$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft File: e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft (raw, json) Hash identifier: hBXJEY6vHfA9eWq8p8JqzWJBVClEp0HdNSjnO6lC2R4= Subject key identifier: 5D:7E:63:79:CF:B6:0F:BF:F2:05:2D:1F:A2:13:07:16:E6:60:7B:58 Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Certificate serial: 010D0C9F4328584DA27FD77AF41219B4C8E1F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft Manifest number: 010D0C9F4328584073A855E0A9B391A20808E5C0 Signing time: Sun 26 Apr 2026 13:00:03 +0000 Manifest this update: Sun 26 Apr 2026 13:00:03 +0000 Manifest next update: Wed 29 Apr 2026 13:00:00 +0000 Files and hashes: 1: e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl (hash: IJT3Qb4c9/DfWITkRFdWTLSPF0C/wZDgqjVG5/BoK6E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:7f:d7:7a:f4:12:19:b4:c8:e1:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Validity Not Before: Apr 26 13:00:03 2026 GMT Not After : Apr 29 13:00:00 2026 GMT Subject: CN=46efb5bc-e116-44d0-b70d-bdcf28feb629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:54:91:47:28:f6:83:e9:07:5c:eb:61:bf: e8:f4:cf:d5:7d:b2:ee:1d:7d:ee:9b:cd:3a:b1:8e: 14:66:47:6a:30:22:4f:eb:b6:02:c9:ee:8e:e1:7c: ba:92:89:d4:8f:f5:22:ae:de:3c:0d:ee:17:c2:58: d3:e2:ef:11:3c:99:2b:f7:0b:61:15:ca:17:eb:eb: 9b:e4:f0:30:39:92:cc:7b:4a:7b:00:eb:1a:d3:b6: c8:03:46:e8:84:1c:c3:44:87:99:26:60:c5:a5:74: b1:48:5d:6a:09:08:ce:81:17:2d:d1:9c:90:b9:f3: a7:53:0c:0d:6a:a9:1f:67:c7:5d:42:33:a4:f6:43: ff:b0:18:ba:e6:38:ab:2e:eb:cd:f5:72:34:d5:6b: d3:08:4d:47:15:5a:11:59:5f:48:5c:a2:49:1d:be: 84:b5:a8:f2:4f:f9:4d:d3:16:62:b0:84:91:81:e3: 51:8d:b3:79:1d:c5:91:2e:28:27:52:99:07:52:57: 09:ab:a7:de:5f:c9:5f:fa:4e:b1:eb:1f:88:bc:8f: 62:2c:7e:a1:ac:06:5d:35:8a:5f:22:a3:8e:88:59: 4b:60:a6:14:67:f2:57:d8:b7:c3:e6:61:a4:d8:d1: 8e:94:e6:74:fa:7b:38:78:cb:a5:1e:e8:ea:79:34: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7E:63:79:CF:B6:0F:BF:F2:05:2D:1F:A2:13:07:16:E6:60:7B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl X509v3 Authority Key Identifier: keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ba:e4:42:45:e2:40:1e:74:93:b1:d1:8e:97:5a:61:9d:2f: 12:28:c2:cf:f7:8c:6c:15:ca:5c:e3:b9:67:b0:7c:8a:28:61: 8f:39:21:e7:fe:a6:1d:25:dc:b7:8c:e3:2f:54:e2:86:b8:de: 6b:c9:f8:d2:6f:31:d1:fb:ab:89:5a:b3:ab:fa:42:97:fd:8e: a4:54:69:db:31:1b:33:bc:8f:b1:e8:00:c5:e9:45:49:d3:ec: 43:28:e8:61:a3:cd:b9:8c:62:8a:bd:43:62:ba:5d:62:ef:f8: 0c:df:85:59:2e:b2:71:58:9d:12:0d:81:9a:b8:31:8b:df:5f: 4f:20:31:af:1f:00:d6:70:f6:fd:99:64:86:40:07:fd:0b:66: 9a:a6:04:3f:41:cd:7d:43:b9:0e:79:0b:51:02:22:3b:14:d2: 52:38:44:1c:f0:1d:b8:cc:b4:4c:b1:d7:5f:f9:cd:06:b2:cc: 86:36:1d:e1:e2:c7:a4:48:77:b7:f3:07:40:53:7e:b7:01:62: 66:5e:c2:51:f2:8b:76:bd:b9:64:79:c7:ea:0f:f8:0f:27:b9: 65:e2:80:07:9c:d7:1f:6e:b3:f4:ee:b6:f7:5a:88:7e:a9:87: 77:01:41:2c:8c:de:21:9e:df:1a:a0:42:f6:cf:36:00:9c:d1: e0:90:94:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2if9d69BIZtMjh+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjMjllMzgtYThkZi00MTVjLWEyOGItYTE0NjVmOWE0 ZDAxMB4XDTI2MDQyNjEzMDAwM1oXDTI2MDQyOTEzMDAwMFowLzEtMCsGA1UEAxMk NDZlZmI1YmMtZTExNi00NGQwLWI3MGQtYmRjZjI4ZmViNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUlUkUco9oPpB1zrYb/o9M/VfbLuHX3um806 sY4UZkdqMCJP67YCye6O4Xy6konUj/Uirt48De4XwljT4u8RPJkr9wthFcoX6+ub 5PAwOZLMe0p7AOsa07bIA0bohBzDRIeZJmDFpXSxSF1qCQjOgRct0ZyQufOnUwwN aqkfZ8ddQjOk9kP/sBi65jirLuvN9XI01WvTCE1HFVoRWV9IXKJJHb6EtajyT/lN 0xZisISRgeNRjbN5HcWRLignUpkHUlcJq6feX8lf+k6x6x+IvI9iLH6hrAZdNYpf IqOOiFlLYKYUZ/JX2LfD5mGk2NGOlOZ0+ns4eMulHujqeTSJzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF1+Y3nPtg+/8gUtH6ITBxbmYHtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMy OWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5YTRkMDEvZThjMjllMzgtYThkZi00 MTVjLWEyOGItYTE0NjVmOWE0ZDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZThjMjllMzgtYThkZi00MTVjLWEy OGItYTE0NjVmOWE0ZDAxL2U4YzI5ZTM4LWE4ZGYtNDE1Yy1hMjhiLWExNDY1Zjlh NGQwMS5jcmwwHwYDVR0jBBgwFoAUeAe6NOGFy8MpALrpYvOu5kGzMgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2 NWY5YTRkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjuuRCReJAHnSTsdGOl1ph nS8SKMLP94xsFcpc47lnsHyKKGGPOSHn/qYdJdy3jOMvVOKGuN5ryfjSbzHR+6uJ WrOr+kKX/Y6kVGnbMRszvI+x6ADF6UVJ0+xDKOhho825jGKKvUNiul1i7/gM34VZ LrJxWJ0SDYGauDGL319PIDGvHwDWcPb9mWSGQAf9C2aapgQ/Qc19Q7kOeQtRAiI7 FNJSOEQc8B24zLRMsddf+c0GssyGNh3h4sekSHe38wdAU363AWJmXsJR8ot2vblk ecfqD/gPJ7ll4oAHnNcfbrP07rb3Woh+qYd3AUEsjN4hnt8aoEL2zzYAnNHgkJSr -----END CERTIFICATE-----Generated at Mon Apr 27 09:55:59 2026 by rpki-client