$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft File: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft (raw, json) Hash identifier: lVqgLbJ6lEd2wqTH0DbUG+BJrN42MkA/eNsTdVr+KWo= Subject key identifier: AA:FC:6A:F9:36:12:26:36:54:5D:26:ED:87:DD:4D:69:36:9E:0C:06 Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F Certificate issuer: /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Certificate serial: 010D0C9F4328584DCEEF3A45A8A1B89BB13CC0E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft Manifest number: 010D0C9F4328584CCE1A458B83B939037D0FD65E Signing time: Tue 12 May 2026 11:00:03 +0000 Manifest this update: Tue 12 May 2026 11:00:03 +0000 Manifest next update: Fri 15 May 2026 11:00:00 +0000 Files and hashes: 1: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl (hash: zDORgmcQXJdOs7X3SUjFyCyCR0nB/unMyWhdKI0XKA8=) 2: 57b08375-edfa-3ca6-816f-7c71735f8648.roa (hash: d+9ZL8Npy0SR1gtd1LNXx7o6Pqep4kM5p9ckQm5wTRs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ce:ef:3a:45:a8:a1:b8:9b:b1:3c:c0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Validity Not Before: May 12 11:00:03 2026 GMT Not After : May 15 11:00:00 2026 GMT Subject: CN=afe9c360-a169-4564-8d5a-9e738babeb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:42:f4:32:95:48:6f:c8:68:7c:d8:c1:58: 84:71:45:33:23:47:a8:88:a4:d3:c4:ed:16:d0:97: de:f4:06:a7:8b:f3:b4:5a:79:b2:5d:74:65:c1:c2: 15:1f:06:71:6c:52:bd:e7:13:18:f3:42:be:fd:b5: 18:f1:de:ae:49:97:58:a0:b1:c6:83:7f:a0:99:a5: 37:db:19:fc:22:61:9a:7b:45:a0:73:33:33:a9:ff: 9d:2c:50:38:2b:74:4e:0d:03:76:0a:e8:c8:44:17: 2d:3e:58:cf:4e:79:ea:03:0b:04:d7:2b:39:c5:ec: a3:cb:76:cd:ce:50:52:ca:d4:75:e3:21:82:09:1d: be:59:7e:89:e7:67:00:c6:6e:f1:58:7a:ea:52:c3: d9:3a:60:13:07:43:03:02:3f:d7:3e:5f:a6:b2:eb: f3:30:74:c8:83:b6:15:4c:63:46:04:42:db:a1:bc: de:5e:d0:ce:47:38:21:2c:3f:78:aa:03:a1:17:31: 0b:19:74:22:d5:e3:9d:1e:b9:7d:52:9e:4c:06:25: 2c:c7:04:16:5c:66:5b:ea:c6:42:78:70:d8:5e:46: c7:c8:ee:32:06:e1:72:d3:b5:e6:59:25:93:15:37: 79:33:e8:74:8a:c2:71:ac:b4:76:ce:3e:65:29:9e: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:6A:F9:36:12:26:36:54:5D:26:ED:87:DD:4D:69:36:9E:0C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl X509v3 Authority Key Identifier: keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cb:c2:d7:e2:03:60:c9:f6:30:3d:6f:02:2f:a7:57:3b:c0: 83:6e:f9:39:fd:da:be:b8:8c:f9:27:98:40:a7:8b:b8:4f:45: 01:c2:37:f1:b5:8e:f3:2d:b8:7d:d8:6b:94:ad:e2:92:7b:33: 41:cf:1a:3c:0a:47:5d:c9:74:10:12:e3:63:c5:f2:04:f3:90: c9:ff:8c:9f:43:eb:c6:f8:c0:58:3d:78:67:fc:f3:0e:e6:c5: 16:ac:ee:10:11:60:b9:af:68:16:ef:e7:1c:c2:84:cf:dc:9d: 7c:c0:41:31:5f:63:e0:0d:81:82:46:30:76:cf:0d:0f:e5:25: af:6f:d5:69:14:3b:db:d8:a7:4d:23:ec:cd:0b:ae:b0:c5:90: ea:20:6d:6b:19:f7:bd:69:7a:3e:e1:da:2f:04:7a:a0:ab:8a: 09:71:49:6b:61:e5:d8:36:0e:47:75:b6:80:b9:06:7c:d8:f5: 0d:84:fd:63:df:9c:ee:a2:22:ae:1c:f2:f7:61:b8:12:bd:a7: 31:7d:86:30:56:36:89:26:28:dd:76:ed:35:5c:9d:00:04:55: 0e:fa:db:36:d1:ab:9d:a4:94:01:75:90:26:ae:09:b2:35:22: 8e:ca:22:38:6f:51:63:df:c2:c3:5a:f6:d3:18:33:bf:b1:0b: 2a:49:fc:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3O7zpFqKG4m7E8wOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMWQ4OGMtNGIxZC00YThhLTgzMTktNWQ3ODRlOTk1 YmUyMB4XDTI2MDUxMjExMDAwM1oXDTI2MDUxNTExMDAwMFowLzEtMCsGA1UEAxMk YWZlOWMzNjAtYTE2OS00NTY0LThkNWEtOWU3MzhiYWJlYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnClC9DKVSG/IaHzYwViEcUUzI0eoiKTTxO0W 0Jfe9Aani/O0WnmyXXRlwcIVHwZxbFK95xMY80K+/bUY8d6uSZdYoLHGg3+gmaU3 2xn8ImGae0WgczMzqf+dLFA4K3RODQN2CujIRBctPljPTnnqAwsE1ys5xeyjy3bN zlBSytR14yGCCR2+WX6J52cAxm7xWHrqUsPZOmATB0MDAj/XPl+msuvzMHTIg7YV TGNGBELbobzeXtDORzghLD94qgOhFzELGXQi1eOdHrl9Up5MBiUsxwQWXGZb6sZC eHDYXkbHyO4yBuFy07XmWSWTFTd5M+h0isJxrLR2zj5lKZ6sKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKr8avk2EiY2VF0m7YfdTWk2ngwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYx ZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4NGU5OTViZTIvMWRmMWQ4OGMtNGIxZC00 YThhLTgzMTktNWQ3ODRlOTk1YmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWRmMWQ4OGMtNGIxZC00YThhLTgz MTktNWQ3ODRlOTk1YmUyLzFkZjFkODhjLTRiMWQtNGE4YS04MzE5LTVkNzg0ZTk5 NWJlMi5jcmwwHwYDVR0jBBgwFoAUO4o8adHio5sJm2d2r75YFyzbC08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYxZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4 NGU5OTViZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANy8LX4gNgyfYwPW8CL6dX O8CDbvk5/dq+uIz5J5hAp4u4T0UBwjfxtY7zLbh92GuUreKSezNBzxo8CkddyXQQ EuNjxfIE85DJ/4yfQ+vG+MBYPXhn/PMO5sUWrO4QEWC5r2gW7+ccwoTP3J18wEEx X2PgDYGCRjB2zw0P5SWvb9VpFDvb2KdNI+zNC66wxZDqIG1rGfe9aXo+4dovBHqg q4oJcUlrYeXYNg5HdbaAuQZ82PUNhP1j35zuoiKuHPL3YbgSvacxfYYwVjaJJijd du01XJ0ABFUO+ts20audpJQBdZAmrgmyNSKOyiI4b1Fj38LDWvbTGDO/sQsqSfy5 -----END CERTIFICATE-----Generated at Wed May 13 02:31:55 2026 by rpki-client