$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: 4g4nydrXePzT+w/YkFXE7mExbn/vKw2BXOfDfyw3ADk= Subject key identifier: 44:84:09:97:B1:8E:2E:06:19:45:1C:EB:5E:4D:F9:AD:FA:A8:BB:85 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584DD0CBB09E9B16A91D0A1ED860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C0972C Signing time: Wed 13 May 2026 03:00:04 +0000 Manifest this update: Wed 13 May 2026 03:00:04 +0000 Manifest next update: Fri 15 May 2026 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: uSRhUKfBUMJI12a+EzlspJVdIyxVvD4/4Ghldr/hNGk=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: 8YEu6BTuEsbfzfGYWpGw5s5AT6Mx4g/sWPYs01xUWUI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:cb:b0:9e:9b:16:a9:1d:0a:1e:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: May 13 03:00:04 2026 GMT Not After : May 15 03:00:00 2026 GMT Subject: CN=381d8846-ff51-4b3a-b537-9c3d9b723971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:29:2c:9c:fb:dc:70:dc:48:49:73:df:3f:5e: d9:6e:33:92:cc:22:e4:10:73:41:97:c6:cd:b2:c1: bb:27:5f:af:8d:a3:70:53:34:c5:b4:b0:e5:3f:d7: 32:8c:e0:c3:8c:62:30:83:c0:59:6f:c1:85:3d:58: 55:be:04:ae:8a:4a:64:12:8d:99:e6:d9:c4:fb:d9: bc:f4:e8:ca:87:6a:4c:e8:65:59:23:aa:ca:9b:8f: 16:f2:fa:19:0f:18:24:08:7f:86:92:15:65:cf:4f: 0c:cf:fb:a9:65:0a:38:8e:8b:1f:19:d6:a7:e6:48: 0d:c5:2d:6a:ad:d1:1e:30:62:fa:80:75:10:44:a9: b8:70:f8:c8:b0:1f:41:36:60:8f:2d:8d:40:a1:41: 6b:e7:80:a6:e5:e3:f3:c0:50:50:08:5e:c6:e4:54: 98:bf:00:78:19:a1:35:59:f6:2d:11:65:42:68:1c: 3d:33:22:d7:b5:1d:71:e1:ee:e5:f6:48:33:6a:90: 88:f5:07:75:a5:a4:24:bc:bf:ea:51:6a:56:b1:9a: 43:d5:f6:e6:87:79:69:2f:f4:6a:55:19:d1:3d:9d: 18:e0:9a:25:7d:21:6c:89:0a:86:b3:25:d0:8f:91: b7:9d:e5:3b:e2:3e:9d:08:78:2f:ad:84:8a:5d:f1: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:84:09:97:B1:8E:2E:06:19:45:1C:EB:5E:4D:F9:AD:FA:A8:BB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3c:c6:1d:dc:78:c6:4e:66:47:2f:ae:af:ac:d6:3e:85:8e: 39:b9:b6:f1:e3:66:e2:96:3f:c8:98:e3:09:5e:8f:b5:29:dd: 40:e1:cc:8a:d5:64:52:a7:c1:5d:4d:6f:f2:e4:99:f2:ab:b7: 8c:a3:35:c6:8b:e1:ea:03:07:c9:4a:27:1a:57:9c:90:52:7a: e2:5e:09:63:9a:8a:d4:55:c6:47:56:a3:70:9a:8d:6e:4c:bc: 94:ec:e4:79:32:f0:e2:cd:37:ca:84:db:9f:5b:1e:a2:b1:6a: 1e:39:ef:30:92:51:f0:d2:b3:49:99:3c:1d:a3:6d:c7:0c:36: 02:86:e8:f4:eb:bb:b9:63:ea:82:56:fd:e6:54:ab:3c:ac:4f: 1e:a4:e7:45:f1:81:80:43:55:d3:5b:d3:d9:5e:5d:2e:5f:1f: b5:56:fb:c0:1f:aa:0b:ff:f8:1e:e2:a3:c8:a9:83:81:9a:50: 8d:3a:4f:22:95:5a:cb:6d:0d:47:fb:f3:f8:e1:1a:81:70:a8: cc:3b:3b:1a:db:f5:96:ec:8c:9c:b7:ff:8b:09:6f:0a:c0:8b: cc:f4:85:09:b7:16:07:f5:bf:47:74:16:c0:30:b8:20:71:8a: 53:e4:93:9c:7e:58:30:be:08:40:e4:10:08:c6:24:d7:3d:c5: d2:a7:6f:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Qy7CemxapHQoe2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI2MDUxMzAzMDAwNFoXDTI2MDUxNTAzMDAwMFowLzEtMCsGA1UEAxMk MzgxZDg4NDYtZmY1MS00YjNhLWI1MzctOWMzZDliNzIzOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiksnPvccNxISXPfP17ZbjOSzCLkEHNBl8bN ssG7J1+vjaNwUzTFtLDlP9cyjODDjGIwg8BZb8GFPVhVvgSuikpkEo2Z5tnE+9m8 9OjKh2pM6GVZI6rKm48W8voZDxgkCH+GkhVlz08Mz/upZQo4josfGdan5kgNxS1q rdEeMGL6gHUQRKm4cPjIsB9BNmCPLY1AoUFr54Cm5ePzwFBQCF7G5FSYvwB4GaE1 WfYtEWVCaBw9MyLXtR1x4e7l9kgzapCI9Qd1paQkvL/qUWpWsZpD1fbmh3lpL/Rq VRnRPZ0Y4JolfSFsiQqGsyXQj5G3neU74j6dCHgvrYSKXfFQNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFESECZexji4GGUUc615N+a36qLuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzPMYd3HjGTmZHL66vrNY+ hY45ubbx42bilj/ImOMJXo+1Kd1A4cyK1WRSp8FdTW/y5Jnyq7eMozXGi+HqAwfJ SicaV5yQUnriXgljmorUVcZHVqNwmo1uTLyU7OR5MvDizTfKhNufWx6isWoeOe8w klHw0rNJmTwdo23HDDYChuj067u5Y+qCVv3mVKs8rE8epOdF8YGAQ1XTW9PZXl0u Xx+1VvvAH6oL//ge4qPIqYOBmlCNOk8ilVrLbQ1H+/P44RqBcKjMOzsa2/WW7Iyc t/+LCW8KwIvM9IUJtxYH9b9HdBbAMLggcYpT5JOcflgwvghA5BAIxiTXPcXSp2+9 -----END CERTIFICATE-----Generated at Wed May 13 14:46:01 2026 by rpki-client