$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft File: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft (raw, json) Hash identifier: qnYFmghb24LmM1Y80bXbDRLJCit4J9tRlF3lbFAw7w0= Subject key identifier: 22:2B:9F:3B:2F:78:C7:D9:06:C4:10:E2:C4:E5:98:2D:94:81:4A:CE Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584DCFA1E60DB27CDE707481F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft Manifest number: 010D0C9F432858440A57C730C85A71D2060E3B90 Signing time: Tue 12 May 2026 17:00:03 +0000 Manifest this update: Tue 12 May 2026 17:00:03 +0000 Manifest next update: Fri 15 May 2026 17:00:00 +0000 Files and hashes: 1: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl (hash: f1pBe9zJfalxITTSnGY3T1Aj1B0qCrg+XdzoKogEM/4=) 2: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (hash: uJkO3jNRxCSoB+6BRWXJob8NBZRhTR0qu8vCuZFpWK0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:a1:e6:0d:b2:7c:de:70:74:81:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: May 12 17:00:03 2026 GMT Not After : May 15 17:00:00 2026 GMT Subject: CN=90c51ca8-ea4f-40b4-81e4-206c0aaa19c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:00:d0:26:e5:85:1b:ff:a5:17:e3:a6:6b: c2:92:47:a3:13:4a:d1:2f:d5:14:54:8e:0f:50:5e: dc:ae:00:7e:1e:dc:66:2e:39:a7:93:a9:3c:78:c0: f0:5c:c8:cb:59:aa:9d:8f:20:2d:bd:8e:23:9e:0d: 1b:17:8d:b9:9d:fa:61:ea:14:37:0f:bd:03:10:24: e9:4f:17:a6:fd:30:18:6f:07:ea:bb:ee:8a:79:4c: 30:63:b4:e8:6a:51:60:6c:73:e6:c5:8b:76:24:60: 6c:ae:06:2f:c2:44:48:02:ca:f2:c3:af:47:6e:04: 3c:97:63:09:ac:47:1f:f4:db:82:22:7b:82:50:de: 7c:a7:56:d1:e0:d0:6e:46:34:83:68:f5:72:b5:a2: f2:80:3d:84:89:39:6f:44:b2:61:86:b7:c7:ec:6a: a9:0f:a0:9f:3b:54:31:14:ac:c3:21:fb:09:de:0e: 70:88:7d:5c:28:d9:e3:7c:c9:9d:f8:f5:1c:e4:95: 76:64:53:d2:d3:7e:88:93:41:74:45:94:7c:82:fd: 83:ae:1c:5f:b1:2e:29:3f:7d:2a:d8:55:ac:39:f1: 7c:49:08:c0:17:4a:cc:e6:34:3b:61:b4:ee:f7:1e: da:f2:ca:0f:05:7e:09:a3:fe:f3:1b:0e:bb:00:81: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:9F:3B:2F:78:C7:D9:06:C4:10:E2:C4:E5:98:2D:94:81:4A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3d:c1:19:ea:47:22:8d:34:18:0a:aa:4f:01:67:80:64:25: ef:11:3a:34:32:15:03:60:52:27:f1:2c:af:a0:4a:7b:2c:1e: 7d:20:dc:de:c7:6d:29:c9:7d:f5:1c:23:65:fa:f9:f1:31:12: 2b:f2:27:13:cc:96:42:7e:e8:fb:82:68:a8:19:4d:2a:2f:30: 98:b7:70:43:72:d5:b4:4c:60:97:2f:46:d9:5a:63:13:2a:d8: d7:0d:13:6a:2a:65:79:ca:e6:c5:8f:05:ff:68:df:59:a0:8d: 5c:d6:e4:8e:0a:d0:b0:b4:c5:13:02:f1:f6:9c:c6:35:ab:d7: a1:24:34:62:5b:2d:f8:4c:3d:af:2c:9f:87:b3:cc:3e:54:57: 3e:a3:28:07:29:06:7f:84:56:f3:dc:9c:cf:0f:01:22:82:17: bc:d0:ee:15:7e:ee:74:7a:29:42:6d:f9:f1:32:20:ff:81:46: 46:48:72:c0:8b:fd:d1:7c:3e:2b:3c:96:4c:21:09:0b:1c:6a: e5:30:82:5a:1f:2f:ff:e9:e6:69:48:d4:7a:13:5e:b2:12:f0: a4:43:4a:50:b0:49:11:d0:03:a0:22:07:f7:d9:6a:07:c6:96: c4:ed:49:51:4b:16:8e:31:00:a0:40:9c:75:14:0d:84:51:78: 35:70:52:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PoeYNsnzecHSB+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI2MDUxMjE3MDAwM1oXDTI2MDUxNTE3MDAwMFowLzEtMCsGA1UEAxMk OTBjNTFjYTgtZWE0Zi00MGI0LTgxZTQtMjA2YzBhYWExOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguAA0CblhRv/pRfjpmvCkkejE0rRL9UUVI4P UF7crgB+HtxmLjmnk6k8eMDwXMjLWaqdjyAtvY4jng0bF425nfph6hQ3D70DECTp Txem/TAYbwfqu+6KeUwwY7ToalFgbHPmxYt2JGBsrgYvwkRIAsryw69HbgQ8l2MJ rEcf9NuCInuCUN58p1bR4NBuRjSDaPVytaLygD2EiTlvRLJhhrfH7GqpD6CfO1Qx FKzDIfsJ3g5wiH1cKNnjfMmd+PUc5JV2ZFPS036Ik0F0RZR8gv2DrhxfsS4pP30q 2FWsOfF8SQjAF0rM5jQ7YbTu9x7a8soPBX4Jo/7zGw67AIF/TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCIrnzsveMfZBsQQ4sTlmC2UgUrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYTJiMmU1MzktYzgxYS00 OGNkLTk1YTUtN2UzZWFlOGFkMmQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfPcEZ6kcijTQYCqpPAWeA ZCXvETo0MhUDYFIn8SyvoEp7LB59INzex20pyX31HCNl+vnxMRIr8icTzJZCfuj7 gmioGU0qLzCYt3BDctW0TGCXL0bZWmMTKtjXDRNqKmV5yubFjwX/aN9ZoI1c1uSO CtCwtMUTAvH2nMY1q9ehJDRiWy34TD2vLJ+Hs8w+VFc+oygHKQZ/hFbz3JzPDwEi ghe80O4Vfu50eilCbfnxMiD/gUZGSHLAi/3RfD4rPJZMIQkLHGrlMIJaHy//6eZp SNR6E16yEvCkQ0pQsEkR0AOgIgf32WoHxpbE7UlRSxaOMQCgQJx1FA2EUXg1cFLs -----END CERTIFICATE-----Generated at Wed May 13 03:20:50 2026 by rpki-client