$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft File: c76d0de5-b885-4437-8fa9-b267f0f3d228.mft (raw, json) Hash identifier: W0/xTVy/RE9BnNGGib3xcXeX3GlFneTHJloVanx13WQ= Subject key identifier: DA:39:A4:A7:32:64:ED:3F:0D:AD:22:1B:A8:29:39:BD:30:0A:D1:B7 Authority key identifier: F1:28:C8:B4:1E:09:A0:30:FE:D8:18:EE:7C:B4:85:C1:A9:88:73:6F Certificate issuer: /CN=c76d0de5-b885-4437-8fa9-b267f0f3d228 Certificate serial: 010D0C9F4328584DA350482338678172F919ED20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft Manifest number: 010D0C9F4328584073A81EBF9692F9371DAE9139 Signing time: Sun 26 Apr 2026 20:00:03 +0000 Manifest this update: Sun 26 Apr 2026 20:00:03 +0000 Manifest next update: Tue 28 Apr 2026 20:00:00 +0000 Files and hashes: 1: c76d0de5-b885-4437-8fa9-b267f0f3d228.crl (hash: bK8ULOMWSwMTr/suvUGoMe4fMARkLVaORKlG3xzW1Ac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:50:48:23:38:67:81:72:f9:19:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76d0de5-b885-4437-8fa9-b267f0f3d228 Validity Not Before: Apr 26 20:00:03 2026 GMT Not After : Apr 28 20:00:00 2026 GMT Subject: CN=b296dfea-5e52-49d5-a381-4aa2d526d675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:8d:19:8f:b9:52:ba:80:4f:bd:ca:ef:ff: 64:84:c0:e2:51:a3:ac:bb:9b:b1:3c:4c:8d:7d:4a: fd:88:88:7b:8e:4b:8f:01:fa:b6:51:f4:a9:6d:e8: 23:74:43:5a:de:0d:45:68:5e:c0:b6:03:91:3b:cf: 94:42:44:29:38:14:64:5d:d5:62:bd:f9:3e:06:85: 70:1f:06:11:2d:d3:d4:39:f6:70:33:fd:e0:03:4d: 5e:75:d8:88:ae:32:43:19:3b:60:ad:7d:87:77:1d: 74:05:6c:10:34:aa:f2:c8:08:60:73:40:99:ca:c8: f9:b3:38:73:06:1a:a2:3f:8d:31:0b:af:1f:6e:c0: f5:6d:44:2a:f8:0f:ea:42:e4:0f:d4:9e:79:a8:eb: a7:01:3f:97:34:ac:b8:30:98:7c:91:a3:ab:d5:6e: f6:e0:35:03:99:bd:d3:e0:32:e1:3f:ee:5e:39:f4: cf:02:03:06:b2:84:a7:84:cc:e5:be:3f:16:2a:d3: a8:7a:ba:8f:62:ba:96:65:cb:df:fc:cc:8f:75:06: 82:12:ab:2e:df:87:d2:90:9a:10:cb:42:82:17:df: 91:8a:5e:f5:40:4e:cb:cf:44:82:82:41:21:b2:00: f1:72:0a:a4:a7:c7:59:d4:16:aa:73:36:0e:f4:86: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:A4:A7:32:64:ED:3F:0D:AD:22:1B:A8:29:39:BD:30:0A:D1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.crl X509v3 Authority Key Identifier: keyid:F1:28:C8:B4:1E:09:A0:30:FE:D8:18:EE:7C:B4:85:C1:A9:88:73:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:35:5e:9e:54:3d:c3:f3:fc:65:f2:2d:cf:fa:83:86:a8:4f: e0:5f:cf:ef:9e:6d:f0:9b:d2:3b:83:fa:5d:8d:e9:b2:f8:0d: a8:a9:87:0f:8c:aa:2e:f5:e6:ef:93:98:a9:92:71:e4:4b:8d: 8c:48:35:16:2c:41:c9:d4:03:92:38:ff:65:2a:fc:6f:f5:5f: b5:a0:c9:6d:a5:b9:db:38:00:e1:00:0c:b0:fb:9c:ae:85:29: 6d:b5:57:8d:d5:05:54:36:5b:d6:28:6a:8a:22:e9:93:b5:f5: 94:f8:01:d1:93:56:40:8f:7a:34:09:83:ee:cf:db:8e:24:b0: b9:ba:8b:e3:74:34:2a:9f:83:64:61:11:34:18:60:e1:a7:18: e2:49:6e:16:89:33:dc:4d:ac:db:14:c7:cf:6e:6d:8b:fd:61: b2:be:25:8c:bc:16:ca:e2:19:b4:fa:ff:10:9d:c8:ac:6f:51: f6:d0:4b:d7:5e:54:77:76:0b:a0:4a:31:b7:df:94:18:38:ea: 7d:0a:08:b4:dc:f8:c5:74:8a:1e:68:b0:4d:24:77:a4:15:bc: 13:04:d6:de:90:48:ca:af:84:27:ef:c0:cc:83:20:4d:c9:09: 89:73:c3:7d:d1:b9:dc:9f:58:22:a1:2e:3f:f9:a4:de:6d:01: 29:db:70:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jUEgjOGeBcvkZ7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc2ZDBkZTUtYjg4NS00NDM3LThmYTktYjI2N2YwZjNk MjI4MB4XDTI2MDQyNjIwMDAwM1oXDTI2MDQyODIwMDAwMFowLzEtMCsGA1UEAxMk YjI5NmRmZWEtNWU1Mi00OWQ1LWEzODEtNGFhMmQ1MjZkNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkONGY+5UrqAT73K7/9khMDiUaOsu5uxPEyN fUr9iIh7jkuPAfq2UfSpbegjdENa3g1FaF7AtgORO8+UQkQpOBRkXdVivfk+BoVw HwYRLdPUOfZwM/3gA01eddiIrjJDGTtgrX2Hdx10BWwQNKryyAhgc0CZysj5szhz BhqiP40xC68fbsD1bUQq+A/qQuQP1J55qOunAT+XNKy4MJh8kaOr1W724DUDmb3T 4DLhP+5eOfTPAgMGsoSnhMzlvj8WKtOoerqPYrqWZcvf/MyPdQaCEqsu34fSkJoQ y0KCF9+Ril71QE7Lz0SCgkEhsgDxcgqkp8dZ1BaqczYO9IYgTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNo5pKcyZO0/Da0iG6gpOb0wCtG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNzZk MGRlNS1iODg1LTQ0MzctOGZhOS1iMjY3ZjBmM2QyMjgvYzc2ZDBkZTUtYjg4NS00 NDM3LThmYTktYjI2N2YwZjNkMjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzc2ZDBkZTUtYjg4NS00NDM3LThm YTktYjI2N2YwZjNkMjI4L2M3NmQwZGU1LWI4ODUtNDQzNy04ZmE5LWIyNjdmMGYz ZDIyOC5jcmwwHwYDVR0jBBgwFoAU8SjItB4JoDD+2BjufLSFwamIc28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNzZkMGRlNS1iODg1LTQ0MzctOGZhOS1iMjY3 ZjBmM2QyMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPNV6eVD3D8/xl8i3P+oOG qE/gX8/vnm3wm9I7g/pdjemy+A2oqYcPjKou9ebvk5ipknHkS42MSDUWLEHJ1AOS OP9lKvxv9V+1oMltpbnbOADhAAyw+5yuhSlttVeN1QVUNlvWKGqKIumTtfWU+AHR k1ZAj3o0CYPuz9uOJLC5uovjdDQqn4NkYRE0GGDhpxjiSW4WiTPcTazbFMfPbm2L /WGyviWMvBbK4hm0+v8Qncisb1H20EvXXlR3dgugSjG335QYOOp9Cgi03PjFdIoe aLBNJHekFbwTBNbekEjKr4Qn78DMgyBNyQmJc8N90bncn1gioS4/+aTebQEp23DZ -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:25 2026 by rpki-client