$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.mft File: 17608350-923c-49ac-ba58-98403754acd7.mft (raw, json) Hash identifier: 15Jk23A/ww6FfoB4GDItuYEMwlhkt2NRmxz2w9aG+Co= Subject key identifier: 9D:C6:E4:91:FE:5F:F5:94:11:27:4A:82:60:98:95:61:F9:15:10:1F Authority key identifier: 8F:3C:E9:B8:51:DF:CA:32:5F:0E:74:F2:FC:15:09:BF:64:E8:81:BA Certificate issuer: /CN=17608350-923c-49ac-ba58-98403754acd7 Certificate serial: 010D0C9F4328584D6B3F0DF68C356ADFCF5DD944 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.mft Manifest number: 010D0C9F4328584AEBCEB360744879115916C2EA Signing time: Mon 06 Apr 2026 18:00:03 +0000 Manifest this update: Mon 06 Apr 2026 18:00:03 +0000 Manifest next update: Wed 08 Apr 2026 18:00:00 +0000 Files and hashes: 1: 17608350-923c-49ac-ba58-98403754acd7.crl (hash: iOOABXpPZjn6dDfrFjbTLK+IjnT9feJULAQqR/Iekac=) 2: 23ec6e2b-6198-3033-bd15-0ad399284ab4.roa (hash: zQE45QnfnKHRjYNEHtOPInJsQ4oqJNhoOggkF82yLGc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:3f:0d:f6:8c:35:6a:df:cf:5d:d9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17608350-923c-49ac-ba58-98403754acd7 Validity Not Before: Apr 6 18:00:03 2026 GMT Not After : Apr 8 18:00:00 2026 GMT Subject: CN=152759bd-6c8a-4dd9-bced-3e605b9e88e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:f9:0c:d8:3c:cc:a1:69:9e:54:f0:7d:54: 2f:89:cd:36:fa:94:30:ae:ef:a1:e5:c7:99:c9:16: 3d:2f:7d:b6:47:1a:a0:91:24:b7:fa:e6:8b:5d:0f: a9:9d:5b:fe:39:72:40:18:80:47:fa:53:35:6f:94: cf:46:87:c1:3a:b1:5b:c1:b2:bb:91:a6:52:e7:48: d0:9e:d1:da:85:b0:19:4f:78:34:10:f1:e2:41:55: 61:e7:35:9e:4c:51:5e:23:5d:93:f6:b2:41:b2:cc: 4e:46:90:b2:9c:5f:6f:50:ff:0b:80:63:9b:4f:94: b5:d5:40:94:94:60:55:b7:f2:e5:51:00:19:e7:8a: c6:8b:ca:8d:81:72:d5:e6:28:5f:bf:48:74:f9:13: 46:67:97:51:d7:28:08:7d:56:27:8e:bd:8c:a8:1f: 4a:6a:6f:f0:27:70:32:13:5d:8f:ba:7c:d7:7a:e3: 04:92:1b:92:3d:2e:1a:be:62:b6:4c:ab:8a:1a:8a: 25:5d:20:fa:e1:02:bc:ea:f9:83:f5:d7:d5:ef:fb: d4:39:8d:f9:fc:4e:aa:35:d6:ed:af:bf:85:d1:ee: 07:03:9a:fd:f1:b0:54:19:81:6b:64:18:0d:31:c0: ca:38:77:30:39:95:f4:9f:e8:09:4a:4d:b4:77:f6: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C6:E4:91:FE:5F:F5:94:11:27:4A:82:60:98:95:61:F9:15:10:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.crl X509v3 Authority Key Identifier: keyid:8F:3C:E9:B8:51:DF:CA:32:5F:0E:74:F2:FC:15:09:BF:64:E8:81:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:49:1d:eb:62:ac:dc:ea:fa:39:d5:cd:c5:5f:37:f2:99:ac: b3:fc:d4:8c:cd:01:9d:cd:90:cb:9c:39:60:81:1d:c8:17:63: 03:06:1e:05:dc:5e:d6:9e:16:4f:20:9e:e0:60:93:29:f7:ac: 71:0f:54:49:c5:7b:f4:c3:e7:8a:3b:26:d4:fd:01:51:b9:7d: 90:2e:8c:7a:44:bb:24:32:8d:6f:c1:86:2e:14:e1:25:d1:a0: cc:12:95:cb:ef:6c:87:6e:c8:c1:2a:5b:bf:56:8c:77:95:56: 59:43:c2:63:1b:0e:af:6b:77:c6:8c:1e:ef:d6:94:0e:eb:35: f6:34:79:77:00:a4:f2:95:69:c8:fb:e4:ad:40:b4:89:bd:5f: 81:46:f8:f0:6b:c8:fb:b7:9a:2a:fb:3f:42:14:4a:9a:02:0a: db:16:3c:b1:0d:f7:42:2b:d3:0a:af:f4:20:c1:5b:81:1f:04: b1:06:22:9b:0b:c4:02:45:1b:a6:5d:36:e8:79:16:6f:32:fa: 70:82:09:ba:aa:fd:98:61:c0:0d:44:bc:bf:b7:a8:12:5b:29: 21:4e:86:a6:58:37:d9:9e:3f:17:79:aa:07:78:d1:25:81:c0: ce:db:f1:7f:0c:70:d3:f4:21:3e:47:67:38:74:c3:15:5e:fe: 67:24:6c:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rPw32jDVq389d2UQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc2MDgzNTAtOTIzYy00OWFjLWJhNTgtOTg0MDM3NTRh Y2Q3MB4XDTI2MDQwNjE4MDAwM1oXDTI2MDQwODE4MDAwMFowLzEtMCsGA1UEAxMk MTUyNzU5YmQtNmM4YS00ZGQ5LWJjZWQtM2U2MDViOWU4OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/P5DNg8zKFpnlTwfVQvic02+pQwru+h5ceZ yRY9L322RxqgkSS3+uaLXQ+pnVv+OXJAGIBH+lM1b5TPRofBOrFbwbK7kaZS50jQ ntHahbAZT3g0EPHiQVVh5zWeTFFeI12T9rJBssxORpCynF9vUP8LgGObT5S11UCU lGBVt/LlUQAZ54rGi8qNgXLV5ihfv0h0+RNGZ5dR1ygIfVYnjr2MqB9Kam/wJ3Ay E12PunzXeuMEkhuSPS4avmK2TKuKGoolXSD64QK86vmD9dfV7/vUOY35/E6qNdbt r7+F0e4HA5r98bBUGYFrZBgNMcDKOHcwOZX0n+gJSk20d/a/XQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ3G5JH+X/WUESdKgmCYlWH5FRAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNzYw ODM1MC05MjNjLTQ5YWMtYmE1OC05ODQwMzc1NGFjZDcvMTc2MDgzNTAtOTIzYy00 OWFjLWJhNTgtOTg0MDM3NTRhY2Q3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTc2MDgzNTAtOTIzYy00OWFjLWJh NTgtOTg0MDM3NTRhY2Q3LzE3NjA4MzUwLTkyM2MtNDlhYy1iYTU4LTk4NDAzNzU0 YWNkNy5jcmwwHwYDVR0jBBgwFoAUjzzpuFHfyjJfDnTy/BUJv2TogbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNzYwODM1MC05MjNjLTQ5YWMtYmE1OC05ODQw Mzc1NGFjZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3SR3rYqzc6vo51c3FXzfy mayz/NSMzQGdzZDLnDlggR3IF2MDBh4F3F7WnhZPIJ7gYJMp96xxD1RJxXv0w+eK OybU/QFRuX2QLox6RLskMo1vwYYuFOEl0aDMEpXL72yHbsjBKlu/Vox3lVZZQ8Jj Gw6va3fGjB7v1pQO6zX2NHl3AKTylWnI++StQLSJvV+BRvjwa8j7t5oq+z9CFEqa AgrbFjyxDfdCK9MKr/QgwVuBHwSxBiKbC8QCRRumXTboeRZvMvpwggm6qv2YYcAN RLy/t6gSWykhToamWDfZnj8XeaoHeNElgcDO2/F/DHDT9CE+R2c4dMMVXv5nJGzt -----END CERTIFICATE-----Generated at Tue Apr 7 15:18:38 2026 by rpki-client