$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft File: cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft (raw, json) Hash identifier: imHI8D0nusUoMaD2vIPeOpktX59wTtqnX2jI3dB0O2A= Subject key identifier: 22:AD:23:01:76:06:A9:42:FF:13:B9:CC:4B:DE:CC:BD:C1:60:98:EA Authority key identifier: 19:0C:6C:3F:E1:86:5B:83:98:63:2F:6F:87:7F:E8:5A:9A:3E:2B:42 Certificate issuer: /CN=cf90d7bf-dad6-4851-ac33-f1ca8b32ec68 Certificate serial: 010D0C9F4328584D6D1B830195BAFB8526FDFE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft Manifest number: 010D0C9F4328584B12328A810F7053C123795CD8 Signing time: Tue 07 Apr 2026 10:00:03 +0000 Manifest this update: Tue 07 Apr 2026 10:00:03 +0000 Manifest next update: Fri 10 Apr 2026 10:00:00 +0000 Files and hashes: 1: 4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer (hash: 3F4eVXTF3hKEyRxz328j+5GXKE/Kzm6js3kFx9ivXXA=) 2: cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl (hash: 57u3Pwvi4tsx6txpF+M8G/T/ApRt00I8wTvNUGiUtoQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:1b:83:01:95:ba:fb:85:26:fd:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf90d7bf-dad6-4851-ac33-f1ca8b32ec68 Validity Not Before: Apr 7 10:00:03 2026 GMT Not After : Apr 10 10:00:00 2026 GMT Subject: CN=d4df9d32-b12f-4f23-846a-cc2ea4c1755a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:55:3d:5f:ff:d3:0b:db:bc:ec:d0:90:fd: 18:a9:a9:2d:b5:08:ae:51:dc:ea:d6:03:18:ab:c2: fc:43:36:19:df:24:24:c3:aa:4e:c9:68:b1:48:85: a6:9c:6c:e3:76:a6:59:6d:c2:9a:2c:80:d5:ec:e1: 50:ee:d8:97:93:54:72:47:a9:05:9d:65:21:e1:6b: 01:6b:38:69:1e:5d:72:72:f1:b7:eb:a8:c9:11:18: 94:6c:94:f8:4f:a4:9b:38:8d:0c:a8:c8:8a:3a:0c: 8c:3b:36:ee:8d:96:0c:d8:be:8d:8a:b4:ce:c5:43: d1:c9:2d:fe:30:14:c1:6c:f7:82:fb:ac:a0:0e:1f: f6:0a:8e:ad:59:c4:3a:c2:b7:e5:19:0b:89:cb:e9: a2:a4:aa:9d:74:66:2a:e0:45:6f:23:3d:29:f6:cb: 81:19:98:51:a2:54:98:f5:19:fa:8c:cf:1b:e7:26: 71:09:0e:e8:cb:63:6d:18:ab:9c:41:c2:30:3d:8c: 41:e7:b4:f2:d7:ba:01:a8:32:f5:50:05:9a:1f:19: 73:99:db:d1:8a:1a:f5:3b:9b:95:6f:21:d8:15:d2: 14:f5:10:71:bd:1e:05:bc:19:e1:37:d3:2f:26:23: dc:53:e3:ee:ee:bf:48:81:4d:91:aa:de:6b:d5:b6: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AD:23:01:76:06:A9:42:FF:13:B9:CC:4B:DE:CC:BD:C1:60:98:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl X509v3 Authority Key Identifier: keyid:19:0C:6C:3F:E1:86:5B:83:98:63:2F:6F:87:7F:E8:5A:9A:3E:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ec:62:20:8c:7f:19:79:e6:bb:4a:6e:c8:6e:b1:42:af:d7: ab:42:4d:2d:98:37:62:c5:af:09:c5:11:2d:64:90:1f:4f:4a: 06:f5:8a:e6:61:32:f4:f2:8d:d6:bc:77:ae:20:a7:bb:d7:25: 08:81:f7:6e:61:9f:a4:72:a6:e2:2b:21:da:03:13:d5:fd:cb: 66:8e:73:5d:03:71:33:be:82:e7:3c:c4:0a:47:17:81:42:6f: eb:49:c8:de:b9:5d:2a:f7:67:78:ad:7d:f3:51:29:85:73:2c: 70:5e:aa:7c:7a:f6:ae:8e:ea:21:b4:9e:34:5f:1d:97:f9:60: 46:7e:aa:bf:f6:61:73:79:14:12:65:52:5a:f7:19:c5:f7:9d: cf:c3:53:17:56:ec:47:3f:32:78:aa:d6:a7:ee:c4:66:0f:99: 7b:b5:0f:0e:de:fd:cd:9d:36:78:5a:d5:cf:4f:0f:ae:67:7a: 7b:0a:36:98:c4:10:dd:77:83:07:07:07:a4:ac:36:83:df:27: c1:c7:e4:f7:e7:dd:25:68:20:36:6a:e6:41:cd:8f:75:f3:bf: 06:56:92:2d:fa:d5:42:47:fb:3a:45:6c:0e:59:b0:ec:cc:fc: 67:38:f8:d2:00:3b:10:a9:b9:dc:61:58:f8:3e:45:03:84:46: a6:ab:93:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1tG4MBlbr7hSb9/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5MGQ3YmYtZGFkNi00ODUxLWFjMzMtZjFjYThiMzJl YzY4MB4XDTI2MDQwNzEwMDAwM1oXDTI2MDQxMDEwMDAwMFowLzEtMCsGA1UEAxMk ZDRkZjlkMzItYjEyZi00ZjIzLTg0NmEtY2MyZWE0YzE3NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFVPV//0wvbvOzQkP0YqakttQiuUdzq1gMY q8L8QzYZ3yQkw6pOyWixSIWmnGzjdqZZbcKaLIDV7OFQ7tiXk1RyR6kFnWUh4WsB azhpHl1ycvG366jJERiUbJT4T6SbOI0MqMiKOgyMOzbujZYM2L6NirTOxUPRyS3+ MBTBbPeC+6ygDh/2Co6tWcQ6wrflGQuJy+mipKqddGYq4EVvIz0p9suBGZhRolSY 9Rn6jM8b5yZxCQ7oy2NtGKucQcIwPYxB57Ty17oBqDL1UAWaHxlzmdvRihr1O5uV byHYFdIU9RBxvR4FvBnhN9MvJiPcU+Pu7r9IgU2Rqt5r1bZtgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCKtIwF2BqlC/xO5zEvezL3BYJjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZjkw ZDdiZi1kYWQ2LTQ4NTEtYWMzMy1mMWNhOGIzMmVjNjgvY2Y5MGQ3YmYtZGFkNi00 ODUxLWFjMzMtZjFjYThiMzJlYzY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2Y5MGQ3YmYtZGFkNi00ODUxLWFj MzMtZjFjYThiMzJlYzY4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMy ZWM2OC5jcmwwHwYDVR0jBBgwFoAUGQxsP+GGW4OYYy9vh3/oWpo+K0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZjkwZDdiZi1kYWQ2LTQ4NTEtYWMzMy1mMWNh OGIzMmVjNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh7GIgjH8Zeea7Sm7IbrFC r9erQk0tmDdixa8JxREtZJAfT0oG9YrmYTL08o3WvHeuIKe71yUIgfduYZ+kcqbi KyHaAxPV/ctmjnNdA3EzvoLnPMQKRxeBQm/rScjeuV0q92d4rX3zUSmFcyxwXqp8 evaujuohtJ40Xx2X+WBGfqq/9mFzeRQSZVJa9xnF953Pw1MXVuxHPzJ4qtan7sRm D5l7tQ8O3v3NnTZ4WtXPTw+uZ3p7CjaYxBDdd4MHBwekrDaD3yfBx+T3590laCA2 auZBzY91878GVpIt+tVCR/s6RWwOWbDszPxnOPjSADsQqbncYVj4PkUDhEamq5Ns -----END CERTIFICATE-----Generated at Tue Apr 7 15:07:36 2026 by rpki-client