$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft File: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft (raw, json) Hash identifier: tGwXXMEgRSUXPKCQr4DnoZBlcd2Pttx0acDEks9ZrcA= Subject key identifier: 89:5B:CF:8A:99:DB:AD:50:5D:4C:BD:62:36:98:AC:B2:D6:D9:08:0B Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F4328584DCEB3AAFA6CF7A81A91F5B880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft Manifest number: 010D0C9F4328584073A84B5EB96B10DEBF636D59 Signing time: Tue 12 May 2026 09:00:03 +0000 Manifest this update: Tue 12 May 2026 09:00:03 +0000 Manifest next update: Fri 15 May 2026 09:00:00 +0000 Files and hashes: 1: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl (hash: Q6VZ5wy+xqs67esttL/DVt5ZkFmNDqgmNpnPiTuftfo=) 2: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (hash: zY+nbPBlJ6+wRk2fJA6vwwO8yx629NYAsoww6vz9qkw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ce:b3:aa:fa:6c:f7:a8:1a:91:f5:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: May 12 09:00:03 2026 GMT Not After : May 15 09:00:00 2026 GMT Subject: CN=fb3ae792-81d3-45b7-a7ac-ef06a42ea205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:87:57:ed:f8:fc:96:df:b9:0c:83:d3:61: a7:07:12:2a:62:48:9f:9c:01:75:40:66:c2:4d:4d: 23:0f:ef:27:17:38:9d:a3:18:44:f3:37:1b:20:e4: 6a:99:a2:7a:1e:ee:04:44:69:18:aa:de:19:9d:b2: 28:e0:09:a8:f2:6e:b4:9a:69:7a:ff:9a:2d:87:b3: 8b:f8:6f:c6:50:78:be:21:67:4a:ff:30:df:d7:98: 92:c6:ee:b8:9f:39:73:3c:b0:d1:64:dc:8f:e6:b3: 29:ab:d0:1b:90:9d:53:d0:0f:b9:1b:0c:4f:b5:e4: 2f:91:80:68:92:b6:de:c2:88:a7:cf:7a:d4:a1:3b: 52:1d:ae:61:fc:e6:04:d1:0c:bc:12:79:8b:59:91: b9:b0:1a:8d:66:35:d8:c6:46:f2:98:ec:0e:70:f5: b9:7c:54:73:dc:7c:b6:a6:c0:63:f2:fa:9a:5c:da: 5f:0c:5e:dc:62:e5:c7:c8:4d:5a:82:46:b8:49:8b: ac:51:a8:38:2c:59:29:fa:5b:60:b4:47:d1:e3:b4: e3:76:30:6c:08:43:57:2a:89:1e:61:43:fa:37:ab: 0f:9c:ec:7d:6c:9c:70:b4:fc:91:ea:e5:66:17:b6: 9b:8f:50:57:c0:38:8e:80:26:7f:55:a7:bc:d6:5c: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5B:CF:8A:99:DB:AD:50:5D:4C:BD:62:36:98:AC:B2:D6:D9:08:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5b:43:59:da:c8:70:a1:d8:f1:58:cc:b1:42:36:ff:99:fa: c1:6e:6c:ef:4b:e2:80:64:e8:04:ad:4e:48:55:59:d8:44:29: 63:0b:24:09:1b:2b:29:8e:1f:1d:3c:a2:7d:45:40:70:75:c5: fa:32:e1:68:11:24:7d:6a:37:bf:64:0a:f3:74:28:2e:33:50: 51:11:ac:b0:e4:19:f9:5b:5f:d8:fb:2c:c8:dd:9b:59:20:15: 8a:bb:bd:3e:e3:cf:0e:6f:7c:9c:aa:8a:69:34:c1:69:0f:8e: 3f:16:0c:8c:34:cf:e8:f1:b3:6c:68:04:7c:c2:a1:6c:75:cb: 1f:78:2f:19:46:1b:f6:20:5c:1e:ee:e1:55:e8:e8:58:e0:0a: e6:c8:84:0a:2a:0b:c3:15:f8:09:e6:e8:55:4d:80:c9:97:0c: ff:45:62:b5:8d:97:02:20:1a:39:49:1b:45:4b:44:89:00:b7: 8e:70:a9:44:5f:60:85:47:7b:b6:5d:1f:d7:d4:29:c3:62:12: ee:f9:f4:22:99:01:78:93:02:06:67:f2:03:1b:d2:da:b7:fb: 25:81:1e:70:53:5f:11:9f:e9:38:8a:fa:5b:93:e2:f4:a3:fc: 9b:3f:96:2e:59:66:78:08:f1:ac:b6:b0:bc:0c:45:37:ae:bd: 8e:a2:07:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Os6r6bPeoGpH1uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI2MDUxMjA5MDAwM1oXDTI2MDUxNTA5MDAwMFowLzEtMCsGA1UEAxMk ZmIzYWU3OTItODFkMy00NWI3LWE3YWMtZWYwNmE0MmVhMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw6HV+34/JbfuQyD02GnBxIqYkifnAF1QGbC TU0jD+8nFzidoxhE8zcbIORqmaJ6Hu4ERGkYqt4ZnbIo4Amo8m60mml6/5oth7OL +G/GUHi+IWdK/zDf15iSxu64nzlzPLDRZNyP5rMpq9AbkJ1T0A+5GwxPteQvkYBo krbewoinz3rUoTtSHa5h/OYE0Qy8EnmLWZG5sBqNZjXYxkbymOwOcPW5fFRz3Hy2 psBj8vqaXNpfDF7cYuXHyE1agka4SYusUag4LFkp+ltgtEfR47TjdjBsCENXKoke YUP6N6sPnOx9bJxwtPyR6uVmF7abj1BXwDiOgCZ/Vae81lxSawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIlbz4qZ261QXUy9YjaYrLLW2QgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvMGE1YTg5MDktM2FhZi00 NGU4LWIwZDYtYzUwN2U1NTBkMDU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSW0NZ2shwodjxWMyxQjb/ mfrBbmzvS+KAZOgErU5IVVnYRCljCyQJGyspjh8dPKJ9RUBwdcX6MuFoESR9aje/ ZArzdCguM1BREayw5Bn5W1/Y+yzI3ZtZIBWKu70+488Ob3ycqoppNMFpD44/FgyM NM/o8bNsaAR8wqFsdcsfeC8ZRhv2IFwe7uFV6OhY4ArmyIQKKgvDFfgJ5uhVTYDJ lwz/RWK1jZcCIBo5SRtFS0SJALeOcKlEX2CFR3u2XR/X1CnDYhLu+fQimQF4kwIG Z/IDG9Lat/slgR5wU18Rn+k4ivpbk+L0o/ybP5YuWWZ4CPGstrC8DEU3rr2OogdL -----END CERTIFICATE-----Generated at Wed May 13 10:37:29 2026 by rpki-client