$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: juhVXNQRmWevsSseanZ/u7DsEFlXGWsA0z3/IpnGCFw= Subject key identifier: A2:61:CB:E9:64:15:D4:8F:02:8D:4F:42:E9:0A:67:A3:38:F9:6B:93 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584DCF2AC93D77790B406CA44980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA82E Signing time: Tue 12 May 2026 13:00:03 +0000 Manifest this update: Tue 12 May 2026 13:00:03 +0000 Manifest next update: Fri 15 May 2026 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: t+YZ0L8003+XIT+l2LdclhKvjDExo2bfUahSIk7Zgsc=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: 10fsdDQM9t2g2rNtFMKr5zZi1p8zjeHACpG+tbUDxiw=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: Un/wsca/kduwZfT/iTJDSNv7G3Ne4B87o4ZocVmFH24=) 4: e4eb8e84-793c-33ec-9088-110eaf427f80.asa (hash: 6AuavwcBgquI3LDnP1Hca+G3BaHrJEdcAoSfidUKLYE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2a:c9:3d:77:79:0b:40:6c:a4:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: May 12 13:00:03 2026 GMT Not After : May 15 13:00:00 2026 GMT Subject: CN=6a44edcc-e796-4bac-86bf-e58dc1ba8d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:e9:57:92:49:ab:27:09:4a:6a:7b:bd:d7: ed:72:f5:60:4d:af:88:6f:12:5c:c6:1a:78:77:b7: 35:f2:cc:c4:07:5c:20:60:6b:ff:73:43:0c:0c:d4: 60:bc:a7:19:7a:6d:b5:c5:45:ee:8c:0a:80:7f:78: 2c:25:3c:1b:f3:5f:5c:0b:64:56:f1:58:27:70:8a: 95:ca:0d:3e:1d:3c:0e:c4:f0:5f:6a:06:a5:93:5c: 5b:8c:54:d6:d4:4d:53:ef:b6:7a:ec:cc:f4:6a:d5: b6:00:bb:42:24:32:7c:0e:0f:01:4f:d1:ff:6e:32: 34:8f:dc:91:17:75:24:56:dc:5a:a2:6d:c1:96:5c: 35:ba:a2:52:d7:92:8e:24:5f:05:2d:cc:84:d9:a4: 84:a6:4b:2b:d0:aa:a4:ef:05:86:e3:db:d5:58:20: 98:54:92:fe:af:ad:83:ba:dd:a5:7f:d4:4e:87:90: 1b:5e:1b:8f:be:96:af:1e:43:fd:7c:c0:05:1f:96: ec:6e:bf:21:31:98:aa:0e:3c:b2:12:6e:6e:e6:dc: a5:2f:bb:34:e5:f9:34:4c:ec:ba:45:08:06:d6:7f: b5:81:b0:13:4e:44:69:4e:12:bb:20:1b:c0:fd:73: e9:ec:76:5d:67:39:46:16:13:5b:10:5c:7b:a4:ca: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:CB:E9:64:15:D4:8F:02:8D:4F:42:E9:0A:67:A3:38:F9:6B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0c:0f:71:4a:ed:00:50:bf:56:21:b0:5a:02:bd:86:af:b0: be:ca:b2:b2:eb:8d:06:0a:4e:d7:4b:1d:5c:77:0b:49:e0:65: ac:2d:31:bf:f0:d8:00:5c:8e:31:38:03:a3:3a:bd:88:76:ad: e0:4d:8a:10:ef:65:16:ca:60:45:63:a9:ab:00:ab:0d:c9:37: b5:53:ca:ad:a5:69:97:01:9d:3d:5e:7c:e3:e8:e6:2f:c4:39: 43:d2:cc:fa:5c:4c:ed:e1:04:02:a6:1f:f5:71:21:2d:d9:72: 36:9a:42:df:4b:fd:58:ef:95:05:d7:5f:90:9f:e6:15:44:43: f7:94:ab:16:fb:cc:3b:f1:0e:13:ed:3c:76:af:57:ed:39:ba: 48:84:ec:50:1b:3d:44:b5:c0:c3:72:4d:a5:5f:6a:f7:51:9d: 5a:6f:f2:a1:43:4a:c1:78:36:c4:b9:11:fc:e3:ea:57:21:06: 05:3c:54:ed:ca:e7:c3:59:e4:a2:d1:2b:ff:07:97:28:7c:3c: 98:da:d2:72:68:9e:f0:d8:e8:57:a0:91:5f:01:f2:6d:7b:c3: 17:e3:27:8d:6d:c1:28:5d:2b:e5:94:dc:ef:91:f6:0f:de:1b: 86:11:04:dd:29:7e:c7:45:6d:12:db:a1:59:2b:41:a1:0a:b6: 33:f5:42:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PKsk9d3kLQGykSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDUxMjEzMDAwM1oXDTI2MDUxNTEzMDAwMFowLzEtMCsGA1UEAxMk NmE0NGVkY2MtZTc5Ni00YmFjLTg2YmYtZTU4ZGMxYmE4ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQDpV5JJqycJSmp7vdftcvVgTa+IbxJcxhp4 d7c18szEB1wgYGv/c0MMDNRgvKcZem21xUXujAqAf3gsJTwb819cC2RW8VgncIqV yg0+HTwOxPBfagalk1xbjFTW1E1T77Z67Mz0atW2ALtCJDJ8Dg8BT9H/bjI0j9yR F3UkVtxaom3Bllw1uqJS15KOJF8FLcyE2aSEpksr0Kqk7wWG49vVWCCYVJL+r62D ut2lf9ROh5AbXhuPvpavHkP9fMAFH5bsbr8hMZiqDjyyEm5u5tylL7s05fk0TOy6 RQgG1n+1gbATTkRpThK7IBvA/XPp7HZdZzlGFhNbEFx7pMrSnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKJhy+lkFdSPAo1PQukKZ6M4+WuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbDA9xSu0AUL9WIbBaAr2G r7C+yrKy640GCk7XSx1cdwtJ4GWsLTG/8NgAXI4xOAOjOr2Idq3gTYoQ72UWymBF Y6mrAKsNyTe1U8qtpWmXAZ09Xnzj6OYvxDlD0sz6XEzt4QQCph/1cSEt2XI2mkLf S/1Y75UF11+Qn+YVREP3lKsW+8w78Q4T7Tx2r1ftObpIhOxQGz1EtcDDck2lX2r3 UZ1ab/KhQ0rBeDbEuRH84+pXIQYFPFTtyufDWeSi0Sv/B5cofDyY2tJyaJ7w2OhX oJFfAfJte8MX4yeNbcEoXSvllNzvkfYP3huGEQTdKX7HRW0S26FZK0GhCrYz9UIU -----END CERTIFICATE-----Generated at Wed May 13 01:34:02 2026 by rpki-client