$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: bWzv1JgNIxKbdHWTg++21TSBQgO0350AqKKaiwi+c1U= Subject key identifier: 33:44:6E:D4:98:16:EA:52:72:CA:B8:0E:15:B2:A6:B6:4D:54:1C:AD Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584DA208B71E2684F06AF3885C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022555 Signing time: Sun 26 Apr 2026 09:00:03 +0000 Manifest this update: Sun 26 Apr 2026 09:00:03 +0000 Manifest next update: Wed 29 Apr 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: AB8H6czmJ9dG7OFV/0xvwXH7sq2XBlLhb3PA5xSew1k=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: 6MRFiqSeLwMNnLoVSxXvrnDIqINkLXL25fSgvxL+CxE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:08:b7:1e:26:84:f0:6a:f3:88:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Apr 26 09:00:03 2026 GMT Not After : Apr 29 09:00:00 2026 GMT Subject: CN=4449c3c0-2794-4229-a29a-b59932ac0702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:b9:c8:09:12:3e:61:1e:d2:8d:aa:08:96: d2:f2:dc:da:fb:89:48:cd:8c:59:4d:80:a6:32:05: 1d:7d:98:a5:b2:e4:94:ce:58:5d:25:74:76:d2:0d: d3:85:1b:d6:c2:fb:51:ae:f5:ae:b5:ff:c7:c2:b6: 5f:8b:a4:6f:9a:fb:09:4b:6e:ee:80:2e:18:e0:70: 2d:0a:d4:0b:bc:60:e5:56:bd:9e:51:6f:1f:c3:03: 72:8b:e3:4e:a8:40:34:83:0b:60:2d:8f:de:37:65: 81:98:9b:e4:61:cd:e0:98:af:3a:d7:85:18:a1:68: ea:ac:f0:52:b5:c2:0d:9a:c0:eb:80:40:1c:be:86: cb:c2:f7:c7:bf:2b:14:46:61:aa:8d:78:62:48:17: 71:43:36:d2:3b:eb:fe:ac:71:04:75:82:a9:c1:00: f6:dd:54:18:32:09:36:74:a6:4d:2f:67:13:6c:ae: b8:2d:18:51:14:dc:c9:2b:a1:b5:48:d0:7b:21:14: 41:1f:8d:d1:47:f1:ba:c0:df:c9:54:c5:48:68:1d: 21:99:c7:88:3f:c4:09:ee:7d:5d:75:95:28:61:a1: 4a:74:83:28:f4:3b:69:6d:8e:e5:cd:b5:ff:54:03: 9a:f5:27:a3:b5:d6:58:ab:7c:25:64:00:c1:4a:eb: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:44:6E:D4:98:16:EA:52:72:CA:B8:0E:15:B2:A6:B6:4D:54:1C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7e:8b:96:bf:76:d1:25:76:13:51:cf:da:b5:9b:47:11:88: 3b:69:f1:19:35:fa:33:5f:39:4d:47:97:74:c4:8d:58:f6:1a: 2c:d5:65:ba:eb:e7:4f:28:e0:a1:1a:ae:90:d7:f1:ed:c1:2f: e5:9b:77:52:be:81:97:b8:88:7e:ab:2e:f9:41:f8:de:e0:dc: 74:98:6a:a8:2d:e0:d3:bc:0e:8e:5e:65:e3:d0:d8:b8:c6:67: ef:46:c7:6d:57:15:1a:ec:04:a8:ea:8b:bf:55:0f:81:4b:bf: f0:dc:9c:93:f7:9d:8c:0f:23:70:f8:12:08:23:20:08:31:be: 2a:2e:96:cb:7a:0a:99:7a:0e:19:19:48:b6:fc:3a:2d:9b:70: 31:32:ca:78:f7:76:a4:19:34:40:1a:e5:08:01:74:67:38:72: 34:42:5c:83:e2:ec:7c:2f:f9:5b:46:94:43:a9:4f:4b:3b:a6: 5a:fb:6f:c6:42:af:02:1d:c6:9b:58:e7:a3:12:ed:83:0a:79: 74:2f:6c:6f:5f:63:77:9c:48:f4:29:f8:3c:c6:90:0a:72:7e: 19:e3:93:0a:51:df:09:d9:1f:0a:10:07:d4:03:25:bf:a9:be: c4:8a:4c:86:69:d0:1d:fe:90:0c:5c:5b:be:3a:e0:69:18:b3: d1:07:91:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2iCLceJoTwavOIXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDQyNjA5MDAwM1oXDTI2MDQyOTA5MDAwMFowLzEtMCsGA1UEAxMk NDQ0OWMzYzAtMjc5NC00MjI5LWEyOWEtYjU5OTMyYWMwNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJC5yAkSPmEe0o2qCJbS8tza+4lIzYxZTYCm MgUdfZilsuSUzlhdJXR20g3ThRvWwvtRrvWutf/HwrZfi6RvmvsJS27ugC4Y4HAt CtQLvGDlVr2eUW8fwwNyi+NOqEA0gwtgLY/eN2WBmJvkYc3gmK8614UYoWjqrPBS tcINmsDrgEAcvobLwvfHvysURmGqjXhiSBdxQzbSO+v+rHEEdYKpwQD23VQYMgk2 dKZNL2cTbK64LRhRFNzJK6G1SNB7IRRBH43RR/G6wN/JVMVIaB0hmceIP8QJ7n1d dZUoYaFKdIMo9DtpbY7lzbX/VAOa9SejtdZYq3wlZADBSuszgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDNEbtSYFupScsq4DhWyprZNVBytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEfouWv3bRJXYTUc/atZtH EYg7afEZNfozXzlNR5d0xI1Y9hos1WW66+dPKOChGq6Q1/HtwS/lm3dSvoGXuIh+ qy75Qfje4Nx0mGqoLeDTvA6OXmXj0Ni4xmfvRsdtVxUa7ASo6ou/VQ+BS7/w3JyT 952MDyNw+BIIIyAIMb4qLpbLegqZeg4ZGUi2/Dotm3AxMsp493akGTRAGuUIAXRn OHI0QlyD4ux8L/lbRpRDqU9LO6Za+2/GQq8CHcabWOejEu2DCnl0L2xvX2N3nEj0 Kfg8xpAKcn4Z45MKUd8J2R8KEAfUAyW/qb7EikyGadAd/pAMXFu+OuBpGLPRB5Hj -----END CERTIFICATE-----Generated at Mon Apr 27 09:55:53 2026 by rpki-client