$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft File: 1c939443-d4d3-4122-9e02-8422f40f90c5.mft (raw, json) Hash identifier: 5aeS0bpst7BjUTje1d8hmpmwndEW+ke3gF6KZ+Nborg= Subject key identifier: 68:B0:BA:1D:17:20:BC:41:3C:C4:17:60:0B:52:90:DA:FA:7E:73:3F Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Certificate issuer: /CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Certificate serial: 010D0C9F4328584DCF6657F0EC85335F0D31E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft Manifest number: 010D0C9F432858430ED6AE4515AF570837AF19B3 Signing time: Tue 12 May 2026 15:00:03 +0000 Manifest this update: Tue 12 May 2026 15:00:03 +0000 Manifest next update: Fri 15 May 2026 15:00:00 +0000 Files and hashes: 1: 1c939443-d4d3-4122-9e02-8422f40f90c5.crl (hash: KWAk9qnHebhDgMPNgePcmb1B0OG6dHB5TrAzdsDNEAY=) 2: 6fccbf45-4871-3804-845f-da32fb15f471.roa (hash: +K06wsWCbaP7SoT3azjKi7u4wSp4fq8SJCv7koJR8gA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:66:57:f0:ec:85:33:5f:0d:31:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Validity Not Before: May 12 15:00:03 2026 GMT Not After : May 15 15:00:00 2026 GMT Subject: CN=64977b2e-2e13-4b3d-8b98-bc4d19832045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:df:a5:8e:09:53:61:d9:cf:90:44:b7:66: b9:2d:aa:55:da:dd:c7:ec:b2:e8:48:0e:c3:a5:e6: 01:1f:1a:89:fc:8f:47:fa:c8:01:bc:58:8a:e6:32: ee:d8:40:8f:89:30:67:03:b3:8a:33:41:f8:b4:9c: 5b:b2:ee:48:85:11:ca:ec:2d:9e:cb:2d:3f:68:15: 33:2a:f6:70:45:a8:a8:1b:33:58:e0:1a:57:8f:28: 4a:4e:cb:c9:b8:5e:8c:60:09:a9:6f:9f:da:18:70: a0:26:bb:88:d0:16:cb:7a:e5:ae:5e:8a:41:69:bb: 2e:f2:9f:3a:e5:b9:ca:f6:4d:f6:a4:45:3d:c0:a5: 7f:c6:84:73:11:fc:29:01:32:80:fe:24:de:36:ed: 15:6c:95:56:65:0a:a1:b2:9a:e8:80:df:47:43:05: 92:83:7d:17:96:31:9e:fe:2d:da:68:7e:17:22:5a: 4f:2d:2c:8c:1b:b2:09:b4:5e:c0:93:e7:fc:88:41: a6:00:de:e5:b1:16:1f:14:49:a8:fb:56:a7:f2:8e: cc:77:04:39:f0:38:23:d0:90:03:b3:c0:4a:dd:91: 55:a0:df:3c:ed:2d:7a:f1:51:3e:72:15:23:69:8a: c1:d4:1e:95:1a:9a:85:cb:54:c2:2e:f0:35:79:a6: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:BA:1D:17:20:BC:41:3C:C4:17:60:0B:52:90:DA:FA:7E:73:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl X509v3 Authority Key Identifier: keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:de:92:8f:75:ac:5f:b4:f1:35:4b:d5:4f:cc:c3:2e:8c:c8: fa:69:91:51:24:d1:fa:3a:ac:1d:e2:1e:13:8e:65:8e:64:e8: a4:6b:7a:74:d0:a1:bd:ba:6d:66:a4:17:7d:c0:cd:d2:5d:7c: 0e:5b:37:ab:bf:23:24:33:67:8e:0e:08:86:56:a2:1d:5e:8a: 8b:94:0e:54:fb:c7:1a:c6:13:af:7a:28:50:47:8a:a1:2d:94: d3:08:14:68:43:fe:18:77:fe:d9:b3:1b:df:93:5f:11:80:9f: 87:95:a9:eb:be:10:d6:ac:b3:c0:54:e0:93:f0:82:0c:b1:93: ab:89:11:3e:1b:e0:3f:22:21:a6:ff:ea:ee:7e:f0:2f:36:d4: e0:4b:89:9d:a4:e0:30:b0:df:c2:d9:d0:50:e9:c7:51:b5:68: ef:1e:cc:22:30:8e:45:19:9c:db:2f:c1:04:60:eb:a3:d2:39: e1:e6:25:5d:63:0a:2e:7c:1c:54:4c:b7:00:23:0c:b9:36:ab: 96:fa:51:95:55:28:42:06:7e:ea:b0:50:c8:fc:f8:78:8a:de: b2:f8:19:b3:cc:4e:47:e4:1a:d6:02:20:8a:d0:db:15:e2:73: da:50:25:5f:45:46:5d:95:f5:aa:11:5d:4a:0e:2c:38:84:bd: 4b:50:12:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PZlfw7IUzXw0x6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5 MGM1MB4XDTI2MDUxMjE1MDAwM1oXDTI2MDUxNTE1MDAwMFowLzEtMCsGA1UEAxMk NjQ5NzdiMmUtMmUxMy00YjNkLThiOTgtYmM0ZDE5ODMyMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhLfpY4JU2HZz5BEt2a5LapV2t3H7LLoSA7D peYBHxqJ/I9H+sgBvFiK5jLu2ECPiTBnA7OKM0H4tJxbsu5IhRHK7C2eyy0/aBUz KvZwRaioGzNY4BpXjyhKTsvJuF6MYAmpb5/aGHCgJruI0BbLeuWuXopBabsu8p86 5bnK9k32pEU9wKV/xoRzEfwpATKA/iTeNu0VbJVWZQqhsprogN9HQwWSg30XljGe /i3aaH4XIlpPLSyMG7IJtF7Ak+f8iEGmAN7lsRYfFEmo+1an8o7MdwQ58Dgj0JAD s8BK3ZFVoN887S168VE+chUjaYrB1B6VGpqFy1TCLvA1eaYM0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGiwuh0XILxBPMQXYAtSkNr6fnM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzkz OTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMWM5Mzk0NDMtZDRkMy00 MTIyLTllMDItODQyMmY0MGY5MGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM5Mzk0NDMtZDRkMy00MTIyLTll MDItODQyMmY0MGY5MGM1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05ZTAyLTg0MjJmNDBm OTBjNS5jcmwwHwYDVR0jBBgwFoAUcwBMVZEDoAnEK13od5gZ5m1HdWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIy ZjQwZjkwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr3pKPdaxftPE1S9VPzMMu jMj6aZFRJNH6Oqwd4h4TjmWOZOika3p00KG9um1mpBd9wM3SXXwOWzervyMkM2eO DgiGVqIdXoqLlA5U+8caxhOveihQR4qhLZTTCBRoQ/4Yd/7Zsxvfk18RgJ+Hlanr vhDWrLPAVOCT8IIMsZOriRE+G+A/IiGm/+rufvAvNtTgS4mdpOAwsN/C2dBQ6cdR tWjvHswiMI5FGZzbL8EEYOuj0jnh5iVdYwoufBxUTLcAIwy5NquW+lGVVShCBn7q sFDI/Ph4it6y+BmzzE5H5BrWAiCK0NsV4nPaUCVfRUZdlfWqEV1KDiw4hL1LUBL2 -----END CERTIFICATE-----Generated at Wed May 13 12:14:41 2026 by rpki-client