$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: x5nzBayqnjHEADzJUbHlRM9L1GY0mP0XtWbeqHlBJy8= Subject key identifier: C9:71:C8:83:49:FB:CC:D6:19:1D:3A:9D:96:45:31:D5:C7:0E:27:01 Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584DD090213DB1638C7EF6233C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684D0F Signing time: Wed 13 May 2026 01:00:03 +0000 Manifest this update: Wed 13 May 2026 01:00:03 +0000 Manifest next update: Sat 16 May 2026 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: 6C7qVVnT13N319ZgmpukAmB7PAvY6f/sKwoj11KaoCI=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: IxQMjfNHmAC+FDBM5XYfpbUFUu6PTiUgfqe0tJFy+hQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:21:3d:b1:63:8c:7e:f6:23:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: May 13 01:00:03 2026 GMT Not After : May 16 01:00:00 2026 GMT Subject: CN=0d7a74ee-4a54-4dd9-ac48-e55d14bc2590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:68:f9:b5:c0:69:1f:50:a5:51:0c:7b:44: 61:b0:bf:bc:62:fe:ce:96:df:f8:10:e2:25:86:71: da:0a:c6:54:cb:81:88:35:4b:90:f5:2f:6a:8e:91: 11:87:79:ca:ab:21:83:d5:e9:03:ca:a5:24:e3:9f: fa:ba:b1:57:62:b2:28:43:ab:5c:71:b6:4f:de:52: be:dd:da:47:1b:25:55:79:3b:47:f7:98:10:ac:be: 80:ce:47:62:ed:74:47:e8:d9:3d:5b:78:8e:a5:1f: 73:30:55:a2:11:a6:1c:5b:7d:93:37:ff:0c:04:49: 45:04:7a:90:d1:ab:3d:ca:0c:29:2c:e7:4c:ff:b4: 7d:2c:d2:ad:42:5e:20:e0:c1:13:15:e9:96:5a:d5: 82:a9:9a:ee:60:d5:50:a4:c4:dd:c1:ac:9e:97:68: b6:ac:50:0d:42:a6:f2:cf:0c:85:96:a0:2e:e1:35: f3:c6:a0:ce:29:e7:6d:70:2c:a5:98:78:fc:ac:bb: dc:10:b7:cd:69:ab:9c:c4:27:67:db:63:3e:29:bc: b7:1b:30:a1:80:39:b3:02:37:c0:53:24:4d:80:75: 76:cb:14:e1:58:4d:9b:8d:30:01:02:01:a7:d9:32: 01:76:ed:89:30:95:9c:9d:0c:4b:08:b4:e2:11:14: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:C8:83:49:FB:CC:D6:19:1D:3A:9D:96:45:31:D5:C7:0E:27:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e6:7e:08:66:1d:aa:c9:c6:b6:40:30:ae:f8:a8:52:f5:87: 22:a3:4a:b7:43:48:f4:0a:cb:42:c8:a8:f2:ed:28:41:4a:73: ee:99:fd:6d:cc:3f:e1:c4:b9:44:f7:68:ea:16:5f:3d:91:ae: c1:ff:1b:1f:0a:d2:d5:00:85:03:41:b9:c8:5d:b5:78:67:4c: 85:2c:9e:cb:32:bb:bf:50:2d:0b:fe:c7:2f:06:e4:dd:f0:97: 65:ed:58:02:74:a3:0e:86:40:74:2d:55:69:dc:c3:01:c5:72: 5a:b3:95:2d:83:8b:d7:63:10:54:27:42:56:da:01:15:4a:a6: 25:b7:89:32:30:92:6f:10:14:48:2e:2c:c0:8a:a6:09:10:9d: 08:18:67:bf:24:81:ab:2e:14:2f:03:d8:2d:ae:40:dc:bf:0b: e9:ed:52:ff:3e:b1:de:b4:1e:f8:25:5e:d4:ce:5e:89:a9:9f: 32:86:16:1e:39:bd:39:f9:50:4f:e6:dd:40:3f:d5:c3:c3:77: 55:6f:a7:aa:89:cb:e5:1f:3a:62:c8:4c:ee:02:47:28:46:b0: 31:26:92:05:fc:a2:f0:a5:14:81:35:df:1e:87:6e:54:76:3a: 62:6f:0f:f5:43:86:6b:e1:86:4b:81:55:bd:f1:92:ca:4c:f4: 25:26:e1:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QkCE9sWOMfvYjPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI2MDUxMzAxMDAwM1oXDTI2MDUxNjAxMDAwMFowLzEtMCsGA1UEAxMk MGQ3YTc0ZWUtNGE1NC00ZGQ5LWFjNDgtZTU1ZDE0YmMyNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO1o+bXAaR9QpVEMe0RhsL+8Yv7Olt/4EOIl hnHaCsZUy4GINUuQ9S9qjpERh3nKqyGD1ekDyqUk45/6urFXYrIoQ6tccbZP3lK+ 3dpHGyVVeTtH95gQrL6Azkdi7XRH6Nk9W3iOpR9zMFWiEaYcW32TN/8MBElFBHqQ 0as9ygwpLOdM/7R9LNKtQl4g4METFemWWtWCqZruYNVQpMTdwayel2i2rFANQqby zwyFlqAu4TXzxqDOKedtcCylmHj8rLvcELfNaaucxCdn22M+Kby3GzChgDmzAjfA UyRNgHV2yxThWE2bjTABAgGn2TIBdu2JMJWcnQxLCLTiERQxSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMlxyINJ+8zWGR06nZZFMdXHDicBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa5n4IZh2qyca2QDCu+KhS 9Ycio0q3Q0j0CstCyKjy7ShBSnPumf1tzD/hxLlE92jqFl89ka7B/xsfCtLVAIUD QbnIXbV4Z0yFLJ7LMru/UC0L/scvBuTd8Jdl7VgCdKMOhkB0LVVp3MMBxXJas5Ut g4vXYxBUJ0JW2gEVSqYlt4kyMJJvEBRILizAiqYJEJ0IGGe/JIGrLhQvA9gtrkDc vwvp7VL/PrHetB74JV7Uzl6JqZ8yhhYeOb05+VBP5t1AP9XDw3dVb6eqicvlHzpi yEzuAkcoRrAxJpIF/KLwpRSBNd8eh25Udjpibw/1Q4Zr4YZLgVW98ZLKTPQlJuFq -----END CERTIFICATE-----Generated at Wed May 13 14:19:46 2026 by rpki-client