$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft File: cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft (raw, json) Hash identifier: XjuqM2GI2RG5+6/iYDtmRCWcamBi/uyGFHlGNr5aK6M= Subject key identifier: A5:29:B3:AC:B3:5A:35:17:B6:FD:61:37:4C:84:83:40:EA:D7:18:EC Authority key identifier: 19:0C:6C:3F:E1:86:5B:83:98:63:2F:6F:87:7F:E8:5A:9A:3E:2B:42 Certificate issuer: /CN=cf90d7bf-dad6-4851-ac33-f1ca8b32ec68 Certificate serial: 010D0C9F4328584D89065A8EBE8C824772868CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft Manifest number: 010D0C9F4328584B12328A810F7053C123795CE2 Signing time: Fri 17 Apr 2026 10:00:03 +0000 Manifest this update: Fri 17 Apr 2026 10:00:03 +0000 Manifest next update: Mon 20 Apr 2026 10:00:00 +0000 Files and hashes: 1: 4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer (hash: 3F4eVXTF3hKEyRxz328j+5GXKE/Kzm6js3kFx9ivXXA=) 2: cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl (hash: 2SQo2HL7fjCne3rbrygmbYEvWbGcd6aMWfc4BrrKurQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:06:5a:8e:be:8c:82:47:72:86:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf90d7bf-dad6-4851-ac33-f1ca8b32ec68 Validity Not Before: Apr 17 10:00:03 2026 GMT Not After : Apr 20 10:00:00 2026 GMT Subject: CN=fd532eb2-a345-486e-8682-6d1768ecfe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:04:b5:07:10:6c:98:a5:d6:69:0a:40:fe: 9f:61:5d:15:f7:06:52:ee:14:6b:54:d8:e8:54:c8: 42:54:64:e3:d5:cb:e0:fb:59:2a:31:dc:58:e1:f3: 91:52:46:3f:6f:87:19:bd:3c:1a:0b:37:e5:eb:2e: 03:4c:b0:89:af:ff:ea:8d:ad:57:2d:4f:25:60:bf: f1:dc:e5:98:d7:d1:64:11:3c:bc:45:bd:f5:5b:d1: 35:cf:f6:74:9e:93:2a:05:dd:f0:e9:fc:e1:ac:ed: ac:ea:b8:af:9c:e2:47:14:ee:60:df:f9:c0:1d:ad: a2:16:63:0f:a7:e6:4e:1d:e6:f6:2c:b7:f3:37:c1: a1:bf:14:ef:ca:b8:ac:0d:be:42:cd:91:75:d2:ea: 3f:e6:ad:23:ce:94:ae:50:a2:45:19:10:ed:20:7d: 39:38:9c:b4:aa:56:a0:9f:4d:b1:c5:88:d7:18:2f: 35:c3:f0:f5:b0:21:41:dd:4b:4f:d8:a1:53:f9:f3: 28:85:5a:ca:b2:d1:35:ba:04:d7:8e:9b:be:04:44: ec:cb:e8:78:c2:fa:96:a9:1f:eb:a0:5b:08:7c:87: ec:52:b7:25:14:9b:dc:08:fe:aa:47:3d:0d:51:a7: 7d:49:df:aa:96:a5:11:9b:67:ba:e8:1e:d1:f4:0b: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:B3:AC:B3:5A:35:17:B6:FD:61:37:4C:84:83:40:EA:D7:18:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl X509v3 Authority Key Identifier: keyid:19:0C:6C:3F:E1:86:5B:83:98:63:2F:6F:87:7F:E8:5A:9A:3E:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:af:1e:49:13:8b:bb:f2:22:f4:2a:e0:e9:8f:f3:81:4a: 79:b8:2e:9a:5c:6d:e6:2b:15:ce:1d:8a:48:31:8e:55:2d:7b: 1b:fa:1e:63:bf:fb:b1:b3:37:a7:67:eb:ae:54:cf:22:aa:2b: 36:6c:c9:6d:ed:47:aa:85:5e:1e:72:c8:8e:d2:19:6b:63:f1: 89:59:c7:b6:77:84:d4:b0:92:d6:c5:49:ec:99:8a:53:65:ba: 3c:9c:86:4e:f9:af:be:a4:57:bb:cd:b7:e9:57:93:6a:38:30: a8:5f:54:ee:0d:cf:02:a1:7a:10:6d:92:c2:b1:aa:59:79:d4: bc:81:b2:6f:79:81:4a:73:ae:3e:61:68:15:58:87:21:df:b8: 09:cc:9a:c7:7a:a4:0b:58:08:1f:96:6e:4d:4f:c1:27:57:40: 26:3e:c1:72:32:e8:f5:9e:e9:b0:eb:f2:74:54:9e:14:72:ae: 81:5b:4c:f5:0b:f6:68:55:cd:6b:32:82:f4:74:82:09:cc:24: 86:c1:77:71:7f:b4:5d:82:01:4f:3b:80:30:fa:56:a4:73:a3: ba:ca:d5:f7:ba:ea:0d:91:01:8c:e5:b6:1e:7e:d5:4c:fa:e5: 10:70:ba:b9:9a:19:d3:50:6c:ce:4a:6e:dc:b0:87:e3:05:a3: 2b:57:3f:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JBlqOvoyCR3KGjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5MGQ3YmYtZGFkNi00ODUxLWFjMzMtZjFjYThiMzJl YzY4MB4XDTI2MDQxNzEwMDAwM1oXDTI2MDQyMDEwMDAwMFowLzEtMCsGA1UEAxMk ZmQ1MzJlYjItYTM0NS00ODZlLTg2ODItNmQxNzY4ZWNmZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfQEtQcQbJil1mkKQP6fYV0V9wZS7hRrVNjo VMhCVGTj1cvg+1kqMdxY4fORUkY/b4cZvTwaCzfl6y4DTLCJr//qja1XLU8lYL/x 3OWY19FkETy8Rb31W9E1z/Z0npMqBd3w6fzhrO2s6rivnOJHFO5g3/nAHa2iFmMP p+ZOHeb2LLfzN8GhvxTvyrisDb5CzZF10uo/5q0jzpSuUKJFGRDtIH05OJy0qlag n02xxYjXGC81w/D1sCFB3UtP2KFT+fMohVrKstE1ugTXjpu+BETsy+h4wvqWqR/r oFsIfIfsUrclFJvcCP6qRz0NUad9Sd+qlqURm2e66B7R9At5mwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKUps6yzWjUXtv1hN0yEg0Dq1xjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZjkw ZDdiZi1kYWQ2LTQ4NTEtYWMzMy1mMWNhOGIzMmVjNjgvY2Y5MGQ3YmYtZGFkNi00 ODUxLWFjMzMtZjFjYThiMzJlYzY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2Y5MGQ3YmYtZGFkNi00ODUxLWFj MzMtZjFjYThiMzJlYzY4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMy ZWM2OC5jcmwwHwYDVR0jBBgwFoAUGQxsP+GGW4OYYy9vh3/oWpo+K0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZjkwZDdiZi1kYWQ2LTQ4NTEtYWMzMy1mMWNh OGIzMmVjNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGG68eSROLu/Ii9Crg6Y/z gUp5uC6aXG3mKxXOHYpIMY5VLXsb+h5jv/uxszenZ+uuVM8iqis2bMlt7UeqhV4e csiO0hlrY/GJWce2d4TUsJLWxUnsmYpTZbo8nIZO+a++pFe7zbfpV5NqODCoX1Tu Dc8CoXoQbZLCsapZedS8gbJveYFKc64+YWgVWIch37gJzJrHeqQLWAgflm5NT8En V0AmPsFyMuj1numw6/J0VJ4Ucq6BW0z1C/ZoVc1rMoL0dIIJzCSGwXdxf7RdggFP O4Aw+lakc6O6ytX3uuoNkQGM5bYeftVM+uUQcLq5mhnTUGzOSm7csIfjBaMrVz8X -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:24 2026 by rpki-client