$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: qFB96FALumJu1VBmYYW4gudnLk/qZTRsd0XND2oYzjg= Subject key identifier: 6B:BF:BB:3F:34:B1:2E:4F:B4:C9:18:47:02:0D:C2:8A:35:75:72:1F Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584DA27FD60F2B33F4B76DA10200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060D41 Signing time: Sun 26 Apr 2026 13:00:03 +0000 Manifest this update: Sun 26 Apr 2026 13:00:03 +0000 Manifest next update: Wed 29 Apr 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: LtqcM7lbZ8n4B1lhlPu+ktSkPDqAP6UIcfJCS6ARr68=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: a0LiXaDyN5WKRehyJs7m+TOLmy/7oXtdMaDfgurFtPI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:7f:d6:0f:2b:33:f4:b7:6d:a1:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Apr 26 13:00:03 2026 GMT Not After : Apr 29 13:00:00 2026 GMT Subject: CN=9e14b8a6-223c-4c0c-81e5-b3f12cca01c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:89:34:37:cf:fc:7d:69:c3:12:78:55:31: 8b:ae:bc:74:2d:b4:b1:71:a3:cb:05:b2:ef:81:14: c9:7b:fe:e1:8b:9d:5d:64:fe:0d:e3:47:8b:e3:3e: 7f:a0:b5:60:bb:fc:ce:a1:15:ad:d5:99:2b:86:cf: 0d:73:3a:86:67:0a:67:9b:ff:af:69:d0:8b:79:77: c2:81:e3:40:1f:ee:a1:50:4f:46:ac:c3:41:1c:fc: 3f:e1:2f:68:e1:61:08:51:68:71:38:fd:95:0f:98: f8:f5:ff:fe:db:91:d2:8f:77:36:f0:8b:e2:89:84: 9d:1d:1e:b1:2e:0d:5e:52:6e:c2:29:77:36:f4:58: c3:36:07:3b:df:47:8f:21:eb:ea:d7:e3:e2:9f:87: 61:93:c6:2a:0e:67:3f:98:5b:16:00:7d:d3:b0:79: b3:83:e4:d2:d7:9e:9a:8a:24:de:86:19:40:20:f8: 03:8c:d8:83:79:b8:b4:5f:ad:f3:44:53:bb:9a:3e: d3:36:bb:a3:a0:ee:38:fd:a4:52:72:6b:10:ef:5f: e8:79:96:df:ae:e3:63:b4:c4:08:b3:5c:27:93:98: a5:d7:3f:fa:aa:31:a7:e4:5d:38:80:bb:88:50:92: f3:c7:7c:5f:c5:74:d5:32:e1:07:5e:fd:2b:e0:7b: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:BB:3F:34:B1:2E:4F:B4:C9:18:47:02:0D:C2:8A:35:75:72:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:08:2c:8e:0c:e4:08:07:e3:da:a8:92:27:d2:b6:74:74:dd: 6f:de:fd:9c:8b:2f:87:34:84:b0:c6:c8:fa:08:11:71:2c:f3: f3:26:f3:56:d7:61:a0:fd:02:a2:70:ca:f7:b9:7b:7b:d2:f3: df:30:a7:2b:3c:aa:c3:df:6a:0d:6e:d0:80:a1:3c:2b:50:0f: f1:66:bd:1e:63:21:8d:98:cc:22:ef:fd:a7:57:ba:f3:8c:20: d4:00:16:3c:13:04:5c:cd:fc:71:30:a6:fb:9b:2d:48:ac:1b: 0f:20:21:d5:3a:3b:9c:f3:77:50:09:25:2a:f0:ef:d7:d9:39: 01:cf:69:7e:70:8c:c7:57:83:38:9d:1a:42:f9:59:6d:ce:fa: fc:8e:63:de:4a:58:e4:25:6f:97:c1:3f:1c:13:88:18:65:21: 34:6d:d4:26:47:71:86:80:17:44:f3:84:30:ec:d3:a9:89:ae: e3:36:f3:99:c9:61:95:f3:d7:fe:ed:bd:5d:73:59:7b:eb:4e: 61:d6:6d:91:b0:54:22:8b:f3:18:31:c9:55:ab:a2:b0:ff:68: 1b:36:3b:f4:17:a8:27:7b:94:50:bf:fb:6b:3f:25:75:77:1a: 64:af:51:f4:4f:32:bc:43:49:96:39:ab:60:2f:7c:3f:00:fe: fb:5c:0d:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2if9YPKzP0t22hAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDQyNjEzMDAwM1oXDTI2MDQyOTEzMDAwMFowLzEtMCsGA1UEAxMk OWUxNGI4YTYtMjIzYy00YzBjLTgxZTUtYjNmMTJjY2EwMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkryJNDfP/H1pwxJ4VTGLrrx0LbSxcaPLBbLv gRTJe/7hi51dZP4N40eL4z5/oLVgu/zOoRWt1Zkrhs8NczqGZwpnm/+vadCLeXfC geNAH+6hUE9GrMNBHPw/4S9o4WEIUWhxOP2VD5j49f/+25HSj3c28IviiYSdHR6x Lg1eUm7CKXc29FjDNgc730ePIevq1+Pin4dhk8YqDmc/mFsWAH3TsHmzg+TS156a iiTehhlAIPgDjNiDebi0X63zRFO7mj7TNrujoO44/aRScmsQ71/oeZbfruNjtMQI s1wnk5il1z/6qjGn5F04gLuIUJLzx3xfxXTVMuEHXv0r4HtGyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGu/uz80sS5PtMkYRwINwoo1dXIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTCCyODOQIB+PaqJIn0rZ0 dN1v3v2ciy+HNISwxsj6CBFxLPPzJvNW12Gg/QKicMr3uXt70vPfMKcrPKrD32oN btCAoTwrUA/xZr0eYyGNmMwi7/2nV7rzjCDUABY8EwRczfxxMKb7my1IrBsPICHV Ojuc83dQCSUq8O/X2TkBz2l+cIzHV4M4nRpC+Vltzvr8jmPeSljkJW+XwT8cE4gY ZSE0bdQmR3GGgBdE84Qw7NOpia7jNvOZyWGV89f+7b1dc1l7605h1m2RsFQii/MY MclVq6Kw/2gbNjv0F6gne5RQv/trPyV1dxpkr1H0TzK8Q0mWOatgL3w/AP77XA1L -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:02 2026 by rpki-client