$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft File: 02858587-45de-40d7-9b70-faa916db9aa3.mft (raw, json) Hash identifier: HmzAIIifa3oa1zocw8lMq/PPmFom65dTH7dnabXRuvo= Subject key identifier: 31:5B:D7:74:05:17:A6:94:00:3D:8E:1E:4F:38:64:84:11:4C:1D:3D Authority key identifier: 9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 Certificate issuer: /CN=02858587-45de-40d7-9b70-faa916db9aa3 Certificate serial: 010D0C9F4328584DD1073E509E146777E08FB480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft Manifest number: 010D0C9F4328584DA73DCDDD826C53DA503EB8F0 Signing time: Wed 13 May 2026 05:00:03 +0000 Manifest this update: Wed 13 May 2026 05:00:03 +0000 Manifest next update: Fri 15 May 2026 05:00:00 +0000 Files and hashes: 1: 02858587-45de-40d7-9b70-faa916db9aa3.crl (hash: hkm0T09Z2QT7bteTkABa9nE3PSQZ5VEClmD2i2kTUsA=) 2: e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa (hash: 1V28LLVHLRym4FIyvYvV7xaL7MZmre4kWzdy6HTgBbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:07:3e:50:9e:14:67:77:e0:8f:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02858587-45de-40d7-9b70-faa916db9aa3 Validity Not Before: May 13 05:00:03 2026 GMT Not After : May 15 05:00:00 2026 GMT Subject: CN=e6ac0981-c133-42e7-a867-161b3a938495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:be:9e:95:a5:8f:ae:c6:79:aa:cd:8c:07: 0d:d5:73:56:84:22:82:99:f2:fe:c7:6e:fe:14:cc: ee:d0:b9:c3:6b:4a:22:f2:ca:fe:63:56:d1:27:c7: b4:26:60:41:0d:27:18:f4:80:e0:90:a2:d7:5f:e2: f6:8d:10:55:c2:8b:81:d1:e0:77:6d:4d:5f:8c:11: cf:fe:96:f2:87:6c:fe:9f:6f:fe:ea:fe:b2:55:f6: 7b:b6:c4:fa:f9:f0:bb:1f:45:8c:ea:f1:a3:cd:80: 29:42:d4:e2:bf:06:12:0c:b1:ad:8c:38:8b:ac:3c: 68:73:69:2f:f3:b3:d8:69:82:9c:0f:9e:85:1f:05: 4e:e8:7a:c4:dc:d8:4f:bf:c1:32:10:59:59:61:f3: d0:0b:fe:9f:e9:8e:b9:9d:79:44:93:11:cc:c9:5b: 48:49:61:44:f0:76:34:70:eb:a1:48:7f:77:a0:43: 94:c4:cd:96:b8:7d:ab:f2:16:99:b7:d9:68:bc:1d: 28:5d:bc:9b:70:0a:2a:7e:d3:54:2c:46:c1:b7:10: 20:e4:08:a7:0e:2d:c9:77:48:01:e9:83:7f:83:65: eb:fa:ed:13:20:24:60:dd:16:98:1a:dc:2f:aa:f9: b1:45:5f:29:46:43:20:c1:66:bf:1b:72:4d:3a:59: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:D7:74:05:17:A6:94:00:3D:8E:1E:4F:38:64:84:11:4C:1D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl X509v3 Authority Key Identifier: keyid:9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6c:3e:9f:bd:49:f6:9d:76:23:8a:b6:7e:d9:02:c5:99:4a: 88:be:3e:90:43:85:17:c1:c7:b9:c4:c8:9a:61:89:db:67:94: 18:92:31:50:f1:9b:20:93:66:ec:c0:da:15:ea:1c:cf:de:c2: 93:30:8c:be:43:80:14:af:c4:eb:57:87:25:e1:c9:da:c8:91: 6b:73:8c:c0:ca:56:74:4e:d2:93:0c:4a:a4:5d:8b:ca:79:3b: 1a:aa:83:2f:81:5d:d0:0c:0f:49:ad:b8:3e:1d:90:e4:18:90: 5e:28:6c:52:b3:21:19:e8:a0:8f:4d:4c:76:c7:68:53:3a:30: 30:68:20:ce:17:4a:81:46:72:ff:74:2f:a5:2a:22:57:71:f1: 98:40:a8:12:7b:3a:a5:24:72:ed:25:fa:45:9f:40:a7:27:9c: 80:cb:d1:19:0c:eb:ad:b1:e9:6b:ce:d0:23:6f:81:4c:1a:51: b8:ec:85:43:7f:22:a7:b3:ca:c0:f9:b5:e1:01:fa:dd:2d:54: e0:4d:a4:7d:94:1a:e0:22:fd:70:2e:88:7c:9e:08:97:5a:16: 34:96:04:8e:54:52:57:23:66:f5:75:dc:0f:5a:b8:d6:2d:9f: 4d:aa:aa:41:e0:8b:2e:01:11:94:2f:c6:cd:57:d1:08:a1:0e: 7c:9c:89:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3RBz5QnhRnd+CPtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4NTg1ODctNDVkZS00MGQ3LTliNzAtZmFhOTE2ZGI5 YWEzMB4XDTI2MDUxMzA1MDAwM1oXDTI2MDUxNTA1MDAwMFowLzEtMCsGA1UEAxMk ZTZhYzA5ODEtYzEzMy00MmU3LWE4NjctMTYxYjNhOTM4NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw2+npWlj67GearNjAcN1XNWhCKCmfL+x27+ FMzu0LnDa0oi8sr+Y1bRJ8e0JmBBDScY9IDgkKLXX+L2jRBVwouB0eB3bU1fjBHP /pbyh2z+n2/+6v6yVfZ7tsT6+fC7H0WM6vGjzYApQtTivwYSDLGtjDiLrDxoc2kv 87PYaYKcD56FHwVO6HrE3NhPv8EyEFlZYfPQC/6f6Y65nXlEkxHMyVtISWFE8HY0 cOuhSH93oEOUxM2WuH2r8haZt9lovB0oXbybcAoqftNULEbBtxAg5AinDi3Jd0gB 6YN/g2Xr+u0TICRg3RaYGtwvqvmxRV8pRkMgwWa/G3JNOlmIWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDFb13QFF6aUAD2OHk84ZIQRTB09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjg1 ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5MTZkYjlhYTMvMDI4NTg1ODctNDVkZS00 MGQ3LTliNzAtZmFhOTE2ZGI5YWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDI4NTg1ODctNDVkZS00MGQ3LTli NzAtZmFhOTE2ZGI5YWEzLzAyODU4NTg3LTQ1ZGUtNDBkNy05YjcwLWZhYTkxNmRi OWFhMy5jcmwwHwYDVR0jBBgwFoAUmkFPrPrQV2RBA8yZqNyqru0wBzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjg1ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5 MTZkYjlhYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9bD6fvUn2nXYjirZ+2QLF mUqIvj6QQ4UXwce5xMiaYYnbZ5QYkjFQ8Zsgk2bswNoV6hzP3sKTMIy+Q4AUr8Tr V4cl4cnayJFrc4zAylZ0TtKTDEqkXYvKeTsaqoMvgV3QDA9Jrbg+HZDkGJBeKGxS syEZ6KCPTUx2x2hTOjAwaCDOF0qBRnL/dC+lKiJXcfGYQKgSezqlJHLtJfpFn0Cn J5yAy9EZDOutselrztAjb4FMGlG47IVDfyKns8rA+bXhAfrdLVTgTaR9lBrgIv1w Loh8ngiXWhY0lgSOVFJXI2b1ddwPWrjWLZ9NqqpB4IsuARGUL8bNV9EIoQ58nIkq -----END CERTIFICATE-----Generated at Wed May 13 13:46:10 2026 by rpki-client