$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: Y3OjYHw8w0gtxF/YIlGUfxMWiMuCTWjqLveB9luShUA= Subject key identifier: 2C:BC:0E:A8:85:BB:BF:01:60:E8:C4:8F:00:6C:34:E1:91:23:C7:43 Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584DD036CBF72233D1426128B750 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FACB9 Signing time: Tue 12 May 2026 22:00:04 +0000 Manifest this update: Tue 12 May 2026 22:00:04 +0000 Manifest next update: Fri 15 May 2026 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: b54FRo7Vb3TpYJnZXNtXzBCSfe2MXl0BoNmWXknPsz8=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WANSZim+EpRyVYMOFDXcDLCeV9llZK9KSpKxplaDkE4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:36:cb:f7:22:33:d1:42:61:28:b7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: May 12 22:00:04 2026 GMT Not After : May 15 22:00:00 2026 GMT Subject: CN=44a8fe4c-e066-43d5-ae3e-b359ba251ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:cb:b3:56:9c:fa:67:08:17:09:56:14:72: ce:df:81:06:8a:8f:82:c2:e9:f4:c5:04:79:3c:b3: 07:0c:76:4a:f9:a4:18:60:bd:88:a9:9e:64:3b:b8: 05:cc:13:1a:ba:e2:2e:55:1e:91:af:ca:a9:3a:2c: c9:6d:84:2a:84:a9:61:0a:94:10:8c:c1:c8:18:3a: 34:d5:6d:76:d9:a7:1b:9c:06:46:b0:d2:d9:93:64: 12:14:86:bb:27:55:16:17:29:4d:22:85:5b:07:f6: 09:f5:db:8d:ac:d7:98:41:41:a0:6f:59:2c:0f:38: 95:be:63:d4:49:f7:88:7f:82:82:89:b8:d9:04:54: 5c:e1:96:72:a7:52:aa:71:47:0d:20:e4:f7:3b:0b: 59:7d:6a:c3:bc:45:af:77:bc:1d:b3:20:da:62:97: fd:9f:87:09:d4:b4:ac:ec:20:ca:9e:01:64:06:68: 2c:38:ec:9b:8a:6b:56:88:90:a3:20:71:20:13:12: 47:f2:7e:e7:2c:c6:d7:ac:14:fa:db:8f:34:d3:fc: 3d:9e:c0:16:88:c6:c0:51:94:45:cc:d2:db:10:90: 8b:69:ee:16:ae:52:f1:fd:86:93:c9:d4:91:c6:e5: d5:84:a7:19:9f:bd:e0:e3:8c:37:5d:cc:09:24:a1: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:0E:A8:85:BB:BF:01:60:E8:C4:8F:00:6C:34:E1:91:23:C7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4d:2a:19:c0:65:68:cd:19:70:30:f6:11:80:60:aa:d1:75: 52:6a:3e:4e:97:45:d8:1f:ee:b7:33:4f:0b:85:fc:6f:f1:e8: 4b:f5:6e:7d:cd:23:0c:98:e9:c2:d1:3b:4d:1c:8b:a9:fd:fb: ee:54:96:2f:46:6b:14:8a:da:6d:d7:94:01:ea:4f:7a:f1:09: c5:40:bd:15:09:51:4a:10:53:11:06:29:b0:25:a2:29:a5:74: 49:21:cb:aa:4d:a8:8a:18:51:67:1c:2d:6d:b9:57:86:a6:cf: 4f:1f:35:07:7a:5a:27:fb:55:44:af:e3:90:f2:83:d1:49:03: c6:ab:28:47:5b:e9:1d:3d:60:be:c1:56:f7:d7:3b:e8:e0:75: 7d:08:6b:86:8f:03:ff:85:5a:fa:ab:50:3a:b0:06:52:d0:8a: f3:2f:eb:67:98:83:43:2d:d2:e2:78:c8:53:23:78:cc:86:fc: 1a:5c:88:1b:3a:21:8e:d8:20:a6:c1:3b:f9:b8:9b:f0:a8:03: c3:7e:ed:76:32:8c:50:1d:ad:e9:c2:19:2c:c8:11:aa:08:77: 83:55:98:0a:1b:5d:d6:d6:ae:94:16:cf:95:20:87:b1:44:32: 16:4d:7d:43:75:99:d5:4e:9c:f1:60:0b:8b:cd:d6:9f:68:41: 4f:2b:35:64 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QNsv3IjPRQmEot1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI2MDUxMjIyMDAwNFoXDTI2MDUxNTIyMDAwMFowLzEtMCsGA1UEAxMk NDRhOGZlNGMtZTA2Ni00M2Q1LWFlM2UtYjM1OWJhMjUxYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbXLs1ac+mcIFwlWFHLO34EGio+Cwun0xQR5 PLMHDHZK+aQYYL2IqZ5kO7gFzBMauuIuVR6Rr8qpOizJbYQqhKlhCpQQjMHIGDo0 1W122acbnAZGsNLZk2QSFIa7J1UWFylNIoVbB/YJ9duNrNeYQUGgb1ksDziVvmPU SfeIf4KCibjZBFRc4ZZyp1KqcUcNIOT3OwtZfWrDvEWvd7wdsyDaYpf9n4cJ1LSs 7CDKngFkBmgsOOybimtWiJCjIHEgExJH8n7nLMbXrBT624800/w9nsAWiMbAUZRF zNLbEJCLae4WrlLx/YaTydSRxuXVhKcZn73g44w3XcwJJKFFAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCy8DqiFu78BYOjEjwBsNOGRI8dDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdTSoZwGVozRlwMPYRgGCq 0XVSaj5Ol0XYH+63M08Lhfxv8ehL9W59zSMMmOnC0TtNHIup/fvuVJYvRmsUitpt 15QB6k968QnFQL0VCVFKEFMRBimwJaIppXRJIcuqTaiKGFFnHC1tuVeGps9PHzUH elon+1VEr+OQ8oPRSQPGqyhHW+kdPWC+wVb31zvo4HV9CGuGjwP/hVr6q1A6sAZS 0IrzL+tnmINDLdLieMhTI3jMhvwaXIgbOiGO2CCmwTv5uJvwqAPDfu12MoxQHa3p whksyBGqCHeDVZgKG13W1q6UFs+VIIexRDIWTX1DdZnVTpzxYAuLzdafaEFPKzVk -----END CERTIFICATE-----Generated at Wed May 13 15:35:04 2026 by rpki-client