$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f/533399d4-7f78-4941-82e9-20f894b3d27f.mft File: 533399d4-7f78-4941-82e9-20f894b3d27f.mft (raw, json) Hash identifier: EWg7nLtoQEed6gHIiL+1v5cgUxzF+W0HoBsSoV9UTB4= Subject key identifier: C3:FA:78:26:65:B9:A5:D4:DF:39:AD:7E:A8:33:6D:59:CD:87:8A:BB Authority key identifier: B6:C2:79:90:34:66:FE:B9:8C:E1:2A:17:C4:91:77:35:1C:10:0E:17 Certificate issuer: /CN=533399d4-7f78-4941-82e9-20f894b3d27f Certificate serial: 010D0C9F4328584D5FF68C881CAAFFD61ABFC240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f/533399d4-7f78-4941-82e9-20f894b3d27f.mft Manifest number: 010D0C9F4328584311B73454C98E77484737D611 Signing time: Thu 02 Apr 2026 17:00:03 +0000 Manifest this update: Thu 02 Apr 2026 17:00:03 +0000 Manifest next update: Sat 04 Apr 2026 17:00:00 +0000 Files and hashes: 1: 533399d4-7f78-4941-82e9-20f894b3d27f.crl (hash: amTSO7qoSkHi7hJbdgtfHpo+Zpgr4oZXdmUULSBK66s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f/533399d4-7f78-4941-82e9-20f894b3d27f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f/533399d4-7f78-4941-82e9-20f894b3d27f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:f6:8c:88:1c:aa:ff:d6:1a:bf:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533399d4-7f78-4941-82e9-20f894b3d27f Validity Not Before: Apr 2 17:00:03 2026 GMT Not After : Apr 4 17:00:00 2026 GMT Subject: CN=d3b43fa5-477a-45b0-8ced-cc4e84e27c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:a1:d1:ec:ea:80:f1:1c:0e:e7:d3:b9:bf: 07:fe:22:4d:4c:b6:9a:bc:14:46:eb:ae:fd:2e:cd: 51:eb:7b:ce:cb:4d:b7:3e:8b:e8:8c:37:fb:4c:6e: 51:b5:0a:53:ee:31:03:da:a3:63:ef:44:15:8a:34: a1:bd:44:f7:5e:a6:b4:11:c8:74:6c:28:27:b4:84: f2:ad:e0:b8:01:a6:76:e5:ee:78:f8:8e:b0:56:f4: d2:72:a2:5a:82:5c:3f:57:18:18:9b:6f:9b:d3:a5: 34:63:76:b2:8c:c3:68:1f:d0:03:c6:b4:f0:78:d6: 7f:bd:6b:7a:62:75:fa:70:36:6c:4a:b7:9c:c2:37: e4:be:a6:80:4a:c4:60:06:a8:25:4c:21:66:d5:37: c5:cd:3c:1f:e6:02:9c:6f:09:b9:b6:a9:08:3b:79: d9:f9:26:2a:1e:c0:68:3d:dc:aa:62:26:ab:c3:89: c7:21:e7:05:1c:86:12:13:cc:57:0c:e7:c4:c1:8c: 2e:c6:ee:3a:57:10:7d:05:8d:ba:d3:9d:0b:4e:1c: 4d:03:1b:f4:53:5c:51:d4:a1:38:e6:f5:34:3e:26: 81:7c:a6:86:5b:83:1a:91:23:2b:d5:2b:3a:da:b8: 3a:d1:45:42:c4:7f:1a:68:34:fc:98:b8:15:9d:4e: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:78:26:65:B9:A5:D4:DF:39:AD:7E:A8:33:6D:59:CD:87:8A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f/533399d4-7f78-4941-82e9-20f894b3d27f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f/533399d4-7f78-4941-82e9-20f894b3d27f.crl X509v3 Authority Key Identifier: keyid:B6:C2:79:90:34:66:FE:B9:8C:E1:2A:17:C4:91:77:35:1C:10:0E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/533399d4-7f78-4941-82e9-20f894b3d27f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bb:68:78:da:f5:6c:25:70:2c:75:c6:e0:a2:ef:1a:5c:d3: 01:37:8f:bf:6c:dd:99:33:29:3b:a1:c3:41:c5:bb:99:c6:76: 47:86:f0:b5:9b:86:7f:5b:c8:49:c1:db:c5:b4:88:b7:34:5d: e2:fc:d1:44:d0:f8:21:e9:b2:aa:e7:bd:27:7c:b8:25:53:b1: 02:37:02:3e:03:9a:d5:95:d2:e9:d4:4d:a8:b6:6c:60:d1:ae: 5f:0e:3f:da:93:d8:3e:08:01:13:8e:26:9c:ad:9e:58:84:da: 7e:6d:2f:62:4c:27:f2:1a:cf:7d:e4:e8:58:62:d7:9b:53:03: ef:81:b8:37:da:34:7c:7e:26:f6:a6:6a:00:a4:44:c8:62:be: 94:fc:4e:fc:41:0a:44:7d:2b:23:bf:0c:76:9f:ea:2a:1e:4f: 57:d9:59:98:d2:23:00:49:14:6a:0c:33:ac:f5:4a:2b:29:62: 79:2b:88:84:e7:0d:77:f7:0e:fe:cc:34:59:c1:d4:ae:be:70: ae:52:5d:90:73:92:a9:06:58:56:6f:a6:14:a9:03:13:ae:83: 7e:70:86:8f:04:e6:97:9a:dd:a8:6b:d3:39:e8:5f:2a:02:cd: fe:ad:60:c8:f4:fb:7d:4d:a6:f9:fe:a8:8b:6f:8d:b9:30:6d: 86:96:d7:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1f9oyIHKr/1hq/wkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzMzk5ZDQtN2Y3OC00OTQxLTgyZTktMjBmODk0YjNk MjdmMB4XDTI2MDQwMjE3MDAwM1oXDTI2MDQwNDE3MDAwMFowLzEtMCsGA1UEAxMk ZDNiNDNmYTUtNDc3YS00NWIwLThjZWQtY2M0ZTg0ZTI3Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Luh0ezqgPEcDufTub8H/iJNTLaavBRG6679 Ls1R63vOy023PovojDf7TG5RtQpT7jED2qNj70QVijShvUT3Xqa0Ech0bCgntITy reC4AaZ25e54+I6wVvTScqJaglw/VxgYm2+b06U0Y3ayjMNoH9ADxrTweNZ/vWt6 YnX6cDZsSrecwjfkvqaASsRgBqglTCFm1TfFzTwf5gKcbwm5tqkIO3nZ+SYqHsBo PdyqYiarw4nHIecFHIYSE8xXDOfEwYwuxu46VxB9BY26050LThxNAxv0U1xR1KE4 5vU0PiaBfKaGW4MakSMr1Ss62rg60UVCxH8aaDT8mLgVnU6r5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMP6eCZluaXU3zmtfqgzbVnNh4q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MzMz OTlkNC03Zjc4LTQ5NDEtODJlOS0yMGY4OTRiM2QyN2YvNTMzMzk5ZDQtN2Y3OC00 OTQxLTgyZTktMjBmODk0YjNkMjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTMzMzk5ZDQtN2Y3OC00OTQxLTgy ZTktMjBmODk0YjNkMjdmLzUzMzM5OWQ0LTdmNzgtNDk0MS04MmU5LTIwZjg5NGIz ZDI3Zi5jcmwwHwYDVR0jBBgwFoAUtsJ5kDRm/rmM4SoXxJF3NRwQDhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MzMzOTlkNC03Zjc4LTQ5NDEtODJlOS0yMGY4 OTRiM2QyN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAku2h42vVsJXAsdcbgou8a XNMBN4+/bN2ZMyk7ocNBxbuZxnZHhvC1m4Z/W8hJwdvFtIi3NF3i/NFE0Pgh6bKq 570nfLglU7ECNwI+A5rVldLp1E2otmxg0a5fDj/ak9g+CAETjiacrZ5YhNp+bS9i TCfyGs995OhYYtebUwPvgbg32jR8fib2pmoApETIYr6U/E78QQpEfSsjvwx2n+oq Hk9X2VmY0iMASRRqDDOs9UorKWJ5K4iE5w139w7+zDRZwdSuvnCuUl2Qc5KpBlhW b6YUqQMTroN+cIaPBOaXmt2oa9M56F8qAs3+rWDI9Pt9Tab5/qiLb425MG2GltcC -----END CERTIFICATE-----Generated at Fri Apr 3 16:40:23 2026 by rpki-client