM46BqFD/h MR0Jy0x0nZXUuD9H3Tlf8mNjiuWjYjlBXPPWW6A9ywkQ7P87exJDxjEdzsy5mORa haAX3eXvVcvI4UmjqFQs+sK9ip23aYNfWixnwqy5MENrDU3pbMWeijOJ4UNwsMoU 07qvwI9Rl1sZdUTWlrbdtCJ/nK2IW1M20i09jcei2fuR7Idh0QtJsEbvhYXwGffJ nRLUfpMDmqP1agvU98uC77/Uxv3NRvsCLb4b/fdtmJMaxvJclAJk/4RqjtOV2VES WD2rVXG7UyOcwF9S6lRXt0mxlDVXXossz86eKJ1DwmfZcL3qnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJPuik/+fzNFhFeVMO4FaLC4yz7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQJLCfefGwht2FGPbZzB99 uBBPutcwHvWWm7E5AffCr16dFcMDVzDqty1rBDO9ZhBbf8XgD93q4g+KAj7pwJyX MrcGf+qPsO6ZyKwGKr2C/fGTfZcUvsyZzvc0bPnH0tb0htQv0/GFUjTrfsyh/qGi 8Kp3SBLji6SzNqM+swrcFI8h3E4t26vQTfYYH+sjlxfABfkNDvAqXscP16SaYWgv gp5kACUVNrGGuL/JhH14urFIR+p8O188RiukIiMyzG9GveZSEOhAoJZEM6/Da/sJ ZcmY9iOPLD/mdeVOrbwfG67odPOYHLjSnn4cW9CFtjKhRlK2e3DAu68S1Gh4YRwd -----END CERTIFICATE-----Generated at Fri Apr 17 15:30:55 2026 by rpki-client