$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft File: d123245c-48a2-4727-a42f-d6f4b0ecd817.mft (raw, json) Hash identifier: 3fLgpjTiF7vyAW30y1snhUnLB+S+tfmnT9mHJSBD8k0= Subject key identifier: FE:17:17:0A:C4:77:58:5E:B0:F0:18:51:DA:36:F9:37:1A:BD:91:04 Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC Certificate issuer: /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Certificate serial: 010D0C9F4328584DCD89E224EC00B7B5AF655CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft Manifest number: 010D0C9F4328584D717C2AA4067287430CB1CD26 Signing time: Mon 11 May 2026 23:00:03 +0000 Manifest this update: Mon 11 May 2026 23:00:03 +0000 Manifest next update: Wed 13 May 2026 23:00:00 +0000 Files and hashes: 1: 03d83e89-3b63-350f-9f15-6f21215eefcd.roa (hash: D/UlADPtIqTQk1VzUW7DxRGAJisMDnw3+lsylaD2zlI=) 2: 58b09cf7-06c5-3a87-b0c2-be7481551a51.roa (hash: lCpwruCH7DNn4ThoGK0JHEN8buCuJ48SXvX5W9cxDqw=) 3: 861d8358-f133-3906-ac78-912037ba237c.roa (hash: HEsJRXW6bcrKDzdpa/0YWs6Lvmpmkr9EYwcZLL/YCSE=) 4: d123245c-48a2-4727-a42f-d6f4b0ecd817.crl (hash: npOkAsjauUY/lS3lqYnBk8mpQTtlKmPwMXqS90DImMU=) 5: fb2a2c7d-5d8d-3172-b7c4-c0b9b3e84218.roa (hash: zKVwdDhdtolb7hIpkoA9vYf7Kb0lQkXqGD1Ei1ItOGU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:89:e2:24:ec:00:b7:b5:af:65:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Validity Not Before: May 11 23:00:03 2026 GMT Not After : May 13 23:00:00 2026 GMT Subject: CN=2ad87f78-4591-403b-a157-0ca58dbd10fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:7a:b7:4d:cb:c5:c2:60:3d:ca:a1:6f:82: e1:57:80:5a:13:f1:11:e4:f5:f5:86:5a:eb:1d:21: 02:51:ed:5a:65:81:0b:59:6e:af:72:33:1f:2a:85: 59:69:2e:fa:8d:65:f0:47:6b:d7:cf:88:54:89:33: 6a:a7:0e:75:56:c3:41:bc:9f:e5:1c:6b:7a:66:76: 72:f9:c9:6e:3e:18:ce:a4:ef:6b:56:5c:17:8f:ce: bd:f7:40:15:c3:65:f7:df:55:0b:f8:6a:58:ff:5f: db:d8:74:9c:0a:6b:7f:70:e2:f7:22:f4:5c:77:e0: c6:e3:09:4b:47:cb:0c:da:40:d1:64:35:4a:fe:1f: e7:8a:40:5c:99:b6:af:e5:dc:a2:e0:0b:90:c4:ce: a9:40:45:e0:03:d6:0d:e3:bf:f4:6a:e7:6f:47:08: 0c:6b:32:c8:31:ca:9d:ac:11:f6:fd:47:79:5b:e2: 59:67:57:04:8b:dd:d5:56:94:10:23:ce:f7:02:ea: e5:b2:ab:f1:a8:4d:8e:54:80:c2:03:61:96:a7:32: 87:28:41:81:65:ac:0f:13:55:04:94:0d:19:a9:93: 4e:55:ea:02:d7:c8:dd:af:5c:c4:81:1a:2a:20:3f: d6:b3:9d:ae:62:de:bd:e7:97:62:02:aa:6b:51:30: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:17:17:0A:C4:77:58:5E:B0:F0:18:51:DA:36:F9:37:1A:BD:91:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl X509v3 Authority Key Identifier: keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:06:f5:f9:fa:a7:c9:2e:7d:e4:9f:d5:59:c0:37:ec:0a:8c: 97:2e:02:4a:6c:91:b9:10:bb:a5:5e:47:ff:eb:2b:49:94:70: 8e:da:fa:e6:48:e3:68:ad:1f:36:b2:78:4c:29:bf:b1:fb:bf: 0e:22:86:c3:5f:78:94:28:b9:5e:78:35:3d:ec:c4:3b:c8:7c: 35:48:06:ce:62:bf:ac:7d:36:78:7d:fe:f0:fd:64:5a:55:f9: 2d:da:04:48:dd:2a:db:e2:53:f6:e8:50:6c:ee:e6:04:28:1c: 06:cf:4b:a0:57:22:a8:57:36:9e:fd:30:46:a1:08:89:bc:16: 9b:ff:03:af:b8:c1:73:eb:51:01:44:24:04:58:3e:c3:8f:3c: b9:92:8c:f0:41:3c:dd:af:8a:3c:f4:e6:73:ca:c3:dc:22:a0: 64:4f:ce:ea:83:ee:cb:8d:9f:c6:51:91:93:af:0b:ed:7b:e9: 33:18:45:d3:af:58:f0:51:78:27:91:33:ae:1d:42:47:20:a3: f8:2b:1c:87:74:e7:34:3b:40:fd:a1:f7:23:fe:15:45:da:f8: 9d:f2:a7:3f:a5:da:fd:c0:18:42:34:82:ba:8f:f8:50:98:48: 71:d4:00:89:72:3a:10:0a:3f:00:4d:3f:b9:53:2b:41:1e:21: 23:3f:1d:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3NieIk7AC3ta9lXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyMzI0NWMtNDhhMi00NzI3LWE0MmYtZDZmNGIwZWNk ODE3MB4XDTI2MDUxMTIzMDAwM1oXDTI2MDUxMzIzMDAwMFowLzEtMCsGA1UEAxMk MmFkODdmNzgtNDU5MS00MDNiLWExNTctMGNhNThkYmQxMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI16t03LxcJgPcqhb4LhV4BaE/ER5PX1hlrr HSECUe1aZYELWW6vcjMfKoVZaS76jWXwR2vXz4hUiTNqpw51VsNBvJ/lHGt6ZnZy +cluPhjOpO9rVlwXj86990AVw2X331UL+GpY/1/b2HScCmt/cOL3IvRcd+DG4wlL R8sM2kDRZDVK/h/nikBcmbav5dyi4AuQxM6pQEXgA9YN47/0audvRwgMazLIMcqd rBH2/Ud5W+JZZ1cEi93VVpQQI873AurlsqvxqE2OVIDCA2GWpzKHKEGBZawPE1UE lA0ZqZNOVeoC18jdr1zEgRoqID/Ws52uYt6955diAqprUTA/5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP4XFwrEd1hesPAYUdo2+TcavZEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIz MjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0YjBlY2Q4MTcvZDEyMzI0NWMtNDhhMi00 NzI3LWE0MmYtZDZmNGIwZWNkODE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDEyMzI0NWMtNDhhMi00NzI3LWE0 MmYtZDZmNGIwZWNkODE3L2QxMjMyNDVjLTQ4YTItNDcyNy1hNDJmLWQ2ZjRiMGVj ZDgxNy5jcmwwHwYDVR0jBBgwFoAUWRioM9BnxME7n0+Fb3xlfKQp7dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIzMjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0 YjBlY2Q4MTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPBvX5+qfJLn3kn9VZwDfs CoyXLgJKbJG5ELulXkf/6ytJlHCO2vrmSONorR82snhMKb+x+78OIobDX3iUKLle eDU97MQ7yHw1SAbOYr+sfTZ4ff7w/WRaVfkt2gRI3Srb4lP26FBs7uYEKBwGz0ug VyKoVzae/TBGoQiJvBab/wOvuMFz61EBRCQEWD7Djzy5kozwQTzdr4o89OZzysPc IqBkT87qg+7LjZ/GUZGTrwvte+kzGEXTr1jwUXgnkTOuHUJHIKP4KxyHdOc0O0D9 ofcj/hVF2vid8qc/pdr9wBhCNIK6j/hQmEhx1ACJcjoQCj8ATT+5UytBHiEjPx2q -----END CERTIFICATE-----Generated at Tue May 12 21:48:18 2026 by rpki-client