$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: 2xF+cOKWoBnue/LsTixGP55xbSlAaBJNhxFSOh0DGHY= Subject key identifier: 46:03:B1:67:BB:7A:FA:E5:73:65:CA:B4:E6:59:89:BE:F2:E3:30:FA Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584DCFBFAFA3161AF8BAA7A31280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F9DC Signing time: Tue 12 May 2026 18:00:03 +0000 Manifest this update: Tue 12 May 2026 18:00:03 +0000 Manifest next update: Fri 15 May 2026 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: 85Am1YmJN8QOvTfFXdWswja5+zeyrZYtzk8lzz3gh/I=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: +wfCrPoFKKy5g26EwRLVBh+YunkFmMgbdpthAstdpr0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:bf:af:a3:16:1a:f8:ba:a7:a3:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: May 12 18:00:03 2026 GMT Not After : May 15 18:00:00 2026 GMT Subject: CN=83e9aed0-e72c-4405-920a-59818dca09b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:2a:7c:34:c3:05:1d:83:f6:b7:2f:73:57: 9e:1b:ce:1f:af:93:85:71:38:3c:ea:a7:1c:53:66: 13:c0:55:34:40:fa:57:52:c1:fd:46:ff:d1:c3:53: 25:fe:a5:6c:2f:ae:53:ee:8d:85:4f:6a:dd:45:13: 09:e8:b6:19:7f:02:ec:ce:ce:5c:29:47:38:99:51: 5c:30:e9:fb:9c:c9:90:89:19:01:e2:b9:d0:ff:1f: e8:7c:47:de:59:95:4f:66:a7:4e:1e:ef:c1:bf:81: 71:5a:eb:e7:dd:58:71:6b:93:fb:f7:a6:9f:f6:cd: 4f:9c:1e:9f:f5:c6:90:a1:b4:ad:e1:dd:e8:8a:90: 93:6f:2f:19:0b:a0:45:c6:35:94:9a:b1:60:c2:22: 32:05:15:26:a6:d7:f8:48:62:c9:00:cd:97:48:1f: d8:b6:e3:34:0b:ec:2c:73:a4:5b:e1:f3:bb:56:64: 31:bc:9e:98:77:55:25:8f:35:70:51:61:a6:f8:16: 17:18:7b:f8:c3:09:93:a6:80:ce:08:50:f6:70:6e: fd:72:92:28:56:e1:77:8a:f2:10:04:ac:bf:45:ba: 04:17:da:b0:27:bb:e7:93:91:1a:7b:79:d4:c7:a0: 8e:84:84:b3:92:74:9e:a3:27:07:2c:71:71:94:fa: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:03:B1:67:BB:7A:FA:E5:73:65:CA:B4:E6:59:89:BE:F2:E3:30:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f8:99:67:16:e2:e9:bf:2e:29:45:7c:14:5d:84:4a:0a:b1: 4e:32:84:d4:7c:19:fd:e5:cb:72:7d:f3:d1:fa:ce:eb:df:ff: 67:ec:79:50:3a:a7:26:67:97:a8:0b:06:9e:11:a2:92:d4:52: 30:04:27:d8:94:56:9e:4b:74:23:ee:5c:b8:53:36:5c:dd:6e: 99:24:55:e3:07:d5:1d:cf:35:a0:f0:14:f1:45:81:df:57:7e: 82:6e:aa:56:46:5f:98:bc:0b:74:97:5d:77:71:35:c9:a8:0b: 61:c3:c5:92:8b:09:06:f8:68:d4:9e:be:7b:67:79:6d:7e:28: aa:c4:c3:62:3a:ba:ce:ca:12:83:54:4e:97:b2:9f:8f:1c:15: 16:1a:94:0b:5c:32:87:b0:f1:2b:8e:77:16:65:2f:79:65:2a: 2b:63:6c:cd:cb:07:4d:25:60:68:36:bb:40:66:19:fd:2d:db: 50:f0:e5:49:28:3f:c6:1d:ab:12:6f:16:d6:ff:29:e7:a3:04: 7d:f2:84:33:b9:3d:92:69:5b:d7:c5:d4:49:ea:6b:1e:40:4c: 60:26:fd:b9:2a:f7:cb:a9:1e:0d:e3:27:4a:57:ba:73:10:f9: a9:a1:a6:31:a4:81:6f:e1:0c:09:32:8b:fc:d0:f4:8e:40:8d: 54:af:c5:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Pv6+jFhr4uqejEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDUxMjE4MDAwM1oXDTI2MDUxNTE4MDAwMFowLzEtMCsGA1UEAxMk ODNlOWFlZDAtZTcyYy00NDA1LTkyMGEtNTk4MThkY2EwOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvsqfDTDBR2D9rcvc1eeG84fr5OFcTg86qcc U2YTwFU0QPpXUsH9Rv/Rw1Ml/qVsL65T7o2FT2rdRRMJ6LYZfwLszs5cKUc4mVFc MOn7nMmQiRkB4rnQ/x/ofEfeWZVPZqdOHu/Bv4FxWuvn3Vhxa5P796af9s1PnB6f 9caQobSt4d3oipCTby8ZC6BFxjWUmrFgwiIyBRUmptf4SGLJAM2XSB/YtuM0C+ws c6Rb4fO7VmQxvJ6Yd1UljzVwUWGm+BYXGHv4wwmTpoDOCFD2cG79cpIoVuF3ivIQ BKy/RboEF9qwJ7vnk5Eae3nUx6COhISzknSeoycHLHFxlPpEqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEYDsWe7evrlc2XKtOZZib7y4zD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo+JlnFuLpvy4pRXwUXYRK CrFOMoTUfBn95ctyffPR+s7r3/9n7HlQOqcmZ5eoCwaeEaKS1FIwBCfYlFaeS3Qj 7ly4UzZc3W6ZJFXjB9UdzzWg8BTxRYHfV36CbqpWRl+YvAt0l113cTXJqAthw8WS iwkG+GjUnr57Z3ltfiiqxMNiOrrOyhKDVE6Xsp+PHBUWGpQLXDKHsPErjncWZS95 ZSorY2zNywdNJWBoNrtAZhn9LdtQ8OVJKD/GHasSbxbW/ynnowR98oQzuT2SaVvX xdRJ6mseQExgJv25KvfLqR4N4ydKV7pzEPmpoaYxpIFv4QwJMov80PSOQI1Ur8W5 -----END CERTIFICATE-----Generated at Wed May 13 05:42:04 2026 by rpki-client