$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft File: 68de9da0-8f7e-4231-9340-c37abafc3714.mft (raw, json) Hash identifier: j6fxDM6RDtyhJlCF4Q9yBg0y9r1LwsJJJbQCnAuhbhk= Subject key identifier: 95:4A:5D:C7:EC:19:25:E3:43:2F:D4:21:B9:98:22:9B:2F:80:02:9C Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714 Certificate serial: 010D0C9F4328584DD1B9EB819C3C7FC8A5E05C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft Manifest number: 010D0C9F4328584481A6987F83956D07F8B040EB Signing time: Wed 13 May 2026 11:00:03 +0000 Manifest this update: Wed 13 May 2026 11:00:03 +0000 Manifest next update: Sat 16 May 2026 11:00:00 +0000 Files and hashes: 1: 38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (hash: b+71THmjeppJky5F5bbmT1O/8/gYBZwqRPTBfqz0xTw=) 2: 68de9da0-8f7e-4231-9340-c37abafc3714.crl (hash: TGW1UtKyRJ05FHlyF3tRnowaNUOZ5nJSk9YgefdAjoQ=) 3: 8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa (hash: +Pvc2uREZBoMW7K6woU0Z9kt68Oc6s7ggF7MkJ2IhMU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:b9:eb:81:9c:3c:7f:c8:a5:e0:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714 Validity Not Before: May 13 11:00:03 2026 GMT Not After : May 16 11:00:00 2026 GMT Subject: CN=e1b1f88e-0d98-49c3-8ed9-d6f767eec168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:ba:0b:40:71:bc:12:10:75:2f:33:68:23: e2:aa:b6:2a:07:a6:4f:51:1d:d5:e6:90:a5:b5:01: a3:d0:0e:98:0b:06:9d:d3:12:41:9a:66:e0:15:45: f0:6e:35:a2:12:a8:39:1a:a8:4d:aa:0d:06:ac:31: 6b:c0:79:44:6d:ab:56:fe:b7:70:e1:0b:98:de:ca: 9f:c8:81:2b:0e:e2:97:26:f1:3f:a5:1c:f5:15:7f: 57:74:12:a2:2a:d5:2e:e9:aa:86:b2:62:a9:19:75: 42:41:a1:49:f8:4b:76:19:fe:05:02:aa:2a:47:f0: 18:28:88:dc:71:50:a8:e1:04:e4:e6:0c:e2:f4:83: 36:86:ea:6e:d8:9b:7d:d4:9d:51:e5:6f:31:bb:2a: 49:49:5a:2d:f9:50:7c:aa:21:21:2d:46:2a:55:4b: c3:76:74:af:22:9a:0f:2e:e9:25:a8:2f:a0:e2:cf: f5:46:bf:49:09:d3:cf:0e:03:74:bc:50:d5:2a:3d: cb:39:10:48:fa:f1:ef:3a:c5:06:b7:aa:08:58:ea: bf:71:5e:bf:a3:fa:75:55:66:3e:26:b1:e2:48:4a: c2:aa:47:1d:de:b2:4c:3a:e8:fb:1c:39:48:f1:38: 5e:de:54:58:8c:0e:ea:fa:ad:82:a7:4a:8d:7d:cf: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:5D:C7:EC:19:25:E3:43:2F:D4:21:B9:98:22:9B:2F:80:02:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl X509v3 Authority Key Identifier: keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6e:17:51:b5:b2:70:10:04:4e:ee:25:95:c1:73:62:55:2c: 0b:b1:9d:64:be:2b:45:43:a5:c6:c0:88:9c:ed:54:4e:0e:f3: c7:84:30:16:8d:6c:74:d9:fe:bb:1d:31:35:2c:36:47:6a:7e: e7:bf:e3:08:0c:e8:da:6f:48:f3:4a:56:ef:90:92:d7:37:11: 8b:e5:34:f8:f4:cb:2d:99:4a:cc:2b:3f:8c:e5:39:3f:cc:18: 1f:f9:b2:b7:65:8b:ab:7a:82:cc:17:23:6b:74:6d:7a:a3:a2: b8:ec:66:da:3a:c1:ba:76:a5:09:c1:4f:f6:01:40:d6:f1:58: ea:9b:f5:3d:60:10:98:20:55:db:e2:c2:b1:11:bb:a7:fc:0d: 05:02:0b:c3:2c:7a:93:d2:08:26:85:f3:d7:a7:91:12:da:7c: f7:16:2f:26:9f:64:35:c4:42:db:e4:bb:a9:47:61:a9:fe:6b: 43:84:d6:b0:32:55:31:bb:b4:27:54:fc:a6:98:5b:cc:4a:c9: 26:1a:fc:cf:84:b8:3f:02:9b:44:cd:ef:70:b3:b5:12:8e:1e: 4c:5f:b8:99:eb:22:be:7f:2d:ab:7a:aa:79:9c:2d:02:67:55: 4e:cb:58:11:dd:89:1b:92:b0:06:74:c5:c2:34:8c:2b:ca:10: 9a:70:77:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3RueuBnDx/yKXgXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhkZTlkYTAtOGY3ZS00MjMxLTkzNDAtYzM3YWJhZmMz NzE0MB4XDTI2MDUxMzExMDAwM1oXDTI2MDUxNjExMDAwMFowLzEtMCsGA1UEAxMk ZTFiMWY4OGUtMGQ5OC00OWMzLThlZDktZDZmNzY3ZWVjMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb26C0BxvBIQdS8zaCPiqrYqB6ZPUR3V5pCl tQGj0A6YCwad0xJBmmbgFUXwbjWiEqg5GqhNqg0GrDFrwHlEbatW/rdw4QuY3sqf yIErDuKXJvE/pRz1FX9XdBKiKtUu6aqGsmKpGXVCQaFJ+Et2Gf4FAqoqR/AYKIjc cVCo4QTk5gzi9IM2hupu2Jt91J1R5W8xuypJSVot+VB8qiEhLUYqVUvDdnSvIpoP LuklqC+g4s/1Rr9JCdPPDgN0vFDVKj3LORBI+vHvOsUGt6oIWOq/cV6/o/p1VWY+ JrHiSErCqkcd3rJMOuj7HDlI8The3lRYjA7q+q2Cp0qNfc/fAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJVKXcfsGSXjQy/UIbmYIpsvgAKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRl OWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdhYmFmYzM3MTQvNjhkZTlkYTAtOGY3ZS00 MjMxLTkzNDAtYzM3YWJhZmMzNzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhkZTlkYTAtOGY3ZS00MjMxLTkz NDAtYzM3YWJhZmMzNzE0LzY4ZGU5ZGEwLThmN2UtNDIzMS05MzQwLWMzN2FiYWZj MzcxNC5jcmwwHwYDVR0jBBgwFoAU3HTcGzn5AYyZQEAOWxJ8czrP4Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRlOWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdh YmFmYzM3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYbhdRtbJwEARO7iWVwXNi VSwLsZ1kvitFQ6XGwIic7VRODvPHhDAWjWx02f67HTE1LDZHan7nv+MIDOjab0jz SlbvkJLXNxGL5TT49MstmUrMKz+M5Tk/zBgf+bK3ZYureoLMFyNrdG16o6K47Gba OsG6dqUJwU/2AUDW8Vjqm/U9YBCYIFXb4sKxEbun/A0FAgvDLHqT0ggmhfPXp5ES 2nz3Fi8mn2Q1xELb5LupR2Gp/mtDhNawMlUxu7QnVPymmFvMSskmGvzPhLg/AptE ze9ws7USjh5MX7iZ6yK+fy2reqp5nC0CZ1VOy1gR3YkbkrAGdMXCNIwryhCacHfX -----END CERTIFICATE-----Generated at Wed May 13 13:22:28 2026 by rpki-client