$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: LUDg0kgLMdrHVBl2u1UupkYxtRgzK5UviV5BDkFpyUg= Subject key identifier: A2:91:A0:63:2A:5D:01:62:42:82:BC:33:29:6F:19:A9:EC:10:5D:7F Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584DA47A1165280783138EA55200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88DB9 Signing time: Mon 27 Apr 2026 06:00:03 +0000 Manifest this update: Mon 27 Apr 2026 06:00:03 +0000 Manifest next update: Wed 29 Apr 2026 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: w/N1/5zn3T3CD3V96VUBPzp94fWsa8/CEAMFgG+Fi9M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:7a:11:65:28:07:83:13:8e:a5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Apr 27 06:00:03 2026 GMT Not After : Apr 29 06:00:00 2026 GMT Subject: CN=f6e7cc36-6fe9-4219-8719-a3c27da3855c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:9c:5c:2e:a6:d8:5c:50:c1:5b:32:22:71: 06:0b:72:4f:ee:db:6c:f1:e7:e1:bb:28:c8:64:59: 6f:38:e1:ce:4d:b5:f1:8c:23:ae:dd:2d:ea:ec:cd: 06:67:a0:36:7e:02:1c:bd:a0:64:87:ad:39:2c:35: b7:c9:e6:97:a4:ee:35:ea:e0:c7:40:65:d7:87:df: f0:3d:03:d3:fe:82:26:6d:6b:9b:21:b8:51:53:7f: ae:a8:d5:46:e4:13:8f:97:41:91:de:71:16:b9:61: 5c:da:4d:fa:aa:33:aa:a5:e6:97:54:59:a0:2e:eb: 98:37:55:15:5a:81:c0:ab:b7:ab:e3:90:43:06:c2: 84:cf:33:ea:ca:61:53:e1:44:f0:0c:89:0a:45:20: d3:b3:85:5d:f3:93:12:1d:d8:5d:03:68:17:46:6e: a0:20:cc:65:5d:02:56:32:12:f4:42:fd:e8:33:8b: 9e:62:e3:49:d4:05:57:9e:38:09:e9:6a:89:a0:fd: 99:d8:b2:66:7f:5d:2a:b3:b7:3e:65:04:d6:8d:13: fa:b6:2d:9a:74:2e:ec:75:93:21:ab:b3:f9:b3:dc: 14:31:e4:8f:a4:18:9b:b1:5c:8a:52:65:a2:17:28: 6d:2c:65:3f:62:9c:88:8a:56:6a:25:a5:26:e9:5a: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:A0:63:2A:5D:01:62:42:82:BC:33:29:6F:19:A9:EC:10:5D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b3:03:8e:60:03:b1:7f:af:72:b0:a9:8c:f3:ae:28:34:fb: e3:b6:09:fe:ce:91:ad:53:7c:7e:83:08:e9:30:68:c7:c4:b4: 2e:3c:df:dd:b7:e3:74:6b:c5:e5:e1:8b:04:f0:49:a0:1d:69: 43:b6:e9:44:44:27:40:fa:fd:c6:93:34:81:ca:ae:2b:74:cc: 9b:b2:02:cc:5f:8c:7c:3f:f6:d5:c1:fb:50:2d:6e:80:9c:aa: 38:d5:20:7e:14:ff:ea:24:39:ae:34:19:28:f0:a2:4b:93:25: ed:df:b5:3b:91:f7:af:fe:47:0a:95:95:db:4a:67:32:d1:f5: 2c:48:6f:f9:04:25:f4:d0:ee:fa:20:f7:55:f8:b8:4a:7e:e1: a3:65:84:10:1a:7f:c9:d3:3f:df:da:9c:72:36:27:4d:34:8e: 04:ed:20:c2:68:14:b2:37:f7:bc:40:17:be:0d:0f:65:3d:6e: 69:d7:1b:7f:53:49:68:33:2a:53:c6:32:e9:01:26:59:57:5d: db:19:54:12:f7:70:1a:8c:fb:fb:48:2b:b9:ec:b8:78:4c:1d: 02:1e:69:02:e5:dd:8d:11:f7:03:e6:a6:3a:c9:de:53:00:99: 61:21:42:f7:85:29:05:bb:09:db:d8:da:7c:a0:c9:54:03:26: a7:b7:d1:9e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2kehFlKAeDE46lUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI2MDQyNzA2MDAwM1oXDTI2MDQyOTA2MDAwMFowLzEtMCsGA1UEAxMk ZjZlN2NjMzYtNmZlOS00MjE5LTg3MTktYTNjMjdkYTM4NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrucXC6m2FxQwVsyInEGC3JP7tts8efhuyjI ZFlvOOHOTbXxjCOu3S3q7M0GZ6A2fgIcvaBkh605LDW3yeaXpO416uDHQGXXh9/w PQPT/oImbWubIbhRU3+uqNVG5BOPl0GR3nEWuWFc2k36qjOqpeaXVFmgLuuYN1UV WoHAq7er45BDBsKEzzPqymFT4UTwDIkKRSDTs4Vd85MSHdhdA2gXRm6gIMxlXQJW MhL0Qv3oM4ueYuNJ1AVXnjgJ6WqJoP2Z2LJmf10qs7c+ZQTWjRP6ti2adC7sdZMh q7P5s9wUMeSPpBibsVyKUmWiFyhtLGU/YpyIilZqJaUm6VpiZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKRoGMqXQFiQoK8MylvGansEF1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByswOOYAOxf69ysKmM864o NPvjtgn+zpGtU3x+gwjpMGjHxLQuPN/dt+N0a8Xl4YsE8EmgHWlDtulERCdA+v3G kzSByq4rdMybsgLMX4x8P/bVwftQLW6AnKo41SB+FP/qJDmuNBko8KJLkyXt37U7 kfev/kcKlZXbSmcy0fUsSG/5BCX00O76IPdV+LhKfuGjZYQQGn/J0z/f2pxyNidN NI4E7SDCaBSyN/e8QBe+DQ9lPW5p1xt/U0loMypTxjLpASZZV13bGVQS93AajPv7 SCu57Lh4TB0CHmkC5d2NEfcD5qY6yd5TAJlhIUL3hSkFuwnb2Np8oMlUAyant9Ge -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:00 2026 by rpki-client