$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft File: d84f9350-fc3d-4239-80bf-db10d2462a4f.mft (raw, json) Hash identifier: kX5MGXPh1TPi16iFlfw3lx9lW9fEFG19OUgkzT+JwGo= Subject key identifier: A0:A7:47:62:BD:2B:DB:C8:C9:DF:64:17:84:DC:E8:86:FA:94:F3:E0 Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Certificate issuer: /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Certificate serial: 010D0C9F4328584DCF665AEC2E5DC7CAD38F1C50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft Manifest number: 010D0C9F4328584073A85AA2BCC5FAD2E02AA166 Signing time: Tue 12 May 2026 15:00:03 +0000 Manifest this update: Tue 12 May 2026 15:00:03 +0000 Manifest next update: Fri 15 May 2026 15:00:00 +0000 Files and hashes: 1: 791de0f2-89d2-3bf0-8407-e85b17cab367.roa (hash: Vo2ioT6ZbPvHLPfeU25hxB2GtJ40JCSvT/HY/420ss4=) 2: d84f9350-fc3d-4239-80bf-db10d2462a4f.crl (hash: rgrOGkwSjJNlls8CU7x9z6SDYRrZyE85aq8s/oGNuQA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:66:5a:ec:2e:5d:c7:ca:d3:8f:1c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Validity Not Before: May 12 15:00:03 2026 GMT Not After : May 15 15:00:00 2026 GMT Subject: CN=0c51ce3e-7f81-4223-9fbe-5e0ccd09007f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:3f:41:a5:1a:12:a6:93:80:3a:d2:7e:4f: 77:3a:db:f6:3a:9d:0c:d0:01:30:a7:00:66:07:46: bd:96:ab:91:cd:68:73:1a:56:5b:cb:04:df:37:01: f3:9a:2b:df:ef:f5:65:5d:47:11:8c:d4:8c:f1:ee: 85:76:9b:0f:32:9c:94:3a:cb:8a:6d:ce:5e:df:b9: c4:87:fc:18:3f:78:23:7e:c9:39:e0:d6:87:d2:1e: ec:dd:c6:7a:74:32:df:5a:11:2e:16:bf:f5:69:5a: 1d:cb:11:1f:e0:45:6f:a0:9c:cf:7b:de:47:3f:5c: 6a:6c:23:8f:3b:52:04:71:75:4f:5f:44:34:9a:d4: d4:af:7c:da:a2:de:35:ab:88:55:b0:9f:fe:08:7f: 5f:3e:4d:53:1c:10:16:37:72:a8:1c:e4:48:c4:2c: 6c:d6:aa:31:b3:8c:49:98:3d:d5:10:f9:21:3e:15: 50:95:7a:43:ab:4e:19:f5:30:25:2e:ed:00:0d:b3: 89:f0:6d:35:2c:11:e1:7a:0a:34:05:73:7b:a2:07: 43:c3:4a:e6:40:83:32:93:01:61:e4:85:81:79:83: fb:ac:a7:19:7b:d5:03:b0:a6:66:ec:e1:bd:fe:93: ba:d7:11:85:eb:01:18:a9:a8:06:b2:a2:20:40:32: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:47:62:BD:2B:DB:C8:C9:DF:64:17:84:DC:E8:86:FA:94:F3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl X509v3 Authority Key Identifier: keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:af:a7:6f:a2:67:35:2d:ce:a2:e6:ee:3f:78:77:6b:52:93: df:91:63:ed:67:3c:98:49:d8:c0:d3:f4:76:f8:e1:0d:39:02: 01:5b:e9:f8:bd:49:16:5e:2d:5d:71:77:fa:b2:25:bf:44:2e: 01:cd:e3:7c:07:c9:b1:68:2f:42:57:62:80:4b:d8:62:b0:c3: c8:54:73:65:19:f8:b1:99:a6:05:8a:4e:2b:c4:22:50:16:3c: 90:60:b4:ff:5a:c0:61:30:69:97:b5:f9:80:9e:1c:86:c6:b0: 7b:50:d5:40:36:48:a7:32:f5:c9:03:7c:00:36:9d:11:fe:bf: 83:9a:9f:32:6c:89:de:fe:b2:3f:b3:5b:43:3a:47:72:f1:19: cf:16:b5:03:02:8e:99:7f:98:1c:a1:e0:7d:42:0b:c2:81:bc: 1c:18:eb:ca:f1:15:18:97:1a:d0:39:e2:df:c0:90:26:21:99: 35:f8:db:1b:b7:dd:37:cd:87:50:51:84:11:4b:4e:23:8f:ac: 22:5e:3c:55:67:19:ad:23:af:06:f8:e0:ec:9d:1b:c5:42:77: 2e:b8:74:cb:df:ab:6c:a4:7c:c6:a4:ea:c7:8d:98:f7:f9:eb: 19:86:f3:8b:6d:e5:74:19:93:3a:ff:a9:26:3e:87:67:d5:b3: ce:88:fa:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PZlrsLl3HytOPHFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0ZjkzNTAtZmMzZC00MjM5LTgwYmYtZGIxMGQyNDYy YTRmMB4XDTI2MDUxMjE1MDAwM1oXDTI2MDUxNTE1MDAwMFowLzEtMCsGA1UEAxMk MGM1MWNlM2UtN2Y4MS00MjIzLTlmYmUtNWUwY2NkMDkwMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy8/QaUaEqaTgDrSfk93Otv2Op0M0AEwpwBm B0a9lquRzWhzGlZbywTfNwHzmivf7/VlXUcRjNSM8e6FdpsPMpyUOsuKbc5e37nE h/wYP3gjfsk54NaH0h7s3cZ6dDLfWhEuFr/1aVodyxEf4EVvoJzPe95HP1xqbCOP O1IEcXVPX0Q0mtTUr3zaot41q4hVsJ/+CH9fPk1THBAWN3KoHORIxCxs1qoxs4xJ mD3VEPkhPhVQlXpDq04Z9TAlLu0ADbOJ8G01LBHhego0BXN7ogdDw0rmQIMykwFh 5IWBeYP7rKcZe9UDsKZm7OG9/pO61xGF6wEYqagGsqIgQDKr5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCnR2K9K9vIyd9kF4Tc6Ib6lPPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODRm OTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0NjJhNGYvZDg0ZjkzNTAtZmMzZC00 MjM5LTgwYmYtZGIxMGQyNDYyYTRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg0ZjkzNTAtZmMzZC00MjM5LTgw YmYtZGIxMGQyNDYyYTRmL2Q4NGY5MzUwLWZjM2QtNDIzOS04MGJmLWRiMTBkMjQ2 MmE0Zi5jcmwwHwYDVR0jBBgwFoAUZxr5I5VUwfZBlQs+fBHfIlookIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEw ZDI0NjJhNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4r6dvomc1Lc6i5u4/eHdr UpPfkWPtZzyYSdjA0/R2+OENOQIBW+n4vUkWXi1dcXf6siW/RC4BzeN8B8mxaC9C V2KAS9hisMPIVHNlGfixmaYFik4rxCJQFjyQYLT/WsBhMGmXtfmAnhyGxrB7UNVA NkinMvXJA3wANp0R/r+Dmp8ybIne/rI/s1tDOkdy8RnPFrUDAo6Zf5gcoeB9QgvC gbwcGOvK8RUYlxrQOeLfwJAmIZk1+Nsbt903zYdQUYQRS04jj6wiXjxVZxmtI68G +ODsnRvFQncuuHTL36tspHzGpOrHjZj3+esZhvOLbeV0GZM6/6kmPodn1bPOiPrQ -----END CERTIFICATE-----Generated at Wed May 13 17:58:21 2026 by rpki-client