$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: j+a5NO1at+cGrkfyT8wlaZ8s0brl6QNEjpw5xzEzPs8= Subject key identifier: 42:DD:08:F9:F0:88:D3:FF:BA:A2:86:51:15:E2:7C:5C:FB:6D:A1:96 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584D8F12D3FC8BC72E31D3A1A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602AD78 Signing time: Sun 19 Apr 2026 14:00:03 +0000 Manifest this update: Sun 19 Apr 2026 14:00:03 +0000 Manifest next update: Tue 21 Apr 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: EoJuHG/SVHj+mZN8km9uzZE3hNoQ35CJLz51pUiSbiU=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: cEa5xo4Y8VYD9QHDP38f7gPk32ub7h11h3vlOz3Sogs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8f:12:d3:fc:8b:c7:2e:31:d3:a1:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Apr 19 14:00:03 2026 GMT Not After : Apr 21 14:00:00 2026 GMT Subject: CN=6c637afb-d08c-47ef-9866-130fcc44bb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:88:21:0f:e4:cc:01:b8:97:24:b9:af:ce: 5c:be:b9:31:cb:dd:27:25:61:df:59:4c:7c:22:d8: d3:cf:5c:0d:65:95:1f:7a:f9:7c:c6:de:5f:d6:90: 6a:25:4b:5d:21:60:7a:f8:55:16:8a:4e:92:64:a6: 45:d9:56:9d:22:ef:1e:70:c1:e8:03:a2:f5:f9:c2: 97:2f:69:e1:10:4f:62:ea:ba:9c:0b:dc:57:d5:80: 4d:22:f0:0d:37:91:f4:60:53:a4:4b:78:a2:9c:c5: 19:c4:83:8f:8b:4d:7b:af:9b:5b:7d:bb:a0:83:ac: fa:5b:10:d0:8a:7c:25:ba:21:7c:c4:cc:7f:5d:6a: d9:f9:17:7c:21:73:6e:58:3b:0e:0c:54:3e:6a:b1: 93:11:af:aa:d2:1b:3d:b8:55:6b:de:fa:94:d2:f7: 71:c4:29:ba:60:5f:83:56:b7:e8:af:d5:23:85:77: d0:13:6c:56:a2:6d:ad:01:eb:32:9c:98:91:e7:ba: b1:02:16:b3:df:06:dc:f4:f4:fe:c8:db:7b:08:08: 16:79:05:99:92:2e:04:d0:dd:4f:bf:43:21:4b:2a: a4:72:13:47:ba:35:a2:91:81:14:ab:6e:12:42:8f: 0d:ca:ec:76:37:0f:b0:4a:7d:b5:3b:6d:e6:5b:41: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DD:08:F9:F0:88:D3:FF:BA:A2:86:51:15:E2:7C:5C:FB:6D:A1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:af:fe:73:57:f6:85:d7:e9:3a:93:2e:15:a6:00:ce:75:51: 27:36:41:0f:a6:fd:62:cc:13:dc:83:56:f2:98:ad:f1:35:ba: 6c:e8:51:cb:d8:b3:35:25:f4:f7:31:59:2c:3c:10:96:83:41: 59:99:72:22:91:b6:a5:a1:d5:b8:7e:b4:f3:57:bf:f2:bf:44: 50:5c:15:1c:30:f2:20:5f:8c:a3:a5:83:50:9e:1b:70:99:70: 2f:cf:e5:58:b1:4b:88:d9:3e:ae:6b:c1:78:eb:ae:2c:6c:03: 99:8c:63:91:d2:12:aa:ce:9e:66:de:49:82:3a:75:63:2e:c6: 69:d4:2b:59:68:44:a9:a8:89:d0:6a:be:a4:8d:95:18:9e:d7: eb:1c:d0:07:9a:13:fb:1b:a6:35:c5:84:46:8b:3b:48:c9:06: e4:70:41:7c:6c:d3:ca:fd:d8:a0:c8:f7:f9:c1:36:da:73:a2: 77:67:02:73:bf:09:ee:f7:b5:9c:93:aa:32:24:7c:cb:de:61: f4:05:a9:ff:e9:e2:53:84:9a:2b:b1:16:e2:9a:18:e8:b8:1e: b7:61:26:a3:c8:57:5d:23:df:3e:b8:f9:46:57:62:de:80:5e: c2:0a:86:b9:16:6f:e9:2f:c2:f1:cb:df:de:e0:6f:79:76:e4: e5:45:b8:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2PEtP8i8cuMdOhqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDQxOTE0MDAwM1oXDTI2MDQyMTE0MDAwMFowLzEtMCsGA1UEAxMk NmM2MzdhZmItZDA4Yy00N2VmLTk4NjYtMTMwZmNjNDRiYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3CIIQ/kzAG4lyS5r85cvrkxy90nJWHfWUx8 ItjTz1wNZZUfevl8xt5f1pBqJUtdIWB6+FUWik6SZKZF2VadIu8ecMHoA6L1+cKX L2nhEE9i6rqcC9xX1YBNIvANN5H0YFOkS3iinMUZxIOPi017r5tbfbugg6z6WxDQ inwluiF8xMx/XWrZ+Rd8IXNuWDsODFQ+arGTEa+q0hs9uFVr3vqU0vdxxCm6YF+D Vrfor9UjhXfQE2xWom2tAesynJiR57qxAhaz3wbc9PT+yNt7CAgWeQWZki4E0N1P v0MhSyqkchNHujWikYEUq24SQo8Nyux2Nw+wSn21O23mW0HvtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFELdCPnwiNP/uqKGURXifFz7baGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBir/5zV/aF1+k6ky4VpgDO dVEnNkEPpv1izBPcg1bymK3xNbps6FHL2LM1JfT3MVksPBCWg0FZmXIikbalodW4 frTzV7/yv0RQXBUcMPIgX4yjpYNQnhtwmXAvz+VYsUuI2T6ua8F4664sbAOZjGOR 0hKqzp5m3kmCOnVjLsZp1CtZaESpqInQar6kjZUYntfrHNAHmhP7G6Y1xYRGiztI yQbkcEF8bNPK/digyPf5wTbac6J3ZwJzvwnu97Wck6oyJHzL3mH0Ban/6eJThJor sRbimhjouB63YSajyFddI98+uPlGV2LegF7CCoa5Fm/pL8Lxy9/e4G95duTlRbjz -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:21 2026 by rpki-client