$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: kgAc0AWNSvW0mQXZ7n+GFHX+S6dOlJFFGKRYrXqf+e8= Subject key identifier: BA:61:27:36:02:F9:CE:A8:8D:CD:1B:4D:40:37:6E:10:F7:34:D2:A9 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584DCFBFB2F4042E258AAFEAEC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB3184352 Signing time: Tue 12 May 2026 18:00:03 +0000 Manifest this update: Tue 12 May 2026 18:00:03 +0000 Manifest next update: Fri 15 May 2026 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: TBsE43LH52YRx0Zuzelw3zpPcSH5RLE7U4F0cF6xgFw=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: lBKMXeMIbWJyfUw7B0hMFGg/NrvNwEt+kAH8qAv1808=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:bf:b2:f4:04:2e:25:8a:af:ea:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: May 12 18:00:03 2026 GMT Not After : May 15 18:00:00 2026 GMT Subject: CN=4aa64109-af26-4bb4-8ce9-0f276045417d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:32:60:b2:25:19:3f:36:af:5d:2d:68:64: c6:55:a8:72:1f:b6:1a:bc:35:81:3c:89:ec:83:1a: 9b:96:b9:3a:34:9c:c4:70:b9:4e:d2:2a:64:eb:bc: 9e:1f:80:d6:11:08:07:17:7d:a0:4d:fe:81:b8:8f: 70:fa:d5:67:d7:4a:a3:b0:95:1a:a0:78:10:f0:f0: ea:4f:c3:66:88:19:75:72:0d:5b:48:29:b2:49:b2: e9:b1:25:b7:78:77:fc:e2:a7:7c:f1:18:16:bb:16: 27:17:a5:e8:6c:a6:df:7a:a5:e3:8c:6b:d4:6b:1e: 19:15:9d:e0:43:81:0a:d5:0e:94:b5:0a:f1:44:d7: 85:5c:8d:4d:b7:0d:be:72:f6:b2:f4:d4:4d:b7:7c: 77:71:13:a8:f2:ef:82:ff:88:e3:f8:c3:fd:ec:fd: 37:f5:4d:83:15:52:d0:b4:1d:ba:da:e4:4c:f0:6d: 3d:d3:00:18:d4:35:19:38:b1:4a:ef:87:cc:cb:07: b9:07:3a:5f:95:b0:8f:47:62:1b:09:a3:55:93:46: 72:6a:57:0a:29:4e:33:e1:28:4b:47:a5:cc:ef:37: 45:5b:08:2d:9e:f0:c7:d7:3d:48:df:1b:01:1f:77: fc:67:56:88:7c:89:67:0a:45:35:0b:34:db:71:c2: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:27:36:02:F9:CE:A8:8D:CD:1B:4D:40:37:6E:10:F7:34:D2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2d:df:ee:7a:9c:89:b1:97:0f:3c:87:dd:7b:8f:23:de:49: 74:31:17:ee:d0:c7:de:97:12:31:b6:c1:2a:b9:cb:cc:6a:f8: 6c:ce:62:6f:e1:75:56:1b:c4:f5:e2:9a:15:65:11:39:fe:aa: 9c:d9:49:0d:d0:16:47:aa:95:94:f8:9d:fd:1a:88:72:38:cc: f7:b0:e0:c8:db:2a:b7:a2:c8:5b:eb:3c:77:51:0a:97:f7:a9: e3:07:67:58:af:c0:17:be:51:21:38:c1:5f:45:0a:28:7d:72: f3:3c:83:b9:e1:13:5c:37:54:ce:d8:7e:7a:0b:21:5b:8a:25: 3f:14:63:14:42:1b:14:29:f5:2f:80:c9:d4:da:bf:12:c7:c5: e9:46:35:78:90:68:38:3b:d5:c6:48:35:70:ed:8c:3f:58:16: 1a:db:0d:e3:b9:09:70:f0:6e:fc:8d:28:88:6e:61:1c:62:ac: 6b:a0:a3:73:7b:ce:d3:81:2c:51:0c:3b:90:f6:49:2b:8f:44: 51:43:c2:28:0c:29:0f:f2:17:6a:4c:7e:9f:6b:a6:5b:0f:c2: 2b:5e:f6:9e:31:dd:c3:c3:ed:cf:ff:23:cd:19:3c:cd:10:f8: 1d:cf:c2:6a:ee:ab:18:9f:0e:c0:63:31:f5:9e:19:77:6f:eb: 9d:19:81:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Pv7L0BC4liq/q7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI2MDUxMjE4MDAwM1oXDTI2MDUxNTE4MDAwMFowLzEtMCsGA1UEAxMk NGFhNjQxMDktYWYyNi00YmI0LThjZTktMGYyNzYwNDU0MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe4yYLIlGT82r10taGTGVahyH7YavDWBPIns gxqblrk6NJzEcLlO0ipk67yeH4DWEQgHF32gTf6BuI9w+tVn10qjsJUaoHgQ8PDq T8NmiBl1cg1bSCmySbLpsSW3eHf84qd88RgWuxYnF6XobKbfeqXjjGvUax4ZFZ3g Q4EK1Q6UtQrxRNeFXI1Ntw2+cvay9NRNt3x3cROo8u+C/4jj+MP97P039U2DFVLQ tB262uRM8G090wAY1DUZOLFK74fMywe5BzpflbCPR2IbCaNVk0ZyalcKKU4z4ShL R6XM7zdFWwgtnvDH1z1I3xsBH3f8Z1aIfIlnCkU1CzTbccKi6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLphJzYC+c6ojc0bTUA3bhD3NNKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHLd/uepyJsZcPPIfde48j 3kl0MRfu0MfelxIxtsEqucvMavhszmJv4XVWG8T14poVZRE5/qqc2UkN0BZHqpWU +J39GohyOMz3sODI2yq3oshb6zx3UQqX96njB2dYr8AXvlEhOMFfRQoofXLzPIO5 4RNcN1TO2H56CyFbiiU/FGMUQhsUKfUvgMnU2r8Sx8XpRjV4kGg4O9XGSDVw7Yw/ WBYa2w3juQlw8G78jSiIbmEcYqxroKNze87TgSxRDDuQ9kkrj0RRQ8IoDCkP8hdq TH6fa6ZbD8IrXvaeMd3Dw+3P/yPNGTzNEPgdz8Jq7qsYnw7AYzH1nhl3b+udGYEM -----END CERTIFICATE-----Generated at Wed May 13 12:37:05 2026 by rpki-client