$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft File: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft (raw, json) Hash identifier: 70cAUVJs1R+p3JPs+3z+5+MYlwc1W3IpovNLZw0xgg8= Subject key identifier: 66:E0:AB:CA:0E:D3:E1:7A:F2:22:43:BD:24:6C:50:A8:93:D3:C8:06 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584DCFBFB13DF72210B89285C3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft Manifest number: 010D0C9F4328584C112324F43AA2908752839AA9 Signing time: Tue 12 May 2026 18:00:03 +0000 Manifest this update: Tue 12 May 2026 18:00:03 +0000 Manifest next update: Fri 15 May 2026 18:00:00 +0000 Files and hashes: 1: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (hash: zUw/Q3CdsEylsWHPWZq40XKZziJVt7paQ75tmgAp5ZU=) 2: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (hash: HYy+QA5l7+e9PAeCbSANCL1xqsM3T0PvtKt2oRLJxRE=) 3: 913f7d07-9252-322f-9150-9c9077e0c6e4.roa (hash: Spe0hU/ic+ViIju3YSFY3m5XhMdDo4c7U5CO67mtuW0=) 4: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl (hash: QeORn9wjq5hu/hS3IiKhCBkBS9xge9/k5SMYD7Z9fA0=) 5: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (hash: 2czMwTEaSo+wF+1QQNLZdQj7ZXWqNbaCCRSqzfCKQy4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:bf:b1:3d:f7:22:10:b8:92:85:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: May 12 18:00:03 2026 GMT Not After : May 15 18:00:00 2026 GMT Subject: CN=d3c98611-b290-4ede-9aea-9b4e4d4129ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:8c:04:9c:e2:a5:dd:51:21:dd:5f:a6:b3: c0:e5:ee:9c:93:65:0e:4e:56:ff:ba:0c:fd:42:fa: 34:36:a0:d9:43:ed:36:0b:31:5d:ad:10:e5:18:1c: 7b:f8:de:b7:6c:31:8e:9e:b4:7f:b8:af:19:8b:98: fe:ea:ad:cb:13:1b:15:91:9e:54:56:e6:ac:cf:32: e2:d0:31:37:eb:37:0d:0c:1e:be:d3:95:3a:24:38: 55:b4:f9:13:7e:dd:bb:c0:7e:a0:04:51:41:3e:8a: da:39:7b:8d:5f:15:33:70:e8:d8:62:d8:ec:a9:4f: 6f:d4:15:37:67:5c:2d:45:d4:33:e7:ab:3b:f4:7c: ae:b4:9d:94:3e:8c:8d:2f:6b:ca:74:cd:20:8f:e2: d4:e2:8f:b7:6a:13:14:91:c2:64:4f:b7:7f:19:a2: 74:4e:95:d1:bd:1e:e7:73:df:46:ec:1b:62:99:68: 27:de:44:9d:18:b4:3b:b0:06:35:11:38:40:5d:e1: 13:58:92:03:b9:3c:22:8d:e0:c2:b8:45:b9:f3:39: 6f:9c:7b:15:5a:9d:b5:23:28:a1:b2:b6:66:13:16: 3d:0a:ff:c8:ad:64:da:42:9a:3c:5b:1b:d3:49:d3: a4:4b:7a:e0:47:c6:e6:47:7b:50:9b:e1:fb:58:8e: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E0:AB:CA:0E:D3:E1:7A:F2:22:43:BD:24:6C:50:A8:93:D3:C8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5b:e6:2d:5a:95:4f:c5:ab:77:3d:49:73:cd:c7:b2:8e:ff: d0:92:5a:57:15:f1:be:78:32:14:ae:ab:18:13:1b:7b:50:44: f1:45:72:30:b0:52:f8:ae:e3:25:a5:08:02:d7:bf:79:bc:2d: a7:b5:b3:73:64:6f:d3:5a:c1:57:f2:50:e3:ff:00:d8:9a:22: 57:82:08:5b:af:cd:6d:a6:b4:33:e6:ca:88:a0:8d:eb:91:90: 45:17:c0:a6:84:d3:8c:01:34:75:05:74:23:f8:e0:03:c8:87: 78:e2:8a:7f:31:30:59:02:19:4e:8a:8d:c7:5c:7a:38:af:03: 3c:5f:ff:b9:22:da:e4:02:de:55:15:5c:bb:23:12:52:02:9d: 20:0a:10:ab:c8:c3:fb:2c:54:74:f7:42:09:ee:23:25:d5:9d: bd:5f:91:9b:03:73:34:7b:52:bb:fc:ac:3d:93:a6:95:31:78: 38:b0:b0:af:91:58:a9:b9:c4:dc:f7:76:ce:f4:39:63:de:a6: bf:31:71:31:a9:f0:8b:9b:c6:bf:a1:3d:38:e1:ef:bc:03:d9: 5a:d9:c7:8c:04:e6:21:ad:0b:7f:7b:55:93:34:8a:53:4b:ca: db:cc:a3:1e:fc:d0:18:f4:e7:fc:f0:0b:78:e6:9c:b2:b4:a7: 91:63:7d:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Pv7E99yIQuJKFw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDUxMjE4MDAwM1oXDTI2MDUxNTE4MDAwMFowLzEtMCsGA1UEAxMk ZDNjOTg2MTEtYjI5MC00ZWRlLTlhZWEtOWI0ZTRkNDEyOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSqMBJzipd1RId1fprPA5e6ck2UOTlb/ugz9 Qvo0NqDZQ+02CzFdrRDlGBx7+N63bDGOnrR/uK8Zi5j+6q3LExsVkZ5UVuaszzLi 0DE36zcNDB6+05U6JDhVtPkTft27wH6gBFFBPoraOXuNXxUzcOjYYtjsqU9v1BU3 Z1wtRdQz56s79HyutJ2UPoyNL2vKdM0gj+LU4o+3ahMUkcJkT7d/GaJ0TpXRvR7n c99G7BtimWgn3kSdGLQ7sAY1EThAXeETWJIDuTwijeDCuEW58zlvnHsVWp21Iyih srZmExY9Cv/IrWTaQpo8WxvTSdOkS3rgR8bmR3tQm+H7WI4URQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGbgq8oO0+F68iJDvSRsUKiT08gGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvOTU0YzAxYmEtZDlhZC00 NGU4LWI0OGMtMWE0OGYyMGQ4YjdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIW+YtWpVPxat3PUlzzcey jv/QklpXFfG+eDIUrqsYExt7UETxRXIwsFL4ruMlpQgC1795vC2ntbNzZG/TWsFX 8lDj/wDYmiJXgghbr81tprQz5sqIoI3rkZBFF8CmhNOMATR1BXQj+OADyId44op/ MTBZAhlOio3HXHo4rwM8X/+5ItrkAt5VFVy7IxJSAp0gChCryMP7LFR090IJ7iMl 1Z29X5GbA3M0e1K7/Kw9k6aVMXg4sLCvkVipucTc93bO9Dlj3qa/MXExqfCLm8a/ oT044e+8A9la2ceMBOYhrQt/e1WTNIpTS8rbzKMe/NAY9Of88At45pyytKeRY339 -----END CERTIFICATE-----Generated at Wed May 13 02:54:01 2026 by rpki-client