$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft File: db859a2a-df82-4532-a984-71176499699e.mft (raw, json) Hash identifier: Nhr6q2Wu5z/SeLb2d4Ob0/7uFaqd/7tCugKWwbIxHq8= Subject key identifier: 25:9D:B8:2A:3E:44:3A:0C:7F:73:37:FB:F8:01:1F:9C:FC:0C:DF:7E Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F4328584DCF4890BF8E22FD2B972A2A90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft Manifest number: 010D0C9F4328584073A8585128FB207D4D9673E9 Signing time: Tue 12 May 2026 14:00:03 +0000 Manifest this update: Tue 12 May 2026 14:00:03 +0000 Manifest next update: Fri 15 May 2026 14:00:00 +0000 Files and hashes: 1: 156ce4d8-90cb-328d-a792-dd85d82b760d.roa (hash: zNPxp6H5auuQngZUXvsNFTA1rht055ozVoujBmc+V4s=) 2: 7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (hash: jIeFhSnw4/8y4p4Pf8eegr8o7+Zkek7eP/fwjX2WfJU=) 3: db859a2a-df82-4532-a984-71176499699e.crl (hash: Eu3HCGdBE5HJSZZKBwhVIjEI7SG5k4h+kxwDMNb/Fw8=) 4: e830da66-f60b-3f6e-b42e-49ec6ba64356.roa (hash: hbXe84v1qLKjT9rOjmT7g1N9UjQoVeZAbOz6QLsZs/E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:48:90:bf:8e:22:fd:2b:97:2a:2a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: May 12 14:00:03 2026 GMT Not After : May 15 14:00:00 2026 GMT Subject: CN=ac28b2ca-0486-4ddf-a106-530a7f6910a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:4a:14:f6:0d:d0:7c:e4:d1:1e:f3:ee:71: 44:c4:91:20:b1:82:bd:2b:b9:23:48:cf:11:16:2d: 26:ec:b0:36:c4:70:68:16:51:2f:4c:fb:03:7c:fc: 82:e3:d8:32:f0:2a:68:ec:1a:95:ef:75:5d:2b:b7: f6:e4:58:c6:79:a2:2f:bd:bb:86:fc:03:01:2f:e0: 22:6a:37:9d:01:e1:10:6c:27:a7:ee:fd:dd:9b:c1: d7:55:43:b0:45:3e:e0:e6:1d:eb:a3:59:2a:2c:0b: 39:0d:02:f5:61:62:2c:a6:80:b7:1f:11:aa:54:4f: f6:1c:b0:7f:1f:2a:bb:31:0e:b7:12:69:73:98:3b: fa:9c:49:4b:8d:c5:de:fd:16:49:69:36:c6:d5:de: 0e:04:d4:35:03:e9:34:d8:67:9d:da:c8:c4:0a:ca: 7b:4d:56:fe:9f:e7:d1:d3:64:f2:35:c5:3c:e3:8f: e6:27:87:fc:0d:21:d1:3a:68:27:c4:ee:c3:1e:18: 2b:51:bb:8c:5b:8d:5b:f5:5b:c9:4e:ed:96:fd:be: 56:ea:b2:5e:20:50:67:1d:7d:64:8b:af:79:63:c3: fd:85:97:a1:16:62:0e:d4:aa:8a:d2:90:04:c9:89: 49:57:2e:dd:00:b7:a4:e0:b4:05:e6:a5:a3:4b:07: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:B8:2A:3E:44:3A:0C:7F:73:37:FB:F8:01:1F:9C:FC:0C:DF:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e0:ad:34:cd:6a:cd:73:86:b1:17:70:90:33:93:cd:37:04: 50:03:20:7e:87:f8:62:c4:79:df:4f:60:8b:b4:0f:a2:81:84: d4:3e:8f:c7:b0:71:eb:87:41:c5:24:76:d8:7a:ab:73:a1:1a: 29:fa:cf:06:9e:c1:7e:4e:f8:fc:9e:31:1b:20:b9:18:f9:03: ec:bb:b6:7c:3c:1d:28:c6:3e:26:41:0b:b8:49:aa:2f:59:73: 0d:1d:74:fb:11:e9:6a:00:02:df:d8:85:aa:e0:46:4c:b9:4a: 0d:29:1b:56:3b:e1:de:27:61:11:7e:aa:44:6a:04:0b:86:47: f4:96:05:91:ca:bb:21:6f:f6:5c:be:30:b9:7c:8a:04:70:c9: d9:9e:d6:40:70:7b:c2:a2:12:ee:3b:16:db:8e:8b:9c:e6:1b: ac:d9:9d:02:63:5a:3b:04:3c:27:d9:db:b9:ab:06:c5:60:60: da:f2:f8:df:8b:8b:e5:17:6d:45:2a:8d:4a:42:85:f7:22:43: c7:86:bd:8a:75:c5:c2:92:0c:fd:66:51:e7:40:96:a4:90:65: 02:ba:3e:c4:56:bd:75:13:1f:87:73:98:35:45:6d:9b:ef:af: bb:04:88:51:c4:e6:34:63:98:82:6b:f5:71:f9:19:a7:92:45: 66:4a:c9:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PSJC/jiL9K5cqKpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI2MDUxMjE0MDAwM1oXDTI2MDUxNTE0MDAwMFowLzEtMCsGA1UEAxMk YWMyOGIyY2EtMDQ4Ni00ZGRmLWExMDYtNTMwYTdmNjkxMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM1KFPYN0Hzk0R7z7nFExJEgsYK9K7kjSM8R Fi0m7LA2xHBoFlEvTPsDfPyC49gy8Cpo7BqV73VdK7f25FjGeaIvvbuG/AMBL+Ai ajedAeEQbCen7v3dm8HXVUOwRT7g5h3ro1kqLAs5DQL1YWIspoC3HxGqVE/2HLB/ Hyq7MQ63EmlzmDv6nElLjcXe/RZJaTbG1d4OBNQ1A+k02Ged2sjECsp7TVb+n+fR 02TyNcU844/mJ4f8DSHROmgnxO7DHhgrUbuMW41b9VvJTu2W/b5W6rJeIFBnHX1k i695Y8P9hZehFmIO1KqK0pAEyYlJVy7dALek4LQF5qWjSwcILwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCWduCo+RDoMf3M3+/gBH5z8DN9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvZGI4NTlhMmEtZGY4Mi00 NTMyLWE5ODQtNzExNzY0OTk2OTllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCN4K00zWrNc4axF3CQM5PN NwRQAyB+h/hixHnfT2CLtA+igYTUPo/HsHHrh0HFJHbYeqtzoRop+s8GnsF+Tvj8 njEbILkY+QPsu7Z8PB0oxj4mQQu4SaovWXMNHXT7EelqAALf2IWq4EZMuUoNKRtW O+HeJ2ERfqpEagQLhkf0lgWRyrshb/ZcvjC5fIoEcMnZntZAcHvCohLuOxbbjouc 5hus2Z0CY1o7BDwn2du5qwbFYGDa8vjfi4vlF21FKo1KQoX3IkPHhr2KdcXCkgz9 ZlHnQJakkGUCuj7EVr11Ex+Hc5g1RW2b76+7BIhRxOY0Y5iCa/Vx+RmnkkVmSsk7 -----END CERTIFICATE-----Generated at Wed May 13 10:38:34 2026 by rpki-client