$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: NMY2pEpymtEGXqKwR0FndirhWP3gS/dTcst+ikR2CB8= Subject key identifier: 42:9A:2C:22:EC:C2:32:39:F6:BD:58:BC:03:56:63:BE:AF:8C:D7:63 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584DCFFB3AF898BF1721BEE60B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD9EE Signing time: Tue 12 May 2026 20:00:03 +0000 Manifest this update: Tue 12 May 2026 20:00:03 +0000 Manifest next update: Thu 14 May 2026 20:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: yJnd7THD/P1j65kQ88ud9UWZQZdYYBNzMyxJ9UjH1gA=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: IfgtCMkxlXEdc1DnQYMpFsfie1qg4sgAq1FyL62306M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:fb:3a:f8:98:bf:17:21:be:e6:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: May 12 20:00:03 2026 GMT Not After : May 14 20:00:00 2026 GMT Subject: CN=cd4c9b8b-9da2-4d2c-864d-0b2907109ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:49:73:6f:1c:25:86:99:43:27:1c:c2:2f: 60:9a:02:cc:cd:00:12:de:a2:43:78:28:3d:a0:e3: 6a:34:c0:e1:18:b9:77:00:f2:e8:b4:4a:85:f7:ea: 03:66:a6:d8:64:21:fc:45:b5:e0:db:61:44:33:08: 4f:bf:de:f0:f0:46:8a:5c:79:8f:59:0d:b9:46:d6: 37:af:ec:4e:27:c0:97:6c:ec:f4:eb:19:03:05:68: 4b:07:27:85:58:77:db:39:b1:c9:f1:40:5a:84:54: f7:21:c2:5a:6b:d4:cd:6a:5b:36:6a:76:52:dd:93: a8:3f:5d:af:e5:6e:0c:3d:22:a5:dd:e3:ee:87:4c: 85:ba:c8:e1:aa:bc:07:5c:da:11:c5:b7:88:15:5e: f6:e2:85:be:d0:80:02:ce:ae:d1:22:14:ac:c0:66: 71:24:35:b4:8c:0c:33:12:44:d6:26:a5:69:31:bc: 2b:51:ca:47:50:0c:6b:0e:56:59:f4:f3:dc:50:4b: 6e:32:58:43:46:d2:a3:da:3b:92:dc:6b:a7:7a:fe: f7:a1:c5:42:fe:57:40:b0:c0:ee:44:42:f5:03:90: 97:b8:c7:cc:ad:ce:fb:da:ad:22:7e:2a:42:19:7d: 6e:03:6e:86:4c:15:8f:9d:10:d5:54:68:a7:35:a8: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9A:2C:22:EC:C2:32:39:F6:BD:58:BC:03:56:63:BE:AF:8C:D7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:8b:68:cf:1c:c9:5c:2b:69:44:64:f7:08:39:82:be:bd:ac: aa:f0:af:ee:ce:94:a4:d5:cc:90:55:95:4f:ae:f5:5e:73:17: 47:84:0a:a5:7c:3f:c0:4c:cc:02:3a:87:ac:e7:de:ab:b4:44: 96:91:dd:cd:9e:b2:0f:f8:ce:13:d9:e0:6a:66:0f:68:f8:7d: 44:81:f9:f0:64:73:15:fd:37:d2:7b:ba:d3:5b:b8:c4:20:63: 65:1c:1f:b2:b1:78:58:39:2a:36:2b:93:94:e1:4a:30:2e:4d: 51:b2:67:ab:b5:01:61:44:5f:d3:fe:9c:39:9c:e6:f1:9d:77: c0:96:7f:a4:a5:61:d9:d2:27:20:15:07:22:e5:74:d5:e0:67: a9:ca:d4:4f:97:f7:54:19:e1:47:13:35:77:c2:c9:0d:e4:cf: 14:44:7a:90:42:79:61:23:b1:ec:f0:88:71:c6:1a:fc:a1:35: 89:08:a3:94:39:6a:d9:b8:92:2a:74:02:60:e1:b7:cc:40:b9: 74:11:0d:0f:9e:43:04:9d:d4:81:56:43:8d:a3:00:06:47:9c: 55:92:88:84:3f:f5:c6:43:c2:a1:68:1c:8d:07:ee:cb:96:28: 29:db:38:03:1f:41:0c:3c:60:78:6e:5f:b2:83:ab:09:ea:c8: df:6f:91:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3P+zr4mL8XIb7mC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI2MDUxMjIwMDAwM1oXDTI2MDUxNDIwMDAwMFowLzEtMCsGA1UEAxMk Y2Q0YzliOGItOWRhMi00ZDJjLTg2NGQtMGIyOTA3MTA5Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm1Jc28cJYaZQyccwi9gmgLMzQAS3qJDeCg9 oONqNMDhGLl3APLotEqF9+oDZqbYZCH8RbXg22FEMwhPv97w8EaKXHmPWQ25RtY3 r+xOJ8CXbOz06xkDBWhLByeFWHfbObHJ8UBahFT3IcJaa9TNals2anZS3ZOoP12v 5W4MPSKl3ePuh0yFusjhqrwHXNoRxbeIFV724oW+0IACzq7RIhSswGZxJDW0jAwz EkTWJqVpMbwrUcpHUAxrDlZZ9PPcUEtuMlhDRtKj2juS3Gunev73ocVC/ldAsMDu REL1A5CXuMfMrc772q0ifipCGX1uA26GTBWPnRDVVGinNag/EwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEKaLCLswjI59r1YvANWY76vjNdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfi2jPHMlcK2lEZPcIOYK+ vayq8K/uzpSk1cyQVZVPrvVecxdHhAqlfD/ATMwCOoes596rtESWkd3NnrIP+M4T 2eBqZg9o+H1EgfnwZHMV/TfSe7rTW7jEIGNlHB+ysXhYOSo2K5OU4UowLk1Rsmer tQFhRF/T/pw5nObxnXfAln+kpWHZ0icgFQci5XTV4GepytRPl/dUGeFHEzV3wskN 5M8URHqQQnlhI7Hs8Ihxxhr8oTWJCKOUOWrZuJIqdAJg4bfMQLl0EQ0PnkMEndSB VkONowAGR5xVkoiEP/XGQ8KhaByNB+7Lligp2zgDH0EMPGB4bl+yg6sJ6sjfb5F1 -----END CERTIFICATE-----Generated at Wed May 13 03:54:32 2026 by rpki-client