$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft (raw, json) Hash identifier: fDwNcGV1zeSMpKsefBBC5ZAIf3UUqiN3M9Ip1pyS2z0= Subject key identifier: 31:45:9C:1E:00:50:FC:E5:AF:70:23:1C:DC:D1:48:D0:04:47:58:DD Authority key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Certificate issuer: /CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Certificate serial: 010D0C9F4328584DCF2ACA1391E408A0C5926A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft Manifest number: 010D0C9F4328584A629AFAFAF4C26B8EDA69CFC1 Signing time: Tue 12 May 2026 13:00:03 +0000 Manifest this update: Tue 12 May 2026 13:00:03 +0000 Manifest next update: Fri 15 May 2026 13:00:00 +0000 Files and hashes: 1: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl (hash: XZiP5WIdKy0XWBzdc4Md88pj38izJ4lr9pTe/WZnrtA=) 2: 9b8f3de7-adff-3b45-8b51-de811d42f4ce.roa (hash: APiWub95IP5qxbrWHbKfJdooeuDetjoTFPT/8VBJgBE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2a:ca:13:91:e4:08:a0:c5:92:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Validity Not Before: May 12 13:00:03 2026 GMT Not After : May 15 13:00:00 2026 GMT Subject: CN=49ed615c-f2b1-4c4b-85a3-66d3d1890465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:41:3e:16:64:17:c4:1f:5c:b8:fa:fd:2a: 60:93:e3:d6:b2:e0:6b:4b:81:33:53:49:d3:c4:9d: e8:7c:be:d4:00:6b:d8:cd:00:24:03:62:16:de:6e: 0a:a5:2d:2e:cc:e0:cc:ad:d8:58:81:a9:3c:f1:65: 14:11:70:b9:4c:d6:90:51:66:3f:3e:99:21:ae:5f: 3f:59:cc:2f:7e:48:81:e3:20:42:96:dc:11:17:5a: 42:a3:4d:1e:64:45:9a:05:a6:fa:73:7b:67:0d:cf: e8:b1:1a:06:93:21:0a:aa:10:73:20:90:c8:4c:94: 0b:1e:53:c5:7f:8c:d0:b8:e2:ae:a1:41:69:19:a2: c7:c0:58:0b:8f:d2:c9:d4:ea:3b:c0:95:76:de:62: 66:77:8a:8b:cd:e1:50:76:f3:4d:a6:fb:b2:6b:9c: d1:ef:04:2b:94:b2:a1:15:d9:93:32:86:f8:c1:f5: ac:ec:68:ca:60:6d:09:09:ac:e0:bd:8a:1c:53:a4: 97:e1:ba:ec:af:04:b5:91:43:3c:6a:61:b4:de:76: 4b:a7:a9:6c:b6:f6:78:e9:2a:2a:26:7f:85:c3:bc: 78:13:01:b9:7e:ff:80:77:a0:ae:91:b8:39:8b:de: 8f:e0:7a:2f:c6:e5:14:70:06:6a:a1:f3:f1:57:04: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:45:9C:1E:00:50:FC:E5:AF:70:23:1C:DC:D1:48:D0:04:47:58:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl X509v3 Authority Key Identifier: keyid:78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8a:c0:fa:ae:67:d7:21:0f:e9:e8:2d:47:cb:bb:b5:52:95: 84:e8:a0:2d:73:a0:45:5e:9f:79:26:34:6e:65:fd:19:32:85: 25:83:73:79:d2:d6:c4:24:20:a0:d8:dc:a4:e4:b5:fd:17:41: df:df:8a:45:b3:51:81:d7:90:f4:f5:1c:51:24:17:75:96:29: 82:f7:df:53:d7:67:f8:52:08:a4:2c:54:69:29:39:51:61:c2: 43:35:a5:55:72:64:ca:ab:df:b0:b7:a6:16:78:18:95:aa:0d: 29:25:50:cb:b4:d7:49:d1:ce:63:ba:df:54:cb:86:c9:10:8f: c9:9e:51:81:0d:51:4b:bf:2f:5c:e4:38:e0:26:ef:b3:93:1d: c4:3a:c8:de:13:29:89:5d:46:0a:5d:9b:4b:b6:55:c7:f2:89: 9e:28:c8:65:40:89:2c:21:ef:23:e5:7d:5a:92:97:47:5b:f6: 0c:8a:49:6a:08:a6:5d:2a:2c:53:4b:95:46:aa:72:f6:58:e4: b1:cc:59:fb:81:da:57:8b:f3:3a:71:b3:2c:12:fa:0d:7b:46: 1f:81:37:e1:58:7f:d8:ea:c1:f9:87:76:42:99:3d:a7:23:19: a9:ce:cb:24:eb:e0:61:79:d9:fe:e8:66:b3:b2:b0:86:6f:e2: ce:0a:cb:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PKsoTkeQIoMWSakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRh YzJiMB4XDTI2MDUxMjEzMDAwM1oXDTI2MDUxNTEzMDAwMFowLzEtMCsGA1UEAxMk NDllZDYxNWMtZjJiMS00YzRiLTg1YTMtNjZkM2QxODkwNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNFBPhZkF8QfXLj6/Spgk+PWsuBrS4EzU0nT xJ3ofL7UAGvYzQAkA2IW3m4KpS0uzODMrdhYgak88WUUEXC5TNaQUWY/Ppkhrl8/ WcwvfkiB4yBCltwRF1pCo00eZEWaBab6c3tnDc/osRoGkyEKqhBzIJDITJQLHlPF f4zQuOKuoUFpGaLHwFgLj9LJ1Oo7wJV23mJmd4qLzeFQdvNNpvuya5zR7wQrlLKh FdmTMob4wfWs7GjKYG0JCazgvYocU6SX4brsrwS1kUM8amG03nZLp6lstvZ46Soq Jn+Fw7x4EwG5fv+Ad6Cukbg5i96P4HovxuUUcAZqofPxVwRirQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDFFnB4AUPzlr3AjHNzRSNAER1jdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDIw YTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvODAyMGEzOTktN2U4My00 YmI1LThkOGQtZTQyNGUyZWRhYzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODAyMGEzOTktN2U4My00YmI1LThk OGQtZTQyNGUyZWRhYzJiLzgwMjBhMzk5LTdlODMtNGJiNS04ZDhkLWU0MjRlMmVk YWMyYi5jcmwwHwYDVR0jBBgwFoAUeBxTEnLOMDBJLVBrmal/6fZM5X0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0 ZTJlZGFjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUisD6rmfXIQ/p6C1Hy7u1 UpWE6KAtc6BFXp95JjRuZf0ZMoUlg3N50tbEJCCg2Nyk5LX9F0Hf34pFs1GB15D0 9RxRJBd1limC999T12f4UgikLFRpKTlRYcJDNaVVcmTKq9+wt6YWeBiVqg0pJVDL tNdJ0c5jut9Uy4bJEI/JnlGBDVFLvy9c5DjgJu+zkx3EOsjeEymJXUYKXZtLtlXH 8omeKMhlQIksIe8j5X1akpdHW/YMiklqCKZdKixTS5VGqnL2WOSxzFn7gdpXi/M6 cbMsEvoNe0YfgTfhWH/Y6sH5h3ZCmT2nIxmpzssk6+Bhedn+6GazsrCGb+LOCsuq -----END CERTIFICATE-----Generated at Wed May 13 03:57:45 2026 by rpki-client