$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: Bfzk8EbZdooQ9Ym8wCLL8yjbwkEdk9IsPnBxrA0m79w= Subject key identifier: 1A:39:92:A7:92:A2:FD:00:79:AB:F5:0C:44:0B:BD:26:AF:49:60:AD Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584DCF84216C4E4D5ACF78DE0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02FA6 Signing time: Tue 12 May 2026 16:00:03 +0000 Manifest this update: Tue 12 May 2026 16:00:03 +0000 Manifest next update: Thu 14 May 2026 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: IhmBybR3esO3b6KDJISd1Ifj58hO6ZgM/XSztVkiPIs=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: TqOI7y/KYDiQZSnzFG5x7/UKcl45QJ0JHR8ORyMM3Jk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:84:21:6c:4e:4d:5a:cf:78:de:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: May 12 16:00:03 2026 GMT Not After : May 14 16:00:00 2026 GMT Subject: CN=8eb2cf05-bac6-43d9-a496-2898fef0a47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:ef:dd:ac:56:81:76:59:38:b7:d4:90:76: c7:2f:ad:9b:bc:35:ef:ba:72:f5:e2:12:a6:1e:a7: 2a:6d:32:9c:d3:22:38:47:e1:8e:a0:ed:00:14:a8: a2:71:81:bf:f2:bc:4a:01:d9:cb:86:b1:28:27:92: a1:a3:eb:92:13:bb:62:1d:aa:86:2b:1b:d2:18:ed: b1:e0:0a:2a:50:47:51:dd:eb:bf:54:85:65:a3:ff: 2c:10:24:68:f4:59:86:10:68:c4:a7:22:99:13:ec: b7:54:6e:36:dd:86:9f:47:5f:9c:c1:3b:ec:c3:9d: 0d:ab:a4:a6:a7:79:b1:ec:78:cc:39:79:bd:1f:11: f6:20:e5:17:9d:41:f3:9d:5f:54:55:5f:73:a3:b0: 6d:8b:66:47:92:3e:81:a3:7d:33:4f:f8:20:60:f7: 73:79:3b:bd:0e:d2:6d:d5:1e:4a:8a:a1:5f:27:ed: b9:c6:4c:bd:69:39:06:51:fc:fb:4f:ea:d9:c2:31: b6:32:b3:b9:7d:82:45:36:94:00:85:8e:dd:c6:20: 2e:15:b4:cf:fd:f4:92:05:8e:8c:41:d6:ee:21:28: 18:0e:57:27:1c:3d:f3:ee:57:07:02:12:78:76:1d: c5:18:d1:03:c7:aa:cc:99:dc:80:af:f6:53:48:f0: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:39:92:A7:92:A2:FD:00:79:AB:F5:0C:44:0B:BD:26:AF:49:60:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:44:57:ec:97:e4:cd:7d:ec:e8:0e:7a:e2:8d:8a:76:29:02: cd:f5:8c:03:2c:57:a9:72:95:d4:a5:b6:a8:f8:de:eb:1f:bc: 5f:4f:27:08:f3:f6:2e:40:ec:a9:66:5f:46:3b:1e:5d:0c:0d: 74:42:52:e9:e9:5b:75:77:a9:36:75:15:8c:a5:9a:72:bc:af: e3:e1:ec:25:5d:41:17:0c:c8:e6:46:18:64:73:57:c6:b0:d8: 94:55:f0:6f:e0:d9:06:52:16:11:f6:51:70:b6:a4:59:be:2f: 77:c1:34:ad:7e:bb:84:f5:5c:4d:7d:59:3d:3f:8f:e2:56:6e: dc:99:ab:df:a2:01:fa:38:a7:3a:b7:27:53:e1:af:e1:1b:37: c3:b9:3a:fc:99:25:e3:49:48:3f:01:3f:20:f7:34:c5:69:51: 9f:fa:5a:a9:bf:7a:b6:3f:c7:e6:01:c6:9a:88:d6:bb:c1:5b: d6:8e:11:6e:6e:a9:6c:37:06:d0:3a:11:f2:85:ea:60:e0:e2: 7b:9f:59:1e:5a:36:bd:dd:eb:5d:73:f5:31:db:46:ca:ac:6e: ec:4f:b6:f9:64:e2:b6:bb:f6:b0:92:86:6e:77:04:d3:2a:47: 03:20:f0:81:5a:eb:0f:ed:2f:be:91:66:e3:f7:11:0f:68:74: 11:0d:f6:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PhCFsTk1az3jeBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MDUxMjE2MDAwM1oXDTI2MDUxNDE2MDAwMFowLzEtMCsGA1UEAxMk OGViMmNmMDUtYmFjNi00M2Q5LWE0OTYtMjg5OGZlZjBhNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqnv3axWgXZZOLfUkHbHL62bvDXvunL14hKm HqcqbTKc0yI4R+GOoO0AFKiicYG/8rxKAdnLhrEoJ5Kho+uSE7tiHaqGKxvSGO2x 4AoqUEdR3eu/VIVlo/8sECRo9FmGEGjEpyKZE+y3VG423YafR1+cwTvsw50Nq6Sm p3mx7HjMOXm9HxH2IOUXnUHznV9UVV9zo7Bti2ZHkj6Bo30zT/ggYPdzeTu9DtJt 1R5KiqFfJ+25xky9aTkGUfz7T+rZwjG2MrO5fYJFNpQAhY7dxiAuFbTP/fSSBY6M QdbuISgYDlcnHD3z7lcHAhJ4dh3FGNEDx6rMmdyAr/ZTSPBEAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBo5kqeSov0Aeav1DEQLvSavSWCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaRFfsl+TNfezoDnrijYp2 KQLN9YwDLFepcpXUpbao+N7rH7xfTycI8/YuQOypZl9GOx5dDA10QlLp6Vt1d6k2 dRWMpZpyvK/j4ewlXUEXDMjmRhhkc1fGsNiUVfBv4NkGUhYR9lFwtqRZvi93wTSt fruE9VxNfVk9P4/iVm7cmavfogH6OKc6tydT4a/hGzfDuTr8mSXjSUg/AT8g9zTF aVGf+lqpv3q2P8fmAcaaiNa7wVvWjhFubqlsNwbQOhHyhepg4OJ7n1keWja93etd c/Ux20bKrG7sT7b5ZOK2u/awkoZudwTTKkcDIPCBWusP7S++kWbj9xEPaHQRDfbx -----END CERTIFICATE-----Generated at Wed May 13 11:28:14 2026 by rpki-client