$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft File: 331beef2-1596-4a21-8613-1e84adac3bfc.mft (raw, json) Hash identifier: FxtjmVDsXxFOC81g+Bk7ItZuFpBPUgvxI+MVwlSfnZQ= Subject key identifier: 1A:43:55:AF:3E:F9:EE:87:B0:76:79:AF:B3:DB:CB:B9:86:A4:90:25 Authority key identifier: 3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 Certificate issuer: /CN=331beef2-1596-4a21-8613-1e84adac3bfc Certificate serial: 010D0C9F4328584DA5A3DA67A2A178C45D607800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft Manifest number: 010D0C9F4328584AB3B9715C03966E47251F0BD5 Signing time: Mon 27 Apr 2026 16:00:03 +0000 Manifest this update: Mon 27 Apr 2026 16:00:03 +0000 Manifest next update: Thu 30 Apr 2026 16:00:00 +0000 Files and hashes: 1: 331beef2-1596-4a21-8613-1e84adac3bfc.crl (hash: iZkfdTwJ+0R1/8QdHMclpMtUA5yAroUkF98CsFBfspQ=) 2: 8a3d4aac-7add-344d-a542-a96f905f7cdc.roa (hash: wJC4EoC8xTPYjPDKyVtiCI9LhvK1qN7MHTX5kNm52qE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:a3:da:67:a2:a1:78:c4:5d:60:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331beef2-1596-4a21-8613-1e84adac3bfc Validity Not Before: Apr 27 16:00:03 2026 GMT Not After : Apr 30 16:00:00 2026 GMT Subject: CN=ccf8ab23-d036-44fe-8413-fce8e52dbe0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:b7:0b:dd:ee:78:cd:6d:9a:56:ed:92:12: 72:2e:de:9e:56:cb:44:ec:32:f2:85:ba:e3:c3:1f: e1:e2:e5:05:d3:72:02:aa:40:b9:84:af:33:e7:eb: 0b:82:41:44:2b:fd:fe:f9:76:09:f6:08:e5:fa:68: 48:82:4b:ac:66:69:58:32:ec:9a:48:83:d5:1d:cb: 2d:70:0a:61:57:df:6e:22:c3:ca:68:e7:08:5e:37: 08:57:8c:98:63:ff:be:39:81:25:df:94:d4:45:86: 62:27:62:a0:ac:9d:ed:96:3b:8d:17:98:3d:56:96: dd:56:ab:e2:04:ac:62:63:0d:22:12:41:95:b6:29: cb:51:49:2e:0f:3a:c8:7b:22:db:81:aa:24:5e:1a: 9e:a6:88:9a:07:29:5a:38:a9:6b:57:ae:3e:a5:53: 59:ea:47:20:88:66:b7:03:2d:45:96:d9:d9:52:37: ca:38:0d:ca:73:16:66:19:fc:63:c7:f3:ac:94:0d: c9:f1:e4:83:96:eb:e3:25:54:e0:16:d9:38:ef:b7: 09:0f:7e:88:6b:c5:aa:38:e4:75:58:e6:f3:b8:2f: 10:69:b3:f7:58:6d:2e:8b:6a:32:e5:d8:10:f8:02: e0:70:55:50:d4:24:24:8c:f9:56:75:a2:02:13:38: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:43:55:AF:3E:F9:EE:87:B0:76:79:AF:B3:DB:CB:B9:86:A4:90:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl X509v3 Authority Key Identifier: keyid:3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f1:91:ca:bf:00:73:16:28:a9:ce:37:17:2a:c0:32:c0:fd: 4e:e3:c3:9a:5b:8b:ec:8e:94:0d:5f:d4:13:17:d7:ac:25:c0: 08:2e:46:c6:45:2c:eb:61:55:a9:20:f3:39:fe:db:fe:89:9e: 5e:02:18:c0:8e:59:96:ed:c0:9a:20:bc:88:5d:0f:a4:84:52: 01:a2:7c:9b:09:f7:36:5f:af:bf:c5:e3:c3:70:2e:fc:02:25: 30:e9:17:f8:ff:da:43:4b:48:51:60:15:31:34:6d:0d:d7:e3: 91:f9:34:4b:52:76:25:83:26:d4:0e:2a:37:16:83:e3:f9:55: eb:15:28:55:33:7c:ea:1f:01:34:b2:24:e5:09:0e:49:49:a9: f7:61:fa:1b:e1:33:b1:c5:42:cd:aa:f3:31:e2:5c:19:c5:ee: c7:52:a9:c2:b9:84:8b:02:17:11:05:04:72:bd:f0:6f:c1:51: 87:5b:a7:42:67:ed:7b:fa:b8:6f:c5:24:c1:33:d0:f3:86:84: 6d:ea:39:95:27:01:1c:6d:69:e1:78:31:66:a4:82:d2:f5:3a: b3:3e:9a:0e:b1:94:2f:88:a1:d2:e8:b6:1c:b3:8b:48:8f:fa: 0f:58:14:00:43:84:e8:cb:6d:f0:fb:54:d6:5d:78:ae:bf:ef: cd:50:19:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2lo9pnoqF4xF1geAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMxYmVlZjItMTU5Ni00YTIxLTg2MTMtMWU4NGFkYWMz YmZjMB4XDTI2MDQyNzE2MDAwM1oXDTI2MDQzMDE2MDAwMFowLzEtMCsGA1UEAxMk Y2NmOGFiMjMtZDAzNi00NGZlLTg0MTMtZmNlOGU1MmRiZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaa3C93ueM1tmlbtkhJyLt6eVstE7DLyhbrj wx/h4uUF03ICqkC5hK8z5+sLgkFEK/3++XYJ9gjl+mhIgkusZmlYMuyaSIPVHcst cAphV99uIsPKaOcIXjcIV4yYY/++OYEl35TURYZiJ2KgrJ3tljuNF5g9VpbdVqvi BKxiYw0iEkGVtinLUUkuDzrIeyLbgaokXhqepoiaBylaOKlrV64+pVNZ6kcgiGa3 Ay1FltnZUjfKOA3KcxZmGfxjx/OslA3J8eSDluvjJVTgFtk477cJD36Ia8WqOOR1 WObzuC8QabP3WG0ui2oy5dgQ+ALgcFVQ1CQkjPlWdaICEzg87QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBpDVa8++e6HsHZ5r7Pby7mGpJAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFi ZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0YWRhYzNiZmMvMzMxYmVlZjItMTU5Ni00 YTIxLTg2MTMtMWU4NGFkYWMzYmZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzMxYmVlZjItMTU5Ni00YTIxLTg2 MTMtMWU4NGFkYWMzYmZjLzMzMWJlZWYyLTE1OTYtNGEyMS04NjEzLTFlODRhZGFj M2JmYy5jcmwwHwYDVR0jBBgwFoAUO+Ro/9pz+cLk1Xujm9IVthNokZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFiZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0 YWRhYzNiZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT8ZHKvwBzFiipzjcXKsAy wP1O48OaW4vsjpQNX9QTF9esJcAILkbGRSzrYVWpIPM5/tv+iZ5eAhjAjlmW7cCa ILyIXQ+khFIBonybCfc2X6+/xePDcC78AiUw6Rf4/9pDS0hRYBUxNG0N1+OR+TRL UnYlgybUDio3FoPj+VXrFShVM3zqHwE0siTlCQ5JSan3Yfob4TOxxULNqvMx4lwZ xe7HUqnCuYSLAhcRBQRyvfBvwVGHW6dCZ+17+rhvxSTBM9DzhoRt6jmVJwEcbWnh eDFmpILS9TqzPpoOsZQviKHS6LYcs4tIj/oPWBQAQ4Toy23w+1TWXXiuv+/NUBnH -----END CERTIFICATE-----Generated at Tue Apr 28 11:55:59 2026 by rpki-client