$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft File: a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft (raw, json) Hash identifier: QFRpWEBZJ072YBEbyBUDZ4cy11eiNbOe8elUFY9Z158= Subject key identifier: A9:94:C2:28:81:67:91:06:93:B4:81:9E:FF:9F:13:D2:8F:C8:9F:70 Authority key identifier: E8:F9:11:E0:D1:1D:B7:2B:5F:D9:7D:81:24:1E:ED:03:C6:E7:33:F0 Certificate issuer: /CN=a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7 Certificate serial: 010D0C9F4328584D6B3F110D8243613BE18CA700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft Manifest number: 010D0C9F4328584B20FD6211BC61C7E7FCC14FD2 Signing time: Mon 06 Apr 2026 18:00:03 +0000 Manifest this update: Mon 06 Apr 2026 18:00:03 +0000 Manifest next update: Thu 09 Apr 2026 18:00:00 +0000 Files and hashes: 1: a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.crl (hash: fmXEvUckyJBE9q1o1BwczdwWw8xI/8wjCi4FGUw1Rdk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:3f:11:0d:82:43:61:3b:e1:8c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7 Validity Not Before: Apr 6 18:00:03 2026 GMT Not After : Apr 9 18:00:00 2026 GMT Subject: CN=a31df320-9da1-4c3b-9bee-9a7f07c11771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:ef:82:b6:cc:84:c4:a3:b3:55:b0:e0:11: cc:2e:9a:00:ec:6b:7d:3c:ff:5c:b6:42:43:d5:fd: 46:56:71:60:00:0a:90:e9:9a:10:01:9e:b5:b2:24: b1:6b:bd:fe:51:e8:55:02:da:c0:2c:c9:44:f3:07: b5:6f:46:f2:ae:a7:3f:3c:f2:45:27:20:72:fb:12: 40:79:39:86:d8:53:fb:5c:02:d1:ed:da:12:86:9a: 37:26:dd:bd:1e:b9:73:9e:cd:62:a3:1e:ce:52:85: 47:ed:76:1e:10:d3:ff:7e:be:af:3f:f0:4f:ed:dd: c6:0c:6b:44:95:c2:46:4b:f1:f3:7c:f7:bb:b8:f5: 59:cc:b2:f3:49:09:6f:1b:48:6e:67:33:a4:49:55: 4e:1a:07:a5:33:2c:8f:ba:eb:0c:d2:b4:ca:98:1a: 8c:a0:12:3a:8a:7e:de:80:a0:3a:fd:14:cf:d7:77: 3e:78:ce:27:e4:ea:b9:0f:e8:3a:12:2e:e3:6f:5e: a3:3e:e2:bb:18:a6:1d:c5:98:b8:17:0a:14:f9:5b: 1e:2c:de:ea:48:52:dc:be:0f:48:ca:fb:a0:8e:1b: 41:47:6a:de:16:e1:ef:20:64:67:79:9c:ff:62:2c: 3b:44:99:fe:7c:6c:6f:1d:be:49:a4:4c:49:6d:c0: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:C2:28:81:67:91:06:93:B4:81:9E:FF:9F:13:D2:8F:C8:9F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.crl X509v3 Authority Key Identifier: keyid:E8:F9:11:E0:D1:1D:B7:2B:5F:D9:7D:81:24:1E:ED:03:C6:E7:33:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:60:21:c6:90:0a:2d:a3:a9:ec:49:0a:2a:cb:00:f5:c9:5b: b7:6d:87:bb:83:73:62:ea:ff:50:e7:5f:5c:2e:49:9e:d7:e9: 27:38:b5:fa:38:69:07:e7:79:5a:de:2a:e4:5e:5f:94:21:22: a3:34:af:60:d5:7c:55:de:6e:8e:73:fa:7f:c7:70:ee:ea:2e: 81:8d:c1:dd:5e:28:4f:b0:49:ff:06:d2:11:d8:a5:1b:02:4a: 2c:4e:0f:95:07:1a:7d:0e:54:9e:4e:4a:80:df:85:de:c0:db: 7c:86:26:60:2c:ec:d5:a7:c0:9b:3f:06:24:f5:e5:42:af:ff: 8a:71:6f:78:b7:78:15:1a:af:15:4a:84:6f:c6:23:f2:99:d0: 3d:3d:81:e6:85:f4:c3:e0:a1:c5:9b:15:71:d8:23:5e:5f:71: 97:0d:2f:b5:23:67:dc:c8:b0:71:76:60:dc:64:7b:83:58:02: a7:40:e7:ca:bf:d6:11:1b:a4:71:94:38:69:1e:22:8a:d7:f3: 1d:71:8d:ca:96:57:d6:69:0d:d0:ad:55:93:22:5b:28:cb:b4: 20:b3:38:9b:f8:05:8d:1a:de:f9:94:12:0d:11:1a:e3:f8:08: 9b:4d:28:14:6b:09:ce:4d:6c:e0:8a:c1:92:a6:15:b0:0e:e1: a6:50:01:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rPxENgkNhO+GMpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcyZGI0YmQtN2UxYy00Y2Q4LThiMDEtOGFkM2Y5MTNm NGQ3MB4XDTI2MDQwNjE4MDAwM1oXDTI2MDQwOTE4MDAwMFowLzEtMCsGA1UEAxMk YTMxZGYzMjAtOWRhMS00YzNiLTliZWUtOWE3ZjA3YzExNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4fvgrbMhMSjs1Ww4BHMLpoA7Gt9PP9ctkJD 1f1GVnFgAAqQ6ZoQAZ61siSxa73+UehVAtrALMlE8we1b0byrqc/PPJFJyBy+xJA eTmG2FP7XALR7doShpo3Jt29Hrlzns1iox7OUoVH7XYeENP/fr6vP/BP7d3GDGtE lcJGS/HzfPe7uPVZzLLzSQlvG0huZzOkSVVOGgelMyyPuusM0rTKmBqMoBI6in7e gKA6/RTP13c+eM4n5Oq5D+g6Ei7jb16jPuK7GKYdxZi4FwoU+VseLN7qSFLcvg9I yvugjhtBR2reFuHvIGRneZz/Yiw7RJn+fGxvHb5JpExJbcBRkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKmUwiiBZ5EGk7SBnv+fE9KPyJ9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNzJk YjRiZC03ZTFjLTRjZDgtOGIwMS04YWQzZjkxM2Y0ZDcvYTcyZGI0YmQtN2UxYy00 Y2Q4LThiMDEtOGFkM2Y5MTNmNGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTcyZGI0YmQtN2UxYy00Y2Q4LThi MDEtOGFkM2Y5MTNmNGQ3L2E3MmRiNGJkLTdlMWMtNGNkOC04YjAxLThhZDNmOTEz ZjRkNy5jcmwwHwYDVR0jBBgwFoAU6PkR4NEdtytf2X2BJB7tA8bnM/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNzJkYjRiZC03ZTFjLTRjZDgtOGIwMS04YWQz ZjkxM2Y0ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuYCHGkAoto6nsSQoqywD1 yVu3bYe7g3Ni6v9Q519cLkme1+knOLX6OGkH53la3irkXl+UISKjNK9g1XxV3m6O c/p/x3Du6i6BjcHdXihPsEn/BtIR2KUbAkosTg+VBxp9DlSeTkqA34XewNt8hiZg LOzVp8CbPwYk9eVCr/+KcW94t3gVGq8VSoRvxiPymdA9PYHmhfTD4KHFmxVx2CNe X3GXDS+1I2fcyLBxdmDcZHuDWAKnQOfKv9YRG6RxlDhpHiKK1/MdcY3KllfWaQ3Q rVWTIlsoy7Qgszib+AWNGt75lBINERrj+AibTSgUawnOTWzgisGSphWwDuGmUAEA -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:08 2026 by rpki-client