$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.mft File: 88b8cdab-7ed1-4c39-88d2-c6df485a6de4.mft (raw, json) Hash identifier: dN3TfOSzXuc+20FXlPAzsgV7x78wZFWKFPLFGfidgz8= Subject key identifier: F9:3B:9A:18:26:89:EF:E5:3C:37:D9:6B:0E:F5:2C:17:D7:4F:03:01 Authority key identifier: F8:B9:E7:63:2D:8C:2E:93:B7:C8:6B:D3:C5:BD:8E:11:FB:1D:D5:38 Certificate issuer: /CN=88b8cdab-7ed1-4c39-88d2-c6df485a6de4 Certificate serial: 010D0C9F4328584D7C3ABB21869EF9AA63DDC940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.mft Manifest number: 010D0C9F4328584C0E6957B81D3B143DFB2E5DA3 Signing time: Sun 12 Apr 2026 20:00:03 +0000 Manifest this update: Sun 12 Apr 2026 20:00:03 +0000 Manifest next update: Tue 14 Apr 2026 20:00:00 +0000 Files and hashes: 1: 88b8cdab-7ed1-4c39-88d2-c6df485a6de4.crl (hash: 7EjqrrnvumDg2oTXGEdgePXZHLhbUeWC6o2CI+/fgWo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:3a:bb:21:86:9e:f9:aa:63:dd:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b8cdab-7ed1-4c39-88d2-c6df485a6de4 Validity Not Before: Apr 12 20:00:03 2026 GMT Not After : Apr 14 20:00:00 2026 GMT Subject: CN=86af18bc-da1a-42e9-aca1-cee1567048cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:f0:ab:6b:c1:4a:65:33:e2:f2:11:60:bf: 2d:a4:7e:85:1f:8b:7a:e8:e2:8e:ce:c8:7d:b1:59: 78:4a:2b:53:cc:00:55:ec:44:d3:e8:4e:d8:5b:8f: 63:87:63:04:f1:ca:fd:07:92:45:54:05:79:fa:a7: 59:dd:8a:d2:11:bb:bd:0b:9a:dc:88:9c:3c:27:bc: 38:f9:c5:93:39:84:04:a9:16:e2:3a:19:1f:97:63: b9:c9:c9:52:31:95:3c:cf:a1:fd:f5:52:12:9d:f6: 85:53:41:55:a7:1f:d6:4d:cc:a4:c3:14:b6:1e:bf: b8:71:06:cb:3c:05:d9:0d:05:6a:a9:45:36:f8:0a: 71:0c:df:2b:35:cf:58:df:b7:22:ca:8d:c4:53:83: dc:e9:8c:ec:9a:f2:36:f3:be:fc:dd:c6:d6:ae:c6: 32:6a:0c:b2:f0:cf:65:54:b5:f1:be:0f:18:bd:6a: 16:f9:56:9e:88:1d:b6:0e:17:b0:87:72:33:1c:0c: 71:1c:14:44:2b:cc:6f:7c:4c:9a:a7:b1:d1:0e:09: 65:fc:8c:97:eb:fc:32:fe:af:1e:c5:19:92:f9:f7: 0d:95:91:b1:81:de:42:91:f3:e6:ea:2d:8b:5a:ab: 41:d4:eb:de:d8:64:3e:e0:97:88:dd:04:12:52:53: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3B:9A:18:26:89:EF:E5:3C:37:D9:6B:0E:F5:2C:17:D7:4F:03:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.crl X509v3 Authority Key Identifier: keyid:F8:B9:E7:63:2D:8C:2E:93:B7:C8:6B:D3:C5:BD:8E:11:FB:1D:D5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/88b8cdab-7ed1-4c39-88d2-c6df485a6de4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:68:e9:ab:c7:ab:d8:a5:3c:87:f6:99:d7:b1:f4:be:a6:ce: 9c:bb:a1:be:9f:0a:b6:64:a4:28:98:2d:ae:48:a4:92:45:54: 3a:6a:e1:44:47:43:08:ad:b3:41:54:72:9d:d7:c1:c6:29:dc: f4:6b:90:cd:73:d3:3d:24:0d:7b:4c:bb:37:c9:c1:b6:17:43: 82:9c:04:e3:0e:e1:53:c9:eb:d5:56:b1:f6:68:ad:4e:96:3d: dc:dc:91:76:05:f8:c8:fb:f8:07:e4:f9:d0:2a:6a:9f:c0:4b: d1:43:0c:b8:59:ed:eb:7a:20:72:dc:c7:42:b9:f4:4a:3a:0d: 64:57:d5:2f:b6:2b:27:cc:d6:4c:86:bd:5d:5c:3b:40:dd:04: 3e:d9:5a:e3:ff:4e:bf:29:fe:d0:19:b2:58:30:79:c9:d3:4c: 52:fe:41:86:e7:58:79:85:cb:a9:08:90:b2:97:79:40:99:38: bb:72:44:29:f1:8b:0a:d5:90:a4:a4:02:4b:8f:05:cf:8f:99: e1:56:35:67:e5:83:80:e6:be:72:10:2e:60:81:a8:8b:25:e2: 54:2f:4e:a0:90:59:ce:97:bb:6b:0d:a0:4e:4d:af:c4:72:7e: 3f:6f:8c:22:a9:50:2f:f2:a6:86:25:e8:80:64:cc:d7:6a:2d: 6c:05:0b:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE18Orshhp75qmPdyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhiOGNkYWItN2VkMS00YzM5LTg4ZDItYzZkZjQ4NWE2 ZGU0MB4XDTI2MDQxMjIwMDAwM1oXDTI2MDQxNDIwMDAwMFowLzEtMCsGA1UEAxMk ODZhZjE4YmMtZGExYS00MmU5LWFjYTEtY2VlMTU2NzA0OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDwq2vBSmUz4vIRYL8tpH6FH4t66OKOzsh9 sVl4SitTzABV7ETT6E7YW49jh2ME8cr9B5JFVAV5+qdZ3YrSEbu9C5rciJw8J7w4 +cWTOYQEqRbiOhkfl2O5yclSMZU8z6H99VISnfaFU0FVpx/WTcykwxS2Hr+4cQbL PAXZDQVqqUU2+ApxDN8rNc9Y37ciyo3EU4Pc6YzsmvI287783cbWrsYyagyy8M9l VLXxvg8YvWoW+VaeiB22Dhewh3IzHAxxHBREK8xvfEyap7HRDgll/IyX6/wy/q8e xRmS+fcNlZGxgd5CkfPm6i2LWqtB1Ove2GQ+4JeI3QQSUlMUcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPk7mhgmie/lPDfZaw71LBfXTwMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OGI4 Y2RhYi03ZWQxLTRjMzktODhkMi1jNmRmNDg1YTZkZTQvODhiOGNkYWItN2VkMS00 YzM5LTg4ZDItYzZkZjQ4NWE2ZGU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODhiOGNkYWItN2VkMS00YzM5LTg4 ZDItYzZkZjQ4NWE2ZGU0Lzg4YjhjZGFiLTdlZDEtNGMzOS04OGQyLWM2ZGY0ODVh NmRlNC5jcmwwHwYDVR0jBBgwFoAU+LnnYy2MLpO3yGvTxb2OEfsd1TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OGI4Y2RhYi03ZWQxLTRjMzktODhkMi1jNmRm NDg1YTZkZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPaOmrx6vYpTyH9pnXsfS+ ps6cu6G+nwq2ZKQomC2uSKSSRVQ6auFER0MIrbNBVHKd18HGKdz0a5DNc9M9JA17 TLs3ycG2F0OCnATjDuFTyevVVrH2aK1Olj3c3JF2BfjI+/gH5PnQKmqfwEvRQwy4 We3reiBy3MdCufRKOg1kV9UvtisnzNZMhr1dXDtA3QQ+2Vrj/06/Kf7QGbJYMHnJ 00xS/kGG51h5hcupCJCyl3lAmTi7ckQp8YsK1ZCkpAJLjwXPj5nhVjVn5YOA5r5y EC5ggaiLJeJUL06gkFnOl7trDaBOTa/Ecn4/b4wiqVAv8qaGJeiAZMzXai1sBQu/ -----END CERTIFICATE-----Generated at Mon Apr 13 10:39:17 2026 by rpki-client