$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft File: 353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft (raw, json) Hash identifier: dfrdHQb3fT/YPbAmR4dxdG4EJ86tkJGtCK+MlkrvVuQ= Subject key identifier: 4E:EB:5E:7D:92:CC:B9:6B:1D:39:D8:40:4B:67:E9:A9:D8:D5:1B:A1 Authority key identifier: 40:39:B5:3F:E1:53:87:18:56:61:43:DF:22:61:D6:0E:2E:97:AA:4F Certificate issuer: /CN=353144f7-67ae-4cdd-a9a1-d20cf6140f4f Certificate serial: 010D0C9F4328584D703F8824BFA3230032BCAF20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft Manifest number: 010D0C9F4328584765A688705563E2755C14B78A Signing time: Wed 08 Apr 2026 13:00:03 +0000 Manifest this update: Wed 08 Apr 2026 13:00:03 +0000 Manifest next update: Sat 11 Apr 2026 13:00:00 +0000 Files and hashes: 1: 353144f7-67ae-4cdd-a9a1-d20cf6140f4f.crl (hash: aONwZparTJjjT3ndEp7jnZuFDBZl9DgLd5FlYXtsNtc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:88:24:bf:a3:23:00:32:bc:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353144f7-67ae-4cdd-a9a1-d20cf6140f4f Validity Not Before: Apr 8 13:00:03 2026 GMT Not After : Apr 11 13:00:00 2026 GMT Subject: CN=27e98857-59f1-4535-aa73-ae7dc0b51cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:21:50:83:e0:3b:fd:7a:13:c2:66:59:c0: db:6f:a3:b3:6b:8a:ef:d2:bc:46:cd:ca:59:de:df: 9a:4c:52:24:e9:97:68:b6:15:82:9f:78:76:0c:a0: 78:ff:82:b8:61:84:d2:8b:6e:47:bb:22:8c:a2:a7: 75:76:9e:34:be:9b:09:9a:04:71:58:67:e6:52:98: ad:ea:d9:10:27:1e:d1:0a:58:b8:a2:e2:7c:0a:d6: c9:21:ff:cf:02:89:51:46:e4:22:b9:00:b4:6c:cc: 44:76:78:4f:65:d1:6f:1f:24:46:34:c2:79:bf:af: 1b:f8:8f:b4:7c:03:a9:4f:2e:d5:11:d5:7c:55:bd: 62:03:dc:6c:64:59:27:23:88:c2:ce:67:39:4c:54: bc:dd:b1:76:93:c5:aa:2b:66:bb:da:50:21:5d:40: c0:64:c6:30:65:d9:87:5c:b0:8c:4f:f9:ed:01:35: 6c:1c:8b:35:42:de:c7:09:b5:b3:09:b3:af:c3:12: 9d:28:cf:a2:32:52:0b:06:e8:46:09:63:da:f4:cf: 7e:50:7d:48:d3:75:37:a3:24:9e:df:23:d0:58:38: f1:69:a3:d0:e2:48:ca:9c:59:ed:08:fb:b8:b9:1d: e6:cd:9b:66:ec:1b:16:99:7d:a1:5a:a3:14:98:26: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:5E:7D:92:CC:B9:6B:1D:39:D8:40:4B:67:E9:A9:D8:D5:1B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.crl X509v3 Authority Key Identifier: keyid:40:39:B5:3F:E1:53:87:18:56:61:43:DF:22:61:D6:0E:2E:97:AA:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a9:02:b9:dc:af:c9:2f:a7:80:0d:d2:40:81:2e:90:6c:f9: 51:68:5f:e4:05:f5:f6:98:d0:41:43:a1:11:37:d7:59:01:be: a0:67:95:8f:fa:5d:fd:7d:e4:e0:03:28:fa:7d:88:61:37:8f: fc:ac:cb:82:9e:55:1e:3a:2e:70:07:e2:94:1a:7a:43:4c:86: 27:76:74:97:61:2a:70:2d:a0:f8:16:bc:b7:8b:59:11:67:42: 2a:04:f8:f6:31:f9:ea:50:f6:df:fb:72:65:78:e3:6f:24:1a: 83:c1:3f:0e:98:2a:3d:09:b5:47:6d:c5:cb:e6:b4:a5:c1:e8: 7c:ba:81:b4:b3:36:c0:62:42:f3:7b:d2:8e:20:5d:bf:65:01: 0d:b8:5e:4f:cf:a6:95:94:24:45:99:74:97:c9:90:45:63:55: 3e:24:fc:e2:ef:f2:12:b6:ef:d0:fe:b3:56:75:af:98:88:73: 97:42:ae:18:d7:a3:89:a8:1e:9c:cf:48:3a:ce:67:22:85:f6: eb:f4:cb:4b:c4:26:ed:4c:6b:08:ab:48:0a:5c:44:90:98:c7: 78:2e:5e:15:ee:77:8a:c8:35:e2:64:84:82:63:95:7d:1e:e1: 6d:56:0a:c1:56:7f:cc:0f:53:e7:8b:61:a6:a8:1a:f4:4c:97: d9:df:fc:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1wP4gkv6MjADK8ryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUzMTQ0ZjctNjdhZS00Y2RkLWE5YTEtZDIwY2Y2MTQw ZjRmMB4XDTI2MDQwODEzMDAwM1oXDTI2MDQxMTEzMDAwMFowLzEtMCsGA1UEAxMk MjdlOTg4NTctNTlmMS00NTM1LWFhNzMtYWU3ZGMwYjUxY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZwhUIPgO/16E8JmWcDbb6Oza4rv0rxGzcpZ 3t+aTFIk6ZdothWCn3h2DKB4/4K4YYTSi25HuyKMoqd1dp40vpsJmgRxWGfmUpit 6tkQJx7RCli4ouJ8CtbJIf/PAolRRuQiuQC0bMxEdnhPZdFvHyRGNMJ5v68b+I+0 fAOpTy7VEdV8Vb1iA9xsZFknI4jCzmc5TFS83bF2k8WqK2a72lAhXUDAZMYwZdmH XLCMT/ntATVsHIs1Qt7HCbWzCbOvwxKdKM+iMlILBuhGCWPa9M9+UH1I03U3oySe 3yPQWDjxaaPQ4kjKnFntCPu4uR3mzZtm7BsWmX2hWqMUmCYR6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE7rXn2SzLlrHTnYQEtn6anY1RuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNTMx NDRmNy02N2FlLTRjZGQtYTlhMS1kMjBjZjYxNDBmNGYvMzUzMTQ0ZjctNjdhZS00 Y2RkLWE5YTEtZDIwY2Y2MTQwZjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzUzMTQ0ZjctNjdhZS00Y2RkLWE5 YTEtZDIwY2Y2MTQwZjRmLzM1MzE0NGY3LTY3YWUtNGNkZC1hOWExLWQyMGNmNjE0 MGY0Zi5jcmwwHwYDVR0jBBgwFoAUQDm1P+FThxhWYUPfImHWDi6Xqk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNTMxNDRmNy02N2FlLTRjZGQtYTlhMS1kMjBj ZjYxNDBmNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoqQK53K/JL6eADdJAgS6Q bPlRaF/kBfX2mNBBQ6ERN9dZAb6gZ5WP+l39feTgAyj6fYhhN4/8rMuCnlUeOi5w B+KUGnpDTIYndnSXYSpwLaD4Fry3i1kRZ0IqBPj2MfnqUPbf+3JleONvJBqDwT8O mCo9CbVHbcXL5rSlweh8uoG0szbAYkLze9KOIF2/ZQENuF5Pz6aVlCRFmXSXyZBF Y1U+JPzi7/IStu/Q/rNWda+YiHOXQq4Y16OJqB6cz0g6zmcihfbr9MtLxCbtTGsI q0gKXESQmMd4Ll4V7neKyDXiZISCY5V9HuFtVgrBVn/MD1Pni2GmqBr0TJfZ3/xc -----END CERTIFICATE-----Generated at Wed Apr 8 21:45:27 2026 by rpki-client