$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft File: df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft (raw, json) Hash identifier: SVl61WJoSGB8VureGuVNy/fpUHEEC3/2FUYbMCxdJIg= Subject key identifier: 40:8B:3F:EE:E4:36:43:52:8D:3B:26:03:B1:99:B8:F6:AB:7D:19:9E Authority key identifier: F4:BA:17:7B:1D:6A:C5:A4:AF:E4:CD:A9:90:6E:77:48:77:0E:46:0E Certificate issuer: /CN=df15a7a4-7ca1-4957-aad0-9d0af4a3484c Certificate serial: 010D0C9F4328584D8F4E65233658DD81176DD100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft Manifest number: 010D0C9F432858428B92A01CBF2322417EBD0575 Signing time: Sun 19 Apr 2026 16:00:03 +0000 Manifest this update: Sun 19 Apr 2026 16:00:03 +0000 Manifest next update: Wed 22 Apr 2026 16:00:00 +0000 Files and hashes: 1: df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl (hash: lmk1j13vKfQUuFhacDwTtntUQvLzfcx/qRRj0mnq6GE=) 2: eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer (hash: 2JEYrUL9nPCHUVF5iuOLlKlmdxx1rdMAVmpNjC+KWy4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8f:4e:65:23:36:58:dd:81:17:6d:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df15a7a4-7ca1-4957-aad0-9d0af4a3484c Validity Not Before: Apr 19 16:00:03 2026 GMT Not After : Apr 22 16:00:00 2026 GMT Subject: CN=d2b12650-e8a9-4e76-b1e1-b4897ad14525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:39:8e:11:2b:4b:23:01:2b:77:fd:a6:11: b7:7c:57:54:98:70:bc:0e:27:de:3c:c0:09:65:e0: ad:83:53:b5:f9:a1:9b:bb:df:39:d1:b6:77:27:70: 61:33:98:2e:43:09:30:4c:1f:22:b6:5f:81:8e:b1: d7:85:6d:a6:5d:07:db:06:ae:09:82:24:b6:52:ff: 1b:41:2e:df:4e:00:46:82:16:11:c9:ac:a9:10:d3: 67:00:37:bc:44:77:72:69:e0:00:c8:0d:b7:e3:ba: a0:a1:d4:78:23:6a:e5:52:46:50:87:63:11:5f:8b: 42:b0:e2:ab:0a:96:07:60:cf:f9:29:c1:a6:07:6c: 26:6d:4a:2e:8b:c4:eb:0b:20:72:3b:2c:d1:3d:a5: a9:f8:54:2b:1d:c4:11:cb:11:25:b6:f6:2a:e6:1c: 81:4d:66:d6:86:f2:ef:3c:6d:a7:65:56:75:35:7a: 8a:6e:02:6e:8e:f4:cf:25:ce:b7:5a:1b:51:d8:f3: 54:08:06:47:f5:6f:a2:2f:8d:04:25:72:96:45:a4: 89:8d:34:c0:76:c2:d5:9c:db:d6:dd:f2:c0:ee:f4: d1:41:71:33:af:6f:ba:03:e7:9c:59:39:a7:53:97: 5e:e2:57:b5:5c:43:d7:a3:07:9e:5c:c1:0b:ce:20: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8B:3F:EE:E4:36:43:52:8D:3B:26:03:B1:99:B8:F6:AB:7D:19:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl X509v3 Authority Key Identifier: keyid:F4:BA:17:7B:1D:6A:C5:A4:AF:E4:CD:A9:90:6E:77:48:77:0E:46:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0e:3b:60:6c:15:4f:23:d4:2c:a5:bb:26:d8:b2:df:7b:a1: f8:a0:e6:a2:b9:c5:63:c1:d3:c2:5d:9b:6e:db:d0:63:71:17: 96:27:4f:9c:b1:87:b5:05:d4:6f:d0:29:ce:62:ef:9a:08:a4: a2:ee:e4:87:f9:30:aa:87:17:9a:93:15:43:b1:90:39:dc:dd: 0a:e3:29:17:60:ba:51:f1:04:8a:4c:cc:f6:71:fd:c7:f6:8f: 21:79:12:4d:b5:41:7f:47:25:90:2d:30:1d:7d:77:d1:38:d6: 15:db:db:6d:c5:fe:be:ae:7f:6b:35:33:69:6c:e3:6e:91:34: d4:ed:b5:27:e8:ae:47:81:54:62:5f:18:40:c1:6d:9a:f4:0e: cf:e8:40:32:9c:ce:52:81:8a:84:1d:7b:04:81:f8:c6:4f:5f: 81:84:5e:a1:85:af:c5:b3:21:be:af:ca:bf:96:38:cf:1d:c9: be:8f:c9:0f:93:a2:d7:7a:cb:37:69:60:7f:bb:96:4b:3d:98: cf:2e:ac:31:20:8c:f7:fd:d8:14:7f:40:f2:91:d9:d2:6d:60: c4:19:62:1a:7a:23:ff:c4:07:1f:82:9b:7b:ab:a5:0e:2e:b5: 82:5a:64:64:10:d3:9b:88:fb:b4:22:7f:c6:0b:eb:77:b7:e2: 41:36:72:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2PTmUjNljdgRdt0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNWE3YTQtN2NhMS00OTU3LWFhZDAtOWQwYWY0YTM0 ODRjMB4XDTI2MDQxOTE2MDAwM1oXDTI2MDQyMjE2MDAwMFowLzEtMCsGA1UEAxMk ZDJiMTI2NTAtZThhOS00ZTc2LWIxZTEtYjQ4OTdhZDE0NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmg5jhErSyMBK3f9phG3fFdUmHC8DifePMAJ ZeCtg1O1+aGbu9850bZ3J3BhM5guQwkwTB8itl+BjrHXhW2mXQfbBq4JgiS2Uv8b QS7fTgBGghYRyaypENNnADe8RHdyaeAAyA2347qgodR4I2rlUkZQh2MRX4tCsOKr CpYHYM/5KcGmB2wmbUoui8TrCyByOyzRPaWp+FQrHcQRyxEltvYq5hyBTWbWhvLv PG2nZVZ1NXqKbgJujvTPJc63WhtR2PNUCAZH9W+iL40EJXKWRaSJjTTAdsLVnNvW 3fLA7vTRQXEzr2+6A+ecWTmnU5de4le1XEPXoweeXMELziCPiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFECLP+7kNkNSjTsmA7GZuParfRmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjE1 YTdhNC03Y2ExLTQ5NTctYWFkMC05ZDBhZjRhMzQ4NGMvZGYxNWE3YTQtN2NhMS00 OTU3LWFhZDAtOWQwYWY0YTM0ODRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxNWE3YTQtN2NhMS00OTU3LWFh ZDAtOWQwYWY0YTM0ODRjL2RmMTVhN2E0LTdjYTEtNDk1Ny1hYWQwLTlkMGFmNGEz NDg0Yy5jcmwwHwYDVR0jBBgwFoAU9LoXex1qxaSv5M2pkG53SHcORg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjE1YTdhNC03Y2ExLTQ5NTctYWFkMC05ZDBh ZjRhMzQ4NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVDjtgbBVPI9Qspbsm2LLf e6H4oOaiucVjwdPCXZtu29BjcReWJ0+csYe1BdRv0CnOYu+aCKSi7uSH+TCqhxea kxVDsZA53N0K4ykXYLpR8QSKTMz2cf3H9o8heRJNtUF/RyWQLTAdfXfRONYV29tt xf6+rn9rNTNpbONukTTU7bUn6K5HgVRiXxhAwW2a9A7P6EAynM5SgYqEHXsEgfjG T1+BhF6hha/FsyG+r8q/ljjPHcm+j8kPk6LXess3aWB/u5ZLPZjPLqwxIIz3/dgU f0DykdnSbWDEGWIaeiP/xAcfgpt7q6UOLrWCWmRkENObiPu0In/GC+t3t+JBNnJo -----END CERTIFICATE-----Generated at Mon Apr 20 04:52:19 2026 by rpki-client