$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft File: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft (raw, json) Hash identifier: /0HvnJqnb1rvXsIHss1MYzZyiGXKPgp+j9wwrCfHHxk= Subject key identifier: 1C:B6:96:75:0B:99:8E:DB:60:D3:37:C0:11:D7:6A:56:BC:BA:71:4C Authority key identifier: CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 Certificate issuer: /CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Certificate serial: 010D0C9F4328584D6B038018B27069443E40EB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft Manifest number: 010D0C9F4328584AF0F7D2772C59CBCE8447BAE3 Signing time: Mon 06 Apr 2026 16:00:03 +0000 Manifest this update: Mon 06 Apr 2026 16:00:03 +0000 Manifest next update: Wed 08 Apr 2026 16:00:00 +0000 Files and hashes: 1: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl (hash: cTm15+pYWTmULCQEfjIxCLF+X223Uvc1aGh2nCV9l50=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:03:80:18:b2:70:69:44:3e:40:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Validity Not Before: Apr 6 16:00:03 2026 GMT Not After : Apr 8 16:00:00 2026 GMT Subject: CN=b1bc2bd5-064a-4c85-b4c3-38252dcd9efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:af:2a:92:17:04:32:a5:5b:cc:02:8d:f5: a5:22:49:e1:09:2a:a3:f7:60:78:ed:09:3b:6b:fe: 56:f3:30:cd:df:c7:a0:64:80:17:ad:0f:e8:2a:ad: 59:59:d4:9b:3c:e1:6d:5e:80:8b:ed:5a:92:18:b4: c6:cc:d1:2c:ef:f8:1c:f0:9b:c9:ca:72:7b:cc:1c: 56:3c:e3:82:d1:cd:cd:11:41:3c:8c:31:c5:ab:1d: d2:e3:4b:a4:46:36:43:03:da:af:08:27:f1:d5:e4: 97:b4:fe:86:1f:df:74:0c:29:0b:5c:b2:bc:15:8b: f9:a6:9f:1f:ea:82:e6:63:92:86:a9:cc:6a:c4:fb: 97:39:12:94:c4:d2:a0:2f:21:0c:cb:c4:5d:a9:3f: 73:52:88:ea:79:9e:6d:e3:cd:1c:ff:7c:74:ed:3e: 9d:ee:6f:1b:6c:e0:7e:3c:ad:61:f3:31:26:33:c3: bc:e8:b0:79:4e:4d:2a:5e:b0:29:a1:d9:e2:66:50: 01:81:9f:0d:21:32:e5:8e:86:c1:f7:d6:4f:3e:f9: 2a:c4:b4:22:57:7f:a6:31:1f:10:14:3c:77:98:65: b9:2b:9f:74:0f:7f:8e:13:29:e8:5a:ee:da:04:80: ec:af:e0:34:0b:0c:cc:97:8b:e3:71:e9:30:8e:97: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:96:75:0B:99:8E:DB:60:D3:37:C0:11:D7:6A:56:BC:BA:71:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl X509v3 Authority Key Identifier: keyid:CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:82:a3:fd:ea:9a:63:bb:24:5e:08:1d:03:fd:f0:87:00:a4: 34:4d:32:0d:49:ef:65:d9:5c:90:22:77:37:60:fa:5a:b9:f2: 01:4e:63:95:bf:f7:1e:0e:45:d2:72:7e:b8:79:ea:d2:c9:98: 42:9c:f8:be:36:51:1f:54:a6:4d:81:f9:a8:22:1f:bf:ce:b8: 1a:62:b0:e4:0a:52:10:f7:98:7c:9a:c1:c2:c9:08:f5:6c:bd: 43:0a:68:79:3d:20:9d:46:72:16:7d:6e:24:9a:1d:dd:0b:d3: 2e:51:2c:2c:0c:51:f1:eb:33:e9:25:bb:b5:f2:e8:c1:c1:bd: d8:7f:3e:2b:50:6a:ec:44:eb:9f:72:ff:22:5a:3a:14:b2:c3: c6:32:be:0d:dd:dd:48:27:2e:1c:33:38:49:0b:9b:44:8c:a7: a7:cf:05:d5:de:ea:b0:82:fb:bd:66:7f:22:a3:ff:0c:89:05: 99:e1:3b:89:38:b5:0f:4e:d5:fd:5c:12:0d:a3:68:f3:60:ca: 93:13:4d:36:5b:53:b7:f7:6e:be:73:c2:27:40:06:5b:2a:21: ec:39:b2:57:b5:11:9a:0b:26:28:ff:0f:90:1a:77:f5:77:10: bf:6b:41:8d:85:6e:68:ae:28:1d:71:d8:85:90:da:dd:da:69: db:23:ad:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rA4AYsnBpRD5A64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZhNmI0NTYtM2NkNS00NTdlLTg2ZjEtNDI4MGVhNjFm NWIzMB4XDTI2MDQwNjE2MDAwM1oXDTI2MDQwODE2MDAwMFowLzEtMCsGA1UEAxMk YjFiYzJiZDUtMDY0YS00Yzg1LWI0YzMtMzgyNTJkY2Q5ZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuvKpIXBDKlW8wCjfWlIknhCSqj92B47Qk7 a/5W8zDN38egZIAXrQ/oKq1ZWdSbPOFtXoCL7VqSGLTGzNEs7/gc8JvJynJ7zBxW POOC0c3NEUE8jDHFqx3S40ukRjZDA9qvCCfx1eSXtP6GH990DCkLXLK8FYv5pp8f 6oLmY5KGqcxqxPuXORKUxNKgLyEMy8RdqT9zUojqeZ5t480c/3x07T6d7m8bbOB+ PK1h8zEmM8O86LB5Tk0qXrApodniZlABgZ8NITLljobB99ZPPvkqxLQiV3+mMR8Q FDx3mGW5K590D3+OEynoWu7aBIDsr+A0CwzMl4vjcekwjpe8jwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBy2lnULmY7bYNM3wBHXala8unFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2 YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00MjgwZWE2MWY1YjMvNGZhNmI0NTYtM2NkNS00 NTdlLTg2ZjEtNDI4MGVhNjFmNWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGZhNmI0NTYtM2NkNS00NTdlLTg2 ZjEtNDI4MGVhNjFmNWIzLzRmYTZiNDU2LTNjZDUtNDU3ZS04NmYxLTQyODBlYTYx ZjViMy5jcmwwHwYDVR0jBBgwFoAUzBe4KnWaAWYfWRyVrB1P6+t1kIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00Mjgw ZWE2MWY1YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAygqP96ppjuyReCB0D/fCH AKQ0TTINSe9l2VyQInc3YPpaufIBTmOVv/ceDkXScn64eerSyZhCnPi+NlEfVKZN gfmoIh+/zrgaYrDkClIQ95h8msHCyQj1bL1DCmh5PSCdRnIWfW4kmh3dC9MuUSws DFHx6zPpJbu18ujBwb3Yfz4rUGrsROufcv8iWjoUssPGMr4N3d1IJy4cMzhJC5tE jKenzwXV3uqwgvu9Zn8io/8MiQWZ4TuJOLUPTtX9XBINo2jzYMqTE002W1O3926+ c8InQAZbKiHsObJXtRGaCyYo/w+QGnf1dxC/a0GNhW5origdcdiFkNrd2mnbI60f -----END CERTIFICATE-----Generated at Tue Apr 7 15:07:01 2026 by rpki-client