$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft File: a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft (raw, json) Hash identifier: hLWls+eoBWD38ZBNFwRCNBy572kE0pojJRUBryd6cn4= Subject key identifier: A8:21:7C:6E:BB:C1:B5:4F:EB:A9:68:0D:43:68:E9:0A:38:16:63:31 Authority key identifier: 34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 Certificate issuer: /CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Certificate serial: 010D0C9F4328584D8747AD2D70CF900843B595C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft Manifest number: 010D0C9F4328584B66F92A46BDA7C1973DEC9983 Signing time: Thu 16 Apr 2026 19:00:03 +0000 Manifest this update: Thu 16 Apr 2026 19:00:03 +0000 Manifest next update: Sat 18 Apr 2026 19:00:00 +0000 Files and hashes: 1: a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl (hash: lmzBCKQduCbfXGxkiM1MPFkd4Q9H+tz0UJtXyJcMwYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:47:ad:2d:70:cf:90:08:43:b5:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Validity Not Before: Apr 16 19:00:03 2026 GMT Not After : Apr 18 19:00:00 2026 GMT Subject: CN=e80c5364-6ad8-4a2e-a7aa-cfb7f1ce4de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:97:42:44:22:17:83:c5:65:69:ce:dc:94: 8f:70:18:22:b2:c4:1f:e5:01:7e:e2:ed:59:43:65: 62:b3:23:b6:b1:54:70:e1:5c:b8:71:45:30:41:46: e6:9b:e4:dc:fe:8c:49:13:cf:42:23:33:32:f8:c8: fd:67:7a:5f:b9:67:3a:9a:bc:58:75:d2:4d:75:59: dd:7f:94:32:3c:3d:56:69:df:8b:f6:01:0e:98:a8: 06:1e:d0:f2:53:0b:82:94:dd:5a:72:fd:c4:34:b7: 79:8f:fa:fe:a2:f8:c1:5e:50:92:91:04:7f:f3:7a: 1f:1d:ee:49:36:b9:8a:9e:17:79:11:9c:b8:a6:53: a1:7a:2b:44:ac:1c:66:f3:dd:33:45:35:52:38:2b: 3d:9b:19:61:ef:de:86:39:64:34:5c:fd:98:49:6a: ac:37:17:61:42:3a:f6:41:2e:19:9f:e5:09:51:16: 03:3b:5f:cd:d9:64:01:97:c3:25:42:dc:16:0d:07: a7:87:5d:6f:63:f0:90:49:8e:b4:a0:5f:ea:1a:d7: 35:fd:d6:ae:b7:8b:cf:83:cb:e3:58:c6:8d:f4:cc: 7c:65:24:9d:67:ef:dc:4a:02:eb:cf:4e:73:84:85: e7:11:dc:06:03:59:ae:4b:43:54:ca:e4:40:f3:76: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:7C:6E:BB:C1:B5:4F:EB:A9:68:0D:43:68:E9:0A:38:16:63:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl X509v3 Authority Key Identifier: keyid:34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:45:f3:08:74:8d:42:74:1e:98:79:38:5c:35:9c:25:fc:a4: 20:71:62:c5:ba:c2:e4:b3:f6:42:a6:83:af:90:0f:8a:bb:db: d3:d1:3e:2b:ed:a9:c2:48:43:d1:10:32:95:90:25:84:ff:9c: 71:5b:c4:04:c7:c6:05:be:3b:da:b3:9f:1f:ac:e2:dc:68:f5: 68:ca:13:10:b2:5a:ae:81:ad:e5:1b:50:07:7b:b0:51:0f:e8: 94:be:d2:a3:4d:1f:e5:22:03:08:8c:5e:63:1f:71:f8:00:a3: ab:90:2a:9b:11:ba:1b:e0:8c:14:03:ef:62:74:ea:d8:b6:1b: a5:ae:df:30:59:fe:a6:e0:43:86:7d:56:d3:fe:aa:15:3e:be: 73:60:7b:4d:1d:cb:bf:3a:2e:ff:71:23:76:d7:e9:c1:1e:4d: 3e:18:0a:b7:f1:11:82:4d:0d:da:16:b8:8b:c6:05:80:28:e5: 0c:16:fb:a4:34:e6:b1:e2:0a:bc:7d:7a:23:ca:a6:cc:2e:23: fa:bf:1f:f0:b6:c4:22:07:e4:3d:25:12:99:5f:59:3d:ed:2e: f8:b6:2b:f1:ad:f1:4e:af:0f:9f:91:d0:c7:a6:82:5f:79:35: 1d:38:4e:24:43:c8:0b:99:04:d6:bf:77:68:90:e2:57:bf:05: 3d:3c:bb:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HR60tcM+QCEO1lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5MGM4MGEtZDZmYi00YjMzLWE1NzQtZDVlYjFiNTEw ZDAwMB4XDTI2MDQxNjE5MDAwM1oXDTI2MDQxODE5MDAwMFowLzEtMCsGA1UEAxMk ZTgwYzUzNjQtNmFkOC00YTJlLWE3YWEtY2ZiN2YxY2U0ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkaXQkQiF4PFZWnO3JSPcBgissQf5QF+4u1Z Q2VisyO2sVRw4Vy4cUUwQUbmm+Tc/oxJE89CIzMy+Mj9Z3pfuWc6mrxYddJNdVnd f5QyPD1Wad+L9gEOmKgGHtDyUwuClN1acv3ENLd5j/r+ovjBXlCSkQR/83ofHe5J NrmKnhd5EZy4plOheitErBxm890zRTVSOCs9mxlh796GOWQ0XP2YSWqsNxdhQjr2 QS4Zn+UJURYDO1/N2WQBl8MlQtwWDQenh11vY/CQSY60oF/qGtc1/daut4vPg8vj WMaN9Mx8ZSSdZ+/cSgLrz05zhIXnEdwGA1muS0NUyuRA83ZMqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKghfG67wbVP66loDUNo6Qo4FmMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkw YzgwYS1kNmZiLTRiMzMtYTU3NC1kNWViMWI1MTBkMDAvYTI5MGM4MGEtZDZmYi00 YjMzLWE1NzQtZDVlYjFiNTEwZDAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTI5MGM4MGEtZDZmYi00YjMzLWE1 NzQtZDVlYjFiNTEwZDAwL2EyOTBjODBhLWQ2ZmItNGIzMy1hNTc0LWQ1ZWIxYjUx MGQwMC5jcmwwHwYDVR0jBBgwFoAUNEHkXj/tPMdyUh4xK1CB5rC9Z1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkwYzgwYS1kNmZiLTRiMzMtYTU3NC1kNWVi MWI1MTBkMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNRfMIdI1CdB6YeThcNZwl /KQgcWLFusLks/ZCpoOvkA+Ku9vT0T4r7anCSEPREDKVkCWE/5xxW8QEx8YFvjva s58frOLcaPVoyhMQslquga3lG1AHe7BRD+iUvtKjTR/lIgMIjF5jH3H4AKOrkCqb Ebob4IwUA+9idOrYthulrt8wWf6m4EOGfVbT/qoVPr5zYHtNHcu/Oi7/cSN21+nB Hk0+GAq38RGCTQ3aFriLxgWAKOUMFvukNOax4gq8fXojyqbMLiP6vx/wtsQiB+Q9 JRKZX1k97S74tivxrfFOrw+fkdDHpoJfeTUdOE4kQ8gLmQTWv3dokOJXvwU9PLsA -----END CERTIFICATE-----Generated at Fri Apr 17 19:21:58 2026 by rpki-client