$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft File: cac7de8c-1961-4d0f-865e-4790965b85b9.mft (raw, json) Hash identifier: QGTBLbNCEIQLFIjm0fqXx/Y0pvHX27oq1ZbebIqM96Q= Subject key identifier: CD:93:89:54:4B:ED:5F:BB:B3:A9:8F:16:1A:62:6C:1C:B0:50:0D:C3 Authority key identifier: 42:C0:5B:AA:F1:14:9E:4A:E1:F1:44:0A:F3:38:7B:DA:CF:03:67:86 Certificate issuer: /CN=cac7de8c-1961-4d0f-865e-4790965b85b9 Certificate serial: 010D0C9F4328584DCEEF3A3B60AB083F537FEB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft Manifest number: 010D0C9F43285842C30113E279E1E946649520F5 Signing time: Tue 12 May 2026 11:00:03 +0000 Manifest this update: Tue 12 May 2026 11:00:03 +0000 Manifest next update: Thu 14 May 2026 11:00:00 +0000 Files and hashes: 1: cac7de8c-1961-4d0f-865e-4790965b85b9.crl (hash: X5SsPPDGF8RWdhCtdUX1oGmEHr/oHB9AfPQMmmpPZE0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ce:ef:3a:3b:60:ab:08:3f:53:7f:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac7de8c-1961-4d0f-865e-4790965b85b9 Validity Not Before: May 12 11:00:03 2026 GMT Not After : May 14 11:00:00 2026 GMT Subject: CN=711b436a-ac1d-41c7-aecc-401de0fa0083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:de:7a:cf:8b:c2:65:eb:b3:28:0f:e4:4b: 92:de:29:db:14:de:00:b9:a0:d2:7f:df:3f:7e:dc: c7:17:23:8d:94:de:30:fc:46:07:07:06:e5:d9:e0: 88:23:62:7b:64:99:7a:7f:3a:e1:4b:78:f8:11:e8: 7f:d1:16:bc:23:76:2d:1e:71:7b:01:90:0c:18:98: 08:b3:e1:a2:b9:71:bb:b5:1d:bf:2b:62:bb:9e:83: d4:4c:f6:2d:59:49:c2:e8:3c:15:8a:d6:65:dd:d8: e3:37:33:18:c6:8d:a0:a6:77:a2:a0:7f:7f:da:13: b2:c9:c8:b4:1e:60:e2:0d:29:c7:e2:42:43:fa:ee: bc:82:c8:61:e0:f7:86:c5:ea:37:ac:d1:21:d8:9a: 41:9b:c8:26:d5:ac:30:ec:8a:11:8a:ef:04:fc:0b: 7c:6d:7c:78:e4:7a:cb:f4:04:66:16:61:61:17:4f: 95:ab:41:54:37:11:07:ab:0e:bb:06:1c:2d:3d:e2: f4:9b:07:54:ac:d2:e7:fe:80:dd:63:7d:03:d9:05: dd:56:06:92:13:c6:66:20:b8:03:1a:de:ca:14:7b: b0:b3:77:b7:f2:97:4f:1d:3f:6b:6c:e1:12:ba:db: 39:cc:a6:91:c7:d1:2c:14:83:65:1b:c1:76:6c:b6: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:93:89:54:4B:ED:5F:BB:B3:A9:8F:16:1A:62:6C:1C:B0:50:0D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.crl X509v3 Authority Key Identifier: keyid:42:C0:5B:AA:F1:14:9E:4A:E1:F1:44:0A:F3:38:7B:DA:CF:03:67:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:61:05:90:2d:27:5c:c9:da:e3:1c:3f:28:34:70:2a:11:3d: 54:ec:d7:64:66:53:58:ff:9b:96:b3:7a:96:31:32:4f:40:00: 52:bd:0a:2c:5f:1a:dd:d3:69:96:ed:30:fa:22:1f:60:c4:b1: 52:61:64:99:2b:5a:77:1f:89:08:0e:aa:3a:46:c5:a4:1a:44: 3c:a5:b8:e6:d0:ce:6f:27:96:0c:b2:65:c2:e4:98:a8:33:66: 6e:2d:76:f2:68:09:0e:e8:81:d8:54:01:2c:31:b0:dc:c6:9b: 6e:12:4e:fd:83:5f:19:16:61:97:8b:b2:26:99:70:16:c3:d7: fb:3e:f0:9e:51:bb:12:c0:3e:c6:6b:be:8a:ee:e8:a0:bd:d6: 4b:2c:af:b6:22:cd:d3:4d:e9:bf:a7:b0:e3:82:79:9c:74:70: 12:d4:d4:a3:27:3b:80:c0:e6:3d:72:2a:50:98:5b:5c:57:3d: ab:11:ae:7c:28:30:49:df:21:96:99:0d:aa:1a:1a:80:bc:23: 04:d8:fe:b9:8e:e4:63:79:bf:66:b0:88:4b:57:03:5e:55:82: 7c:35:a8:f3:a4:ce:0a:f9:0b:a0:da:5b:52:35:b1:b2:98:cf: c2:f3:91:7c:cb:43:a0:68:6e:f5:87:db:d3:13:bb:5a:9b:93: fe:76:f9:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3O7zo7YKsIP1N/60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FjN2RlOGMtMTk2MS00ZDBmLTg2NWUtNDc5MDk2NWI4 NWI5MB4XDTI2MDUxMjExMDAwM1oXDTI2MDUxNDExMDAwMFowLzEtMCsGA1UEAxMk NzExYjQzNmEtYWMxZC00MWM3LWFlY2MtNDAxZGUwZmEwMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa/ees+LwmXrsygP5EuS3inbFN4AuaDSf98/ ftzHFyONlN4w/EYHBwbl2eCII2J7ZJl6fzrhS3j4Eeh/0Ra8I3YtHnF7AZAMGJgI s+GiuXG7tR2/K2K7noPUTPYtWUnC6DwVitZl3djjNzMYxo2gpneioH9/2hOyyci0 HmDiDSnH4kJD+u68gshh4PeGxeo3rNEh2JpBm8gm1aww7IoRiu8E/At8bXx45HrL 9ARmFmFhF0+Vq0FUNxEHqw67BhwtPeL0mwdUrNLn/oDdY30D2QXdVgaSE8ZmILgD Gt7KFHuws3e38pdPHT9rbOESuts5zKaRx9EsFINlG8F2bLY5uQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM2TiVRL7V+7s6mPFhpibBywUA3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWM3 ZGU4Yy0xOTYxLTRkMGYtODY1ZS00NzkwOTY1Yjg1YjkvY2FjN2RlOGMtMTk2MS00 ZDBmLTg2NWUtNDc5MDk2NWI4NWI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FjN2RlOGMtMTk2MS00ZDBmLTg2 NWUtNDc5MDk2NWI4NWI5L2NhYzdkZThjLTE5NjEtNGQwZi04NjVlLTQ3OTA5NjVi ODViOS5jcmwwHwYDVR0jBBgwFoAUQsBbqvEUnkrh8UQK8zh72s8DZ4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWM3ZGU4Yy0xOTYxLTRkMGYtODY1ZS00Nzkw OTY1Yjg1YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnYQWQLSdcydrjHD8oNHAq ET1U7NdkZlNY/5uWs3qWMTJPQABSvQosXxrd02mW7TD6Ih9gxLFSYWSZK1p3H4kI Dqo6RsWkGkQ8pbjm0M5vJ5YMsmXC5JioM2ZuLXbyaAkO6IHYVAEsMbDcxptuEk79 g18ZFmGXi7ImmXAWw9f7PvCeUbsSwD7Ga76K7uigvdZLLK+2Is3TTem/p7Djgnmc dHAS1NSjJzuAwOY9cipQmFtcVz2rEa58KDBJ3yGWmQ2qGhqAvCME2P65juRjeb9m sIhLVwNeVYJ8NajzpM4K+Qug2ltSNbGymM/C85F8y0OgaG71h9vTE7tam5P+dvk3 -----END CERTIFICATE-----Generated at Wed May 13 07:30:08 2026 by rpki-client