$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft File: d886f3a2-7325-4b74-8802-19528a9f380c.mft (raw, json) Hash identifier: ykzi3pc1y37oWQuxkd4VzH9vYEv6r88AUseQEx5S2jo= Subject key identifier: 36:AB:E4:D0:B5:80:07:5A:B3:4E:36:9C:5D:1A:86:A1:14:A3:4C:0D Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584DCF488E87FBBD3DDB93AB3320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft Manifest number: 010D0C9F432858421E942BC6BDF40AE91C1CC154 Signing time: Tue 12 May 2026 14:00:03 +0000 Manifest this update: Tue 12 May 2026 14:00:03 +0000 Manifest next update: Fri 15 May 2026 14:00:00 +0000 Files and hashes: 1: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (hash: +GV6FEBPU4vw0r+F8QAZsZJeyeI+tI9MFt0Ftxw9HWo=) 2: d886f3a2-7325-4b74-8802-19528a9f380c.crl (hash: aDi+RePc6794ABIuJ9DadEhjSf1pL3k7R14yvKHyJ+0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:48:8e:87:fb:bd:3d:db:93:ab:33:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: May 12 14:00:03 2026 GMT Not After : May 15 14:00:00 2026 GMT Subject: CN=8c6b0b22-e267-4c6d-b969-0e4cc967fd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:17:3e:79:db:d3:1a:99:11:ac:8d:7b:e7: ee:0b:ce:e0:f4:d8:18:5d:9d:1c:27:ce:4a:27:e4: f6:7c:98:03:5d:f3:93:de:ee:bf:ce:0d:0e:a7:01: 62:77:03:71:24:b0:ff:fe:a3:8a:f8:a1:88:cc:ea: 43:8d:e6:83:f5:89:fd:db:20:c8:cd:07:4e:85:f1: 02:58:1d:8f:81:c4:94:84:75:41:10:11:46:76:f4: f7:90:aa:15:96:86:01:7b:5a:e2:fc:0c:0f:98:e2: 07:da:a4:02:60:92:88:f6:85:fa:3c:e6:e8:a6:ce: 8a:c6:85:ca:69:5a:dd:4f:51:72:cc:82:fc:78:e0: 9c:bd:16:fe:63:0c:7b:d8:66:6e:89:e5:c5:d2:ba: 29:37:de:b1:de:c3:fd:7f:61:cd:55:54:1d:5b:7d: f6:95:0a:eb:35:94:92:01:e9:07:77:16:29:81:2a: 6e:93:52:5a:a7:2c:29:71:7a:40:e7:0e:aa:7c:2f: 07:94:7d:fb:68:db:e0:af:75:19:6a:fc:4b:72:05: ad:77:03:d6:be:7e:ce:66:99:e7:28:f2:1e:e4:31: c4:67:bc:a2:69:49:4a:0e:c8:27:d4:fe:25:70:e7: 26:4e:5e:79:5b:3f:12:e8:7a:fb:25:26:04:01:6e: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AB:E4:D0:B5:80:07:5A:B3:4E:36:9C:5D:1A:86:A1:14:A3:4C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6a:1e:52:88:4b:a3:da:9d:6f:4a:7a:18:15:7b:d3:a9:d5: 9d:34:c4:e5:e4:14:c1:28:92:fa:b7:ba:46:83:42:39:d0:2d: bf:36:e2:2e:d5:b5:8b:36:21:06:6a:5e:89:60:ec:0e:2a:ff: 3f:0a:a5:d4:6b:e6:32:22:70:84:80:55:d2:54:67:82:92:40: 4e:c5:da:0a:f6:f5:51:c7:09:e1:24:a8:61:0e:2c:68:e2:2d: b5:82:a9:ca:7a:6c:2a:c8:b0:c4:f3:58:70:93:e8:39:9c:5c: 3e:07:cd:49:c7:8e:1f:07:d5:0d:26:f1:ce:d1:09:09:ae:d9: 8e:ec:03:59:1b:5d:2f:b8:f4:cb:18:b5:bb:72:b2:e7:30:b8: 3c:5f:9c:0a:1f:3e:b8:76:b4:77:a0:a7:58:78:2c:c3:ad:55: b0:cd:d8:8b:fd:64:e0:c8:fd:73:b2:98:00:f0:83:af:92:81: 47:f4:34:cf:d3:2b:95:c1:ee:a7:34:f6:60:e0:1a:36:2b:ab: a9:e7:d5:89:27:a8:c1:e2:32:93:ce:03:a4:18:69:2d:1e:13: b8:f3:46:34:27:a3:c2:e7:83:d2:f7:5c:5b:48:8b:b9:49:fd: e3:f1:96:de:1a:77:e9:07:c3:41:51:41:ca:7d:df:71:9e:ca: f0:26:86:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PSI6H+70925OrMyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI2MDUxMjE0MDAwM1oXDTI2MDUxNTE0MDAwMFowLzEtMCsGA1UEAxMk OGM2YjBiMjItZTI2Ny00YzZkLWI5NjktMGU0Y2M5NjdmZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvkXPnnb0xqZEayNe+fuC87g9NgYXZ0cJ85K J+T2fJgDXfOT3u6/zg0OpwFidwNxJLD//qOK+KGIzOpDjeaD9Yn92yDIzQdOhfEC WB2PgcSUhHVBEBFGdvT3kKoVloYBe1ri/AwPmOIH2qQCYJKI9oX6PObops6KxoXK aVrdT1FyzIL8eOCcvRb+Ywx72GZuieXF0ropN96x3sP9f2HNVVQdW332lQrrNZSS AekHdxYpgSpuk1JapywpcXpA5w6qfC8HlH37aNvgr3UZavxLcgWtdwPWvn7OZpnn KPIe5DHEZ7yiaUlKDsgn1P4lcOcmTl55Wz8S6Hr7JSYEAW5a3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDar5NC1gAdas042nF0ahqEUo0wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvZDg4NmYzYTItNzMyNS00 Yjc0LTg4MDItMTk1MjhhOWYzODBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaah5SiEuj2p1vSnoYFXvT qdWdNMTl5BTBKJL6t7pGg0I50C2/NuIu1bWLNiEGal6JYOwOKv8/CqXUa+YyInCE gFXSVGeCkkBOxdoK9vVRxwnhJKhhDixo4i21gqnKemwqyLDE81hwk+g5nFw+B81J x44fB9UNJvHO0QkJrtmO7ANZG10vuPTLGLW7crLnMLg8X5wKHz64drR3oKdYeCzD rVWwzdiL/WTgyP1zspgA8IOvkoFH9DTP0yuVwe6nNPZg4Bo2K6up59WJJ6jB4jKT zgOkGGktHhO480Y0J6PC54PS91xbSIu5Sf3j8ZbeGnfpB8NBUUHKfd9xnsrwJoYi -----END CERTIFICATE-----Generated at Wed May 13 04:11:07 2026 by rpki-client