$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft File: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft (raw, json) Hash identifier: JtqasIwX5LEHdhsy2m93dXLHtGjQwjRGvqXMBWzONAg= Subject key identifier: 7E:AC:A9:B2:2E:96:92:1B:85:63:A7:CA:7E:D8:FF:21:75:E5:31:DD Authority key identifier: CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 Certificate issuer: /CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Certificate serial: 010D0C9F4328584D86EE54AEEFB55CE5BA50E480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft Manifest number: 010D0C9F4328584AF0F7D2772C59CBCE8447BAED Signing time: Thu 16 Apr 2026 16:00:03 +0000 Manifest this update: Thu 16 Apr 2026 16:00:03 +0000 Manifest next update: Sat 18 Apr 2026 16:00:00 +0000 Files and hashes: 1: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl (hash: HvPxEQscpgivOP/2QWkZDRmAnF5z6Z6pxZgLqx4/g+M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:ee:54:ae:ef:b5:5c:e5:ba:50:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Validity Not Before: Apr 16 16:00:03 2026 GMT Not After : Apr 18 16:00:00 2026 GMT Subject: CN=479c6a0e-1339-4d90-8a0c-a95eb461ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:d6:b3:62:68:ce:19:51:ad:3a:f4:d7:1d: 25:9a:97:e1:cb:3c:7a:93:2f:f8:54:0e:81:a0:eb: 52:fa:4c:d4:07:cb:74:90:9f:31:e1:a0:6b:eb:af: 1a:a7:f2:da:3c:96:e4:4f:8c:71:d0:b0:92:7e:a0: bc:09:52:6e:5a:53:50:ce:c4:f5:0b:45:78:dd:d3: f7:83:71:39:cd:ed:73:93:57:c7:72:fe:39:c2:e9: cc:44:63:ce:c9:62:71:47:2d:c2:f3:89:a2:5a:77: e3:ec:b0:a1:31:ec:e0:3d:25:27:77:49:b8:3c:09: 3c:8f:c9:03:67:4d:4b:39:1a:b5:d6:5d:64:24:29: 47:b8:e2:43:f7:01:3b:ea:d6:b9:7d:2d:9a:14:87: 68:25:fc:e9:44:03:8b:3e:2b:22:4a:d7:33:5a:41: f0:8a:43:25:4a:34:a5:b2:fe:d5:2e:99:dc:bc:11: ac:7f:14:1d:85:93:4f:7a:dc:8f:8e:3b:92:d1:8c: a1:63:17:4c:e4:69:12:d5:be:9c:66:f3:cf:9a:39: 73:ca:5b:ad:03:69:a3:50:23:a1:0b:5d:17:85:1e: e0:e5:1c:1f:d4:c9:8e:17:26:e6:23:95:1b:a5:cc: f1:11:db:83:bf:32:11:38:34:65:80:cf:5d:4c:6a: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:A9:B2:2E:96:92:1B:85:63:A7:CA:7E:D8:FF:21:75:E5:31:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl X509v3 Authority Key Identifier: keyid:CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:3f:84:a7:37:3d:a4:f0:b3:ae:55:b8:03:e1:a6:67:50:f3: 1b:f0:64:d2:72:a4:1a:90:67:78:fd:bc:3c:51:99:86:3e:1a: a7:19:0e:2f:72:95:96:95:fc:6b:7c:00:91:ff:a4:7b:02:e4: 4e:f2:88:ce:6a:86:9e:51:74:95:9f:c5:13:65:0f:69:db:61: 71:4f:03:18:46:e1:fb:f0:30:a5:31:07:91:43:99:c1:eb:3d: 70:b5:15:f9:27:83:98:76:9a:1b:1f:7f:f7:8e:7f:a1:a6:a9: d0:f5:81:fa:15:45:fd:b4:07:6e:cc:11:15:11:71:4c:09:d8: cf:d4:38:15:dd:62:da:56:65:d8:98:ca:34:ac:22:64:c8:c2: 8f:85:5b:28:ce:c0:c9:1e:9c:6c:02:7a:52:20:25:ef:a7:c9: 44:d8:a6:95:31:d0:62:20:17:ef:17:21:26:17:ee:04:d4:cb: b4:ba:b4:b7:6c:d5:59:c9:67:f3:65:c7:b7:89:0b:f8:7a:89: 1d:0e:05:8f:25:a6:27:9d:20:9c:9b:f9:70:6b:62:45:ec:d1: af:f8:6f:62:0b:17:ec:1a:71:ee:e3:53:5f:59:27:9a:13:03: 2c:b6:78:f8:94:11:c3:31:71:31:69:fa:ff:bd:16:37:cd:41: c1:31:f2:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G7lSu77Vc5bpQ5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZhNmI0NTYtM2NkNS00NTdlLTg2ZjEtNDI4MGVhNjFm NWIzMB4XDTI2MDQxNjE2MDAwM1oXDTI2MDQxODE2MDAwMFowLzEtMCsGA1UEAxMk NDc5YzZhMGUtMTMzOS00ZDkwLThhMGMtYTk1ZWI0NjFiYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOLWs2JozhlRrTr01x0lmpfhyzx6ky/4VA6B oOtS+kzUB8t0kJ8x4aBr668ap/LaPJbkT4xx0LCSfqC8CVJuWlNQzsT1C0V43dP3 g3E5ze1zk1fHcv45wunMRGPOyWJxRy3C84miWnfj7LChMezgPSUnd0m4PAk8j8kD Z01LORq11l1kJClHuOJD9wE76ta5fS2aFIdoJfzpRAOLPisiStczWkHwikMlSjSl sv7VLpncvBGsfxQdhZNPetyPjjuS0YyhYxdM5GkS1b6cZvPPmjlzylutA2mjUCOh C10XhR7g5Rwf1MmOFybmI5UbpczxEduDvzIRODRlgM9dTGqurwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH6sqbIulpIbhWOnyn7Y/yF15THdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2 YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00MjgwZWE2MWY1YjMvNGZhNmI0NTYtM2NkNS00 NTdlLTg2ZjEtNDI4MGVhNjFmNWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGZhNmI0NTYtM2NkNS00NTdlLTg2 ZjEtNDI4MGVhNjFmNWIzLzRmYTZiNDU2LTNjZDUtNDU3ZS04NmYxLTQyODBlYTYx ZjViMy5jcmwwHwYDVR0jBBgwFoAUzBe4KnWaAWYfWRyVrB1P6+t1kIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00Mjgw ZWE2MWY1YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwP4SnNz2k8LOuVbgD4aZn UPMb8GTScqQakGd4/bw8UZmGPhqnGQ4vcpWWlfxrfACR/6R7AuRO8ojOaoaeUXSV n8UTZQ9p22FxTwMYRuH78DClMQeRQ5nB6z1wtRX5J4OYdpobH3/3jn+hpqnQ9YH6 FUX9tAduzBEVEXFMCdjP1DgV3WLaVmXYmMo0rCJkyMKPhVsozsDJHpxsAnpSICXv p8lE2KaVMdBiIBfvFyEmF+4E1Mu0urS3bNVZyWfzZce3iQv4eokdDgWPJaYnnSCc m/lwa2JF7NGv+G9iCxfsGnHu41NfWSeaEwMstnj4lBHDMXExafr/vRY3zUHBMfIk -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:21 2026 by rpki-client