$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft File: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft (raw, json) Hash identifier: AJlP0N3ltYwaXGTetfpkFFWRPK6/5sCE6583sCQJp8I= Subject key identifier: 7D:28:CD:F1:15:17:40:3D:A1:B3:B5:98:3B:99:1F:1C:DB:FA:A0:69 Authority key identifier: DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 Certificate issuer: /CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Certificate serial: 010D0C9F4328584DD01902E130B0FD6F23EB2900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft Manifest number: 010D0C9F4328584D92BADCE892FDF17C6A5FCE17 Signing time: Tue 12 May 2026 21:00:03 +0000 Manifest this update: Tue 12 May 2026 21:00:03 +0000 Manifest next update: Fri 15 May 2026 21:00:00 +0000 Files and hashes: 1: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl (hash: CC2WiX6XM9PkdT/OhiVCEgNUeolNW0BgxJ0GGVS+hSQ=) 2: f594481f-b71f-3694-9566-972e2d639987.roa (hash: Nb04Djq3TY9tLjgVKrKK81aVLqDOARA3T6gBQiRX+X4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:19:02:e1:30:b0:fd:6f:23:eb:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Validity Not Before: May 12 21:00:03 2026 GMT Not After : May 15 21:00:00 2026 GMT Subject: CN=7d8dc32e-43ab-4fa7-90a5-70d07f2a83b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:5d:d2:7d:01:87:3d:61:ba:a0:a7:ae:57: e3:b9:8a:3d:33:99:11:dc:19:a0:ff:ca:9f:88:ee: bf:41:4b:77:31:91:44:a2:ec:88:a0:de:16:db:89: 97:c4:d1:8e:1a:c0:7e:ef:76:ec:3c:92:dc:2c:03: 44:ac:01:12:8f:3e:fa:be:b8:d2:ff:fc:76:cc:a7: ca:bd:03:1c:7a:87:14:be:18:54:33:37:62:03:c2: 30:32:6a:86:80:25:cf:89:6b:ef:a3:98:ca:d0:ee: 1a:c7:3a:e9:4d:10:dd:81:55:ba:58:1f:a0:04:e9: dc:2e:6f:22:10:75:a5:24:b4:5a:93:26:dc:48:08: 5f:c7:d3:aa:a8:44:4b:91:b7:10:23:9d:2c:e5:7a: 44:d6:6c:5e:f6:19:2e:9a:fe:5d:cb:60:41:18:57: 3d:c4:16:c2:0f:29:1c:95:9d:dd:5c:cd:09:f7:89: ca:26:ed:d9:6c:f0:d4:10:45:c9:26:43:bb:75:d4: 72:c1:a1:85:e0:07:a4:fa:9d:e4:7c:28:06:f7:d8: cd:4a:ee:73:07:8b:a7:7c:31:5e:91:b4:73:3f:5d: 84:72:c1:71:58:2f:76:ed:c4:ac:1d:a9:15:5c:fa: 75:00:aa:19:7d:9d:81:8f:dc:04:67:7e:3b:69:27: c2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:CD:F1:15:17:40:3D:A1:B3:B5:98:3B:99:1F:1C:DB:FA:A0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl X509v3 Authority Key Identifier: keyid:DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2d:55:8b:1c:ee:07:9a:11:1e:63:36:cb:de:21:9e:0a:da: cd:c5:2f:0c:86:c0:34:a9:14:49:18:53:51:ca:c1:78:e3:50: 75:2d:60:8d:a5:35:50:ab:e7:2d:51:97:dc:96:4d:83:cd:04: b8:86:62:63:25:e5:b8:6a:27:a9:86:38:eb:ef:5d:63:72:77: 02:bd:b0:98:5f:de:3d:e0:b4:5d:60:c1:81:61:71:d4:13:cc: 2d:f9:28:c6:06:ce:ee:a9:69:5a:b6:b9:02:38:9c:05:12:fc: 14:fd:f9:fa:66:aa:69:c4:42:5c:14:44:de:98:4f:2c:ff:01: d8:91:73:9a:04:7f:d6:9f:a6:87:4e:d5:4d:a0:7b:28:9b:6a: 66:b1:a6:88:de:c8:00:08:50:db:10:ed:e3:ce:fc:1d:43:2d: 8b:a6:a2:81:19:65:fe:b9:27:40:60:12:9b:1a:e5:ea:c4:af: 73:b2:5a:e2:60:f0:7b:e5:5d:a2:ee:e3:c8:4f:0f:6e:fc:92: 2a:5d:d6:4f:0d:13:96:30:fe:21:b9:76:4f:3e:30:34:86:f1: 7c:3c:28:9b:65:ae:00:a2:20:35:bb:17:57:b1:f1:9d:0d:e9: 5b:fd:9f:10:d2:b4:65:a6:aa:87:13:c1:ae:7b:2d:42:1a:45: 8d:b2:69:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QGQLhMLD9byPrKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4YzJiMWYtZjU4Zi00ZWRhLWI5NTMtMzVjNmU4ZTBh MWQzMB4XDTI2MDUxMjIxMDAwM1oXDTI2MDUxNTIxMDAwMFowLzEtMCsGA1UEAxMk N2Q4ZGMzMmUtNDNhYi00ZmE3LTkwYTUtNzBkMDdmMmE4M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LVd0n0Bhz1huqCnrlfjuYo9M5kR3Bmg/8qf iO6/QUt3MZFEouyIoN4W24mXxNGOGsB+73bsPJLcLANErAESjz76vrjS//x2zKfK vQMceocUvhhUMzdiA8IwMmqGgCXPiWvvo5jK0O4axzrpTRDdgVW6WB+gBOncLm8i EHWlJLRakybcSAhfx9OqqERLkbcQI50s5XpE1mxe9hkumv5dy2BBGFc9xBbCDykc lZ3dXM0J94nKJu3ZbPDUEEXJJkO7ddRywaGF4Aek+p3kfCgG99jNSu5zB4unfDFe kbRzP12EcsFxWC927cSsHakVXPp1AKoZfZ2Bj9wEZ347aSfCtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH0ozfEVF0A9obO1mDuZHxzb+qBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzhj MmIxZi1mNThmLTRlZGEtYjk1My0zNWM2ZThlMGExZDMvODM4YzJiMWYtZjU4Zi00 ZWRhLWI5NTMtMzVjNmU4ZTBhMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4YzJiMWYtZjU4Zi00ZWRhLWI5 NTMtMzVjNmU4ZTBhMWQzLzgzOGMyYjFmLWY1OGYtNGVkYS1iOTUzLTM1YzZlOGUw YTFkMy5jcmwwHwYDVR0jBBgwFoAU3vgfdlol2WZKekh0kn4VKZJYaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzhjMmIxZi1mNThmLTRlZGEtYjk1My0zNWM2 ZThlMGExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOLVWLHO4HmhEeYzbL3iGe CtrNxS8MhsA0qRRJGFNRysF441B1LWCNpTVQq+ctUZfclk2DzQS4hmJjJeW4aiep hjjr711jcncCvbCYX9494LRdYMGBYXHUE8wt+SjGBs7uqWlatrkCOJwFEvwU/fn6 ZqppxEJcFETemE8s/wHYkXOaBH/Wn6aHTtVNoHsom2pmsaaI3sgACFDbEO3jzvwd Qy2LpqKBGWX+uSdAYBKbGuXqxK9zslriYPB75V2i7uPITw9u/JIqXdZPDROWMP4h uXZPPjA0hvF8PCibZa4AoiA1uxdXsfGdDelb/Z8Q0rRlpqqHE8Guey1CGkWNsmnc -----END CERTIFICATE-----Generated at Wed May 13 11:58:32 2026 by rpki-client