$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft File: 42820f2e-2eb1-4049-8630-b2760e0a03a1.mft (raw, json) Hash identifier: 2hPNWJAcLhJENVRB65MDVIEq75M20FH9QbcYLufsQ5A= Subject key identifier: CA:46:55:23:AF:1C:11:EC:9F:0D:E5:40:E8:AC:09:97:35:B9:79:FE Authority key identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Certificate issuer: /CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Certificate serial: 010D0C9F4328584DCFDD7A0E92FE60E094E01540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft Manifest number: 010D0C9F432858499FDDB8D8E5963D6B80EDAD00 Signing time: Tue 12 May 2026 19:00:03 +0000 Manifest this update: Tue 12 May 2026 19:00:03 +0000 Manifest next update: Fri 15 May 2026 19:00:00 +0000 Files and hashes: 1: 42820f2e-2eb1-4049-8630-b2760e0a03a1.crl (hash: 0H3VIZ139Pl1GGXTnWcCfhZrOw+yKLFU/QcFLDgfPps=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:dd:7a:0e:92:fe:60:e0:94:e0:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Validity Not Before: May 12 19:00:03 2026 GMT Not After : May 15 19:00:00 2026 GMT Subject: CN=76edb19c-5977-45ac-8e64-43e075583d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:92:20:6c:e2:5f:b9:50:37:8f:b4:5f:87: 9a:6b:9a:1c:59:93:d4:14:bc:a3:3c:7a:9f:d6:21: cd:27:c2:8b:47:08:e7:f8:16:55:fa:64:93:8f:5d: 63:2f:3e:76:bc:17:30:05:95:69:92:eb:f1:81:aa: 8e:71:51:a1:0d:59:88:a3:29:7e:38:36:ef:35:53: 30:70:0d:8c:9c:b6:bd:0b:86:52:d5:7e:97:a9:cb: 6c:b9:13:5c:06:6c:9c:6c:b6:5f:a6:b8:f4:aa:ca: 83:60:cc:92:cb:f4:ce:30:72:e2:c9:39:1a:14:94: 1e:30:9c:2a:08:37:b3:91:21:90:ba:ba:e4:43:ca: cb:d2:b2:73:bf:2b:a9:24:7b:8b:fa:b2:b2:5b:be: f2:af:00:89:59:b0:81:aa:fb:12:9c:d3:c5:0b:99: 0b:b7:fe:28:dc:df:9d:22:d8:f9:ce:82:f5:a5:73: 21:43:af:50:e2:da:46:5a:3f:b4:10:ef:44:51:e0: fd:36:73:f7:88:1d:6f:c9:07:72:06:79:80:bd:77: 3e:da:d1:e2:85:df:ed:f4:19:16:e3:60:18:05:0b: 43:6c:3f:8d:ee:54:66:7f:a2:9d:c5:c1:5f:1d:25: ac:d6:ea:93:73:00:27:02:82:7b:c1:a3:45:ef:c9: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:55:23:AF:1C:11:EC:9F:0D:E5:40:E8:AC:09:97:35:B9:79:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.crl X509v3 Authority Key Identifier: keyid:3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6c:93:da:b5:c5:1b:92:c5:69:1a:af:61:f2:be:a0:33:ae: 8a:ca:93:be:a0:d4:f6:f0:de:d1:32:67:06:d5:33:95:c6:7e: d5:42:81:19:d1:df:c3:67:2a:fa:cf:e3:b6:39:08:29:30:c7: 11:6b:14:8c:7a:4b:52:a1:a0:84:2a:5d:3e:d3:4a:67:25:45: 73:64:e2:24:b4:9e:91:1b:5a:62:91:75:f5:23:aa:41:f4:17: 71:e2:e4:b9:32:8b:cc:e9:82:9a:d2:7c:bc:68:64:71:b7:9a: 03:01:b4:32:8c:09:2f:c2:c1:f4:4b:8e:e0:1f:d6:9e:af:ea: 18:25:89:9d:46:18:d6:a3:3b:3a:b7:c8:a5:96:3d:47:c0:9e: 0e:31:e4:d3:7b:ed:98:ca:c9:59:85:89:b5:8b:82:fa:d2:a3: 47:a0:70:ac:23:a5:bc:c5:a7:26:e9:d9:f1:f9:fa:ef:43:31: 70:e4:3d:11:72:82:dd:b1:12:1d:73:5c:80:be:8b:1b:69:68: 79:de:fc:45:cc:0a:d4:db:cf:6f:bd:f1:cf:ae:65:e8:5d:c7: 92:5d:16:d1:48:22:bb:1a:3f:10:a6:ba:46:b9:ff:2e:8e:f7: a6:b5:56:bd:58:76:9b:c9:05:13:42:f9:7f:e1:fc:81:1c:a4: 9c:ca:92:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3P3XoOkv5g4JTgFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MjBmMmUtMmViMS00MDQ5LTg2MzAtYjI3NjBlMGEw M2ExMB4XDTI2MDUxMjE5MDAwM1oXDTI2MDUxNTE5MDAwMFowLzEtMCsGA1UEAxMk NzZlZGIxOWMtNTk3Ny00NWFjLThlNjQtNDNlMDc1NTgzZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFCSIGziX7lQN4+0X4eaa5ocWZPUFLyjPHqf 1iHNJ8KLRwjn+BZV+mSTj11jLz52vBcwBZVpkuvxgaqOcVGhDVmIoyl+ODbvNVMw cA2MnLa9C4ZS1X6XqctsuRNcBmycbLZfprj0qsqDYMySy/TOMHLiyTkaFJQeMJwq CDezkSGQurrkQ8rL0rJzvyupJHuL+rKyW77yrwCJWbCBqvsSnNPFC5kLt/4o3N+d Itj5zoL1pXMhQ69Q4tpGWj+0EO9EUeD9NnP3iB1vyQdyBnmAvXc+2tHihd/t9BkW 42AYBQtDbD+N7lRmf6KdxcFfHSWs1uqTcwAnAoJ7waNF78lBrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMpGVSOvHBHsnw3lQOisCZc1uXn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Mjgy MGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUwYTAzYTEvNDI4MjBmMmUtMmViMS00 MDQ5LTg2MzAtYjI3NjBlMGEwM2ExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDI4MjBmMmUtMmViMS00MDQ5LTg2 MzAtYjI3NjBlMGEwM2ExLzQyODIwZjJlLTJlYjEtNDA0OS04NjMwLWIyNzYwZTBh MDNhMS5jcmwwHwYDVR0jBBgwFoAUPFZC9kPy+L6fzyFUcP9fbOoWWBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2 MGUwYTAzYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsbJPatcUbksVpGq9h8r6g M66KypO+oNT28N7RMmcG1TOVxn7VQoEZ0d/DZyr6z+O2OQgpMMcRaxSMektSoaCE Kl0+00pnJUVzZOIktJ6RG1pikXX1I6pB9Bdx4uS5MovM6YKa0ny8aGRxt5oDAbQy jAkvwsH0S47gH9aer+oYJYmdRhjWozs6t8illj1HwJ4OMeTTe+2YyslZhYm1i4L6 0qNHoHCsI6W8xacm6dnx+frvQzFw5D0RcoLdsRIdc1yAvosbaWh53vxFzArU289v vfHPrmXoXceSXRbRSCK7Gj8QprpGuf8ujvemtVa9WHabyQUTQvl/4fyBHKScypIZ -----END CERTIFICATE-----Generated at Wed May 13 15:29:18 2026 by rpki-client