$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: mYXnbLYYH0a2R7td5KWX2av6VF4TvIFgCgx8EhHrpco= Subject key identifier: 00:FE:95:65:D2:23:C8:87:03:44:6B:A3:2C:6F:0C:6C:75:F9:B4:22 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584DCF665AD11F27096B01E36980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C720 Signing time: Tue 12 May 2026 15:00:03 +0000 Manifest this update: Tue 12 May 2026 15:00:03 +0000 Manifest next update: Thu 14 May 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: T5bE2jdoXq+Ag+DvvWh0qdrIgjObbWOU8T1nsQt7/hw=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: 5MtAEgaE4nrfkbt29nlSyqEutOAIkqHhjKC7JIG1iIo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:66:5a:d1:1f:27:09:6b:01:e3:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: May 12 15:00:03 2026 GMT Not After : May 14 15:00:00 2026 GMT Subject: CN=ef37ae4d-363c-4081-a3a2-3cd85c24876c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:c4:5d:ca:c3:44:55:fc:89:8e:d8:a8:31: 51:76:4c:ad:e5:7c:8f:ce:4c:88:98:a7:7d:c5:15: 23:3a:49:e7:fc:44:af:1c:52:1e:2d:3e:57:5f:93: ea:3f:41:f4:1c:4a:4a:1b:eb:ae:5e:1e:63:37:36: 83:ac:35:c8:51:4e:41:56:8d:68:f1:96:3e:26:c9: 3f:45:f2:1f:24:b9:22:79:14:62:8f:f1:a9:a0:ce: 82:cb:35:67:2e:4b:f7:8e:29:de:3d:08:11:de:4a: 75:68:b5:50:e0:71:33:1d:f8:03:a3:db:d9:b2:e7: 3d:22:e8:46:46:35:e0:ee:5c:2d:80:b0:e0:ec:8e: 92:99:df:04:16:27:22:83:97:5d:c8:42:72:32:7d: 3b:ad:1d:67:ea:60:20:11:6c:ea:ec:60:08:9f:7e: 35:64:cb:7d:e2:16:4a:97:6f:e5:a7:73:93:39:10: 18:ff:c5:35:f4:70:54:96:50:2f:12:ab:f2:50:f9: 35:fd:49:85:9a:dc:c7:3c:5c:db:f9:22:94:9f:62: 2c:4b:19:a7:24:07:44:4d:79:07:64:07:37:60:b6: 02:a8:21:61:87:a2:cc:16:27:52:a1:40:6b:2b:4d: 7c:67:8e:84:fd:30:55:c5:da:74:12:a1:26:06:f0: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:95:65:D2:23:C8:87:03:44:6B:A3:2C:6F:0C:6C:75:F9:B4:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:88:c9:43:a2:35:59:70:dd:5c:85:82:e0:90:6a:f2:74:13: 44:6b:f5:63:9f:9d:b7:63:87:93:35:2a:b5:cf:54:e0:c9:32: ac:79:9b:1f:dc:00:50:44:74:a5:75:a0:a0:a1:a4:e3:39:05: da:fe:b4:8f:ec:72:35:2d:cc:43:4a:54:ab:9d:ae:ca:5d:31: f4:6a:ad:69:97:65:f9:f6:49:62:de:84:c2:a0:8e:3f:be:36: e3:6e:86:18:6e:68:22:4e:2b:49:0a:9c:8d:1d:e0:6e:08:6a: 99:ef:08:b7:73:5b:e8:67:1b:dd:33:17:f5:18:d5:c8:ba:62: 19:0e:68:93:a1:24:be:6b:93:fb:ac:0f:70:d4:82:5a:3a:8c: 57:f4:22:ca:87:bc:4c:ab:d4:2c:ec:92:3f:68:6d:39:2d:a1: 33:0c:87:f5:9e:12:e2:3c:81:1f:80:52:d2:0c:f6:01:01:51: 0b:0c:d7:8b:8a:f2:b3:7a:e4:9a:ec:2e:e4:91:dd:8b:82:7d: 78:dc:d7:c5:6e:bc:e6:c1:38:6f:57:af:e5:88:33:8a:46:27: 5e:d0:1c:27:44:94:8f:cb:24:25:4f:00:46:cc:80:a9:64:40: 42:01:13:b1:e2:88:f5:f4:04:6c:16:1d:ec:5a:ce:b5:3f:c3: c8:38:86:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PZlrRHycJawHjaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDUxMjE1MDAwM1oXDTI2MDUxNDE1MDAwMFowLzEtMCsGA1UEAxMk ZWYzN2FlNGQtMzYzYy00MDgxLWEzYTItM2NkODVjMjQ4NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd7EXcrDRFX8iY7YqDFRdkyt5XyPzkyImKd9 xRUjOknn/ESvHFIeLT5XX5PqP0H0HEpKG+uuXh5jNzaDrDXIUU5BVo1o8ZY+Jsk/ RfIfJLkieRRij/GpoM6CyzVnLkv3jinePQgR3kp1aLVQ4HEzHfgDo9vZsuc9IuhG RjXg7lwtgLDg7I6Smd8EFicig5ddyEJyMn07rR1n6mAgEWzq7GAIn341ZMt94hZK l2/lp3OTORAY/8U19HBUllAvEqvyUPk1/UmFmtzHPFzb+SKUn2IsSxmnJAdETXkH ZAc3YLYCqCFhh6LMFidSoUBrK018Z46E/TBVxdp0EqEmBvASGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAD+lWXSI8iHA0RroyxvDGx1+bQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2iMlDojVZcN1chYLgkGry dBNEa/Vjn523Y4eTNSq1z1TgyTKseZsf3ABQRHSldaCgoaTjOQXa/rSP7HI1LcxD SlSrna7KXTH0aq1pl2X59kli3oTCoI4/vjbjboYYbmgiTitJCpyNHeBuCGqZ7wi3 c1voZxvdMxf1GNXIumIZDmiToSS+a5P7rA9w1IJaOoxX9CLKh7xMq9Qs7JI/aG05 LaEzDIf1nhLiPIEfgFLSDPYBAVELDNeLivKzeuSa7C7kkd2Lgn143NfFbrzmwThv V6/liDOKRide0BwnRJSPyyQlTwBGzICpZEBCAROx4oj19ARsFh3sWs61P8PIOIbi -----END CERTIFICATE-----Generated at Wed May 13 09:59:40 2026 by rpki-client