$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft File: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft (raw, json) Hash identifier: IbofPgqw6NfWGoesqlIDMBXl4zd8LzEGqbTbCpeAMO4= Subject key identifier: 8D:B8:16:37:0A:54:E7:33:E2:06:CF:5A:F5:76:5F:CF:40:D3:E5:44 Authority key identifier: 4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 Certificate issuer: /CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Certificate serial: 010D0C9F4328584DA3E52CBC9A39D91CA7EC0680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft Manifest number: 010D0C9F4328584073A8344B79DA88D5249B5E39 Signing time: Mon 27 Apr 2026 01:00:03 +0000 Manifest this update: Mon 27 Apr 2026 01:00:03 +0000 Manifest next update: Wed 29 Apr 2026 01:00:00 +0000 Files and hashes: 1: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl (hash: 7Af/Li0YDlgYgbi0f7BZOxtkBG7+RWeYQ0hR/GlGVtQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:2c:bc:9a:39:d9:1c:a7:ec:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Validity Not Before: Apr 27 01:00:03 2026 GMT Not After : Apr 29 01:00:00 2026 GMT Subject: CN=c1693d0b-2b42-478b-bd8b-7abd8b834382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:47:ca:29:ba:68:c4:ce:8f:44:35:87:4b: ed:2d:8f:d6:d7:da:e9:9e:c8:db:a4:ff:3d:6d:87: 28:fb:cb:7c:40:e0:8b:f2:7f:8d:2b:6e:91:d4:46: c9:7b:26:79:a9:0e:58:f8:8b:3e:53:8a:11:ad:02: 31:82:28:44:d9:9c:fc:5c:4d:ff:e5:d5:10:0f:13: 80:1b:f4:f8:5e:9d:8e:9b:54:e3:d5:b6:64:7f:7a: 9f:87:9d:9d:b3:4b:0b:9d:95:51:6f:58:bd:63:b5: f9:7d:ba:99:bc:a2:d4:33:66:1a:64:23:12:41:34: 95:79:8d:07:a5:03:d8:50:a1:d0:19:a4:4f:27:04: 5d:da:17:8e:88:84:f7:a6:40:8a:f2:d3:73:f4:6c: f9:38:b5:52:53:35:8e:68:56:e0:43:7e:04:bb:ef: 26:00:af:5c:cd:fb:3d:d7:37:eb:68:f0:dd:d5:1e: bb:fb:36:2b:47:a4:b6:e6:06:b0:32:eb:da:b4:fc: 0e:90:f2:08:f7:a5:e8:fe:ef:05:c2:43:57:6a:27: 51:4f:4b:16:47:1e:8a:f0:20:51:2c:ac:00:84:30: 10:17:6e:e0:c8:e1:91:fb:5e:7e:65:43:ea:1a:3d: ad:02:14:97:ff:6d:a7:41:7c:e4:96:62:7b:6d:98: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B8:16:37:0A:54:E7:33:E2:06:CF:5A:F5:76:5F:CF:40:D3:E5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl X509v3 Authority Key Identifier: keyid:4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c8:1a:3b:dc:03:3d:bb:82:4f:8e:5a:72:d3:d1:38:2a:6c: 20:8d:46:9b:15:3a:f2:66:01:f0:24:50:7b:d5:5e:0e:ce:97: e7:7d:5c:f1:c6:be:e4:51:af:36:07:6e:4c:16:f8:f9:14:1c: 14:45:ee:d8:32:9b:1a:b8:e8:63:ce:58:b3:8c:66:db:96:f8: 98:12:65:bd:fa:ac:4e:77:2d:a8:a2:f5:3d:2d:e6:99:4e:5b: 40:28:4e:d8:3c:d9:80:81:fa:fe:f8:e9:07:8a:0d:dd:04:01: 5c:9e:2f:df:d8:a2:f5:0a:fc:e6:4f:ad:a4:9a:0a:e6:22:3f: 42:c5:22:f6:2d:76:16:eb:61:dd:57:73:83:95:c3:e6:ea:f1: db:fe:68:90:9b:14:3d:92:2d:b6:f5:18:f2:bd:e2:62:fb:f0: b6:f3:56:79:c3:1d:7e:55:38:15:93:16:36:97:88:59:2d:af: cd:8e:bd:78:ba:0d:d0:06:27:bd:e3:a8:b4:c9:f8:4b:62:4b: e9:51:d0:16:8f:5a:2e:45:09:b1:04:c5:97:98:c0:3f:f2:b8: 32:54:8f:0f:5c:71:96:33:de:0c:1a:10:09:fd:c7:6d:45:76: 36:56:df:5c:fd:15:22:14:b7:1b:bb:ca:c8:02:60:85:bd:d3: 9b:fd:64:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2j5Sy8mjnZHKfsBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4YzAxNDktZTNjZC00NGE0LWJiOGEtNWU0MWQ0ODIz YzBkMB4XDTI2MDQyNzAxMDAwM1oXDTI2MDQyOTAxMDAwMFowLzEtMCsGA1UEAxMk YzE2OTNkMGItMmI0Mi00NzhiLWJkOGItN2FiZDhiODM0MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtZHyim6aMTOj0Q1h0vtLY/W19rpnsjbpP89 bYco+8t8QOCL8n+NK26R1EbJeyZ5qQ5Y+Is+U4oRrQIxgihE2Zz8XE3/5dUQDxOA G/T4Xp2Om1Tj1bZkf3qfh52ds0sLnZVRb1i9Y7X5fbqZvKLUM2YaZCMSQTSVeY0H pQPYUKHQGaRPJwRd2heOiIT3pkCK8tNz9Gz5OLVSUzWOaFbgQ34Eu+8mAK9czfs9 1zfraPDd1R67+zYrR6S25gawMuvatPwOkPII96Xo/u8FwkNXaidRT0sWRx6K8CBR LKwAhDAQF27gyOGR+15+ZUPqGj2tAhSX/22nQXzklmJ7bZheZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI24FjcKVOcz4gbPWvV2X89A0+VEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iOThj MDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQxZDQ4MjNjMGQvYjk4YzAxNDktZTNjZC00 NGE0LWJiOGEtNWU0MWQ0ODIzYzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjk4YzAxNDktZTNjZC00NGE0LWJi OGEtNWU0MWQ0ODIzYzBkL2I5OGMwMTQ5LWUzY2QtNDRhNC1iYjhhLTVlNDFkNDgy M2MwZC5jcmwwHwYDVR0jBBgwFoAUTp9WH/SNpQyehZ1MjBxFmyqHdCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iOThjMDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQx ZDQ4MjNjMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdyBo73AM9u4JPjlpy09E4 KmwgjUabFTryZgHwJFB71V4OzpfnfVzxxr7kUa82B25MFvj5FBwURe7YMpsauOhj zlizjGbblviYEmW9+qxOdy2oovU9LeaZTltAKE7YPNmAgfr++OkHig3dBAFcni/f 2KL1CvzmT62kmgrmIj9CxSL2LXYW62HdV3ODlcPm6vHb/miQmxQ9ki229RjyveJi +/C281Z5wx1+VTgVkxY2l4hZLa/Njr14ug3QBie946i0yfhLYkvpUdAWj1ouRQmx BMWXmMA/8rgyVI8PXHGWM94MGhAJ/cdtRXY2Vt9c/RUiFLcbu8rIAmCFvdOb/WTY -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:10 2026 by rpki-client