$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: kcRJYrFBYfTyu7LZvaYdT8XtEQLt3Ny0204MeFODz58= Subject key identifier: 9C:DF:88:97:E8:B2:30:F9:3D:CA:D3:B4:9F:CC:F1:D7:99:53:19:FC Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584DCF841E37056B5CA9456F1880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFFAB3 Signing time: Tue 12 May 2026 16:00:03 +0000 Manifest this update: Tue 12 May 2026 16:00:03 +0000 Manifest next update: Thu 14 May 2026 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: qlMMy6WI3EGZzz9YUdISv4KLD5QOrE+MDthhRqMigQs=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: 9RDYbQNWkSGbxZnbNbOlfnWnmWHKo9aNBcQvYhLtnMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:84:1e:37:05:6b:5c:a9:45:6f:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: May 12 16:00:03 2026 GMT Not After : May 14 16:00:00 2026 GMT Subject: CN=e14b2247-4875-4bc0-99a0-96f7280d0f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:6c:4b:84:19:25:2c:81:f8:9e:99:33:c6: 30:02:bb:6c:9f:84:d5:03:1c:57:ae:6a:41:80:7e: 46:82:ad:f5:2f:f0:15:c2:d1:f6:9e:2b:8d:e4:5e: 27:bd:93:aa:18:46:e6:f5:27:1f:bf:3c:44:0b:73: 67:42:08:4c:c1:c9:56:37:a3:ab:d7:21:91:eb:98: b8:2b:2d:c6:45:4f:7b:8c:2b:e2:f8:4d:a1:27:f7: 06:44:30:57:d6:3f:8a:9f:5d:9c:f0:31:66:d3:8f: 8a:c5:dc:7d:6b:0e:22:5d:8e:cb:32:86:5b:75:95: 7a:00:3e:f2:13:3a:69:0a:96:24:ff:df:48:7f:24: 4b:fa:22:c2:8b:f8:6a:a2:00:f1:4b:f0:c0:2d:08: 38:b4:ac:58:ce:a7:8a:ca:af:9d:5a:18:02:f9:33: f8:2b:0c:82:45:5f:53:2d:fa:89:fe:97:ad:3d:cc: 70:46:e2:0b:b8:ce:d8:6a:f8:17:5d:19:5b:ff:9a: a1:e3:33:9a:1b:5f:1a:a1:65:ae:08:56:f8:ba:c3: 77:d5:b9:da:c0:b0:31:ae:5f:be:07:c4:a1:2a:34: bd:a8:3d:35:d0:9d:46:67:33:19:99:ca:30:b4:a5: fa:e8:f8:51:75:74:5f:7c:04:76:c6:ab:89:7e:b2: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DF:88:97:E8:B2:30:F9:3D:CA:D3:B4:9F:CC:F1:D7:99:53:19:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:da:52:f0:02:51:d7:d4:25:2a:fe:2d:52:d5:2e:39:e5:73: 7b:3c:29:65:5e:a5:65:1a:07:99:9c:49:bc:b6:7a:8f:57:79: a7:6c:fb:ce:07:ef:1c:be:17:20:f7:4f:f7:7a:fb:b0:4a:04: ba:f7:7c:d2:f1:38:b3:20:19:30:04:a9:f5:91:1a:ba:51:ed: d9:9c:68:e1:11:9d:2f:5d:02:bd:2d:c6:e6:d3:2c:5f:e7:ee: 3e:80:3b:da:3d:c1:d2:7a:84:50:eb:7b:d8:5d:7b:ab:69:b1: cc:cf:96:75:c7:a5:3d:0f:2e:ec:cd:b1:9a:16:f6:b7:8f:fb: 8f:d2:32:68:7d:97:61:3b:20:72:6b:c7:cd:93:08:ea:ea:c1: 14:67:9c:3c:0c:d5:a6:88:e8:20:39:9d:d7:85:b0:84:4d:d2: a8:d3:06:be:8a:82:62:2f:1b:ac:fc:47:49:b1:15:48:30:50: 8d:ed:c4:da:24:96:3d:9f:10:00:0e:f6:ec:79:3b:8d:35:ac: bf:42:fe:ef:5e:f2:b7:06:5b:7d:e9:5c:b8:07:b1:c0:9b:0e: 6a:62:f2:99:4d:66:44:1d:91:1c:6e:84:71:9c:8b:f2:bc:b9: c7:8c:62:0d:2e:34:37:e2:13:8f:15:02:fe:bc:68:a2:8b:8f: 05:92:23:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PhB43BWtcqUVvGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI2MDUxMjE2MDAwM1oXDTI2MDUxNDE2MDAwMFowLzEtMCsGA1UEAxMk ZTE0YjIyNDctNDg3NS00YmMwLTk5YTAtOTZmNzI4MGQwZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUFsS4QZJSyB+J6ZM8YwArtsn4TVAxxXrmpB gH5Ggq31L/AVwtH2niuN5F4nvZOqGEbm9ScfvzxEC3NnQghMwclWN6Or1yGR65i4 Ky3GRU97jCvi+E2hJ/cGRDBX1j+Kn12c8DFm04+Kxdx9aw4iXY7LMoZbdZV6AD7y EzppCpYk/99IfyRL+iLCi/hqogDxS/DALQg4tKxYzqeKyq+dWhgC+TP4KwyCRV9T LfqJ/petPcxwRuILuM7YavgXXRlb/5qh4zOaG18aoWWuCFb4usN31bnawLAxrl++ B8ShKjS9qD010J1GZzMZmcowtKX66PhRdXRffAR2xquJfrI6xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJzfiJfosjD5PcrTtJ/M8deZUxn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU2lLwAlHX1CUq/i1S1S45 5XN7PCllXqVlGgeZnEm8tnqPV3mnbPvOB+8cvhcg90/3evuwSgS693zS8TizIBkw BKn1kRq6Ue3ZnGjhEZ0vXQK9Lcbm0yxf5+4+gDvaPcHSeoRQ63vYXXurabHMz5Z1 x6U9Dy7szbGaFva3j/uP0jJofZdhOyBya8fNkwjq6sEUZ5w8DNWmiOggOZ3XhbCE TdKo0wa+ioJiLxus/EdJsRVIMFCN7cTaJJY9nxAADvbseTuNNay/Qv7vXvK3Blt9 6Vy4B7HAmw5qYvKZTWZEHZEcboRxnIvyvLnHjGINLjQ34hOPFQL+vGiii48FkiNY -----END CERTIFICATE-----Generated at Wed May 13 15:22:36 2026 by rpki-client