$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft File: 1d394508-6160-4e82-89e3-165fa2784b30.mft (raw, json) Hash identifier: q8GAHLPjH+nPww95tZhZHwDdE4Gpu/cjTJ5ZOj7GO9E= Subject key identifier: 22:B3:AA:B6:8E:2F:60:7C:2D:BF:88:55:D2:94:CE:31:09:EA:57:EE Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F4328584DCFA1E87952CF0C0DE46FD200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft Manifest number: 010D0C9F4328584073A81C4F1733DD25CF2E4EE8 Signing time: Tue 12 May 2026 17:00:03 +0000 Manifest this update: Tue 12 May 2026 17:00:03 +0000 Manifest next update: Thu 14 May 2026 17:00:00 +0000 Files and hashes: 1: 1d394508-6160-4e82-89e3-165fa2784b30.crl (hash: XJ/b+uzdaNalWDq3hOkARAW0Ut/5p0sblsuaKW0qZ2U=) 2: 9c704b07-187e-39ac-b560-db3659b3dc4d.roa (hash: xnovH87WLFhHhT9kY4datDpokaY8xb+GiGDdblxrL5I=) 3: d081b8cf-9f69-3201-9281-293c163a8a96.roa (hash: lsrLIKfdZNt2w201AEzMobmi2QYe120GZKXSpteGViM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:a1:e8:79:52:cf:0c:0d:e4:6f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: May 12 17:00:03 2026 GMT Not After : May 14 17:00:00 2026 GMT Subject: CN=ed2bec30-f0e2-4a72-877e-57d9a995e229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:48:07:3b:37:65:21:1d:e7:ad:b1:4b:12: a6:5f:e5:3e:21:8e:31:4a:f4:0c:5e:47:73:42:ea: 11:d3:74:8e:43:d9:fe:ff:5c:6f:27:89:92:22:66: 0b:2c:f9:1a:00:af:3d:06:a0:71:4d:63:a8:d1:9f: e8:3c:aa:cc:38:f3:31:a8:58:5e:c6:2a:2c:1d:df: 46:a7:f4:81:ff:9c:82:66:17:2e:5f:88:be:c7:36: f2:99:84:b5:2a:b2:e1:52:9a:b9:29:6d:9b:c7:74: 5d:df:1d:02:51:99:fa:01:23:63:26:98:56:b3:d8: 06:64:cb:7e:4c:3d:cb:fa:b8:55:96:4e:2b:5c:78: 41:eb:91:e2:1e:c3:0c:7c:84:af:df:be:63:45:b3: 05:e2:9a:c2:96:ee:c9:e6:b3:77:17:0c:cc:e3:7e: 73:e8:c9:25:16:0e:96:8e:af:e7:4f:c0:2f:68:df: 45:90:e5:58:ce:64:76:a0:02:10:91:04:8c:9c:28: b9:b1:07:46:13:cd:45:03:b7:bd:12:dc:90:8f:fb: 80:e4:dd:4f:fd:64:70:a8:95:74:58:40:f5:41:68: 9b:cc:19:89:83:39:b7:6c:b6:6c:34:b6:e5:98:a0: fb:4b:62:46:f1:85:6d:34:e3:90:fb:b3:dd:0c:94: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B3:AA:B6:8E:2F:60:7C:2D:BF:88:55:D2:94:CE:31:09:EA:57:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a4:60:ec:85:7b:5d:60:7b:26:bd:13:33:79:f0:07:6a:16: 60:d8:71:ae:79:68:8d:15:8d:ed:de:1a:0d:3a:b7:98:95:4b: 9f:5b:6b:3f:6b:77:dc:d3:ff:17:9f:87:d7:f9:61:fb:4b:49: 73:13:1d:42:c2:73:05:62:a8:e0:88:b0:32:29:8d:b9:ec:d3: 54:d5:7a:3a:ad:c2:a5:86:e8:0c:64:da:d6:5b:42:5a:33:39: fc:24:e1:6e:bb:c3:a8:9f:4b:13:85:8d:0f:84:3a:e7:96:38: 68:36:41:e0:0a:d6:42:ab:0f:79:4d:18:de:d5:0b:46:a2:b1: 62:8f:93:7a:2f:02:2b:f0:e6:cd:9a:7d:2b:ea:d3:e3:9f:8e: 6d:fb:d3:5a:24:a6:84:60:0a:55:0a:bc:49:1c:21:c5:e6:1c: f7:4a:48:3b:9e:74:55:f1:6b:32:f6:b6:6c:95:89:da:3f:c0: 41:50:91:2e:cc:d0:6b:24:9c:ea:33:a7:13:5a:e6:62:22:52: c4:ba:28:93:a5:fc:74:bf:cd:2a:a4:0f:06:a8:f9:5a:55:f5: 07:ab:13:5c:9c:16:d1:a4:36:ef:fb:6d:76:00:ce:b2:08:3c: df:a9:d5:18:e3:68:c5:39:6e:93:7d:82:cc:77:57:b7:2b:16: 9d:18:52:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Poeh5Us8MDeRv0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI2MDUxMjE3MDAwM1oXDTI2MDUxNDE3MDAwMFowLzEtMCsGA1UEAxMk ZWQyYmVjMzAtZjBlMi00YTcyLTg3N2UtNTdkOWE5OTVlMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGhIBzs3ZSEd562xSxKmX+U+IY4xSvQMXkdz QuoR03SOQ9n+/1xvJ4mSImYLLPkaAK89BqBxTWOo0Z/oPKrMOPMxqFhexiosHd9G p/SB/5yCZhcuX4i+xzbymYS1KrLhUpq5KW2bx3Rd3x0CUZn6ASNjJphWs9gGZMt+ TD3L+rhVlk4rXHhB65HiHsMMfISv375jRbMF4prClu7J5rN3FwzM435z6MklFg6W jq/nT8AvaN9FkOVYzmR2oAIQkQSMnCi5sQdGE81FA7e9EtyQj/uA5N1P/WRwqJV0 WED1QWibzBmJgzm3bLZsNLblmKD7S2JG8YVtNOOQ+7PdDJStSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCKzqraOL2B8Lb+IVdKUzjEJ6lfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvMWQzOTQ1MDgtNjE2MC00 ZTgyLTg5ZTMtMTY1ZmEyNzg0YjMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzpGDshXtdYHsmvRMzefAH ahZg2HGueWiNFY3t3hoNOreYlUufW2s/a3fc0/8Xn4fX+WH7S0lzEx1CwnMFYqjg iLAyKY257NNU1Xo6rcKlhugMZNrWW0JaMzn8JOFuu8Oon0sThY0PhDrnljhoNkHg CtZCqw95TRje1QtGorFij5N6LwIr8ObNmn0r6tPjn45t+9NaJKaEYApVCrxJHCHF 5hz3Skg7nnRV8Wsy9rZslYnaP8BBUJEuzNBrJJzqM6cTWuZiIlLEuiiTpfx0v80q pA8GqPlaVfUHqxNcnBbRpDbv+212AM6yCDzfqdUY42jFOW6TfYLMd1e3KxadGFLs -----END CERTIFICATE-----Generated at Wed May 13 11:52:13 2026 by rpki-client