$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df/123939b7-a885-49f4-b5a4-1a1371b830df.mft File: 123939b7-a885-49f4-b5a4-1a1371b830df.mft (raw, json) Hash identifier: bx21j86X1tbnNzyzUrHINOjQBxdrnhvDo1eJjqVtQQU= Subject key identifier: 8E:63:22:AB:20:61:FE:27:F2:C8:E5:36:4E:C2:B4:74:E5:F2:4A:05 Authority key identifier: 27:1A:06:BA:EC:28:E8:25:CD:A8:58:3D:40:63:8C:42:40:3E:97:9B Certificate issuer: /CN=123939b7-a885-49f4-b5a4-1a1371b830df Certificate serial: 010D0C9F4328584D7C3AB9EF3F6E6C52187A9F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df/123939b7-a885-49f4-b5a4-1a1371b830df.mft Manifest number: 010D0C9F4328584C35A09F2F53CBFF1A00ADCEB5 Signing time: Sun 12 Apr 2026 20:00:03 +0000 Manifest this update: Sun 12 Apr 2026 20:00:03 +0000 Manifest next update: Tue 14 Apr 2026 20:00:00 +0000 Files and hashes: 1: 123939b7-a885-49f4-b5a4-1a1371b830df.crl (hash: Cvmd8qdkx0pIoLIV/b0uxDVJ2WqhnT/eQLhi/Jhb+AA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df/123939b7-a885-49f4-b5a4-1a1371b830df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df/123939b7-a885-49f4-b5a4-1a1371b830df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:3a:b9:ef:3f:6e:6c:52:18:7a:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=123939b7-a885-49f4-b5a4-1a1371b830df Validity Not Before: Apr 12 20:00:03 2026 GMT Not After : Apr 14 20:00:00 2026 GMT Subject: CN=d31dec8a-679a-477d-a73c-f11e8c785117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:15:1d:2a:be:c5:31:7f:f3:cd:03:b3:82:a2: 42:12:f5:1d:4e:17:c3:ad:38:ac:a5:e5:08:fc:c9: de:00:65:69:52:b6:a0:1a:aa:cb:64:a8:54:c9:84: 3c:e9:f8:8d:cf:1b:01:e5:5f:65:57:0c:79:23:b2: 1c:e9:0f:bc:d8:ab:29:0e:63:92:a7:e3:11:80:bd: e5:d7:97:bb:2c:3c:0f:1d:84:8d:85:23:7d:11:1e: a7:70:70:7e:e2:a9:f7:c7:3f:a4:48:d8:c2:3a:be: b9:2f:3b:71:04:4c:c3:00:aa:76:c9:5d:a9:3b:b5: a9:31:04:67:c2:7f:b2:ac:e8:c5:bf:7f:5c:07:16: e6:6f:be:37:aa:e8:41:e9:4b:45:c7:6b:2b:72:c3: 16:2b:77:c0:e1:36:b5:45:fe:a6:95:54:14:c1:d0: 00:04:83:5a:47:79:dd:1b:8d:80:9a:82:fb:dd:11: 41:f3:c3:a8:37:9d:ca:5d:2d:c6:1a:7c:1f:c7:ba: 9c:e5:64:ca:63:e0:d0:08:32:b5:0f:36:3e:7a:ee: 47:ce:2f:0f:83:0c:94:d9:2c:7e:a6:73:99:9e:31: 5d:f7:ab:d8:f9:b6:37:5e:e4:05:ba:a1:f6:fe:b3: 02:9c:ba:a4:e4:14:57:f2:c1:5e:33:5d:d5:73:87: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:22:AB:20:61:FE:27:F2:C8:E5:36:4E:C2:B4:74:E5:F2:4A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df/123939b7-a885-49f4-b5a4-1a1371b830df.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df/123939b7-a885-49f4-b5a4-1a1371b830df.crl X509v3 Authority Key Identifier: keyid:27:1A:06:BA:EC:28:E8:25:CD:A8:58:3D:40:63:8C:42:40:3E:97:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/123939b7-a885-49f4-b5a4-1a1371b830df.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5b:c0:ae:d7:1f:f1:22:8f:bc:fe:57:50:68:46:c6:28:60: 89:fe:3e:30:98:c5:73:2e:21:9e:84:88:af:07:71:88:b3:2d: b5:ad:16:75:4e:be:73:86:87:31:13:7e:3b:16:f1:dd:46:79: 41:07:00:52:34:cc:33:13:51:f4:ae:e0:93:4d:fe:d7:f7:3e: 5b:47:97:81:f4:67:eb:32:3a:2f:0b:35:84:87:c1:48:1d:6c: e5:0f:fc:d1:fe:43:25:e3:a8:bf:49:cc:64:ed:7a:59:a9:20: 98:cd:0e:73:a5:56:2b:42:7e:14:1a:b5:90:e7:25:ac:94:a8: 14:4d:22:bc:24:e9:1d:83:a8:8f:7d:53:db:9e:7c:da:06:3b: 87:ab:02:27:2d:ed:da:49:81:c2:89:56:57:cf:ed:15:99:df: 02:d7:51:c2:28:3e:6b:04:ca:e4:c6:42:e7:44:47:64:d6:31: cb:ab:64:7d:79:9b:25:4c:e1:e2:44:1c:9c:e3:91:5f:12:6f: e0:f6:d3:f9:aa:32:cd:41:f6:ee:40:e3:d7:7d:2c:36:3d:66: d9:32:3c:4e:34:80:a4:f3:49:aa:d1:b6:f1:15:ad:48:f4:2b: 22:17:71:fe:a1:23:e2:7b:5d:11:e6:12:78:a5:14:d6:c6:2f: ad:b9:24:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE18OrnvP25sUhh6nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzOTM5YjctYTg4NS00OWY0LWI1YTQtMWExMzcxYjgz MGRmMB4XDTI2MDQxMjIwMDAwM1oXDTI2MDQxNDIwMDAwMFowLzEtMCsGA1UEAxMk ZDMxZGVjOGEtNjc5YS00NzdkLWE3M2MtZjExZThjNzg1MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BUdKr7FMX/zzQOzgqJCEvUdThfDrTispeUI /MneAGVpUragGqrLZKhUyYQ86fiNzxsB5V9lVwx5I7Ic6Q+82KspDmOSp+MRgL3l 15e7LDwPHYSNhSN9ER6ncHB+4qn3xz+kSNjCOr65LztxBEzDAKp2yV2pO7WpMQRn wn+yrOjFv39cBxbmb743quhB6UtFx2srcsMWK3fA4Ta1Rf6mlVQUwdAABINaR3nd G42AmoL73RFB88OoN53KXS3GGnwfx7qc5WTKY+DQCDK1DzY+eu5Hzi8PgwyU2Sx+ pnOZnjFd96vY+bY3XuQFuqH2/rMCnLqk5BRX8sFeM13Vc4cp+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI5jIqsgYf4n8sjlNk7CtHTl8koFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjM5 MzliNy1hODg1LTQ5ZjQtYjVhNC0xYTEzNzFiODMwZGYvMTIzOTM5YjctYTg4NS00 OWY0LWI1YTQtMWExMzcxYjgzMGRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTIzOTM5YjctYTg4NS00OWY0LWI1 YTQtMWExMzcxYjgzMGRmLzEyMzkzOWI3LWE4ODUtNDlmNC1iNWE0LTFhMTM3MWI4 MzBkZi5jcmwwHwYDVR0jBBgwFoAUJxoGuuwo6CXNqFg9QGOMQkA+l5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjM5MzliNy1hODg1LTQ5ZjQtYjVhNC0xYTEz NzFiODMwZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyW8Cu1x/xIo+8/ldQaEbG KGCJ/j4wmMVzLiGehIivB3GIsy21rRZ1Tr5zhocxE347FvHdRnlBBwBSNMwzE1H0 ruCTTf7X9z5bR5eB9GfrMjovCzWEh8FIHWzlD/zR/kMl46i/Scxk7XpZqSCYzQ5z pVYrQn4UGrWQ5yWslKgUTSK8JOkdg6iPfVPbnnzaBjuHqwInLe3aSYHCiVZXz+0V md8C11HCKD5rBMrkxkLnREdk1jHLq2R9eZslTOHiRByc45FfEm/g9tP5qjLNQfbu QOPXfSw2PWbZMjxONICk80mq0bbxFa1I9CsiF3H+oSPie10R5hJ4pRTWxi+tuSSx -----END CERTIFICATE-----Generated at Mon Apr 13 10:39:34 2026 by rpki-client