$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft File: 681d813c-8566-4f01-b8f3-989dcf8d983e.mft (raw, json) Hash identifier: AtlXz63jMLtY1E+23c/hRmlnEF+BUKzlOfV+RwRkc5o= Subject key identifier: 0F:07:49:64:16:D1:7F:5E:48:80:FB:24:2E:F9:DA:A2:87:1C:82:78 Authority key identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Certificate issuer: /CN=681d813c-8566-4f01-b8f3-989dcf8d983e Certificate serial: 010D0C9F4328584DCFBFB2139771FD16907CC700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft Manifest number: 010D0C9F4328584DBF038A7EB1FDDA5706A7E687 Signing time: Tue 12 May 2026 18:00:03 +0000 Manifest this update: Tue 12 May 2026 18:00:03 +0000 Manifest next update: Fri 15 May 2026 18:00:00 +0000 Files and hashes: 1: 681d813c-8566-4f01-b8f3-989dcf8d983e.crl (hash: om04QmL3NtL1E4o1KUpZ5j1ZgAcq90k0oTmphDaMeWU=) 2: bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa (hash: yupvJdwGUDMYNoDeqH3xKu9jG5BTkxhEcktfBvS1JhE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:bf:b2:13:97:71:fd:16:90:7c:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681d813c-8566-4f01-b8f3-989dcf8d983e Validity Not Before: May 12 18:00:03 2026 GMT Not After : May 15 18:00:00 2026 GMT Subject: CN=c046e5a3-f447-4702-bdcc-65f924b86cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:b0:81:e7:3a:74:55:7a:26:3d:18:ad:ce: a7:c9:f1:92:0b:9a:f2:7e:0a:36:5d:a1:bc:5b:6d: 56:11:ee:50:53:57:ac:70:d3:39:b9:33:a5:ef:c5: ab:ed:0b:d3:3c:c4:9b:e6:c7:d1:38:90:3b:57:33: cc:5d:7c:68:31:e2:9d:56:ad:f8:ac:b6:d6:d8:d5: 3f:e3:c4:29:07:ec:5b:27:35:02:28:c5:e4:5c:8d: 8f:4c:b2:92:75:50:c0:bc:82:2a:4e:74:83:33:73: c4:a6:fc:05:f4:63:d9:c9:d0:16:ce:2d:9d:d5:2f: e6:0f:d2:b1:95:a6:9c:6e:e9:c5:f7:c1:23:fe:6a: dd:72:26:3f:05:44:65:26:1b:39:fc:cd:93:38:60: 78:91:05:1b:b3:32:8c:c1:5b:0d:85:d5:a3:70:bb: 08:34:38:fa:bb:3c:db:2a:0b:75:39:51:99:ef:ea: 01:e2:12:b4:6b:07:1e:b2:3c:25:2e:2c:fc:a1:d2: 4b:41:68:8b:66:ee:42:22:82:d4:78:8e:23:2a:35: eb:4f:fe:0a:00:3b:1a:80:ca:c5:36:fa:08:b6:4b: 2c:21:80:ad:bd:c5:51:5e:e5:e4:ed:e5:e0:bf:72: d9:b0:96:85:b0:55:02:78:a8:ce:40:da:35:af:32: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:49:64:16:D1:7F:5E:48:80:FB:24:2E:F9:DA:A2:87:1C:82:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl X509v3 Authority Key Identifier: keyid:99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:25:67:8c:73:07:b5:7b:e7:51:b7:c4:ff:ba:94:2d:f0:69: 7e:41:8d:3b:2d:30:87:a3:e9:bd:7b:06:8f:f5:9f:c3:ff:fd: 6e:a4:f5:82:fa:4b:6c:47:5b:65:cb:01:0e:9f:3b:b2:53:73: 9f:9c:13:22:de:6b:6f:0d:35:a1:3e:fb:ba:06:28:9e:d1:fc: dd:5f:c3:9b:ed:75:b9:f1:a9:f3:84:b0:af:35:c7:c2:35:27: 15:3b:1b:c5:52:60:dc:fa:f8:07:bf:d0:87:05:22:47:34:97: 50:bc:41:8e:eb:ff:86:4f:48:81:71:95:18:a3:24:44:f0:d3: 82:f0:1e:c5:2d:25:d2:95:ba:0f:0c:cc:c5:8c:eb:c9:65:ad: 32:6c:a4:00:18:96:51:02:d1:46:b1:64:e3:5c:09:dd:9a:b8: 0c:f6:18:72:f2:7a:7e:13:7c:a3:86:13:25:00:3e:f3:1b:ec: 1a:42:ba:29:ec:5a:4b:79:74:9e:06:3f:f6:cc:96:72:20:f7: 15:f9:87:0c:61:e6:d2:fc:88:96:a0:c7:41:a0:da:96:50:66: 2f:bc:13:92:04:a6:fb:07:3a:42:85:d1:9d:7e:7c:94:7a:7a: 09:e5:16:71:0b:58:65:39:37:aa:61:84:b7:3b:dd:4f:73:69: 5a:8e:c1:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Pv7ITl3H9FpB8xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgxZDgxM2MtODU2Ni00ZjAxLWI4ZjMtOTg5ZGNmOGQ5 ODNlMB4XDTI2MDUxMjE4MDAwM1oXDTI2MDUxNTE4MDAwMFowLzEtMCsGA1UEAxMk YzA0NmU1YTMtZjQ0Ny00NzAyLWJkY2MtNjVmOTI0Yjg2Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2qwgec6dFV6Jj0Yrc6nyfGSC5ryfgo2XaG8 W21WEe5QU1escNM5uTOl78Wr7QvTPMSb5sfROJA7VzPMXXxoMeKdVq34rLbW2NU/ 48QpB+xbJzUCKMXkXI2PTLKSdVDAvIIqTnSDM3PEpvwF9GPZydAWzi2d1S/mD9Kx laacbunF98Ej/mrdciY/BURlJhs5/M2TOGB4kQUbszKMwVsNhdWjcLsINDj6uzzb Kgt1OVGZ7+oB4hK0awcesjwlLiz8odJLQWiLZu5CIoLUeI4jKjXrT/4KADsagMrF NvoItkssIYCtvcVRXuXk7eXgv3LZsJaFsFUCeKjOQNo1rzLSxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA8HSWQW0X9eSID7JC752qKHHIJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ODFk ODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4ZDk4M2UvNjgxZDgxM2MtODU2Ni00 ZjAxLWI4ZjMtOTg5ZGNmOGQ5ODNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjgxZDgxM2MtODU2Ni00ZjAxLWI4 ZjMtOTg5ZGNmOGQ5ODNlLzY4MWQ4MTNjLTg1NjYtNGYwMS1iOGYzLTk4OWRjZjhk OTgzZS5jcmwwHwYDVR0jBBgwFoAUmaUNdWNKHu/nzQudetpkD/2COHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlk Y2Y4ZDk4M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcJWeMcwe1e+dRt8T/upQt 8Gl+QY07LTCHo+m9ewaP9Z/D//1upPWC+ktsR1tlywEOnzuyU3OfnBMi3mtvDTWh Pvu6Biie0fzdX8Ob7XW58anzhLCvNcfCNScVOxvFUmDc+vgHv9CHBSJHNJdQvEGO 6/+GT0iBcZUYoyRE8NOC8B7FLSXSlboPDMzFjOvJZa0ybKQAGJZRAtFGsWTjXAnd mrgM9hhy8np+E3yjhhMlAD7zG+waQrop7FpLeXSeBj/2zJZyIPcV+YcMYebS/IiW oMdBoNqWUGYvvBOSBKb7BzpChdGdfnyUenoJ5RZxC1hlOTeqYYS3O91Pc2lajsG+ -----END CERTIFICATE-----Generated at Wed May 13 05:38:10 2026 by rpki-client