$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: cn6p5VjsezawWOGqxSzI1nGfKMK+T8Y6tvuoQgds+vs= Subject key identifier: FD:3F:B5:5A:F8:AD:E2:B0:13:AA:05:D9:F8:E0:69:61:9F:2A:2A:0C Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584DCFFB3C741670B7B003705A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3D0D Signing time: Tue 12 May 2026 20:00:03 +0000 Manifest this update: Tue 12 May 2026 20:00:03 +0000 Manifest next update: Fri 15 May 2026 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: 1LNjtJO2RNUwmxmuISbKKZrRQGj+8QUDIKM9AgngM7s=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: NbpqVWOf+qWzj9lWb3526lNro+nf1CTC09A34TU35Fk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:fb:3c:74:16:70:b7:b0:03:70:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: May 12 20:00:03 2026 GMT Not After : May 15 20:00:00 2026 GMT Subject: CN=c1234ef8-f2ce-4ee3-8ee3-9caf7a5924d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:7b:f8:16:ce:0a:9a:c3:0b:ab:d9:ef:7b: 12:87:ae:82:bd:b0:13:7b:05:41:ee:f5:b2:5b:20: 2e:34:20:83:06:1b:55:cc:f1:90:5a:75:e6:f5:39: 9c:f2:6f:7e:06:bb:07:c8:26:47:d6:16:20:21:5e: f4:fe:a7:af:f8:f1:17:f1:be:b4:24:d6:e0:ab:f1: 84:b1:12:75:80:66:4c:38:d1:cb:67:4b:35:57:a5: 74:99:d5:35:9a:e7:73:f0:ff:a2:62:c8:e7:a1:f9: cf:02:3b:45:8a:4c:6d:4b:c6:3b:7e:71:c6:93:48: b0:27:70:d1:69:5e:ff:f5:4b:fa:33:8b:81:f1:47: 70:1b:67:e4:72:8c:9a:11:d1:ba:be:33:21:8e:40: 8e:2c:9c:43:c7:3b:88:42:6f:fe:80:a7:ab:c9:7d: a3:5b:1b:91:ef:05:2c:3b:e8:d7:87:02:c5:5a:d0: d6:7d:e1:51:3d:11:c2:5c:84:4e:cc:a0:00:79:d9: 34:f8:51:5f:10:a9:42:d2:02:57:4e:89:02:89:65: e7:1f:c3:24:47:0d:88:d2:a3:6f:e3:b3:44:26:44: 45:56:72:91:82:9d:9e:71:61:a7:53:a1:28:27:6d: 3a:f9:b0:5d:fa:2a:75:2f:71:b4:10:e2:f6:f4:e3: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3F:B5:5A:F8:AD:E2:B0:13:AA:05:D9:F8:E0:69:61:9F:2A:2A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d6:22:19:19:32:2f:f1:09:c4:09:64:ca:e8:a2:9e:36:c2: 6d:d5:fe:2a:48:a7:45:94:b2:84:7b:b1:73:7d:a2:f8:cc:25: 4f:22:1f:70:aa:b3:2a:3b:4f:0a:25:19:4c:74:f5:fc:e6:c0: 81:f0:9f:52:64:cf:97:ef:68:d9:28:04:eb:0d:48:a2:76:ab: ed:dd:33:9b:7e:47:c1:fa:b2:6f:d9:48:63:5f:5a:de:cd:42: bf:71:3a:0b:97:4e:b4:b2:a0:58:16:af:8b:10:86:62:28:8b: 50:a5:53:27:c5:bb:db:bb:fc:a3:a3:30:9c:a9:85:2e:79:15: 12:b5:1d:b0:ae:9a:39:ed:95:97:ae:ab:74:a6:3e:ff:fe:58: 56:c9:f7:02:13:37:c7:b1:ba:e6:e9:c1:40:9f:cc:c3:a9:2b: 0b:f7:94:ac:de:63:c1:b0:5a:78:56:d8:76:2a:1c:9d:9d:3a: 6b:e8:ae:02:34:2d:c9:65:3f:35:d0:56:35:26:c6:1b:d6:0c: c5:81:95:5f:79:b4:13:37:cc:05:b7:8a:9b:9f:71:33:6c:6b: 2a:9b:1d:0c:a7:36:d4:fc:dd:d2:79:c0:58:12:08:04:39:42: 9c:c0:31:1e:38:ee:a4:62:0c:0a:0f:1b:f6:57:e9:3e:8d:ba: 08:d3:dd:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3P+zx0FnC3sANwWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDUxMjIwMDAwM1oXDTI2MDUxNTIwMDAwMFowLzEtMCsGA1UEAxMk YzEyMzRlZjgtZjJjZS00ZWUzLThlZTMtOWNhZjdhNTkyNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nd7+BbOCprDC6vZ73sSh66CvbATewVB7vWy WyAuNCCDBhtVzPGQWnXm9Tmc8m9+BrsHyCZH1hYgIV70/qev+PEX8b60JNbgq/GE sRJ1gGZMONHLZ0s1V6V0mdU1mudz8P+iYsjnofnPAjtFikxtS8Y7fnHGk0iwJ3DR aV7/9Uv6M4uB8UdwG2fkcoyaEdG6vjMhjkCOLJxDxzuIQm/+gKeryX2jWxuR7wUs O+jXhwLFWtDWfeFRPRHCXIROzKAAedk0+FFfEKlC0gJXTokCiWXnH8MkRw2I0qNv 47NEJkRFVnKRgp2ecWGnU6EoJ206+bBd+ip1L3G0EOL29OPMSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP0/tVr4reKwE6oF2fjgaWGfKioMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCN1iIZGTIv8QnECWTK6KKe NsJt1f4qSKdFlLKEe7FzfaL4zCVPIh9wqrMqO08KJRlMdPX85sCB8J9SZM+X72jZ KATrDUiidqvt3TObfkfB+rJv2UhjX1rezUK/cToLl060sqBYFq+LEIZiKItQpVMn xbvbu/yjozCcqYUueRUStR2wrpo57ZWXrqt0pj7//lhWyfcCEzfHsbrm6cFAn8zD qSsL95Ss3mPBsFp4Vth2KhydnTpr6K4CNC3JZT810FY1JsYb1gzFgZVfebQTN8wF t4qbn3EzbGsqmx0MpzbU/N3SecBYEggEOUKcwDEeOO6kYgwKDxv2V+k+jboI092x -----END CERTIFICATE-----Generated at Wed May 13 13:17:51 2026 by rpki-client