$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: AbcB+Qrj1+d9rIk7o0QmIGaIGq7YteohjKkDImfSq0I= Subject key identifier: 8B:BB:DC:56:F2:DF:72:C2:D4:43:FF:87:86:40:BE:6A:92:51:81:C3 Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584DCFA1E87585814E074CF9E580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D705B Signing time: Tue 12 May 2026 17:00:03 +0000 Manifest this update: Tue 12 May 2026 17:00:03 +0000 Manifest next update: Fri 15 May 2026 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: 5B38LokRu3seeoGDDZws+i11EeEcgALu8vRhp7Ewh3A=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: /9uT0CZ/R20jg10vn0s3nA0AQZ7Nh5I+I6sZm+QzOPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:a1:e8:75:85:81:4e:07:4c:f9:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: May 12 17:00:03 2026 GMT Not After : May 15 17:00:00 2026 GMT Subject: CN=1e7db7be-cc04-44ab-9f9c-56fec1e72af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:60:dc:ae:ea:9d:63:9b:37:aa:d4:7a:41: 8c:9f:3f:41:16:6f:9c:aa:c2:12:78:c2:28:e6:a3: 94:b4:f1:50:3d:09:67:90:ad:d0:e7:70:b8:3c:f9: 50:42:38:96:7e:ad:ea:b5:f0:7f:cb:eb:8a:b5:ec: 95:8d:8c:74:d4:70:79:8b:64:ff:67:60:83:b3:6e: 65:d0:12:e6:ac:1d:4d:36:67:79:79:00:bb:85:b6: e8:6a:5a:2f:5a:08:8c:84:8d:32:4a:f6:5c:0c:3e: 15:1c:0b:d4:13:73:d0:41:a4:b7:26:57:eb:2c:58: 11:bb:a6:3b:87:d3:40:ef:ed:9b:52:7d:aa:05:42: 19:78:fc:2d:50:11:97:f4:1c:fa:14:0f:7b:b8:df: e8:cf:19:bf:4b:47:aa:5d:40:37:5d:14:90:a5:b8: a3:4b:b3:da:e3:73:62:e7:49:a7:2a:ac:2f:b0:b4: d8:c8:0a:ad:d2:d6:cb:c0:01:6c:21:4d:d1:e0:7a: 5f:b0:cd:39:b1:9a:41:d8:a6:ff:e8:c9:3d:dc:7d: fb:34:50:09:38:bd:ec:b8:45:ba:1f:34:03:d5:b3: 44:7d:67:1b:ee:e9:b5:a4:eb:a2:4b:09:88:bf:2b: 12:a1:eb:ce:c4:de:7e:ea:bf:ed:8b:f3:61:c6:1e: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BB:DC:56:F2:DF:72:C2:D4:43:FF:87:86:40:BE:6A:92:51:81:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bf:75:61:34:4f:95:6a:74:8d:1e:af:0c:db:d5:f4:c8:39: f5:71:c9:86:fb:de:83:a5:4c:41:53:62:3f:3e:82:3f:82:1a: a5:91:00:f0:10:c3:81:c7:87:c7:1b:2d:c8:4e:27:6f:ce:66: 40:38:72:9c:a9:75:09:8b:95:93:2d:b7:38:3d:97:18:0c:f9: 9b:90:62:8c:e4:b4:35:9c:2f:2c:09:ae:22:54:bb:c4:34:1b: 8d:4d:ab:02:ca:ec:e4:20:4b:d9:57:27:d5:b9:5e:ee:a9:e9: 5a:a5:86:99:aa:40:76:11:c8:e2:32:10:16:dd:51:55:03:e7: 63:d7:37:15:45:91:d1:48:ab:6b:21:c6:3f:f6:a6:19:1d:65: ff:d8:38:7b:bd:5f:4e:35:14:50:88:0c:a3:ca:6c:2b:d8:57: e4:98:37:b3:2f:01:a3:fb:01:b4:95:73:53:ce:29:67:bb:38: 44:5c:1b:1f:87:b0:e1:17:b3:3d:72:b7:f6:85:28:ee:74:84: 17:26:f1:63:b3:75:b0:70:48:67:9b:ac:1f:ff:3b:19:6c:ca: 07:16:92:4d:18:6c:48:f5:23:76:09:14:d4:69:ed:01:96:fb: f4:22:ca:ee:e6:5e:66:0a:f7:2d:1c:23:52:46:12:ca:8c:7f: 35:f6:db:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Poeh1hYFOB0z55YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI2MDUxMjE3MDAwM1oXDTI2MDUxNTE3MDAwMFowLzEtMCsGA1UEAxMk MWU3ZGI3YmUtY2MwNC00NGFiLTlmOWMtNTZmZWMxZTcyYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZxg3K7qnWObN6rUekGMnz9BFm+cqsISeMIo 5qOUtPFQPQlnkK3Q53C4PPlQQjiWfq3qtfB/y+uKteyVjYx01HB5i2T/Z2CDs25l 0BLmrB1NNmd5eQC7hbboalovWgiMhI0ySvZcDD4VHAvUE3PQQaS3JlfrLFgRu6Y7 h9NA7+2bUn2qBUIZePwtUBGX9Bz6FA97uN/ozxm/S0eqXUA3XRSQpbijS7Pa43Ni 50mnKqwvsLTYyAqt0tbLwAFsIU3R4HpfsM05sZpB2Kb/6Mk93H37NFAJOL3suEW6 HzQD1bNEfWcb7um1pOuiSwmIvysSoevOxN5+6r/ti/Nhxh5GuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIu73Fby33LC1EP/h4ZAvmqSUYHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvv3VhNE+VanSNHq8M29X0 yDn1ccmG+96DpUxBU2I/PoI/ghqlkQDwEMOBx4fHGy3ITidvzmZAOHKcqXUJi5WT Lbc4PZcYDPmbkGKM5LQ1nC8sCa4iVLvENBuNTasCyuzkIEvZVyfVuV7uqelapYaZ qkB2EcjiMhAW3VFVA+dj1zcVRZHRSKtrIcY/9qYZHWX/2Dh7vV9ONRRQiAyjymwr 2FfkmDezLwGj+wG0lXNTzilnuzhEXBsfh7DhF7M9crf2hSjudIQXJvFjs3WwcEhn m6wf/zsZbMoHFpJNGGxI9SN2CRTUae0Blvv0Isru5l5mCvctHCNSRhLKjH819tt0 -----END CERTIFICATE-----Generated at Wed May 13 13:38:44 2026 by rpki-client