$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: q0AGO++lJNaMkG68VmT6Of9JDet7JvChJeVEZfJ1VHc= Subject key identifier: 82:E6:3C:59:48:01:24:3A:91:FB:EC:E2:65:2A:14:2E:7D:E8:84:ED Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584DCE781C94FF0A5947440171E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3466 Signing time: Tue 12 May 2026 07:00:03 +0000 Manifest this update: Tue 12 May 2026 07:00:03 +0000 Manifest next update: Fri 15 May 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: Qd7iMxWHpapiZRK0qtuDcDY8jEaViGwYAtLX4kaAg/4=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: M/n7Owme35cbnRaLSGHSGJzEtvWoGlXAMv2IxxTXE44=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ce:78:1c:94:ff:0a:59:47:44:01:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: May 12 07:00:03 2026 GMT Not After : May 15 07:00:00 2026 GMT Subject: CN=35752e17-1b94-45fd-be78-44dc37bdb8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:47:4a:1b:bd:91:05:68:4d:fd:fe:e5:b1: ac:fe:8e:f8:79:32:b1:b8:27:7f:0f:d8:65:3e:b5: 1d:cd:dd:ba:ee:58:c9:dc:88:ee:6e:2c:76:9b:aa: a1:61:02:27:4b:d4:54:8e:22:86:28:02:b8:04:34: 7d:c0:d7:fd:b1:71:2e:ae:5b:83:cc:d0:50:7f:16: b5:0b:d6:ba:67:8f:87:94:95:53:63:cc:4c:1c:23: 05:f7:ab:ae:4b:62:a2:59:29:56:19:cf:d2:10:50: 84:ca:c7:48:f0:10:df:7e:b1:78:14:31:da:ed:af: 46:45:7f:92:38:be:04:8a:27:48:26:05:af:a6:02: 16:31:f8:4b:e5:16:16:a7:8a:70:23:4d:9b:5b:bd: ac:d6:f0:6f:02:c0:83:8b:6b:d3:41:1a:9f:6a:5f: ec:48:e8:5d:15:e7:94:79:aa:68:f6:6e:19:30:1d: 4b:a5:29:2b:c1:46:26:03:1d:98:66:7f:30:57:d3: 71:7d:99:48:8e:45:95:7d:88:15:dd:21:69:a3:94: ba:c0:64:6c:89:eb:08:26:07:e7:76:24:46:09:40: 83:3f:db:a6:f7:fa:4c:c3:2c:83:b1:1d:35:e6:b8: 0d:4f:ba:3e:f3:a4:ac:40:9c:73:d3:6a:37:91:fd: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E6:3C:59:48:01:24:3A:91:FB:EC:E2:65:2A:14:2E:7D:E8:84:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:85:d8:72:42:b8:35:f0:38:07:4d:68:b5:a6:2a:46:15:e8: de:45:78:86:38:01:e5:e8:de:0f:51:c1:d4:9d:c5:cd:90:32: c9:e0:a8:fc:03:31:38:59:10:4f:1f:d0:6c:ab:b0:b3:fe:dd: 44:6c:5d:0d:e9:93:50:b1:37:35:ad:31:5d:98:65:7a:a0:85: d0:e0:26:1f:f9:09:cf:c5:d4:b8:45:61:aa:19:e4:6e:09:3b: c0:76:17:5d:c7:62:46:04:27:77:60:9a:94:61:3e:ea:6e:b9: c8:8a:ab:b5:0e:eb:13:80:a5:54:09:d0:48:d2:5b:d3:ca:88: 94:da:22:6c:8c:1f:f9:66:92:3e:d9:2a:f3:74:c7:a2:2f:e4: 33:9f:a0:70:ff:6b:0f:5f:05:46:d9:55:ab:11:48:75:6e:63: 14:fd:4e:82:a9:9b:a0:57:10:25:c1:22:66:86:1a:35:48:22: 8f:ff:a3:12:27:21:c7:57:d8:d4:b4:62:cf:38:be:63:40:64: 3f:3f:4f:8a:3a:4d:4b:e3:fc:b8:69:18:b3:62:5b:f9:00:4e: 5e:16:eb:ba:b7:76:2d:bb:4b:c5:16:f5:4a:8f:ee:9b:38:76: 40:69:cd:e8:cf:55:8c:c8:8d:72:51:c8:27:ba:eb:29:eb:df: 69:c3:2b:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3OeByU/wpZR0QBcegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDUxMjA3MDAwM1oXDTI2MDUxNTA3MDAwMFowLzEtMCsGA1UEAxMk MzU3NTJlMTctMWI5NC00NWZkLWJlNzgtNDRkYzM3YmRiOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsZHShu9kQVoTf3+5bGs/o74eTKxuCd/D9hl PrUdzd267ljJ3Ijubix2m6qhYQInS9RUjiKGKAK4BDR9wNf9sXEurluDzNBQfxa1 C9a6Z4+HlJVTY8xMHCMF96uuS2KiWSlWGc/SEFCEysdI8BDffrF4FDHa7a9GRX+S OL4EiidIJgWvpgIWMfhL5RYWp4pwI02bW72s1vBvAsCDi2vTQRqfal/sSOhdFeeU eapo9m4ZMB1LpSkrwUYmAx2YZn8wV9NxfZlIjkWVfYgV3SFpo5S6wGRsiesIJgfn diRGCUCDP9um9/pMwyyDsR015rgNT7o+86SsQJxz02o3kf3VfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFILmPFlIASQ6kfvs4mUqFC596ITtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIhdhyQrg18DgHTWi1pipG FejeRXiGOAHl6N4PUcHUncXNkDLJ4Kj8AzE4WRBPH9Bsq7Cz/t1EbF0N6ZNQsTc1 rTFdmGV6oIXQ4CYf+QnPxdS4RWGqGeRuCTvAdhddx2JGBCd3YJqUYT7qbrnIiqu1 DusTgKVUCdBI0lvTyoiU2iJsjB/5ZpI+2SrzdMeiL+Qzn6Bw/2sPXwVG2VWrEUh1 bmMU/U6CqZugVxAlwSJmhho1SCKP/6MSJyHHV9jUtGLPOL5jQGQ/P0+KOk1L4/y4 aRizYlv5AE5eFuu6t3Ytu0vFFvVKj+6bOHZAac3oz1WMyI1yUcgnuusp699pwys+ -----END CERTIFICATE-----Generated at Wed May 13 07:20:51 2026 by rpki-client